John Johansen b4940d913c apparmor: in preparation for finer networking rules rework match_prot ...

Rework match_prot into a common fn that can be shared by all the
networking rules. This will provide compatibility with current socket
mediation, via the early bailout permission encoding.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2025-01-18 06:47:12 -08:00

..

include

apparmor: in preparation for finer networking rules rework match_prot

2025-01-18 06:47:12 -08:00

.gitignore

…

apparmorfs.c

apparmor: add support for profiles to define the kill signal

2025-01-18 06:47:12 -08:00

audit.c

apparmor: add support for profiles to define the kill signal

2025-01-18 06:47:12 -08:00

capability.c

apparmor: add ability to mediate caps with policy state machine

2025-01-18 06:47:12 -08:00

crypto.c

apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256

2023-11-19 00:47:56 -08:00

domain.c

apparmor: fix x_table_lookup when stacking is not the first entry

2025-01-18 06:47:12 -08:00

file.c

apparmor: add additional flags to extended permission.

2025-01-18 06:47:12 -08:00

ipc.c

apparmor: switch signal mediation to use RULE_MEDIATES

2025-01-18 06:47:12 -08:00

Kconfig

apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256

2023-11-19 00:47:56 -08:00

label.c

apparmor: carry mediation check on label

2025-01-18 06:47:12 -08:00

lib.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

lsm.c

apparmor: lift kernel socket check out of critical section

2025-01-18 06:47:12 -08:00

Makefile

…

match.c

apparmor: add support for 2^24 states to the dfa state machine.

2024-11-26 19:21:05 -08:00

mount.c

apparmor: take nosymfollow flag into account

2024-07-24 10:33:58 -07:00

net.c

apparmor: in preparation for finer networking rules rework match_prot

2025-01-18 06:47:12 -08:00

nulldfa.in

…

path.c

apparmor: Use IS_ERR_OR_NULL() helper function

2024-11-26 19:21:05 -08:00

policy_compat.c

apparmor: add additional flags to extended permission.

2025-01-18 06:47:12 -08:00

policy_ns.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

policy_unpack_test.c

apparmor: test: Fix memory leak for aa_unpack_strdup()

2024-11-26 19:21:05 -08:00

policy_unpack.c

apparmor: add support for profiles to define the kill signal

2025-01-18 06:47:12 -08:00

policy.c

apparmor: add support for profiles to define the kill signal

2025-01-18 06:47:12 -08:00

procattr.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

resource.c

apparmor: pass cred through to audit info.

2023-10-18 15:30:38 -07:00

secid.c

apparmor: Remove deadcode

2024-11-26 19:21:05 -08:00

stacksplitdfa.in

…

task.c

apparmor: add missing params to aa_may_ptrace kernel-doc comments

2023-11-19 01:19:41 -08:00