kpriv/linux-hardened
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
linux-hardened/security/apparmor
History
John Johansen 15372b97aa apparmor: ensure unconfined profiles have dfas initialized 
Generally unconfined has early bailout tests and does not need the
dfas initialized, however if an early bailout test is ever missed
it will result in an oops.

Be defensive and initialize the unconfined profile to have null dfas
(no permission) so if an early bailout test is missed we fail
closed (no perms granted) instead of oopsing.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-09-22 13:00:58 -07:00
..
include apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
.gitignore apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
apparmorfs.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
audit.c apparmor: switch from profiles to using labels on contexts 2017-06-10 17:11:38 -07:00
capability.c apparmor: move capability checks to using labels 2017-06-10 17:11:40 -07:00
context.c apparmor: switch from profiles to using labels on contexts 2017-06-10 17:11:38 -07:00
crypto.c apparmor: use SHASH_DESC_ON_STACK 2017-04-07 08:58:35 +10:00
domain.c apparmor: add mount mediation 2017-09-22 13:00:57 -07:00
file.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
ipc.c apparmor: add the ability to mediate signals 2017-09-22 13:00:57 -07:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
label.c apparmor: add support for absolute root view based labels 2017-09-22 13:00:58 -07:00
lib.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
lsm.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
Makefile apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
match.c doc: ReSTify apparmor.txt 2017-05-18 10:32:38 -06:00
mount.c apparmor: add mount mediation 2017-09-22 13:00:57 -07:00
net.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: Move path lookup to using preallocated buffers 2017-06-08 11:29:34 -07:00
policy.c apparmor: fix race condition in null profile creation 2017-09-22 13:00:58 -07:00
policy_ns.c apparmor: ensure unconfined profiles have dfas initialized 2017-09-22 13:00:58 -07:00
policy_unpack.c apparmor: add base infastructure for socket mediation 2017-09-22 13:00:58 -07:00
procattr.c apparmor: switch getprocattr to using label_print fns() 2017-06-10 17:11:39 -07:00
resource.c apparmor: move resource checks to using labels 2017-06-10 17:11:40 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00