iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
17322cc3f9
linux/security/apparmor
History
John Johansen 17322cc3f9 apparmor: fix auditing of domain transition failures due to incomplete policy 
When policy specifies a transition to a profile that is not currently
loaded, it result in exec being denied.  However the failure is not being
audited correctly because the audit code is treating this as an allowed
permission and thus not reporting it.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-By: Steve Beattie <sbeattie@ubuntu.com>
2013-04-28 00:35:04 -07:00
..
include userns: Convert apparmor to use kuid and kgid where appropriate 2012-09-21 03:13:21 -07:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c AppArmor: export known rlimit names/value mappings in securityfs 2012-02-27 11:38:19 -08:00
audit.c apparmor: move task from common_audit_data to apparmor_audit_data 2012-04-09 12:23:02 -04:00
capability.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
context.c AppArmor: contexts used in attaching policy to system objects 2010-08-02 15:35:12 +10:00
domain.c apparmor: fix auditing of domain transition failures due to incomplete policy 2013-04-28 00:35:04 -07:00
file.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
ipc.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
Kconfig apparmor: depends on NET 2010-08-05 07:36:51 -04:00
lib.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
lsm.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
Makefile apparmor: fix apparmor OOPS in audit_log_untrustedstring+0x1c/0x40 2012-10-17 16:29:46 -07:00
match.c AppArmor: Update dfa matching routines. 2012-03-14 06:15:24 -07:00
path.c apparmor: fix long path failure due to disconnected path 2012-05-18 11:09:52 -07:00
policy_unpack.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
policy.c apparmor: fix IRQ stack overflow during free_profile 2012-10-25 02:12:50 +11:00
procattr.c apparmor: sparse fix: include procattr.h in procattr.c 2011-09-09 16:56:29 -07:00
resource.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
sid.c AppArmor: core policy routines 2010-08-02 15:38:37 +10:00