iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
cf797c0e5e
linux/security/apparmor
History
John Johansen cf797c0e5e apparmor: convert to profile block critical sections 
There are still a few places where profile replacement fails to update
and a stale profile is used for mediation. Fix this by moving to
accessing the current label through a critical section that will
always ensure mediation is using the current label regardless of
whether the tasks cred has been updated or not.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2017-06-10 17:11:34 -07:00
..
include apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
audit.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
capability.c apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
context.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
crypto.c apparmor: use SHASH_DESC_ON_STACK 2017-04-07 08:58:35 +10:00
domain.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
file.c apparmor: switch from file_perms to aa_perms 2017-06-10 17:11:30 -07:00
ipc.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: switch from file_perms to aa_perms 2017-06-10 17:11:30 -07:00
lsm.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
Makefile apparmor: rename apparmor file fns and data to indicate use 2017-06-08 12:51:52 -07:00
match.c mm: introduce kv[mz]alloc helpers 2017-05-08 17:15:12 -07:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: Move path lookup to using preallocated buffers 2017-06-08 11:29:34 -07:00
policy_ns.c apparmor: add namespace lookup fns() 2017-06-10 17:11:32 -07:00
policy_unpack.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
policy.c apparmor: fix policy load/remove semantics 2017-06-10 17:11:32 -07:00
procattr.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
resource.c apparmor: convert to profile block critical sections 2017-06-10 17:11:34 -07:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00