Tyler Hicks e3ea1ca59a apparmor: sysctl to enable unprivileged user ns AppArmor policy loading ... If this sysctl is set to non-zero and a process with CAP_MAC_ADMIN in the root namespace has created an AppArmor policy namespace, unprivileged processes will be able to change to a profile in the newly created AppArmor policy namespace and, if the profile allows CAP_MAC_ADMIN and appropriate file permissions, will be able to load policy in the respective policy namespace. Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>		2017-01-16 01:18:52 -08:00
..
apparmor	apparmor: sysctl to enable unprivileged user ns AppArmor policy loading	2017-01-16 01:18:52 -08:00
integrity	ima: platform-independent hash value	2016-12-20 09:48:46 -08:00
keys	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
loadpin
selinux	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-12-22 10:03:52 -08:00
smack	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-16 10:24:44 -08:00
tomoyo	mm: add locked parameter to get_user_pages_remote()	2016-12-14 16:04:08 -08:00
yama	Yama: allow access for the current ptrace parent	2016-12-05 11:48:01 +11:00
commoncap.c	xattr: Add __vfs_{get,set,remove}xattr helpers	2016-10-07 20:10:44 -04:00
device_cgroup.c
inode.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
Kconfig	- force check_object_size() to be inline too	2016-09-07 14:03:49 -07:00
lsm_audit.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-10-04 14:48:27 -07:00
Makefile
min_addr.c
security.c	security, overlayfs: Provide hook to correctly label newly created files	2016-08-08 20:46:46 -04:00