23 Feb, 2013

1 commit

• 496ad9aa8   new helper: file_inode(file) ... Browse Code »

  Signed-off-by: Al Viro

  Al Viro

  2013-02-23 12:31:31 +0800  

21 Sep, 2012

1 commit

• 2db814529   userns: Convert apparmor to use kuid and kgid where appropriate ... Browse Code »

  Cc: John Johansen
  Acked-by: Serge Hallyn
  Signed-off-by: Eric W. Biederman

  Eric W. Biederman

  2012-09-21 18:13:21 +0800  

10 Apr, 2012

2 commits

• 50c205f5e   LSM: do not initialize common_audit_data to 0 ... Browse Code »

  It isn't needed. If you don't set the type of the data associated with
  that type it is a pretty obvious programming bug. So why waste the cycles?

  Signed-off-by: Eric Paris

  Eric Paris

  2012-04-10 00:23:04 +0800  
• bd5e50f9c   LSM: remove the COMMON_AUDIT_DATA_INIT type expansion ... Browse Code »

  Just open code it so grep on the source code works better.

  Signed-off-by: Eric Paris

  Eric Paris

  2012-04-10 00:23:01 +0800  

04 Apr, 2012

1 commit

• 3b3b0e4fc   LSM: shrink sizeof LSM specific portion of common_audit_data ... Browse Code »

  Linus found that the gigantic size of the common audit data caused a big
  perf hit on something as simple as running stat() in a loop. This patch
  requires LSMs to declare the LSM specific portion separately rather than
  doing it in a union. Thus each LSM can be responsible for shrinking their
  portion and don't have to pay a penalty just because other LSMs have a
  bigger space requirement.

  Signed-off-by: Eric Paris
  Signed-off-by: Linus Torvalds

  Eric Paris

  2012-04-04 00:48:40 +0800  

27 Mar, 2012

1 commit

• 0421ea91d   apparmor: Fix change_onexec when called from a confined task ... Browse Code »

  Fix failure in aa_change_onexec api when the request is made from a confined
  task. This failure was caused by two problems

  The AA_MAY_ONEXEC perm was not being mapped correctly for this case.

  The executable name was being checked as second time instead of using the
  requested onexec profile name, which may not be the same as the exec
  profile name. This mistake can not be exploited to grant extra permission
  because of the above flaw where the ONEXEC permission was not being mapped
  so it will not be granted.

  BugLink: http://bugs.launchpad.net/bugs/963756

  Signed-off-by: John Johansen
  Signed-off-by: James Morris

  John Johansen

  2012-03-27 22:00:05 +0800  

14 Mar, 2012

1 commit

• 57fa1e180   AppArmor: Move path failure information into aa_get_name and rename ... Browse Code »

  Move the path name lookup failure messages into the main path name lookup
  routine, as the information is useful in more than just aa_path_perm.

  Also rename aa_get_name to aa_path_name as it is not getting a reference
  counted object with a corresponding put fn.

  Signed-off-by: John Johansen
  Acked-by: Kees Cook

  John Johansen

  2012-03-14 21:15:25 +0800  

28 Feb, 2012

1 commit

• 38305a4ba   AppArmor: fix mapping of META_READ to audit and quiet flags ... Browse Code »

  The mapping of AA_MAY_META_READ for the allow mask was also being mapped
  to the audit and quiet masks. This would result in some operations being
  audited when the should not.

  This flaw was hidden by the previous audit bug which would drop some
  messages that where supposed to be audited.

  Signed-off-by: John Johansen
  Acked-by: Kees Cook

  John Johansen

  2012-02-28 03:38:22 +0800  

02 Aug, 2010

1 commit

• 6380bd8dd   AppArmor: file enforcement routines ... Browse Code »

  AppArmor does files enforcement via pathname matching. Matching is done
  at file open using a dfa match engine. Permission is against the final
  file object not parent directories, ie. the traversal of directories
  as part of the file match is implicitly allowed. In the case of nonexistant
  files (creation) permissions are checked against the target file not the
  directory. eg. In case of creating the file /dir/new, permissions are
  checked against the match /dir/new not against /dir/.

  The permissions for matches are currently stored in the dfa accept table,
  but this will change to allow for dfa reuse and also to allow for sharing
  of wider accept states.

  Signed-off-by: John Johansen
  Signed-off-by: James Morris

  John Johansen

  2010-08-02 13:35:14 +0800