linux/security/apparmor
John Johansen ade3ddc01e AppArmor: Fix dropping of allowed operations that are force audited
The audit permission flag, that specifies an audit message should be
provided when an operation is allowed, was being ignored in some cases.

This is because the auto audit mode (which determines the audit mode from
system flags) was incorrectly assigned the same value as audit mode. The
shared value would result in messages that should be audited going through
a second evaluation as to whether they should be audited based on the
auto audit, resulting in some messages being dropped.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
2012-02-27 11:38:21 -08:00
..
include AppArmor: Fix dropping of allowed operations that are force audited 2012-02-27 11:38:21 -08:00
.gitignore .gitignore: ignore apparmor/rlim_names.h 2010-10-21 10:12:35 +11:00
apparmorfs.c AppArmor: export known rlimit names/value mappings in securityfs 2012-02-27 11:38:19 -08:00
audit.c AppArmor: Fix dropping of allowed operations that are force audited 2012-02-27 11:38:21 -08:00
capability.c AppArmor: mediation of non file objects 2010-08-02 15:38:35 +10:00
context.c AppArmor: contexts used in attaching policy to system objects 2010-08-02 15:35:12 +10:00
domain.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6 2011-07-27 19:26:38 -07:00
file.c AppArmor: file enforcement routines 2010-08-02 15:35:14 +10:00
ipc.c apparmor: sparse fix: include ipc.h 2011-09-09 16:56:27 -07:00
Kconfig apparmor: depends on NET 2010-08-05 07:36:51 -04:00
lib.c apparmor: sparse fix: add apparmor.h to lib.c 2011-09-09 16:56:28 -07:00
lsm.c Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security 2012-01-14 18:36:33 -08:00
Makefile AppArmor: export known rlimit names/value mappings in securityfs 2012-02-27 11:38:19 -08:00
match.c Create Documentation/security/, 2011-05-19 15:59:38 -07:00
path.c btrfs, nfs, apparmor: don't pull mnt_namespace.h for no reason... 2012-01-03 22:52:38 -05:00
policy.c APPARMOR: Fix memory leak of alloc_namespace() 2010-11-11 07:36:18 +11:00
policy_unpack.c AppArmor: Add mising end of structure test to caps unpacking 2012-02-27 11:38:20 -08:00
procattr.c apparmor: sparse fix: include procattr.h in procattr.c 2011-09-09 16:56:29 -07:00
resource.c AppArmor: export known rlimit names/value mappings in securityfs 2012-02-27 11:38:19 -08:00
sid.c AppArmor: core policy routines 2010-08-02 15:38:37 +10:00