system/linux
system/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux synced 2024-09-20 19:17:24 +00:00
Code Issues Packages Projects Releases Wiki Activity
linux/security/apparmor
History
John Johansen ed686308c6 apparmor: reserve and mask off the top 8 bits of the base field 
The top 8 bits of the base field have never been used, in fact can't
be used, by the current 'dfa16' format.  However they will be used in the
future as flags, so mask them off when using base as an index value.

Note: the use of the top 8 bits, without masking is trapped by the verify
      checks that base entries are within the size bounds.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
2013-04-28 00:37:32 -07:00
..
include apparmor: remove sid from profiles 2013-04-28 00:37:13 -07:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c AppArmor: export known rlimit names/value mappings in securityfs 2012-02-27 11:38:19 -08:00
audit.c apparmor: move task from common_audit_data to apparmor_audit_data 2012-04-09 12:23:02 -04:00
capability.c LSM: do not initialize common_audit_data to 0 2012-04-09 12:23:04 -04:00
context.c apparmor: use common fn to clear task_context for domain transitions 2013-04-28 00:36:20 -07:00
domain.c apparmor: use common fn to clear task_context for domain transitions 2013-04-28 00:36:20 -07:00
file.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
ipc.c apparmor: add utility function to get an arbitrary tasks profile. 2013-04-28 00:35:53 -07:00
Kconfig apparmor: depends on NET 2010-08-05 07:36:51 -04:00
lib.c apparmor: add kvzalloc to handle zeroing for kvmalloc 2013-04-28 00:36:09 -07:00
lsm.c apparmor: remove "permipc" command 2013-04-28 00:36:32 -07:00
Makefile apparmor: fix apparmor OOPS in audit_log_untrustedstring+0x1c/0x40 2012-10-17 16:29:46 -07:00
match.c apparmor: reserve and mask off the top 8 bits of the base field 2013-04-28 00:37:32 -07:00
path.c apparmor: fix error code to failure message mapping for name lookup 2013-04-28 00:35:40 -07:00
policy.c apparmor: move the free_profile fn ahead of aa_alloc_profile 2013-04-28 00:37:24 -07:00
policy_unpack.c apparmor: remove sid from profiles 2013-04-28 00:37:13 -07:00
procattr.c apparmor: remove "permipc" command 2013-04-28 00:36:32 -07:00
resource.c apparmor: relax the restrictions on setting rlimits 2013-04-28 00:36:46 -07:00
sid.c AppArmor: core policy routines 2010-08-02 15:38:37 +10:00