John Johansen
7ef32ce6f0
conditionally wrap audit_messages so they are dependant on the audit subsystem being enabled
2008-01-11 18:49:15 +00:00
John Johansen
5a666b5d29
add missing apparmor.h to split_init.diff
2008-01-10 20:03:06 +00:00
John Johansen
46fefd63a1
- Add apparmorfs features file (may break this into a directory, sysfs style)
...
- do split init so apparmor is initialized in security_initcall
2008-01-10 18:05:50 +00:00
John Johansen
e0a1668ffd
- fix regression in link pairs where exec_unsafe was not being considered
...
in the link subset tests
- update fgetattr fuse patch to use fuse_update_atts
2007-12-11 15:37:19 +00:00
John Johansen
55abf6aa0b
add apparmor security goal documentation
2007-11-21 09:12:04 +00:00
John Johansen
1d3697e07e
remove #if 0 from fs/namei.c
2007-11-21 08:51:45 +00:00
John Johansen
33e0151579
Add reviewed by tag
2007-11-21 08:48:46 +00:00
John Johansen
3370223f9f
Add fgetattr, fsetattr patches to the vfs patch series
2007-11-21 08:37:28 +00:00
John Johansen
7cb2653a85
Refresh patches against 2.6.24
2007-11-19 23:18:48 +00:00
John Johansen
a2de30e4ce
Add missing patches
2007-11-13 16:57:45 +00:00
John Johansen
17ff3b0f58
- append
...
- lock
- null-complain-profile on missing mandatory profile bug
- parameter cleanup
- network mediation patch
2007-07-27 20:20:50 +00:00
John Johansen
b2c6ec5b57
refresh patches for offsets against latest git pull
2007-07-27 18:36:31 +00:00
Andreas Gruenbacher
6d15b4eba7
- Rediff against 2.6.23-rc1.
2007-07-23 12:36:24 +00:00
John Johansen
dc3c7e0b20
refresh patches against latest git tree
2007-07-15 21:33:35 +00:00
John Johansen
4bd10c3aec
fold patches into main apparmor patches
2007-07-15 15:42:43 +00:00
John Johansen
1ee0a2c2d3
- early bailout of change_hat/change_profile when the new_profile
...
doesn't exist
- in do_change_profile rename profile to new_profile
- fix bug in early bail out
- don't audit change_hat/change_profile token
- remove unused AA_AUDITTYPE defines
2007-07-15 15:27:08 +00:00
Andreas Gruenbacher
da56acb826
- Rediff against git.
2007-07-03 11:56:24 +00:00
John Johansen
51c0b3d60c
update Signed-off-by
2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe
- refresh patches again newest git
...
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
84bfd57edf
change_profile
...
- fix use of cxt->previous_profile, was changing it instead of searching
based off its name, which would could result in use of a stale
profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4
- Remove obsolete patches.
...
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
John Johansen
d740aec8e8
remove old patches that got folded into change_profile-3.diff
2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8
latest revision of change_profile patch, collapse several patches into change_profile-3.diff
2007-06-23 08:06:31 +00:00
Andreas Gruenbacher
97df59697c
Fold together the audit rework.
2007-06-22 18:52:49 +00:00
Andreas Gruenbacher
024b9d702a
Ignore the AA_CHANGE_PROFILE flag when checking for link permission.
2007-06-22 18:45:17 +00:00
Andreas Gruenbacher
b1ee140da5
aa_find_profile2 is unused now.
2007-06-22 18:02:30 +00:00
John Johansen
f2f77bacb4
add missing use-interface_lock
2007-06-22 17:56:19 +00:00
John Johansen
4b7150f21b
update change_profile patches
2007-06-21 18:27:17 +00:00
John Johansen
4a844e8d33
convert change_profile to use the interface lock - this is untested and likely broken
2007-06-19 17:11:32 +00:00
John Johansen
2b59d6f9ac
change_profile refactored and mostly working
2007-06-15 18:44:09 +00:00
Andreas Gruenbacher
807c9147d2
Proposed revert / cleanup for logging permission masks
2007-06-11 11:48:05 +00:00
John Johansen
7e3aacdda5
bleah fix typos that slipped into previous commit, and change AUDIT_REJECT to AUDIT_DENIED and AUDIT_COMPLAIN to AUDIT_ALLOWED
2007-06-09 00:35:37 +00:00
John Johansen
4d14203e90
Add auditing of x modifiers and split mask into requested and denied masks
2007-06-08 21:48:30 +00:00
Andreas Gruenbacher
ece35dc8fe
Add missing spaces and do not quote numbers
2007-06-06 09:09:37 +00:00
Andreas Gruenbacher
7c961abd52
Make this message more consistent with the rest.
2007-06-06 08:06:20 +00:00
Andreas Gruenbacher
205235e738
More cosmetic stuff.
2007-06-06 08:00:58 +00:00
Andreas Gruenbacher
b04e55469f
More cosmetic stuff.
2007-06-06 07:29:58 +00:00
Andreas Gruenbacher
c2eb05298d
Cosmetic change.
2007-06-06 07:23:59 +00:00
John Johansen
171dab27dc
remove buffer and buffer2 from struct aa_audit
2007-06-05 17:58:16 +00:00
John Johansen
3f3c5ce968
have link report the permissions denied/granted
2007-06-05 17:57:47 +00:00
John Johansen
44c5f872da
change audit messages to use name=<value> pairs
2007-06-05 17:56:50 +00:00
John Johansen
a89eed0360
remove name mangling
2007-06-05 17:56:14 +00:00
John Johansen
e1e05ccf97
fix logging of link target name
2007-06-05 17:55:41 +00:00
John Johansen
2ebbddaf4c
use audit defines for reject, complain, audit, hint, status
2007-06-05 17:55:06 +00:00
John Johansen
1ded76679b
Add patch to check perms/exec modifiers on profile load instead of checking them at run time
2007-06-05 17:54:11 +00:00
John Johansen
3669525062
refresh patches against latest kernel
2007-06-05 17:52:35 +00:00
John Johansen
dac75a66bd
refresh patches against latest git kernel
2007-05-25 17:04:33 +00:00
John Johansen
9f508f8c86
remove patches from series that shouldn't be there
2007-05-25 14:50:55 +00:00
Andreas Gruenbacher
4465abb29a
Typo.
2007-05-25 12:47:34 +00:00
Andreas Gruenbacher
c77be398f7
Add first steps to cleaning up audit.
2007-05-25 12:35:47 +00:00