John Johansen
51c0b3d60c
update Signed-off-by
2007-06-26 22:14:37 +00:00
John Johansen
b40238fefe
- refresh patches again newest git
...
- fold in change_profile patches
2007-06-26 21:29:09 +00:00
John Johansen
84bfd57edf
change_profile
...
- fix use of cxt->previous_profile, was changing it instead of searching
based off its name, which would could result in use of a stale
profile
- remove locking of cxt->previous_profile since it is not longer needed
- refresh change_profile series of patches
2007-06-26 17:34:52 +00:00
Andreas Gruenbacher
670db9b0a4
- Remove obsolete patches.
...
- Fold proc_sys_setattr.diff into apparmor-lsm.diff.
2007-06-25 20:18:28 +00:00
John Johansen
d740aec8e8
remove old patches that got folded into change_profile-3.diff
2007-06-23 08:08:12 +00:00
John Johansen
b69788e3f8
latest revision of change_profile patch, collapse several patches into change_profile-3.diff
2007-06-23 08:06:31 +00:00
Andreas Gruenbacher
97df59697c
Fold together the audit rework.
2007-06-22 18:52:49 +00:00
Andreas Gruenbacher
024b9d702a
Ignore the AA_CHANGE_PROFILE flag when checking for link permission.
2007-06-22 18:45:17 +00:00
Andreas Gruenbacher
b1ee140da5
aa_find_profile2 is unused now.
2007-06-22 18:02:30 +00:00
John Johansen
f2f77bacb4
add missing use-interface_lock
2007-06-22 17:56:19 +00:00
John Johansen
4b7150f21b
update change_profile patches
2007-06-21 18:27:17 +00:00
John Johansen
4a844e8d33
convert change_profile to use the interface lock - this is untested and likely broken
2007-06-19 17:11:32 +00:00
John Johansen
2b59d6f9ac
change_profile refactored and mostly working
2007-06-15 18:44:09 +00:00
Andreas Gruenbacher
807c9147d2
Proposed revert / cleanup for logging permission masks
2007-06-11 11:48:05 +00:00
John Johansen
7e3aacdda5
bleah fix typos that slipped into previous commit, and change AUDIT_REJECT to AUDIT_DENIED and AUDIT_COMPLAIN to AUDIT_ALLOWED
2007-06-09 00:35:37 +00:00
John Johansen
4d14203e90
Add auditing of x modifiers and split mask into requested and denied masks
2007-06-08 21:48:30 +00:00
Andreas Gruenbacher
ece35dc8fe
Add missing spaces and do not quote numbers
2007-06-06 09:09:37 +00:00
Andreas Gruenbacher
7c961abd52
Make this message more consistent with the rest.
2007-06-06 08:06:20 +00:00
Andreas Gruenbacher
205235e738
More cosmetic stuff.
2007-06-06 08:00:58 +00:00
Andreas Gruenbacher
b04e55469f
More cosmetic stuff.
2007-06-06 07:29:58 +00:00
Andreas Gruenbacher
c2eb05298d
Cosmetic change.
2007-06-06 07:23:59 +00:00
John Johansen
171dab27dc
remove buffer and buffer2 from struct aa_audit
2007-06-05 17:58:16 +00:00
John Johansen
3f3c5ce968
have link report the permissions denied/granted
2007-06-05 17:57:47 +00:00
John Johansen
44c5f872da
change audit messages to use name=<value> pairs
2007-06-05 17:56:50 +00:00
John Johansen
a89eed0360
remove name mangling
2007-06-05 17:56:14 +00:00
John Johansen
e1e05ccf97
fix logging of link target name
2007-06-05 17:55:41 +00:00
John Johansen
2ebbddaf4c
use audit defines for reject, complain, audit, hint, status
2007-06-05 17:55:06 +00:00
John Johansen
1ded76679b
Add patch to check perms/exec modifiers on profile load instead of checking them at run time
2007-06-05 17:54:11 +00:00
John Johansen
3669525062
refresh patches against latest kernel
2007-06-05 17:52:35 +00:00
John Johansen
dac75a66bd
refresh patches against latest git kernel
2007-05-25 17:04:33 +00:00
John Johansen
9f508f8c86
remove patches from series that shouldn't be there
2007-05-25 14:50:55 +00:00
Andreas Gruenbacher
4465abb29a
Typo.
2007-05-25 12:47:34 +00:00
Andreas Gruenbacher
c77be398f7
Add first steps to cleaning up audit.
2007-05-25 12:35:47 +00:00
John Johansen
ae94aaec9e
- update apparmor-audit.diff to change comment reserving 1500-1599 from
...
LSPP to AppArmor. And add to patch comment explaining the change.
- refresh patches against latest git
2007-05-23 16:39:31 +00:00
John Johansen
c1e9893e4a
actually refresh the patch this time - update explanation of why the lockdep irq inversion is false. NOTE: it would be correct on SMP systems if the kernel could take a dead tasks lock.
2007-05-14 07:00:57 +00:00
John Johansen
ac05361294
update explanation of why the lockdep irq inversion is false. NOTE: it would be correct on SMP systems if the kernel could take a dead tasks lock.
2007-05-14 06:59:11 +00:00
Andreas Gruenbacher
760dc14a12
This shoul dbe slightly cleaner
2007-05-13 05:05:59 +00:00
John Johansen
2d1a5cb38e
Add short descriptions to patch headers.
2007-05-13 04:12:26 +00:00
John Johansen
afc5cd418f
restore patch headers that got stripped when patches where merged
2007-05-13 03:59:25 +00:00
John Johansen
a8bb3dcff4
add header to apparmor-locking-2.diff
2007-05-12 22:13:13 +00:00
John Johansen
5ec8f8d16a
merge lockdep patching into a single locking patch to make it easier to
...
review as a single entity.
2007-05-12 22:01:04 +00:00
Andreas Gruenbacher
8e3e7cdac9
Comment cleanups. Reorder and reenable the NOT YET patches that would make sense to push out, and clean them up a little.
2007-05-12 21:50:15 +00:00
John Johansen
2fc2e5a520
fix comment for lockdep
2007-05-12 21:45:15 +00:00
John Johansen
284309bcce
Update lockdep patch to handle aa_release irq false irq inversion
...
reorder patches
2007-05-12 21:40:54 +00:00
John Johansen
318529da54
remove kernel-doc_book comment header styles from comments that shouldn't have them
2007-05-12 19:09:10 +00:00
Andreas Gruenbacher
4dcef5e417
Remove unneeded hunk from remove_suid.diff. Some header corrections.
2007-05-12 19:07:40 +00:00
Andreas Gruenbacher
b8d555bc77
Some new rejects; some line offsets
2007-05-12 18:28:28 +00:00
John Johansen
97886d3244
refresh remove_suid.diff, which should have been in previous commit
2007-05-12 18:19:27 +00:00
Andreas Gruenbacher
3aa2d7989a
Comment out apparmor_inline2.diff
2007-05-12 18:13:52 +00:00
John Johansen
c4a9f21fa8
rediff vfs-notify_change and remove_suid by removing changes to
...
should_remove_suid into a seperate patch. The should_remove_suid
patch isn't needed so it should probably be removed.
Add first attempt at using lockdep typing to get rid of false
irq inversion messages.
2007-05-12 18:09:56 +00:00
