linux/security/apparmor
John Johansen 3bf3d728a5 apparmor: verify loaded permission bits masks don't overlap
Add an additional verification that loaded permission sets don't
overlap in ways that are not intended. This will help ensure that
permission accumulation can't result in an invalid permission set.

Signed-off-by: John Johansen <john.johansen@canonical.com>
2022-10-03 14:49:04 -07:00
..
include apparmor: cleanup: move perm accumulation into perms.h 2022-10-03 14:49:04 -07:00
.gitignore .gitignore: add SPDX License Identifier 2020-03-25 11:50:48 +01:00
apparmorfs.c apparmor: preparse for state being more than just an integer 2022-10-03 14:49:03 -07:00
audit.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
capability.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
crypto.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441 2019-06-05 17:37:17 +02:00
domain.c apparmor: extend permissions to support a label and tag string 2022-10-03 14:49:03 -07:00
file.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
ipc.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
Kconfig apparmor: use zstd compression for profile data 2022-10-03 14:49:02 -07:00
label.c apparmor: preparse for state being more than just an integer 2022-10-03 14:49:03 -07:00
lib.c apparmor: cleanup: move perm accumulation into perms.h 2022-10-03 14:49:04 -07:00
lsm.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
Makefile apparmor: isolate policy backwards compatibility to its own file 2022-10-03 14:49:03 -07:00
match.c apparmor: preparse for state being more than just an integer 2022-10-03 14:49:03 -07:00
mount.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
net.c apparmor: preparse for state being more than just an integer 2022-10-03 14:49:03 -07:00
nulldfa.in apparmor: cleanup add proper line wrapping to nulldfa.in 2018-02-09 11:30:01 -08:00
path.c security: apparmor: delete repeated words in comments 2021-02-07 04:15:46 -08:00
policy_compat.c apparmor: isolate policy backwards compatibility to its own file 2022-10-03 14:49:03 -07:00
policy_ns.c apparmor: Fix some kernel-doc comments 2022-07-19 02:39:15 -07:00
policy_unpack_test.c apparmor: make unpack_array return a trianary value 2022-10-03 14:49:03 -07:00
policy_unpack.c apparmor: verify loaded permission bits masks don't overlap 2022-10-03 14:49:04 -07:00
policy.c apparmor: add user mode flag 2022-10-03 14:49:03 -07:00
procattr.c apparmor: Fix kernel-doc 2022-07-09 15:13:59 -07:00
resource.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00
secid.c apparmor: disable showing the mode as part of a secid to secctx 2022-07-13 17:18:29 -07:00
stacksplitdfa.in apparmor: use the dfa to do label parse string splitting 2018-02-09 11:30:01 -08:00
task.c apparmor: add mediation class information to auditing 2022-10-03 14:49:03 -07:00