John Johansen 545de8fe0f apparmor: fix parameters so that the permission test is bypassed at boot ... Boot parameters are written before apparmor is ready to answer whether the user is policy_view_capable(). Setting the parameters at boot results in an oops and failure to boot. Setting the parameters at boot is obviously allowed so skip the permission check when apparmor is not initialized. While we are at it move the more complicated check to last. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <james.l.morris@oracle.com>		2017-04-07 08:58:36 +10:00
..
include	apparmor: fix parameters so that the permission test is bypassed at boot	2017-04-07 08:58:36 +10:00
.gitignore	AppArmor: remove af_names.h from .gitignore	2012-09-01 08:35:34 -07:00
apparmorfs.c	apparmor: replace remaining BUG_ON() asserts with AA_BUG()	2017-01-16 01:18:56 -08:00
audit.c	apparmor: replace remaining BUG_ON() asserts with AA_BUG()	2017-01-16 01:18:56 -08:00
capability.c	apparmor: update cap audit to check SECURITY_CAP_NOAUDIT	2017-01-16 01:18:50 -08:00
context.c	apparmor: replace remaining BUG_ON() asserts with AA_BUG()	2017-01-16 01:18:56 -08:00
crypto.c	apparmor: use SHASH_DESC_ON_STACK	2017-04-07 08:58:35 +10:00
domain.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2017-02-23 20:33:51 -08:00
file.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
ipc.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
Kconfig	apparmor: add debug assert AA_BUG and Kconfig to control debug info	2017-01-16 01:18:24 -08:00
lib.c	apparmor: fix boolreturn.cocci warnings	2017-04-07 08:58:35 +10:00
lsm.c	apparmor: fix parameters so that the permission test is bypassed at boot	2017-04-07 08:58:36 +10:00
Makefile	apparmor: rename sid to secid	2017-01-16 00:42:17 -08:00
match.c	apparmor: fix restricted endian type warnings for dfa unpack	2017-01-16 01:18:54 -08:00
nulldfa.in	apparmor: add a default null dfa	2017-01-16 01:18:34 -08:00
path.c	apparmor: internal paths should be treated as disconnected	2016-07-12 08:43:10 -07:00
policy_ns.c	apparmor: track ns level so it can be used to help in view checks	2017-01-16 01:18:36 -08:00
policy_unpack.c	apparmor: fix restricted endian type warnings for policy unpack	2017-01-16 01:18:55 -08:00
policy.c	apparmor: fix invalid reference to index variable of iterator line 836	2017-04-07 08:58:36 +10:00
procattr.c	apparmor: convert change_profile to use fqname later to give better control	2017-01-16 01:18:49 -08:00
resource.c	apparmor: change aad apparmor_audit_data macro to a fn macro	2017-01-16 01:18:47 -08:00
secid.c	apparmor: rename sid to secid	2017-01-16 00:42:17 -08:00