user/sven/linux.git/security/apparmor/capability.c, branch v4.14.329

apparmor: move capability checks to using labels

2017-06-11T00:11:40Z

Signed-off-by: John Johansen

apparmor: rename apparmor file fns and data to indicate use

2017-06-08T19:51:52Z

prefixes are used for fns/data that are not static to apparmorfs.c with the prefixes being aafs - special magic apparmorfs for policy namespace data aa_sfs - for fns/data that go into securityfs aa_fs - for fns/data that may be used in the either of aafs or securityfs Signed-off-by: John Johansen Reviewed-by: Seth Arnold Reviewed-by: Kees Cook

apparmor: update cap audit to check SECURITY_CAP_NOAUDIT

2017-01-16T09:18:50Z

apparmor should be checking the SECURITY_CAP_NOAUDIT constant. Also in complain mode make it so apparmor can elect to log a message, informing of the check. Signed-off-by: John Johansen

apparmor: change aad apparmor_audit_data macro to a fn macro

2017-01-16T09:18:47Z

The aad macro can replace aad strings when it is not intended to. Switch to a fn macro so it is only applied when intended. Also at the same time cleanup audit_data initialization by putting common boiler plate behind a macro, and dropping the gfp_t parameter which will become useless. Signed-off-by: John Johansen

apparmor: fix capability to not use the current task, during reporting

2013-10-30T04:33:37Z

Mediation is based off of the cred but auditing includes the current task which may not be related to the actual request. Signed-off-by: John Johansen

apparmor: export set of capabilities supported by the apparmor module

2013-08-14T18:42:07Z

Signed-off-by: John Johansen Acked-by: Seth Arnold

LSM: do not initialize common_audit_data to 0

2012-04-09T16:23:04Z

It isn't needed. If you don't set the type of the data associated with that type it is a pretty obvious programming bug. So why waste the cycles? Signed-off-by: Eric Paris

apparmor: move task from common_audit_data to apparmor_audit_data

2012-04-09T16:23:02Z

apparmor is the only LSM that uses the common_audit_data tsk field. Instead of making all LSMs pay for the stack space move the aa usage into the apparmor_audit_data. Signed-off-by: Eric Paris

LSM: remove the COMMON_AUDIT_DATA_INIT type expansion

2012-04-09T16:23:01Z

Just open code it so grep on the source code works better. Signed-off-by: Eric Paris

LSM: shrink sizeof LSM specific portion of common_audit_data

2012-04-03T16:48:40Z

Linus found that the gigantic size of the common audit data caused a big perf hit on something as simple as running stat() in a loop. This patch requires LSMs to declare the LSM specific portion separately rather than doing it in a union. Thus each LSM can be responsible for shrinking their portion and don't have to pay a penalty just because other LSMs have a bigger space requirement. Signed-off-by: Eric Paris Signed-off-by: Linus Torvalds