Skip to content

AppArmor security module overview

[email protected] linux-fsdevel lkml 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest45 patches 193 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/45Pass struct vfsmount to the inode_create LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -60 replies
2/45Pass struct path down to remove_suid and childrenfs/ntfs/file.c fs/reiserfs/file.c fs/splice.c +5 more+15 -150 replies
3/45Add a vfsmount parameter to notify_change()fs/attr.c fs/ecryptfs/inode.c fs/exec.c +11 more+45 -370 replies
4/45Pass struct vfsmount to the inode_setattr LSM hookfs/attr.c include/linux/security.h security/dummy.c +1 more+13 -70 replies
4/45Pass struct vfsmount to the inode_setattr LSM hookfs/attr.c include/linux/security.h security/dummy.c +1 more+13 -70 replies
4/45Pass struct vfsmount to the inode_setattr LSM hookfs/attr.c include/linux/security.h security/dummy.c +1 more+13 -70 replies
5/45Add struct vfsmount parameter to vfs_mkdir()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/nfs4recover.c +2 more+15 -80 replies
6/45Pass struct vfsmount to the inode_mkdir LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -50 replies
6/45Pass struct vfsmount to the inode_mkdir LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -50 replies
6/45Pass struct vfsmount to the inode_mkdir LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -50 replies
7/45Add a struct vfsmount parameter to vfs_mknod()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +2 more+14 -80 replies
7/45Add a struct vfsmount parameter to vfs_mknod()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +2 more+14 -80 replies
7/45Add a struct vfsmount parameter to vfs_mknod()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +2 more+14 -80 replies
8/45Pass struct vfsmount to the inode_mknod LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -60 replies
9/45Add a struct vfsmount parameter to vfs_symlink()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +1 more+16 -80 replies
10/45Pass struct vfsmount to the inode_symlink LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+10 -60 replies
11/45Pass struct vfsmount to the inode_readlink LSM hookfs/stat.c include/linux/security.h security/dummy.c +1 more+10 -70 replies
12/45Add struct vfsmount parameters to vfs_link()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +1 more+13 -60 replies
13/45Pass the struct vfsmounts to the inode_link LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+26 -100 replies
14/45Add a struct vfsmount parameter to vfs_rmdir()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/nfs4recover.c +3 more+13 -90 replies
15/45Pass struct vfsmount to the inode_rmdir LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+13 -70 replies
16/45Call lsm hook before unhashing dentry in vfs_rmdir()fs/namei.c+7 -60 replies
17/45Add a struct vfsmount parameter to vfs_unlink()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/nfs4recover.c +3 more+8 -70 replies
18/45Pass struct vfsmount to the inode_unlink LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+14 -80 replies
19/45Add struct vfsmount parameters to vfs_rename()fs/ecryptfs/inode.c fs/namei.c fs/nfsd/vfs.c +1 more+21 -100 replies
20/45Pass struct vfsmount to the inode_rename LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+26 -100 replies
20/45Pass struct vfsmount to the inode_rename LSM hookfs/namei.c include/linux/security.h security/dummy.c +1 more+26 -100 replies
21/45Add a struct vfsmount parameter to vfs_setxattr()fs/nfsd/vfs.c fs/xattr.c include/linux/xattr.h+21 -140 replies
22/45Pass struct vfsmount to the inode_setxattr LSM hookfs/xattr.c include/linux/security.h security/commoncap.c +2 more+41 -240 replies
23/45Add a struct vfsmount parameter to vfs_getxattr()fs/nfsd/nfs4xdr.c fs/nfsd/vfs.c fs/xattr.c +2 more+25 -180 replies
24/45Pass struct vfsmount to the inode_getxattr LSM hookfs/xattr.c include/linux/security.h security/dummy.c +1 more+13 -80 replies
25/45Add a struct vfsmount parameter to vfs_listxattr()fs/xattr.c include/linux/xattr.h+16 -120 replies
25/45Add a struct vfsmount parameter to vfs_listxattr()fs/xattr.c include/linux/xattr.h+16 -120 replies
25/45Add a struct vfsmount parameter to vfs_listxattr()fs/xattr.c include/linux/xattr.h+16 -120 replies
26/45Pass struct vfsmount to the inode_listxattr LSM hookfs/xattr.c include/linux/security.h security/dummy.c +1 more+10 -80 replies
27/45Add a struct vfsmount parameter to vfs_removexattr()fs/nfsd/vfs.c fs/xattr.c include/linux/xattr.h+11 -100 replies
28/45Pass struct vfsmount to the inode_removexattr LSM hookfs/xattr.c include/linux/security.h security/commoncap.c +2 more+16 -100 replies
29/45Fix __d_path() for lazy unmounts and make it unambiguousfs/dcache.c+98 -710 replies
30/45Make d_path() consistent across mount operationsfs/dcache.c+8 -60 replies
30/45Make d_path() consistent across mount operationsfs/dcache.c+8 -60 replies
31/45Add d_namespace_path() to compute namespace relative pathnamesfs/dcache.c fs/namespace.c include/linux/dcache.h +1 more+34 -30 replies
32/45Enable LSM hooks to distinguish operations on file descriptors from operations on pathnamesfs/nfsd/vfs.c fs/open.c include/linux/fs.h+21 -100 replies
33/45Pass struct file down the inode_*xattr security LSM hooksfs/xattr.c include/linux/security.h include/linux/xattr.h +3 more+80 -630 replies
34/45Factor out sysctl pathname codeinclude/linux/sysctl.h kernel/sysctl.c security/selinux/hooks.c+34 -300 replies
35/45Allow permission functions to tell between parent and leaf checksfs/namei.c+6 -01 reply
36/45Export audit subsystem for use by modulesinclude/linux/audit.h kernel/audit.c+9 -20 replies
37/45AppArmor: Main Partsecurity/apparmor/main.c+1399 -01 reply
38/45AppArmor: Module and LSM hookssecurity/apparmor/lsm.c+790 -022 replies
39/45AppArmor: Profile loading and manipulation, pathname matchingsecurity/apparmor/match.c security/apparmor/match.h security/apparmor/module_interface.c+958 -0168 replies
40/45AppArmor: all the restsecurity/apparmor/Kconfig security/apparmor/Makefile security/apparmor/apparmor.h +5 more+1041 -00 replies
41/45Add AppArmor LSM to security/Makefilesecurity/Kconfig security/Makefile security/apparmor/Kconfig+4 -10 replies
42/45AppArmor: add lock subtyping so lockdep does not report false dependenciessecurity/apparmor/apparmor.h security/apparmor/inline.h security/apparmor/locking.txt +1 more+43 -160 replies
43/45Switch to vfs_permission() in do_path_lookup()fs/namei.c+6 -70 replies
44/45Switch to vfs_permission() in sys_fchdir()fs/open.c+7 -90 replies
44/45Switch to vfs_permission() in sys_fchdir()fs/open.c+7 -90 replies
44/45Switch to vfs_permission() in sys_fchdir()fs/open.c+7 -90 replies
45/45Fix file_permission()fs/namei.c+7 -10 replies
45/45Fix file_permission()fs/namei.c+7 -10 replies

Reviews trailers per patch

2 of 58 patches have a Reviewed-by or Acked-by.

PatchAlan CoxJohn Johansen
1/45
2/45
3/45
4/45
4/45
4/45
5/45
6/45
6/45
6/45
7/45
7/45
7/45
8/45
9/45
10/45
11/45
12/45
13/45
14/45
15/45
16/45
17/45
18/45
19/45
20/45
20/45
21/45
22/45
23/45
24/45
25/45
25/45
25/45
26/45
27/45
28/45
29/45A-b
30/45
30/45
31/45R-b
32/45
33/45
34/45
35/45
36/45
37/45
38/45
39/45
40/45
41/45
42/45
43/45
44/45
44/45
44/45
45/45
45/45

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [AppArmor 00/45] AppArmor security module overview

lkml-explanatory.txt

Read the cover letter in its thread