AppArmor security module overview

Versions newest first

v1 Latest Oct 26, 200745 patches 23 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/45	Pass struct vfsmount to the inode_create LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+13 -8	0 replies
2/45	Pass struct path down to remove_suid and children`fs/ntfs/file.c` `fs/splice.c` `fs/xfs/linux-2.6/xfs_lrw.c` +4 more	+16 ~~-16~~	0 replies
3/45	Add a vfsmount parameter to notify_change()`fs/attr.c` `fs/ecryptfs/inode.c` `fs/exec.c` +11 more	+39 ~~-33~~	0 replies
4/45	Pass struct vfsmount to the inode_setattr LSM hook`fs/attr.c` `include/linux/security.h` `security/dummy.c` +2 more	+16 -9	0 replies
5/45	Add struct vfsmount parameter to vfs_mkdir()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/nfs4recover.c` +2 more	+15 -8	0 replies
6/45	Pass struct vfsmount to the inode_mkdir LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+13 -7	0 replies
7/45	Add a struct vfsmount parameter to vfs_mknod()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/vfs.c` +2 more	+14 -8	0 replies
8/45	Pass struct vfsmount to the inode_mknod LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+13 -8	0 replies
9/45	Add a struct vfsmount parameter to vfs_symlink()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/vfs.c` +1 more	+16 -8	0 replies
10/45	Pass struct vfsmount to the inode_symlink LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+11 -8	0 replies
11/45	Pass struct vfsmount to the inode_readlink LSM hook`fs/stat.c` `include/linux/security.h` `security/dummy.c` +2 more	+10 -8	0 replies
12/45	Add struct vfsmount parameters to vfs_link()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/vfs.c` +1 more	+15 -6	0 replies
13/45	Pass the struct vfsmounts to the inode_link LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+29 ~~-13~~	0 replies
14/45	Add a struct vfsmount parameter to vfs_rmdir()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/nfs4recover.c` +3 more	+13 -9	0 replies
15/45	Pass struct vfsmount to the inode_rmdir LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+15 -8	0 replies
16/45	Call lsm hook before unhashing dentry in vfs_rmdir()`fs/namei.c`	+7 -6	0 replies
17/45	Add a struct vfsmount parameter to vfs_unlink()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/nfs4recover.c` +3 more	+8 -7	0 replies
18/45	Pass struct vfsmount to the inode_unlink LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+16 -9	0 replies
19/45	Add struct vfsmount parameters to vfs_rename()`fs/ecryptfs/inode.c` `fs/namei.c` `fs/nfsd/vfs.c` +1 more	+21 ~~-10~~	3 replies
20/45	Pass struct vfsmount to the inode_rename LSM hook`fs/namei.c` `include/linux/security.h` `security/dummy.c` +2 more	+27 ~~-11~~	0 replies
21/45	Add a struct vfsmount parameter to vfs_setxattr()`fs/nfsd/vfs.c` `fs/xattr.c` `include/linux/xattr.h`	+21 ~~-14~~	0 replies
22/45	Pass struct vfsmount to the inode_setxattr LSM hook`fs/xattr.c` `include/linux/security.h` `security/commoncap.c` +3 more	+46 ~~-29~~	0 replies
23/45	Add a struct vfsmount parameter to vfs_getxattr()`fs/nfsd/nfs4xdr.c` `fs/nfsd/vfs.c` `fs/xattr.c` +2 more	+25 ~~-18~~	0 replies
24/45	Pass struct vfsmount to the inode_getxattr LSM hook`fs/xattr.c` `include/linux/security.h` `security/dummy.c` +2 more	+15 -9	0 replies
25/45	Add a struct vfsmount parameter to vfs_listxattr()`fs/xattr.c` `include/linux/xattr.h`	+16 ~~-12~~	0 replies
26/45	Pass struct vfsmount to the inode_listxattr LSM hook`fs/xattr.c` `include/linux/security.h` `security/dummy.c` +2 more	+10 -9	0 replies
27/45	Add a struct vfsmount parameter to vfs_removexattr()`fs/nfsd/vfs.c` `fs/xattr.c` `include/linux/xattr.h`	+11 ~~-10~~	0 replies
28/45	Pass struct vfsmount to the inode_removexattr LSM hook`fs/xattr.c` `include/linux/security.h` `security/commoncap.c` +3 more	+19 ~~-11~~	0 replies
29/45	Fix __d_path() for lazy unmounts and make it unambiguous`fs/dcache.c`	+98 ~~-71~~	0 replies
30/45	Make d_path() consistent across mount operations`fs/dcache.c`	+8 -6	0 replies
31/45	Add d_namespace_path() to compute namespace relative pathnames`fs/dcache.c` `fs/namespace.c` `include/linux/dcache.h` +1 more	+34 -3	0 replies
32/45	Enable LSM hooks to distinguish operations on file descriptors from operations on pathnames`fs/nfsd/vfs.c` `fs/open.c` `include/linux/fs.h`	+21 ~~-10~~	6 replies
33/45	Pass struct file down the inode_*xattr security LSM hooks`fs/xattr.c` `include/linux/security.h` `include/linux/xattr.h` +4 more	+83 ~~-66~~	0 replies
34/45	Factor out sysctl pathname code`include/linux/sysctl.h` `kernel/sysctl.c` `security/selinux/hooks.c`	+34 ~~-30~~	1 reply
35/45	Allow permission functions to tell between parent and leaf checks`fs/namei.c`	+6 -0	2 replies
36/45	Export audit subsystem for use by modules`include/linux/audit.h` `kernel/audit.c`	+15 -3	0 replies
37/45	AppArmor: Main Part`security/apparmor/main.c`	+1361 -0	0 replies
38/45	AppArmor: Module and LSM hooks`security/apparmor/lsm.c`	+816 -0	0 replies
39/45	AppArmor: Profile loading and manipulation, pathname matching`security/apparmor/match.c` `security/apparmor/match.h` `security/apparmor/module_interface.c`	+1163 -0	0 replies
40/45	AppArmor: all the rest`security/apparmor/Kconfig` `security/apparmor/Makefile` `security/apparmor/apparmor.h` +5 more	+1275 -0	0 replies
41/45	add simple network toggles to apparmor`security/apparmor/Makefile` `security/apparmor/apparmor.h` `security/apparmor/lsm.c` +2 more	+273 -4	0 replies
42/45	Add AppArmor LSM to security/Makefile`security/Kconfig` `security/Makefile` `security/apparmor/Kconfig`	+21 -2	0 replies
43/45	Switch to vfs_permission() in do_path_lookup()`fs/namei.c`	+6 -7	0 replies
44/45	Switch to vfs_permission() in sys_fchdir()`fs/open.c`	+7 -9	0 replies
45/45	Fix file_permission()`fs/namei.c`	+7 -1	0 replies

Reviews trailers per patch

2 of 45 patches have a Reviewed-by or Acked-by.

Patch	Alan Cox	James Morris
1/45
2/45
3/45
4/45
5/45
6/45
7/45
8/45
9/45
10/45
11/45
12/45
13/45
14/45
15/45
16/45
17/45
18/45
19/45
20/45
21/45
22/45
23/45
24/45
25/45
26/45
27/45
28/45
29/45	A-b
30/45
31/45
32/45
33/45
34/45		R-b
35/45
36/45
37/45
38/45
39/45
40/45
41/45
42/45
43/45
44/45
45/45

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.