John Johansen 58acf9d911 apparmor: fix module parameters can be changed after policy is locked ...

the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.

split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2016-07-12 08:43:10 -07:00

..

apparmor

apparmor: fix module parameters can be changed after policy is locked

2016-07-12 08:43:10 -07:00

integrity

ima: extend the measurement entry specific pcr

2016-06-30 01:14:22 -04:00

keys

KEYS: Strip trailing spaces

2016-06-14 10:29:44 +01:00

loadpin

LSM: LoadPin: provide enablement CONFIG

2016-05-17 20:10:30 +10:00

selinux

Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next

2016-07-07 10:15:34 +10:00

smack

Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into next

2016-07-08 10:41:15 +10:00

tomoyo

security: tomoyo: simplify the gc kthread creation

2016-06-06 20:23:55 +10:00

yama

Yama: fix double-spinlock and user access in atomic context

2016-05-26 09:56:18 +10:00

commoncap.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2016-05-17 11:01:31 -07:00

device_cgroup.c

security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

2015-09-03 18:13:10 -07:00

inode.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

Kconfig

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00

lsm_audit.c

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2015-08-15 13:29:57 +10:00

Makefile

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00

min_addr.c

…

security.c

LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP

2016-06-06 19:59:18 +10:00