Matthew Garrett e79c26d040 apparmor: Add support for audit rule filtering ...

This patch adds support to Apparmor for integrating with audit rule
filtering. Right now it only handles SUBJ_ROLE, interpreting it as a
single component of a label. This is sufficient to get Apparmor working
with IMA's appraisal rules without any modifications on the IMA side.

Signed-off-by: Matthew Garrett <mjg59@google.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2018-06-07 01:50:47 -07:00

..

include

apparmor: Add support for audit rule filtering

2018-06-07 01:50:47 -07:00

.gitignore

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

apparmorfs.c

+ Features

2018-04-13 15:38:53 -07:00

audit.c

apparmor: Add support for audit rule filtering

2018-06-07 01:50:47 -07:00

capability.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

crypto.c

apparmor: use SHASH_DESC_ON_STACK

2017-04-07 08:58:35 +10:00

domain.c

apparmor: fix typo "loosen"

2018-05-03 00:47:56 -07:00

file.c

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

ipc.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

Kconfig

apparmor: add debug assert AA_BUG and Kconfig to control debug info

2017-01-16 01:18:24 -08:00

label.c

apparmor: fix typo "replace"

2018-05-03 00:49:35 -07:00

lib.c

apparmor: fix typo "type"

2018-05-03 00:49:56 -07:00

lsm.c

apparmor: Add support for audit rule filtering

2018-06-07 01:50:47 -07:00

Makefile

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

match.c

apparmor: fix typo "traverse"

2018-05-03 00:50:12 -07:00

mount.c

apparmor: fix typo "independent"

2018-05-03 00:50:30 -07:00

net.c

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Move path lookup to using preallocated buffers

2017-06-08 11:29:34 -07:00

policy_ns.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

policy_unpack.c

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

policy.c

apparmor: fix typo "preconfinement"

2018-05-03 00:50:46 -07:00

procattr.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

resource.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

secid.c

apparmor: fix '*seclen' is never less than zero

2018-05-08 08:34:08 -07:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

apparmor: update domain transitions that are subsets of confinement at nnp

2018-02-09 11:30:01 -08:00