linux/security/apparmor
Linus Torvalds c9341ee0af Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
Pull security layer updates from James Morris:
 "Highlights:

   - major AppArmor update: policy namespaces & lots of fixes

   - add /sys/kernel/security/lsm node for easy detection of loaded LSMs

   - SELinux cgroupfs labeling support

   - SELinux context mounts on tmpfs, ramfs, devpts within user
     namespaces

   - improved TPM 2.0 support"

* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (117 commits)
  tpm: declare tpm2_get_pcr_allocation() as static
  tpm: Fix expected number of response bytes of TPM1.2 PCR Extend
  tpm xen: drop unneeded chip variable
  tpm: fix misspelled "facilitate" in module parameter description
  tpm_tis: fix the error handling of init_tis()
  KEYS: Use memzero_explicit() for secret data
  KEYS: Fix an error code in request_master_key()
  sign-file: fix build error in sign-file.c with libressl
  selinux: allow changing labels for cgroupfs
  selinux: fix off-by-one in setprocattr
  tpm: silence an array overflow warning
  tpm: fix the type of owned field in cap_t
  tpm: add securityfs support for TPM 2.0 firmware event log
  tpm: enhance read_log_of() to support Physical TPM event log
  tpm: enhance TPM 2.0 PCR extend to support multiple banks
  tpm: implement TPM 2.0 capability to get active PCR banks
  tpm: fix RC value check in tpm2_seal_trusted
  tpm_tis: fix iTPM probe via probe_itpm() function
  tpm: Begin the process to deprecate user_read_timer
  tpm: remove tpm_read_index and tpm_write_index from tpm.h
  ...
2017-02-21 12:49:56 -08:00
..
include Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security 2017-02-21 12:49:56 -08:00
.gitignore AppArmor: remove af_names.h from .gitignore 2012-09-01 08:35:34 -07:00
apparmorfs.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
audit.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
capability.c apparmor: update cap audit to check SECURITY_CAP_NOAUDIT 2017-01-16 01:18:50 -08:00
context.c apparmor: replace remaining BUG_ON() asserts with AA_BUG() 2017-01-16 01:18:56 -08:00
crypto.c apparmor: allow introspecting the loaded policy pre internal transform 2017-01-16 01:18:42 -08:00
domain.c apparmor: convert change_profile to use fqname later to give better control 2017-01-16 01:18:49 -08:00
file.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
ipc.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
Kconfig apparmor: add debug assert AA_BUG and Kconfig to control debug info 2017-01-16 01:18:24 -08:00
lib.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
lsm.c Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next 2017-02-10 10:28:49 +11:00
Makefile apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00
match.c apparmor: fix restricted endian type warnings for dfa unpack 2017-01-16 01:18:54 -08:00
nulldfa.in apparmor: add a default null dfa 2017-01-16 01:18:34 -08:00
path.c apparmor: internal paths should be treated as disconnected 2016-07-12 08:43:10 -07:00
policy_ns.c apparmor: track ns level so it can be used to help in view checks 2017-01-16 01:18:36 -08:00
policy_unpack.c apparmor: fix restricted endian type warnings for policy unpack 2017-01-16 01:18:55 -08:00
policy.c apparmor: sysctl to enable unprivileged user ns AppArmor policy loading 2017-01-16 01:18:52 -08:00
procattr.c apparmor: convert change_profile to use fqname later to give better control 2017-01-16 01:18:49 -08:00
resource.c apparmor: change aad apparmor_audit_data macro to a fn macro 2017-01-16 01:18:47 -08:00
secid.c apparmor: rename sid to secid 2017-01-16 00:42:17 -08:00