John Johansen ecafacef16 apparmor: drop use of _confined variant for iteration ...

In preparation for allowing unconfined to be replaced and mediate
select rules drop use of the _confined variant for iteration in
the mount code.

The RULE_MEDIATES() check will continue to allow unconfined profile
mediation to be skipped unless it is replaced and is given mount
rules.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-08-10 22:49:42 -07:00

..

apparmor

apparmor: drop use of _confined variant for iteration

2026-08-10 22:49:42 -07:00

bpf

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

integrity

ima: Support staging and deleting N measurements records

2026-06-08 11:43:34 -04:00

ipe

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

keys

keys: keyctl_pkey: replace BUG with return -EOPNOTSUPP

2026-06-15 15:19:13 +03:00

landlock

Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

2026-06-19 12:20:25 -07:00

loadpin

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockdown

lockdown: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

safesetid

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

selinux

Merge tag 'selinux-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

2026-06-17 12:41:00 +01:00

smack

security,fs,nfs,net: update security_inode_listsecurity() interface

2026-05-01 11:29:33 -04:00

tomoyo

tomoyo: use u64 for holding inode->i_ino value

2026-04-15 00:00:10 +09:00

yama

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

commoncap.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

inode.c

securityfs: use kstrdup_const() to manage symlink targets

2026-03-17 17:13:36 -04:00

Kconfig

proc: make PROC_MEM_FORCE_PTRACE the Kconfig default

2026-04-13 09:12:37 -07:00

Kconfig.hardening

security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT

2026-05-27 15:20:04 -07:00

lsm_audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

lsm_init.c

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

lsm_notifier.c

lsm: split the notifier code out into lsm_notifier.c

2025-10-22 19:24:15 -04:00

lsm_syscalls.c

lsm: hold cred_guard_mutex for lsm_set_self_attr()

2026-05-14 16:47:59 -04:00

lsm.h

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

Makefile

lsm: split the init code out into lsm_init.c

2025-10-22 19:24:16 -04:00

min_addr.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

security.c

security,fs,nfs,net: update security_inode_listsecurity() interface

2026-05-01 11:29:33 -04:00