John Johansen ecafacef16 apparmor: drop use of _confined variant for iteration ...

In preparation for allowing unconfined to be replaced and mediate
select rules drop use of the _confined variant for iteration in
the mount code.

The RULE_MEDIATES() check will continue to allow unconfined profile
mediation to be skipped unless it is replaced and is given mount
rules.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-08-10 22:49:42 -07:00

..

include

apparmor: refactory mount to use check_perms

2026-08-10 22:49:42 -07:00

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

.kunitconfig

apparmor: add .kunitconfig

2026-02-01 12:01:19 -08:00

af_inet.c

apparmor: push inet mediation into profile callbacks, and improve auditing

2026-08-10 22:49:41 -07:00

af_unix.c

apparmor: make MEDIATES_AF_UNIX its own fn

2026-08-10 22:49:41 -07:00

apparmorfs.c

apparmor: fix error handling for copy_from_user in policy_update

2026-08-10 22:49:41 -07:00

audit.c

apparmor: refactory mount to use check_perms

2026-08-10 22:49:42 -07:00

capability.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

crypto.c

apparmor: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

domain.c

apparmor: refactor xattr attachment, to take the file path

2026-08-10 22:49:42 -07:00

file.c

apparmor: add audit mode to provide a mechanism to silence complain messages

2026-08-10 22:49:42 -07:00

ipc.c

apparmor: transition from a list of rules to a vector of rules

2025-07-20 02:31:06 -07:00

Kconfig

apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabled

2026-07-30 06:42:58 -07:00

label.c

apparmor: fix race condition in label replacement

2026-08-10 22:49:42 -07:00

lib.c

apparmor: refactory mount to use check_perms

2026-08-10 22:49:42 -07:00

lsm.c

apparmor: mark static tables and structs as read only

2026-08-10 22:49:42 -07:00

Makefile

apparmor: refactor network sock mediation in preparation for inet mediation

2026-08-10 22:49:41 -07:00

match.c

apparmor: mark static tables and structs as read only

2026-08-10 22:49:42 -07:00

mount.c

apparmor: drop use of _confined variant for iteration

2026-08-10 22:49:42 -07:00

net.c

apparmor: refactor network socket mediation to support compatibility

2026-08-10 22:49:41 -07:00

nulldfa.in

apparmor: cleanup add proper line wrapping to nulldfa.in

2018-02-09 11:30:01 -08:00

path.c

apparmor: Fix string overrun due to missing termination

2026-04-22 20:09:05 -07:00

policy_compat.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy_ns.c

apparmor: fix: limit the number of levels of policy namespaces

2026-03-09 16:05:43 -07:00

policy_unpack_test.c

Merge tag 'apparmor-pr-2025-08-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2025-08-04 08:17:28 -07:00

policy_unpack.c

apparmor: fix integer overflow in verify_tags() bounds check

2026-08-09 22:20:16 -07:00

policy.c

apparmor: Initial support for compressed policies

2026-06-29 10:27:02 -07:00

procattr.c

apparmor: aa_getprocattr free procattr leak on format failure

2026-06-13 20:18:30 -07:00

resource.c

apparmor: fix rlimit for posix cpu timers

2026-01-29 01:27:54 -08:00

secid.c

lsm: secctx provider check on release

2024-12-04 14:59:57 -05:00

stacksplitdfa.in

apparmor: use the dfa to do label parse string splitting

2018-02-09 11:30:01 -08:00

task.c

apparmor: fix cred UAF caused by begin_current_label_crit_section()

2026-08-06 16:15:33 -07:00