apparmor
Thread
Date
Earlier messages
Later messages
Messages by Thread
Re: [apparmor] [PATCH v3 00/15] Further centralising of directory locking for name ops.
Christian Brauner
[apparmor] Re: [PATCH v3 00/15] Further centralising of directory locking for name ops.
NeilBrown
[apparmor] [PATCH v2 00/15] Further centralising of directory locking for name ops.
NeilBrown
[apparmor] [PATCH v2 01/15] VFS: note error returns is documentation for various lookup functions
NeilBrown
Re: [apparmor] [PATCH v2 01/15] VFS: note error returns is documentation for various lookup functions
Chris Mason
Re: [apparmor] [PATCH v2 01/15] VFS: note error returns is documentation for various lookup functions
NeilBrown
[apparmor] [PATCH v2 02/15] fs/proc: Don't lock root inode when creating "self" and "thread-self"
NeilBrown
[apparmor] [PATCH v2 03/15] VFS: move the start_dirop() kerndoc comment to before start_dirop()
NeilBrown
[apparmor] [PATCH v2 04/15] libfs: change simple_done_creating() to use end_creating()
NeilBrown
[apparmor] [PATCH v2 05/15] Apparmor: Use simple_start_creating() / simple_done_creating()
NeilBrown
[apparmor] [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
NeilBrown
Re: [apparmor] [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
Chris Mason
Re: [apparmor] [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
Paul Moore
Re: [apparmor] [PATCH v2 06/15] selinux: Use simple_start_creating() / simple_done_creating()
NeilBrown
[apparmor] [PATCH v2 07/15] nfsd: switch purge_old() to use start_removing_noperm()
NeilBrown
[apparmor] [PATCH v2 08/15] VFS: make lookup_one_qstr_excl() static.
NeilBrown
[apparmor] [PATCH v2 09/15] ovl: Simplify ovl_lookup_real_one()
NeilBrown
Re: [apparmor] [PATCH v2 09/15] ovl: Simplify ovl_lookup_real_one()
Amir Goldstein
Re: [apparmor] [PATCH v2 09/15] ovl: Simplify ovl_lookup_real_one()
Chris Mason
Re: [apparmor] [PATCH v2 09/15] ovl: Simplify ovl_lookup_real_one()
Amir Goldstein
Re: [apparmor] [PATCH v2 09/15] ovl: Simplify ovl_lookup_real_one()
NeilBrown
[apparmor] [PATCH v2 10/15] cachefiles: change cachefiles_bury_object to use start_renaming_dentry()
NeilBrown
[apparmor] [PATCH v2 11/15] ovl: pass name buffer to ovl_start_creating_temp()
NeilBrown
Re: [apparmor] [PATCH v2 11/15] ovl: pass name buffer to ovl_start_creating_temp()
Amir Goldstein
[apparmor] [PATCH v2 12/15] ovl: change ovl_create_real() to get a new lock when re-opening created file.
NeilBrown
Re: [apparmor] [PATCH v2 12/15] ovl: change ovl_create_real() to get a new lock when re-opening created file.
Amir Goldstein
Re: [apparmor] [PATCH v2 12/15] ovl: change ovl_create_real() to get a new lock when re-opening created file.
Chris Mason
Re: [apparmor] [PATCH v2 12/15] ovl: change ovl_create_real() to get a new lock when re-opening created file.
NeilBrown
Re: [apparmor] [PATCH v2 12/15] ovl: change ovl_create_real() to get a new lock when re-opening created file.
Christian Brauner
[apparmor] [PATCH v2 13/15] ovl: use is_subdir() for testing if one thing is a subdir of another
NeilBrown
[apparmor] [PATCH v2 14/15] ovl: remove ovl_lock_rename_workdir()
NeilBrown
[apparmor] [PATCH v2 15/15] VFS: unexport lock_rename(), lock_rename_child(), unlock_rename()
NeilBrown
[apparmor] [PATCH] apparmor: Use sysfs_emit in param_get_{audit, mode}
Thorsten Blum
Re: [apparmor] [PATCH] apparmor: Use sysfs_emit in param_get_{audit, mode}
John Johansen
[apparmor] [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
Serge E. Hallyn
Re: [apparmor] [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
John Johansen
[apparmor] [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
John Johansen
[apparmor] [PATCH] apparmor: make include headers self-contained
Ryan Lee
[apparmor] [PATCH] apparmor: make include headers self-contained
Ryan Lee
Re: [apparmor] [PATCH] apparmor: make include headers self-contained
John Johansen
[apparmor] [PATCH] apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
Re: [apparmor] [PATCH] apparmor: grab ns lock and refresh when looking up changehat child profiles
John Johansen
[apparmor] [PATCH] apparmor: grab ns lock and refresh when looking up changehat child profiles
Ryan Lee
[apparmor] [PATCH] apparmor: fix net.h and policy.h circular include pattern
Ryan Lee
Re: [apparmor] [PATCH] apparmor: fix net.h and policy.h circular include pattern
John Johansen
[apparmor] [PATCH] apparmor: fix net.h and policy.h circular include pattern
Ryan Lee
[apparmor] [PATCH] apparmor: use __label_make_stale in __aa_proxy_redirect
Ryan Lee
Re: [apparmor] [PATCH] apparmor: use __label_make_stale in __aa_proxy_redirect
John Johansen
[apparmor] [PATCH] apparmor: propagate -ENOMEM correctly in unpack_table
Maxime Bélair
Re: [apparmor] [PATCH] apparmor: propagate -ENOMEM correctly in unpack_table
John Johansen
[apparmor] [PATCH] apparmor: fix incorrect success return value in unpack_tag_headers()
Massimiliano Pellizzer
Re: [apparmor] [PATCH] apparmor: fix incorrect success return value in unpack_tag_headers()
John Johansen
Re: [apparmor] [PATCH] apparmor: fix incorrect success return value in unpack_tag_headers()
Massimiliano Pellizzer
[apparmor] Feb 10 irc meeting - canceled
John Johansen
[apparmor] [bug report] apparmor: add support loading per permission tagging
Dan Carpenter
[apparmor] [PATCH] apparmor: fix signedness bug in unpack_tags()
Massimiliano Pellizzer
[apparmor] [bug report] apparmor: add support loading per permission tagging
Dan Carpenter
Re: [apparmor] [bug report] apparmor: add support loading per permission tagging
John Johansen via AppArmor
[apparmor] [PATCH] apparmor: Remove redundant if check in sk_peer_get_label
Thorsten Blum
Re: [apparmor] [PATCH] apparmor: Remove redundant if check in sk_peer_get_label
John Johansen
[PATCH] AppArmor: Add missing SPDX id line to sig_names.h
Tim Bird
[apparmor] [PATCH 00/13] Further centralising of directory locking for name ops.
NeilBrown
[apparmor] [PATCH 13/13] VFS: unexport lock_rename(), lock_rename_child(), unlock_rename()
NeilBrown
Re: [apparmor] [PATCH 13/13] VFS: unexport lock_rename(), lock_rename_child(), unlock_rename()
Jeff Layton
[apparmor] [PATCH 04/13] Apparmor: Use simple_start_creating() / simple_done_creating()
NeilBrown
Re: [apparmor] [PATCH 04/13] Apparmor: Use simple_start_creating() / simple_done_creating()
kernel test robot
Re: [apparmor] [PATCH 04/13] Apparmor: Use simple_start_creating() / simple_done_creating()
Jeff Layton
Re: [apparmor] [PATCH 04/13] Apparmor: Use simple_start_creating() / simple_done_creating()
NeilBrown
[apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
NeilBrown
Re: [apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
Jeff Layton
Re: [apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
Paul Moore
Re: [apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
NeilBrown
Re: [apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
Paul Moore
Re: [apparmor] [PATCH 05/13] selinux: Use simple_start_creating() / simple_done_creating()
NeilBrown
[apparmor] [PATCH 11/13] ovl: use is_subdir() for testing if one thing is a subdir of another
NeilBrown
Re: [apparmor] [PATCH 11/13] ovl: use is_subdir() for testing if one thing is a subdir of another
Jeff Layton
Re: [apparmor] [PATCH 11/13] ovl: use is_subdir() for testing if one thing is a subdir of another
Amir Goldstein
[apparmor] [PATCH 07/13] VFS: make lookup_one_qstr_excl() static.
NeilBrown
Re: [apparmor] [PATCH 07/13] VFS: make lookup_one_qstr_excl() static.
Jeff Layton
[apparmor] [PATCH 12/13] ovl: remove ovl_lock_rename_workdir()
NeilBrown
Re: [apparmor] [PATCH 12/13] ovl: remove ovl_lock_rename_workdir()
Jeff Layton
Re: [apparmor] [PATCH 12/13] ovl: remove ovl_lock_rename_workdir()
Jeff Layton
Re: [apparmor] [PATCH 12/13] ovl: remove ovl_lock_rename_workdir()
Amir Goldstein
Re: [apparmor] [PATCH 12/13] ovl: remove ovl_lock_rename_workdir()
NeilBrown
[apparmor] [PATCH 08/13] ovl: Simplify ovl_lookup_real_one()
NeilBrown
Re: [apparmor] [PATCH 08/13] ovl: Simplify ovl_lookup_real_one()
Jeff Layton
Re: [apparmor] [PATCH 08/13] ovl: Simplify ovl_lookup_real_one()
Amir Goldstein
Re: [apparmor] [PATCH 08/13] ovl: Simplify ovl_lookup_real_one()
NeilBrown
[apparmor] [PATCH 09/13] cachefiles: change cachefiles_bury_object to use start_renaming_dentry()
NeilBrown
Re: [apparmor] [PATCH 09/13] cachefiles: change cachefiles_bury_object to use start_renaming_dentry()
Jeff Layton
[apparmor] [PATCH 10/13] ovl: change ovl_create_real() to get a new lock when re-opening created file.
NeilBrown
Re: [apparmor] [PATCH 10/13] ovl: change ovl_create_real() to get a new lock when re-opening created file.
Amir Goldstein
Re: [apparmor] [PATCH 10/13] ovl: change ovl_create_real() to get a new lock when re-opening created file.
NeilBrown
Re: [apparmor] [PATCH 10/13] ovl: change ovl_create_real() to get a new lock when re-opening created file.
Amir Goldstein
[apparmor] [PATCH 06/13] nfsd: switch purge_old() to use start_removing_noperm()
NeilBrown
Re: [apparmor] [PATCH 06/13] nfsd: switch purge_old() to use start_removing_noperm()
Jeff Layton
[apparmor] [PATCH 03/13] libfs: change simple_done_creating() to use end_creating()
NeilBrown
Re: [apparmor] [PATCH 03/13] libfs: change simple_done_creating() to use end_creating()
Jeff Layton
[apparmor] Re: [PATCH 03/13] libfs: change simple_done_creating() to use end_creating()
NeilBrown
[apparmor] [PATCH 01/13] fs/proc: Don't lock root inode when creating "self" and "thread-self"
NeilBrown
Re: [apparmor] [PATCH 01/13] fs/proc: Don't lock root inode when creating "self" and "thread-self"
Jeff Layton
[apparmor] [PATCH 02/13] VFS: move the start_dirop() kerndoc comment to before start_dirop()
NeilBrown
Re: [apparmor] [PATCH 02/13] VFS: move the start_dirop() kerndoc comment to before start_dirop()
Jeff Layton
[apparmor] [PATCH 1/2] apparmor: fix invalid deref of rawdata when export_binary is unset
Georgia Garcia
[apparmor] [PATCH 2/2] apparmor: remove or add symlinks to rawdata according to export_binary
Georgia Garcia
Re: [apparmor] [PATCH 1/2] apparmor: fix invalid deref of rawdata when export_binary is unset
John Johansen
[apparmor] [PATCH] apparmor: add .kunitconfig
Ryota Sakamoto
Re: [apparmor] [PATCH] apparmor: add .kunitconfig
John Johansen
[apparmor] [PATCH] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
Thorsten Blum
Re: [apparmor] [PATCH] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
John Johansen
Re: [apparmor] Need assistance with DENIED userns_create for non-root podman inside an Incus container
John Johansen
Re: [apparmor] Need assistance with DENIED userns_create for non-root podman inside an Incus container
Kees Bakker
Re: [apparmor] Need assistance with DENIED userns_create for non-root podman inside an Incus container
Kees Bakker
Re: [apparmor] Need assistance with DENIED userns_create for non-root podman inside an Incus container
John Johansen
[apparmor] [PATCH] apparmor: replace strcpy with strscpy
Ryan Foster
Re: [apparmor] [PATCH] apparmor: replace strcpy with strscpy
John Johansen
[apparmor] [PATCH 0/2] apparmor: conditionally use atomic _current_label_crit_section in common_file_perm
Ryan Lee
[apparmor] [PATCH 1/2] apparmor: introduce adaptive_current_label_crit_section helpers
Ryan Lee
[apparmor] [PATCH 2/2] apparmor: use adaptive_current_label_crit_section helper in common_file_perm
Ryan Lee
[apparmor] [PATCH v2 0/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
Zhengmian Hu
[apparmor] [PATCH v2 1/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
Zhengmian Hu
Re: [apparmor] [PATCH v2 1/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
John Johansen
[apparmor] [PATCH 0/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
Zhengmian Hu
[apparmor] [PATCH 1/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
Zhengmian Hu
Re: [apparmor] [PATCH 1/1] apparmor: avoid per-cpu hold underflow in aa_get_buffer
John Johansen
[apparmor] Kernel oops / NULL pointer dereference in aa_file_perm() with nested containers
Simon Marsh
Re: [apparmor] Kernel oops / NULL pointer dereference in aa_file_perm() with nested containers
John Johansen
[apparmor] [PATCH] apparmor: fix boolean argument in apparmor_mmap_file
Ryan Lee
Re: [apparmor] [PATCH] apparmor: fix boolean argument in apparmor_mmap_file
Tyler Hicks
Re: [apparmor] [PATCH] apparmor: fix boolean argument in apparmor_mmap_file
John Johansen
Re: [apparmor] [PATCH] apparmor: fix boolean argument in apparmor_mmap_file
John Johansen
[apparmor] [ISSUE]Why my python script can't override the DAC please?
Fei Shao
Re: [apparmor] [ISSUE]Why my python script can't override the DACplease?
Zygmunt Krynicki
Re: [apparmor] [ISSUE]Why my python script can't override the DAC please?
John Johansen
Re: [apparmor] [ISSUE]Why my python script can't override the DAC please?
Fei Shao
Re: [apparmor] [ISSUE]Why my python script can't override the DAC please?
John Johansen
[apparmor] [ISSUE]Does apparmor support the port limit for app please?
Fei Shao
Re: [apparmor] [ISSUE]Does apparmor support the port limit for app please?
John Johansen
Re: [apparmor] [ISSUE]Does apparmor support the port limit for app please?
Fei Shao
[apparmor] [ISSUE]Does apparmor support the port limit for app please?
Fei Shao
[apparmor] Poll for AppArmor policy file type suffix
John Johansen
Re: [apparmor] Poll for AppArmor policy file type suffix
John Johansen
[apparmor] [PATCH] apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
Ryan Lee
Re: [apparmor] [PATCH] apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
Tyler Hicks
Re: [apparmor] [PATCH] apparmor: return -ENOMEM in unpack_perms_tableupon alloc failure
Zygmunt Krynicki
Re: [apparmor] [PATCH] apparmor: return -ENOMEM in unpack_perms_tableupon alloc failure
John Johansen
Re: [apparmor] [PATCH] apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
John Johansen
[apparmor] Jan 13 IRC meeting
John Johansen
[PATCH v19] exec: Fix dead-lock in de_thread with ptrace_attach
Bernd Edlinger
[apparmor] AppArmor Dec 9 IRC meeting on irc.oftc.net
John Johansen
[apparmor] Questions about compat encoding in accept1 and accept2 tables
Zygmunt Krynicki
Re: [apparmor] Questions about compat encoding in accept1 and accept2 tables
John Johansen
Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Eric W. Biederman
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Roberto Sassu
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Eric W. Biederman
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
David Laight
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Bernd Edlinger
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Al Viro
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
David Laight
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Bernd Edlinger
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Jan Kara
Re: Are setuid shell scripts safe? (Implied by security_bprm_creds_for_exec)
Stephen Smalley
[apparmor] File PDB with both Accept2 and Perms tables
Zygmunt Krynicki
[apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
John Johansen
Re: [apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
John Johansen
[apparmor] Splitting unlink from write
Zygmunt Krynicki
Re: [apparmor] Splitting unlink from write
John Johansen
Re: [apparmor] Splitting unlink from write
Zygmunt Krynicki
[apparmor] Huge pages mediation class?
Zygmunt Krynicki
Re: [apparmor] Huge pages mediation class?
John Johansen
Re: [apparmor] Huge pages mediation class?
Zygmunt Krynicki
[apparmor] [PATCH] apparmor: synthesize ACCEPT_FLAG_OWNER bits in file pdb
Zygmunt Krynicki
[apparmor] Re: [PATCH] apparmor: synthesize ACCEPT_FLAG_OWNER bits in file pdb
Christian Boltz
Re: [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
Bernd Edlinger
[apparmor] [PATCH RESEND] apparmor: replace sprintf with snprintf in aa_new_learning_profile
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: replace sprintf with snprintf in aa_new_learning_profile
John Johansen
Re: [RFC][PATCH] exec: Move cred computation under exec_update_lock
Ryan Lee
[apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy in d_namespace_path
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace deprecated strcpy in d_namespace_path
John Johansen
[apparmor] نقل الاثاث
Alsaiditransport
[apparmor] [PATCH RESEND] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
Thorsten Blum
[apparmor] [PATCH RESEND] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
Thorsten Blum
Re: [apparmor] [PATCH RESEND] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
John Johansen
[apparmor] Deny messages for systemd rule
engelflorian
Re: [apparmor] Deny messages for systemd rule
John Johansen
[apparmor] [PATCH v4 00/14] Create and use APIs to centralise locking for directory ops.
NeilBrown
[apparmor] [PATCH v4 14/14] VFS: introduce end_creating_keep()
NeilBrown
[apparmor] [PATCH v4 07/14] VFS: introduce start_removing_dentry()
NeilBrown
Re: [apparmor] [PATCH v4 07/14] VFS: introduce start_removing_dentry()
Al Viro
Re: [apparmor] [PATCH v4 07/14] VFS: introduce start_removing_dentry()
NeilBrown
[apparmor] [PATCH v4 08/14] VFS: add start_creating_killable() and start_removing_killable()
NeilBrown
[apparmor] [PATCH v4 10/14] VFS/ovl/smb: introduce start_renaming_dentry()
NeilBrown
Re: [apparmor] [PATCH v4 10/14] VFS/ovl/smb: introduce start_renaming_dentry()
Namjae Jeon
[apparmor] [PATCH v4 12/14] ecryptfs: use new start_creating/start_removing APIs
NeilBrown
Re: [apparmor] [PATCH v4 12/14] ecryptfs: use new start_creating/start_removing APIs
Al Viro
Earlier messages
Later messages