linux-stable.git/security/apparmor/include, branch linux-3.10.y

apparmor: fix module parameters can be changed after policy is locked

2017-06-20T12:04:13+00:00

commit 58acf9d911c8831156634a44d0b022d683e1e50c upstream.

the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.

split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.

Signed-off-by: John Johansen 
Signed-off-by: Willy Tarreau

apparmor: add missing id bounds check on dfa verification

2017-06-20T12:04:12+00:00

commit 15756178c6a65b261a080e21af4766f59cafc112 upstream.

Signed-off-by: John Johansen 
Signed-off-by: Willy Tarreau

userns: Convert apparmor to use kuid and kgid where appropriate

2012-09-21T10:13:21+00:00

Cc: John Johansen 
Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

apparmor: move task from common_audit_data to apparmor_audit_data

2012-04-09T16:23:02+00:00

apparmor is the only LSM that uses the common_audit_data tsk field.
Instead of making all LSMs pay for the stack space move the aa usage into
the apparmor_audit_data.

Signed-off-by: Eric Paris

LSM: shrink sizeof LSM specific portion of common_audit_data

2012-04-03T16:48:40+00:00

Linus found that the gigantic size of the common audit data caused a big
perf hit on something as simple as running stat() in a loop.  This patch
requires LSMs to declare the LSM specific portion separately rather than
doing it in a union.  Thus each LSM can be responsible for shrinking their
portion and don't have to pay a penalty just because other LSMs have a
bigger space requirement.

Signed-off-by: Eric Paris 
Signed-off-by: Linus Torvalds

AppArmor: add const qualifiers to string arrays

2012-03-15T02:09:13+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: John Johansen

AppArmor: Add ability to load extended policy

2012-03-15T02:09:03+00:00

Add the base support for the new policy extensions. This does not bring
any additional functionality, or change current semantics.

Signed-off-by: John Johansen 
Acked-by: Kees Cook

AppArmor: Move path failure information into aa_get_name and rename

2012-03-14T13:15:25+00:00

Move the path name lookup failure messages into the main path name lookup
routine, as the information is useful in more than just aa_path_perm.

Also rename aa_get_name to aa_path_name as it is not getting a reference
counted object with a corresponding put fn.

Signed-off-by: John Johansen 
Acked-by: Kees Cook

AppArmor: Update dfa matching routines.

2012-03-14T13:15:24+00:00

Update aa_dfa_match so that it doesn't result in an input string being
walked twice (once to get its length and another time to match)

Add a single step functions
  aa_dfa_next

Signed-off-by: John Johansen 
Acked-by: Kees Cook

AppArmor: Fix underflow in xindex calculation

2012-02-27T19:38:21+00:00

If the xindex value stored in the accept tables is 0, the extraction of
that value will result in an underflow (0 - 4).

In properly compiled policy this should not happen for file rules but
it may be possible for other rule types in the future.

To exploit this underflow a user would have to be able to load a corrupt
policy, which requires CAP_MAC_ADMIN, overwrite system policy in kernel
memory or know of a compiler error resulting in the flaw being present
for loaded policy (no such flaw is known at this time).

Signed-off-by: John Johansen 
Acked-by: Kees Cook