linux.git/security/apparmor/match.c, branch v4.11 Linux kernel source tree apparmor: fix restricted endian type warnings for dfa unpack 2017-01-16T09:18:54+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:43:13+00:00 e6e8bf418850d7958311a96ccfb594f2bcc8313e Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add a default null dfa 2017-01-16T09:18:34+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:42+00:00 11c236b89d7c26d58c55d5613a858600a4d2ab3a Instead of testing whether a given dfa exists in every code path, have a default null dfa that is used when loaded policy doesn't provide a dfa. This will let us get rid of special casing and avoid dereference bugs when special casing is missed. Signed-off-by: John Johansen <john.johansen@canonical.com> 
Instead of testing whether a given dfa exists in every code path, have
a default null dfa that is used when loaded policy doesn't provide a
dfa.

This will let us get rid of special casing and avoid dereference bugs
when special casing is missed.

Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: move lib definitions into separate lib include 2017-01-16T08:42:13+00:00 John Johansen john.johansen@canonical.com 2017-01-16T08:42:13+00:00 12557dcba21b015f470076da6947e68bc70fff64 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: do not expose kernel stack 2016-07-12T15:43:10+00:00 Heinrich Schuchardt xypron.glpk@gmx.de 2016-06-10T21:34:26+00:00 f4ee2def2d70692ccff0d55353df4ee594fd0017 Do not copy uninitalized fields th.td_hilen, th.td_data. Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de> Signed-off-by: John Johansen <john.johansen@canonical.com> 
Do not copy uninitalized fields th.td_hilen, th.td_data.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: don't check for vmalloc_addr if kvzalloc() failed 2016-07-12T15:43:10+00:00 John Johansen john.johansen@canonical.com 2016-06-15T06:57:55+00:00 3197f5adf539a3ee6331f433a51483f8c842f890 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: add missing id bounds check on dfa verification 2016-07-12T15:43:10+00:00 John Johansen john.johansen@canonical.com 2016-06-02T09:37:02+00:00 15756178c6a65b261a080e21af4766f59cafc112 Signed-off-by: John Johansen <john.johansen@canonical.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
apparmor: reserve and mask off the top 8 bits of the base field 2013-04-28T07:37:32+00:00 John Johansen john.johansen@canonical.com 2013-02-19T00:12:34+00:00 ed686308c6837ff67f56e4115d0fd6bdc65a4313 The top 8 bits of the base field have never been used, in fact can't be used, by the current 'dfa16' format. However they will be used in the future as flags, so mask them off when using base as an index value. Note: the use of the top 8 bits, without masking is trapped by the verify checks that base entries are within the size bounds. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com> 
The top 8 bits of the base field have never been used, in fact can't
be used, by the current 'dfa16' format.  However they will be used in the
future as flags, so mask them off when using base as an index value.

Note: the use of the top 8 bits, without masking is trapped by the verify
      checks that base entries are within the size bounds.

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
apparmor: misc cleanup of match 2013-04-28T07:36:55+00:00 John Johansen john.johansen@canonical.com 2013-02-19T00:08:34+00:00 8e4ff109d0d2194d98e9e16325bb4102f6463b43 tidying up comments, includes and defines Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com> 
tidying up comments, includes and defines

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
apparmor: add kvzalloc to handle zeroing for kvmalloc 2013-04-28T07:36:09+00:00 John Johansen john.johansen@canonical.com 2013-02-19T00:04:34+00:00 0ca554b9fca425eb58325a36290deef698cef34b Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
AppArmor: Update dfa matching routines. 2012-03-14T13:15:24+00:00 John Johansen john.johansen@canonical.com 2012-02-16T14:20:26+00:00 0fe1212d0539eb6c1e27d388711172d786e299cc Update aa_dfa_match so that it doesn't result in an input string being walked twice (once to get its length and another time to match) Add a single step functions aa_dfa_next Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Kees Cook <kees@ubuntu.com> 
Update aa_dfa_match so that it doesn't result in an input string being
walked twice (once to get its length and another time to match)

Add a single step functions
  aa_dfa_next

Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>