Kees Cook 2ec5190679 UPSTREAM: LSM: Lift LSM selection out of individual LSMs ...

As a prerequisite to adjusting LSM selection logic in the future, this
moves the selection logic up out of the individual major LSMs, making
their init functions only run when actually enabled. This considers all
LSMs enabled by default unless they specified an external "enable"
variable.

Change-Id: If1f82111f1612ee1d43067c97f25664091b4a759
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Casey Schaufler <casey@schaufler-ca.com>
Reviewed-by: John Johansen <john.johansen@canonical.com>

2025-09-08 17:27:54 +03:00

..

include

apparmor: fix overlapping attachment computation

2022-08-25 11:15:36 +02:00

.gitignore

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

apparmorfs.c

UPSTREAM: security: audit and remove any unnecessary uses of module.h

2025-09-08 17:27:53 +03:00

audit.c

apparmor: fix quiet_denied for file rules

2022-08-25 11:15:35 +02:00

capability.c

apparmor: fix 'Do simple duplicate message elimination'

2024-12-05 10:59:38 +01:00

crypto.c

…

domain.c

apparmor: fix overlapping attachment computation

2022-08-25 11:15:36 +02:00

file.c

apparmor: Check buffer bounds when mapping permissions mask

2018-07-19 16:24:43 -07:00

ipc.c

LSM: generalize flag passing to security_capable

2020-01-23 08:21:29 +01:00

Kconfig

…

label.c

apparmor: fix aa_label_asxprint return check

2022-08-25 11:15:36 +02:00

lib.c

apparmor: Fix uninitialized value in aa_split_fqname

2018-11-27 16:13:00 +01:00

lsm.c

UPSTREAM: LSM: Lift LSM selection out of individual LSMs

2025-09-08 17:27:54 +03:00

Makefile

apparmor: add base infastructure for socket mediation

2018-03-13 17:25:48 -07:00

match.c

apparmor: ensure that dfa state tables have entries

2020-07-22 09:32:06 +02:00

mount.c

apparmor: fix reference count leak in aa_pivotroot()

2022-08-25 11:15:36 +02:00

net.c

apparmor: Fix network performance issue in aa_label_sk_perm

2020-01-27 14:49:54 +01:00

nulldfa.in

…

path.c

…

policy_ns.c

apparmor: fix an error code in __aa_create_ns()

2018-08-21 16:24:56 -07:00

policy_unpack.c

apparmor: avoid crash when parsed profile name is empty

2024-01-25 14:33:38 -08:00

policy.c

apparmor: fix lockdep warning when removing a namespace

2023-01-18 11:30:21 +01:00

procattr.c

apparmor: move context.h to cred.h

2018-02-09 11:30:01 -08:00

resource.c

LSM: generalize flag passing to security_capable

2020-01-23 08:21:29 +01:00

secid.c

apparmor: fix bad debug check in apparmor_secid_to_secctx()

2018-09-03 11:15:29 -07:00

stacksplitdfa.in

…

task.c

apparmor: update domain transitions that are subsets of confinement at nnp

2018-02-09 11:30:01 -08:00