Matthew Garrett 33361b48bc UPSTREAM: apparmor: Parse secmark policy ...

Add support for parsing secmark policy provided by userspace, and
store that in the overall policy.

Change-Id: I8cc6c232e685042ad517896b17610bbd9733f977
Signed-off-by: Matthew Garrett <mjg59@google.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>

2025-09-20 03:23:20 +01:00

..

apparmor

UPSTREAM: apparmor: Parse secmark policy

2025-09-20 03:23:20 +01:00

bpf

BACKPORT: bpf: Implement bpf_local_storage for inodes

2025-09-20 03:22:12 +01:00

integrity

UPSTREAM: security: audit and remove any unnecessary uses of module.h

2025-09-20 03:22:11 +01:00

keys

UPSTREAM: security: audit and remove any unnecessary uses of module.h

2025-09-20 03:22:11 +01:00

loadpin

BACKPORT: LoadPin: Initialize as ordered LSM

2025-09-20 03:23:09 +01:00

lockdown

BACKPORT: security: Add a static lockdown policy LSM

2025-09-20 03:23:10 +01:00

safesetid

BACKPORT: LSM: add SafeSetID module that gates setid calls

2025-09-20 03:23:09 +01:00

selinux

UPSTREAM: LSM: Make lsm_early_cred() and lsm_early_task() local functions.

2025-09-20 03:23:20 +01:00

smack

UPSTREAM: LSM: Make lsm_early_cred() and lsm_early_task() local functions.

2025-09-20 03:23:20 +01:00

tomoyo

UPSTREAM: LSM: Make lsm_early_cred() and lsm_early_task() local functions.

2025-09-20 03:23:20 +01:00

yama

BACKPORT: Yama: Initialize as ordered LSM

2025-09-20 03:23:09 +01:00

commoncap.c

UPSTREAM: security: audit and remove any unnecessary uses of module.h

2025-09-20 03:22:11 +01:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-18 11:30:44 +01:00

inode.c

[ALPS05914317] SDCARDFS: add back

2021-08-04 21:13:22 +08:00

Kconfig

BACKPORT: security: Add a static lockdown policy LSM

2025-09-20 03:23:10 +01:00

Kconfig.hardening

hardening: Do not enable INIT_STACK_ALL_ZERO by default for now

2024-06-03 16:05:44 +01:00

lsm_audit.c

dump_common_audit_data(): fix racy accesses to ->d_name

2021-01-19 18:22:37 +01:00

Makefile

BACKPORT: security: Add a static lockdown policy LSM

2025-09-20 03:23:10 +01:00

min_addr.c

BACKPORT: sysctl: pass kernel pointers to ->proc_handler

2025-09-20 03:21:20 +01:00

security.c

UPSTREAM: LSM: Make lsm_early_cred() and lsm_early_task() local functions.

2025-09-20 03:23:20 +01:00