John Johansen 88fec3526e apparmor: make sure unix socket labeling is correctly updated. ...

When a unix socket is passed into a different confinement domain make
sure its cached mediation labeling is updated to correctly reflect
which domains are using the socket.

Fixes: c05e705812 ("apparmor: add fine grained af_unix mediation")
Signed-off-by: John Johansen <john.johansen@canonical.com>

2025-07-20 02:19:27 -07:00

..

include

apparmor: make sure unix socket labeling is correctly updated.

2025-07-20 02:19:27 -07:00

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

af_unix.c

apparmor: make sure unix socket labeling is correctly updated.

2025-07-20 02:19:27 -07:00

apparmorfs.c

apparmor: fix typos and spelling errors

2025-02-10 11:17:49 -08:00

audit.c

apparmor: add support for profiles to define the kill signal

2025-01-18 06:47:12 -08:00

capability.c

apparmor: add ability to mediate caps with policy state machine

2025-01-18 06:47:12 -08:00

crypto.c

Revert "apparmor: use SHA-256 library API instead of crypto_shash API"

2025-07-15 22:39:22 -07:00

domain.c

apparmor: force auditing of conflicting attachment execs from confined

2025-05-25 20:15:01 -07:00

file.c

apparmor: make sure unix socket labeling is correctly updated.

2025-07-20 02:19:27 -07:00

ipc.c

apparmor: switch signal mediation to use RULE_MEDIATES

2025-01-18 06:47:12 -08:00

Kconfig

Revert "apparmor: use SHA-256 library API instead of crypto_shash API"

2025-07-15 22:39:22 -07:00

label.c

apparmor: fix typos and spelling errors

2025-02-10 11:17:49 -08:00

lib.c

apparmor: mitigate parser generating large xtables

2025-07-15 22:39:07 -07:00

lsm.c

apparmor: make sure unix socket labeling is correctly updated.

2025-07-20 02:19:27 -07:00

Makefile

apparmor: make all generated string array headers const char *const

2025-05-25 20:15:01 -07:00

match.c

apparmor: fix loop detection used in conflicting attachment resolution

2025-05-25 20:14:53 -07:00

mount.c

apparmor: take nosymfollow flag into account

2024-07-24 10:33:58 -07:00

net.c

apparmor: make sure unix socket labeling is correctly updated.

2025-07-20 02:19:27 -07:00

nulldfa.in

…

path.c

apparmor: Use IS_ERR_OR_NULL() helper function

2024-11-26 19:21:05 -08:00

policy_compat.c

apparmor: add additional flags to extended permission.

2025-01-18 06:47:12 -08:00

policy_ns.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

policy_unpack_test.c

apparmor: test: Fix memory leak for aa_unpack_strdup()

2024-11-26 19:21:05 -08:00

policy_unpack.c

apparmor: mitigate parser generating large xtables

2025-07-15 22:39:07 -07:00

policy.c

apparmor: make __begin_current_label_crit_section() indicate whether put is needed

2025-07-15 22:39:43 -07:00

procattr.c

apparmor: Improve debug print infrastructure

2025-01-18 06:47:11 -08:00

resource.c

apparmor: pass cred through to audit info.

2023-10-18 15:30:38 -07:00

secid.c

apparmor: Remove deadcode

2024-11-26 19:21:05 -08:00

stacksplitdfa.in

…

task.c

apparmor: add missing params to aa_may_ptrace kernel-doc comments

2023-11-19 01:19:41 -08:00