John Johansen 31ec99e133 apparmor: switch to apparmor to internal capable check for policy management ...

With LSM stacking calling back into capable to check for MAC_ADMIN
for apparmor policy results in asking the other stacked LSMs for
MAC_ADMIN resulting in the other LSMs answering based on their
policy management.

For apparmor policy management we just need to call apparmor's
capability fn directly.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2021-02-07 04:14:57 -08:00

..

apparmor

apparmor: switch to apparmor to internal capable check for policy management

2021-02-07 04:14:57 -08:00

integrity

treewide: Use sizeof_field() macro

2019-12-09 10:36:44 -08:00

keys

security: keys: trusted: fix lost handle flush

2019-12-17 11:46:43 +02:00

loadpin

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

lockdown

Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

2019-11-30 14:35:43 -08:00

safesetid

security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()

2019-10-30 08:45:57 -07:00

selinux

Merge tag 'y2038-cleanups-5.5' of git://git.kernel.org:/pub/scm/linux/kernel/git/arnd/playground

2019-12-01 14:00:59 -08:00

smack

pipe: Reduce #inclusion of pipe_fs_i.h

2019-10-23 17:02:34 +01:00

tomoyo

tomoyo: Suppress RCU warning at list_for_each_entry_rcu().

2019-12-16 23:02:27 +09:00

yama

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

commoncap.c

Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-07-09 12:24:21 -07:00

device_cgroup.c

device_cgroup: Export devcgroup_check_permission

2019-10-07 15:11:38 -05:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-09-28 08:14:15 -07:00

Kconfig.hardening

Merge tag 'meminit-v5.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2019-07-28 12:33:15 -07:00

lsm_audit.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

Makefile

security: Add a static lockdown policy LSM

2019-08-19 21:54:15 -07:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

perf_event: Add support for LSM and SELinux checks

2019-10-17 21:31:55 +02:00