Kees Cook 1d4457f999 sched: move no_new_privs into new atomic flags ...

Since seccomp transitions between threads requires updates to the
no_new_privs flag to be atomic, the flag must be part of an atomic flag
set. This moves the nnp flag into a separate task field, and introduces
accessors.

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Oleg Nesterov <oleg@redhat.com>
Reviewed-by: Andy Lutomirski <luto@amacapital.net>

2014-07-18 12:13:38 -07:00

..

include

nick kvfree() from apparmor

2014-05-06 14:02:53 -04:00

.gitignore

AppArmor: remove af_names.h from .gitignore

2012-09-01 08:35:34 -07:00

apparmorfs.c

apparmor: fix bad lock balance when introspecting policy

2013-10-16 11:54:01 +11:00

audit.c

apparmor: remove parent task info from audit logging

2013-10-29 21:34:04 -07:00

capability.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

context.c

apparmor: change how profile replacement update is done

2013-08-14 11:42:06 -07:00

crypto.c

apparmor: Use shash crypto API interface for profile hashes

2013-09-30 09:53:59 +10:00

domain.c

sched: move no_new_privs into new atomic flags

2014-07-18 12:13:38 -07:00

file.c

new helper: file_inode(file)

2013-02-22 23:31:31 -05:00

ipc.c

apparmor: fix capability to not use the current task, during reporting

2013-10-29 21:33:37 -07:00

Kconfig

apparmor: add the ability to report a sha1 hash of loaded policy

2013-08-14 11:42:08 -07:00

lib.c

nick kvfree() from apparmor

2014-05-06 14:02:53 -04:00

lsm.c

security: replace strict_strto*() with kstrto*()

2014-02-06 19:11:04 +11:00

Makefile

apparmor: add the ability to report a sha1 hash of loaded policy

2013-08-14 11:42:08 -07:00

match.c

apparmor: reserve and mask off the top 8 bits of the base field

2013-04-28 00:37:32 -07:00

path.c

apparmor: fix error code to failure message mapping for name lookup

2013-04-28 00:35:40 -07:00

policy_unpack.c

apparmor: add the ability to report a sha1 hash of loaded policy

2013-08-14 11:42:08 -07:00

policy.c

apparmor: fix memleak of the profile hash

2013-10-16 11:53:59 +11:00

procattr.c

apparmor: add interface files for profiles and namespaces

2013-08-14 11:42:07 -07:00

resource.c

apparmor: relax the restrictions on setting rlimits

2013-04-28 00:36:46 -07:00

sid.c

AppArmor: core policy routines

2010-08-02 15:38:37 +10:00