Ryan Lee db93ca15e5 apparmor: properly handle cx/px lookup failure for complain ... mode profiles When a cx/px lookup fails, apparmor would deny execution of the binary even in complain mode (where it would audit as allowing execution while actually denying it). Instead, in complain mode, create a new learning profile, just as would have been done if the cx/px line wasn't there. Signed-off-by: Ryan Lee <ryan.lee@canonical.com> Signed-off-by: John Johansen <john.johansen@canonical.com>		2024-11-26 19:21:05 -08:00
..
include	lsm: add lsmprop_to_secctx hook	2024-10-11 14:34:12 -04:00
.gitignore	.gitignore: add SPDX License Identifier	2020-03-25 11:50:48 +01:00
apparmorfs.c	apparmor: fix possible NULL pointer dereference	2024-05-10 08:59:05 -07:00
audit.c	lsm: remove lsm_prop scaffolding	2024-10-11 14:34:16 -04:00
capability.c	apparmor: Fix some kernel-doc comments	2023-10-23 00:25:49 -07:00
crypto.c	apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256	2023-11-19 00:47:56 -08:00
domain.c	apparmor: properly handle cx/px lookup failure for complain	2024-11-26 19:21:05 -08:00
file.c	apparmor: remove useless static inline function is_deleted	2024-05-10 08:44:43 -07:00
ipc.c	apparmor: refcount the pdb	2023-10-18 15:30:47 -07:00
Kconfig	apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256	2023-11-19 00:47:56 -08:00
label.c	apparmor: refcount the pdb	2023-10-18 15:30:47 -07:00
lib.c	apparmor: fix possible memory leak in unpack_trans_table	2024-01-04 01:34:00 -08:00
lsm.c	lsm: remove lsm_prop scaffolding	2024-10-11 14:34:16 -04:00
Makefile	+ Features	2022-12-14 13:42:09 -08:00
match.c	apparmor: refcount the pdb	2023-10-18 15:30:47 -07:00
mount.c	apparmor: take nosymfollow flag into account	2024-07-24 10:33:58 -07:00
net.c	lsm: infrastructure management of the sock security	2024-07-29 16:54:50 -04:00
nulldfa.in	apparmor: cleanup add proper line wrapping to nulldfa.in	2018-02-09 11:30:01 -08:00
path.c	security: apparmor: delete repeated words in comments	2021-02-07 04:15:46 -08:00
policy_compat.c	apparmor: fixup return comments for kernel doc cleanups by Gaosheng Cui	2023-08-08 13:12:19 -07:00
policy_ns.c	apparmor: remove unused functions in policy_ns.c/.h	2023-10-15 21:44:31 -07:00
policy_unpack_test.c	apparmor: fix policy_unpack_test on big endian systems	2024-08-25 15:26:30 -07:00
policy_unpack.c	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
policy.c	apparmor: allocate xmatch for nullpdb inside aa_alloc_null	2024-11-26 19:21:04 -08:00
procattr.c	AppArmor: Add selfattr hooks	2023-11-12 22:54:42 -05:00
resource.c	apparmor: pass cred through to audit info.	2023-10-18 15:30:38 -07:00
secid.c	lsm: remove lsm_prop scaffolding	2024-10-11 14:34:16 -04:00
stacksplitdfa.in	apparmor: use the dfa to do label parse string splitting	2018-02-09 11:30:01 -08:00
task.c	apparmor: add missing params to aa_may_ptrace kernel-doc comments	2023-11-19 01:19:41 -08:00