apparmor
Thread
Date
Earlier messages
Later messages
Messages by Thread
Re: [apparmor] any way of denying profiled executable(s) to be ran at all
janko metelko
[apparmor] Snaps are blocked by Apparmor on Ubuntu 22.04
Sonixxfx
Re: [apparmor] Snaps are blocked by Apparmor on Ubuntu 22.04
John Johansen
Re: [apparmor] Snaps are blocked by Apparmor on Ubuntu 22.04
Sonixxfx
Re: [apparmor] Snaps are blocked by Apparmor on Ubuntu 22.04
John Johansen
Re: [apparmor] Snaps are blocked by Apparmor on Ubuntu 22.04
Sonixxfx
[apparmor] [PATCH] Allow access to possible cpus for glibc-2.36
christian . ehrhardt
Re: [apparmor] [PATCH] Allow access to possible cpus for glibc-2.36
John Johansen
[apparmor] [PATCH v1 0/2] kunit: add macro to allow conditionally exposing static symbols to tests
Rae Moar
[apparmor] [PATCH v1 1/2] kunit: add macro to allow conditionally exposing static symbols to tests
Rae Moar
Re: [apparmor] [PATCH v1 1/2] kunit: add macro to allow conditionally exposing static symbols to tests
John Johansen
Re: [apparmor] [PATCH v1 1/2] kunit: add macro to allow conditionally exposing static symbols to tests
David Gow
[apparmor] [PATCH v1 2/2] apparmor: test: make static symbols visible during kunit testing
Rae Moar
Re: [apparmor] [PATCH v1 2/2] apparmor: test: make static symbols visible during kunit testing
John Johansen
Re: [apparmor] [PATCH v1 2/2] apparmor: test: make static symbols visible during kunit testing
David Gow
Re: [apparmor] [PATCH v1 2/2] apparmor: test: make static symbols visible during kunit testing
John Johansen
Re: [apparmor] [PATCH v1 2/2] apparmor: test: make static symbols visible during kunit testing
Rae Moar
Re: [apparmor] [PATCH v1 0/2] kunit: add macro to allow conditionally exposing static symbols to tests
John Johansen
[apparmor] [PATCH] apparmor: Add __init annotation to aa_{setup/teardown}_dfa_engine()
Xiu Jianfeng
Re: [apparmor] [PATCH] apparmor: Add __init annotation to aa_{setup/teardown}_dfa_engine()
John Johansen
[apparmor] [PATCH] apparmor: Fix memleak in alloc_ns()
Xiu Jianfeng
Re: [apparmor] [PATCH] apparmor: Fix memleak in alloc_ns()
John Johansen
[apparmor] [linux-next:master] BUILD SUCCESS WITH WARNING 60eac8672b5b6061ec07499c0f1b79f6d94311ce
kernel test robot
[apparmor] [PATCH -next] apparmor: fix a memleak in free_ruleset()
Gaosheng Cui
Re: [apparmor] [PATCH -next] apparmor: fix a memleak in free_ruleset()
John Johansen
[apparmor] [PATCH 4/8] apparmor: use type safe idmapping helpers
Christian Brauner
Re: [apparmor] [PATCH 4/8] apparmor: use type safe idmapping helpers
John Johansen
Re: [apparmor] [PATCH 4/8] apparmor: use type safe idmapping helpers
Christian Brauner
Re: [apparmor] [PATCH 4/8] apparmor: use type safe idmapping helpers
John Johansen
Re: [apparmor] [PATCH 4/8] apparmor: use type safe idmapping helpers
Christian Brauner
[apparmor] [PATCH] apparmor: Fix memleak issue in unpack_profile()
Xiu Jianfeng
Re: [apparmor] [PATCH] apparmor: Fix memleak issue in unpack_profile()
John Johansen
[apparmor] [PATCH v2] apparmor: Use pointer to struct aa_label for lbs_cred
Xiu Jianfeng
Re: [apparmor] [PATCH v2] apparmor: Use pointer to struct aa_label for lbs_cred
John Johansen
[apparmor] [PATCH] apparmor: Use pointer to struct aa_label for lbs_cred
Xiu Jianfeng
Re: [apparmor] [PATCH] apparmor: Use pointer to struct aa_label for lbs_cred
Casey Schaufler
[apparmor] [PATCH -next] apparmor: Fix spelling of function name in comment block
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix spelling of function name in comment block
John Johansen
[apparmor] [linux-next:master] BUILD REGRESSION b9f85101cad3397ef1e509909602a90e257ab9d8
kernel test robot
[apparmor] [linux-next:master] BUILD REGRESSION cd9fd78f5c11b5e165d9317ef11e613f4aef4dd1
kernel test robot
[apparmor] [PATCH 1/3] AppArmor: Fix kernel-doc
Jiapeng Chong
[apparmor] [PATCH 3/3] AppArmor: Fix kernel-doc
Jiapeng Chong
Re: [apparmor] [PATCH 3/3] AppArmor: Fix kernel-doc
John Johansen
[apparmor] [PATCH 2/3] LSM: Fix kernel-doc
Jiapeng Chong
Re: [apparmor] [PATCH 2/3] LSM: Fix kernel-doc
John Johansen
Re: [apparmor] [PATCH 1/3] AppArmor: Fix kernel-doc
John Johansen
Re: [apparmor] [PATCH] Fix race condition when exec'ing setuid files
Kees Cook
Re: [apparmor] [PATCH] Fix race condition when exec'ing setuid files
Theodore Ts'o
Re: [apparmor] [PATCH] Fix race condition when exec'ing setuid files
David Laight
[apparmor] [PATCH 0/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
[apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Christian Brauner
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
David Laight
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Jann Horn
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Jann Horn
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Mateusz Guzik
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Eric W. Biederman
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Jann Horn
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Eric W. Biederman
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Mateusz Guzik
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Eric W. Biederman
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Eric W. Biederman
Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Andy Lutomirski
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Jann Horn
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Kees Cook
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Jann Horn
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
David Laight
Re: [apparmor] [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
Eric W. Biederman
[apparmor] [PATCH 2/2] exec: Remove LSM_UNSAFE_SHARE
Kees Cook
[apparmor] [PATCH] apparmor: store return value of unpack_perms_table() to signed variable
Muhammad Usama Anjum
Re: [apparmor] [PATCH] apparmor: store return value of unpack_perms_table() to signed variable
John Johansen
[apparmor] [linux-next:master] BUILD REGRESSION de90d455a35e474a184c898e66a6a108c3a99434
kernel test robot
[apparmor] Which version for Debian 12 ("Bookworm")?
intrigeri
Re: [apparmor] Which version for Debian 12 ("Bookworm")?
John Johansen
Re: [apparmor] Which version for Debian 12 ("Bookworm")?
intrigeri
[apparmor] [PATCH] apparmor: fix obsoleted comments for aa_getprocattr() and audit_resource()
Gaosheng Cui
Re: [apparmor] [PATCH] apparmor: fix obsoleted comments for aa_getprocattr() and audit_resource()
John Johansen
[apparmor] [PATCH] apparmor: remove useless static inline functions
Gaosheng Cui
Re: [apparmor] [PATCH] apparmor: remove useless static inline functions
John Johansen
[apparmor] [PATCH v2] apparmor: Simplify obtain the newest label on a cred
Gaosheng Cui
Re: [apparmor] [PATCH] apparmor: make __aa_path_perm() static
John Johansen
[apparmor] Apparmor : Common Query
Murali Selvaraj
Re: [apparmor] Apparmor : Common Query
Seth Arnold
Re: [apparmor] Apparmor : Common Query
Seth Arnold
Re: [apparmor] Apparmor : Common Query
Murali Selvaraj
[apparmor] [PATCH] apparmor: Simply obtain the newest label on a cred
Gaosheng Cui
Re: [apparmor] [PATCH] apparmor: Simply obtain the newest label on a cred
Serge E. Hallyn
Re: [apparmor] [PATCH] apparmor: Simply obtain the newest label on a cred
cuigaosheng
Re: [apparmor] [PATCH] apparmor: Simply obtain the newest label on a cred
John Johansen
[apparmor] irc meeting Tues Sep 13 - Canceled
John Johansen
Re: [apparmor] [PATCH] apparmor: fix a memleak in multi_transaction_new()
John Johansen
[apparmor] Switching to iterate_shared
Matthew Wilcox
Re: [apparmor] Switching to iterate_shared
Casey Schaufler
Re: [apparmor] Switching to iterate_shared
Linus Torvalds
Re: [apparmor] Switching to iterate_shared
John Johansen
Re: [apparmor] Switching to iterate_shared
Matthew Wilcox
[apparmor] AppArmor 3.0.7 Released
John Johansen
[apparmor] irc meeting Tues Aug 9
John Johansen
[apparmor] AppArmor 3.0.6 Released
John Johansen
[apparmor] AppArmor 3.0.5 Released
John Johansen
[apparmor] [PATCH] apparmor: correct config reference to intended one
Lukas Bulwahn
Re: [apparmor] [PATCH] apparmor: correct config reference to intended one
John Johansen
[apparmor] [PATCH] apparmor: Mark alloc_unconfined() as static
Souptick Joarder
Re: [apparmor] [PATCH] apparmor: Mark alloc_unconfined() as static
John Johansen
[apparmor] [linux-next:master] BUILD REGRESSION 036ad6daa8f0fd357af7f50f9da58539eaa6f68c
kernel test robot
[apparmor] [linux-next:master] BUILD REGRESSION 6014cfa5bf32cf8c5c58b3cfd5ee0e1542c8a825
kernel test robot
[apparmor] [linux-next:master] BUILD REGRESSION 37b355fdaf31ee18bda9a93c2a438dc1cbf57ec9
kernel test robot
[apparmor] [PATCH v3 0/2] apparmor: switch from zlib to zstd
Jon Tourville
[apparmor] [PATCH 1/2] apparmor: use zstd compression for profile data
Jon Tourville
[apparmor] [PATCH 2/2] apparmor: expose compression level limits in sysfs
Jon Tourville
[apparmor] irc meeting Tues July 12
John Johansen
[apparmor] [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
kernel test robot
Re: [apparmor] [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
Greg KH
Re: [apparmor] [linux-next:master] BUILD REGRESSION 088b9c375534d905a4d337c78db3b3bfbb52c4a0
Guenter Roeck
[apparmor] [linux-next:master] BUILD REGRESSION 2a2aa3f05338270aecbe2492fda910d6c17e0102
kernel test robot
[apparmor] [linux-next:master] BUILD REGRESSION b6f1f2fa2bddd69ff46a190b8120bd440fd50563
kernel test robot
Re: [apparmor] [linux-next:master] BUILD REGRESSION 6cc11d2a1759275b856e464265823d94aabd5eaf
Roman Gushchin
Re: [apparmor] [PATCH -next] apparmor: Fix memleak in aa_simple_write_to_buffer()
John Johansen
[apparmor] [PATCH v2 0/2] apparmor: switch from zlib to zstd
Jon Tourville
[apparmor] [PATCH v2 1/2] apparmor: use zstd compression for profile data
Jon Tourville
[apparmor] [PATCH v2 2/2] apparmor: expose compression level limits in sysfs
Jon Tourville
[apparmor] irc meeting Tues June 14 Canceled
John Johansen
Re: [apparmor] Apparmor and Docker - capabilities and network flags not working
John Johansen
Re: [apparmor] Apparmor and Docker - capabilities and network flags not working
John Johansen
[apparmor] [PATCH -next] apparmor: Fix aa_str_perms() kernel-doc comment
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix aa_str_perms() kernel-doc comment
John Johansen
[apparmor] [PATCH] apparmor: use zstd compression for profile data
Jon Tourville
Re: [apparmor] [PATCH] apparmor: use zstd compression for profile data
Georgia Garcia
Re: [apparmor] [PATCH] apparmor: use zstd compression for profile data
Jon Tourville
[apparmor] irc meeting Tues May 10 Canceled
John Johansen
[apparmor] Apparmor : wild cards/CPU spike
Murali Selvaraj
Re: [apparmor] Apparmor : wild cards/CPU spike
John Johansen
[apparmor] irc meeting Tues April 12
John Johansen
[apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
John Johansen
[apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
John Johansen
[apparmor] [PATCH -next] AppArmor: Fix some kernel-doc comments
Yang Li
Re: [apparmor] [PATCH -next] AppArmor: Fix some kernel-doc comments
John Johansen
[apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
Randy Dunlap
Re: [apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
John Johansen
[apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
Yang Li
Re: [apparmor] [PATCH -next] apparmor: Fix some kernel-doc comments
John Johansen
[apparmor] irc meeting Tues March 8 Canceled
John Johansen
Re: [apparmor] mmotm 2022-03-03-21-24 uploaded (security/apparmor/policy_unpack.o)
Randy Dunlap
Re: [apparmor] mmotm 2022-03-03-21-24 uploaded (security/apparmor/policy_unpack.o)
John Johansen
Re: [apparmor] [PATCH] apparmor: fix aa_label_asxprint return check
John Johansen
[apparmor] AppArmor 3.0.4 Released
John Johansen
[apparmor] irc meeting Tues Feb 8
John Johansen
Re: [apparmor] [PATCH -next 3/3] apparmor: Fix some kernel-doc comments
John Johansen
Re: [apparmor] [PATCH 3/3] apparmor: Fix some kernel-doc comments
John Johansen
Re: [apparmor] [PATCH -next 2/3] apparmor: Fix some kernel-doc comments
John Johansen
Re: [apparmor] [PATCH -next 2/3] apparmor: Fix some kernel-doc comments
Christian Boltz
Re: [apparmor] [PATCH -next 1/3] apparmor: Fix match_mnt_path_str() and match_mnt() kernel-doc comment
John Johansen
[apparmor] loading a user version of a profile in place of the system profile
John Beattie
Re: [apparmor] loading a user version of a profile in place of the system profile
John Johansen
Re: [apparmor] loading a user version of a profile in place of the system profile
me
Re: [apparmor] loading a user version of a profile in place of the system profile
John Johansen
Re: [apparmor] loading a user version of a profile in place of the system profile
John Johansen
Re: [apparmor] Disable apparmor without restart
John Johansen
Re: [apparmor] Disable apparmor without restart
Seth Arnold
[apparmor] Pesky '=' in subj= of audit in mainline
Casey Schaufler
Re: [apparmor] Pesky '=' in subj= of audit in mainline
John Johansen
Re: [apparmor] Pesky '=' in subj= of audit in mainline
Casey Schaufler
Re: [apparmor] Pesky '=' in subj= of audit in mainline
John Johansen
Re: [apparmor] Pesky '=' in subj= of audit in mainline
John Johansen
Re: [apparmor] Pesky '=' in subj= of audit in mainline
Casey Schaufler
[apparmor] irc meeting Tues Dec 14, 18:00 UTC
John Johansen
[apparmor] [PATCH v3] apparmor: add module mediation
Georgia Garcia
[apparmor] [PATCH v2] apparmor: add module mediation
Georgia Garcia
[apparmor] [PATCH] apparmor: add module mediation
Georgia Garcia
Re: [apparmor] [PATCH] apparmor: add module mediation
Christian Boltz
Re: [apparmor] [PATCH] apparmor: add module mediation
Georgia Garcia
[apparmor] profile injection
beroal
Re: [apparmor] profile injection
Seth Arnold
[apparmor] give a permission to a specific process
beroal
Re: [apparmor] give a permission to a specific process
Seth Arnold
Re: [apparmor] give a permission to a specific process
beroal
Re: [apparmor] give a permission to a specific process
beroal
Re: [apparmor] give a permission to a specific process
John Johansen
[apparmor] AppArmor denies access, when systemd namespace used by hardening directive (e.g. ProtectHome)
Cedric Müller
Re: [apparmor] AppArmor denies access, when systemd namespace used by hardening directive (e.g. ProtectHome)
Simon Deziel
Re: [apparmor] AppArmor denies access, when systemd namespace used by hardening directive (e.g. ProtectHome)
John Johansen
[apparmor] Toward cooperation between bubblewrap and AppArmor
Forest
Re: [apparmor] Toward cooperation between bubblewrap and AppArmor
John Johansen
[apparmor] config check exceptions
Michael Ströder
Re: [apparmor] config check exceptions
John Johansen
[apparmor] How to extend an existing profile?
Forest
Re: [apparmor] How to extend an existing profile?
John Johansen
Re: [apparmor] How to extend an existing profile?
Forest
Re: [apparmor] How to extend an existing profile?
John Johansen
[apparmor] irc meeting Tues Sept 14 - Cancelled
John Johansen
[apparmor] Deprecating the Perl bindings?
intrigeri
Re: [apparmor] Deprecating the Perl bindings?
Christian Boltz
Earlier messages
Later messages