[apparmor] [PATCH] apparmor: enable raw text policy

2021-07-27 Thread Georgia Garcia
that the raw text is compressed and must be decompressed for reading. The infrastructure to do so was reused from raw_data. Signed-off-by: Georgia Garcia --- security/apparmor/Kconfig | 8 security/apparmor/apparmorfs.c| 46 +++ security/app

[apparmor] [PATCH v2] apparmor: enable raw text policy

2021-09-03 Thread Georgia Garcia
that the raw text is compressed and must be decompressed for reading. The infrastructure to do so was reused from raw_data. Signed-off-by: Georgia Garcia --- Changes since v1: Use unpack_blob instead of unpack_str because the text string can be at most 64KB (a 16 bit value) which will be problemat

Re: [apparmor] [PATCH v2] apparmor: enable raw text policy

2021-09-08 Thread Georgia Garcia
On Sat, 2021-09-04 at 02:07 +, Seth Arnold wrote: > On Fri, Sep 03, 2021 at 06:31:49PM -0300, Georgia Garcia wrote: > > +static const struct file_operations rawtext_fops = { > > + .open = rawdata_open, > > + .read = rawtext_read, > > + .llseek = generic_fi

[apparmor] [PATCH] apparmor: add module mediation

2021-12-06 Thread Georgia Garcia
loadable kernel module MODULE NAME = name of the module to be requested to modprobe Signed-off-by: Georgia Garcia --- security/apparmor/Makefile | 3 +- security/apparmor/apparmorfs.c | 7 + security/apparmor/include/apparmor.h | 3 +- security/apparmor/include/audit

Re: [apparmor] [PATCH] apparmor: add module mediation

2021-12-09 Thread Georgia Garcia
On Wed, 2021-12-08 at 19:38 +0100, Christian Boltz wrote: > Hello, > > Am Montag, 6. Dezember 2021, 22:55:16 CET schrieb Georgia Garcia: > > + * Returns: %0 or error on failure >^^ > I'd guess that should just be 0 instead of %0 ;-) > Thanks,

[apparmor] [PATCH v2] apparmor: add module mediation

2021-12-09 Thread Georgia Garcia
loadable kernel module MODULE NAME = name of the module to be requested to modprobe Signed-off-by: Georgia Garcia --- v2: Replaced %0 by 0 in comments, and fixed typo in the commit message. --- security/apparmor/Makefile | 3 +- security/apparmor/apparmorfs.c | 7 + se

[apparmor] [PATCH v3] apparmor: add module mediation

2021-12-10 Thread Georgia Garcia
loadable kernel module MODULE NAME = name of the module to be requested to modprobe Signed-off-by: Georgia Garcia --- v2: Replaced %0 by 0 in comments, and fixed typo in the commit message. v3: I noticed while running the regression tests that kmod_name was not set on audit. The parser a

Re: [apparmor] [PATCH] apparmor: use zstd compression for profile data

2022-06-03 Thread Georgia Garcia
On Thu, 2022-05-12 at 12:35 -0500, Jon Tourville wrote: > + out_len = zstd_compress_cctx(ctx, out, out_len, src, slen, ¶ms); > + if (zstd_is_error(out_len)) { > + ret = -EINVAL; > + goto cleanup; > } > > - *dst = dstbuf; > - *dlen = strm

Re: [apparmor] [PATCH 04/11] apparmor: simplify sysctls with register_sysctl_init()

2023-03-02 Thread Georgia Garcia
ster_sysctl_paths(apparmor_sysctl_path, > - apparmor_sysctl_table) ? 0 : -ENOMEM; > + return register_sysctl("kernel", apparmor_sysctl_table) ? 0 : -ENOMEM; > } > #else > static inline int apparmor_init_sysctl(void) Reviewed-by: Georgia Garcia

Re: [apparmor] [PATCH -next 05/11] apparmor: Fix kernel-doc warnings in apparmor/label.c

2023-07-07 Thread Georgia Garcia
Hi, Gaosheng Cui On Sun, 2023-06-25 at 09:13 +0800, Gaosheng Cui wrote: > Fix kernel-doc warnings: > > security/apparmor/label.c:166: warning: Excess function parameter > 'n' description in 'vec_cmp' > security/apparmor/label.c:166: warning: Excess function parameter > 'vec' description in 'vec_c

Re: [apparmor] [PATCH -next 10/11] apparmor: Fix kernel-doc warnings in apparmor/policy_compat.c

2023-07-07 Thread Georgia Garcia
Hi, Gaosheng Cui On Sun, 2023-06-25 at 09:13 +0800, Gaosheng Cui wrote: > Fix kernel-doc warnings: > > security/apparmor/policy_compat.c:151: warning: Function parameter > or member 'size' not described in 'compute_fperms' > > Signed-off-by: Gaosheng Cui > --- > security/apparmor/policy_compat

[apparmor] AppArmor 4.0 alpha1 Released

2023-07-11 Thread Georgia Garcia
The AppArmor development team is pleased to announce the 4.0 alpha1 release of the AppArmor user space components. The release is available on gitlab https://gitlab.com/apparmor/apparmor/-/releases/v4.0.0-alpha1 The release notes are available at https://gitlab.com/apparmor/apparmor/-

[apparmor] [PATCH -next] apparmor: fix invalid reference on profile->disconnected

2023-08-21 Thread Georgia Garcia
profile->disconnected was storing an invalid reference to the disconnected path. Fix it by duplicating the string using aa_unpack_strdup and freeing accordingly. Signed-off-by: Georgia Garcia --- security/apparmor/policy.c| 1 + security/apparmor/policy_unpack.c | 5 +++-- 2 fi

Re: [apparmor] [PATCH -next] apparmor: fix invalid reference on profile->disconnected

2023-08-22 Thread Georgia Garcia
On Tue, 2023-08-22 at 10:13 -0700, John Johansen wrote: > On 8/21/23 11:37, Georgia Garcia wrote: > > profile->disconnected was storing an invalid reference to the > > disconnected path. Fix it by duplicating the string using > > aa_unpack_strdup and freeing accordingly.

Re: [apparmor] [PATCH] apparmor: take nosymfollow flag into account

2024-07-15 Thread Georgia Garcia
side to handle it, we should provide > user with a correct list of mount flags in audit logs. > Reviewed-by: Georgia Garcia > Signed-off-by: Alexander Mikhalitsyn > --- > security/apparmor/mount.c | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/security/appar