John Johansen 58acf9d911 apparmor: fix module parameters can be changed after policy is locked ... the policy_lock parameter is a one way switch that prevents policy from being further modified. Unfortunately some of the module parameters can effectively modify policy by turning off enforcement. split policy_admin_capable into a view check and a full admin check, and update the admin check to test the policy_lock parameter. Signed-off-by: John Johansen <john.johansen@canonical.com>		2016-07-12 08:43:10 -07:00
..
apparmor	apparmor: fix module parameters can be changed after policy is locked	2016-07-12 08:43:10 -07:00
integrity	ima: extend the measurement entry specific pcr	2016-06-30 01:14:22 -04:00
keys	KEYS: Strip trailing spaces	2016-06-14 10:29:44 +01:00
loadpin	LSM: LoadPin: provide enablement CONFIG	2016-05-17 20:10:30 +10:00
selinux	Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next	2016-07-07 10:15:34 +10:00
smack	Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into next	2016-07-08 10:41:15 +10:00
tomoyo	security: tomoyo: simplify the gc kthread creation	2016-06-06 20:23:55 +10:00
yama	Yama: fix double-spinlock and user access in atomic context	2016-05-26 09:56:18 +10:00
commoncap.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-05-17 11:01:31 -07:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
Kconfig	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
lsm_audit.c	Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next	2015-08-15 13:29:57 +10:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
min_addr.c
security.c	LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP	2016-06-06 19:59:18 +10:00