Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
John Johansen fa2ac468db apparmor: update how unconfined is handled ... ns->unconfined is being used read side without locking, nor rcu but is being updated when a namespace is removed. This works for the root ns which is never removed but has a race window and can cause failures when children namespaces are removed. Also ns and ns->unconfined have a circular refcounting dependency that is problematic and must be broken. Currently this is done incorrectly when the namespace is destroyed. Fix this by forward referencing unconfined via the replacedby infrastructure instead of directly updating the ns->unconfined pointer. Remove the circular refcount dependency by making the ns and its unconfined profile share the same refcount. Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Seth Arnold <seth.arnold@canonical.com>		2013-08-14 11:42:06 -07:00
..
apparmor	apparmor: update how unconfined is handled	2013-08-14 11:42:06 -07:00
integrity	xattr: Constify ->name member of "struct xattr".	2013-07-25 19:30:03 +10:00
keys	aio: don't include aio.h in sched.h	2013-05-07 20:16:25 -07:00
selinux	xattr: Constify ->name member of "struct xattr".	2013-07-25 19:30:03 +10:00
smack	xattr: Constify ->name member of "struct xattr".	2013-07-25 19:30:03 +10:00
tomoyo	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
yama	yama: Better permission check for ptraceme	2013-03-26 13:17:58 -07:00
capability.c	xattr: Constify ->name member of "struct xattr".	2013-07-25 19:30:03 +10:00
commoncap.c	kill f_vfsmnt	2013-02-26 02:46:10 -05:00
device_cgroup.c	device_cgroup: simplify cgroup tree walk in propagate_exception()	2013-05-24 10:55:38 +09:00
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	xattr: Constify ->name member of "struct xattr".	2013-07-25 19:30:03 +10:00