github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-10-23 15:32:04 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
9ba46df344
linux/security/apparmor
History
Christian Brauner 025756ee7b
fs: port mnt_idmap() and file_mnt_idmap() to const mnt_idmap 
Now that everything takes a mnt_idmap as const store a const pointer in
struct vfsmount, struct mount_kattr and struct kstatmount and return one
from mnt_idmap(), file_mnt_idmap() and ovl_upper_mnt_idmap(). Finally,
also make mnt_idmap_get() return a const pointer. Also convert the
remaining local variables that are initialized from the accessors.

alloc_mnt_idmap() keeps returning a non-const pointer. It is the only
place where an idmapping is actually written to.

Link: https://patch.msgid.link/20260901-work-idmap-const-v1-26-54ccd48e100b@kernel.org
Reviewed-by: Jan Kara <jack@suse.cz>
Reviewed-by: Seth Forshee <sforshee@kernel.org>
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
2026-09-23 09:19:51 +02:00
..
include apparmor: fix deadlock in complain-mode change_hat 2026-08-15 23:39:38 -07:00
.gitignore .gitignore: add SPDX License Identifier 2020-03-25 11:50:48 +01:00
.kunitconfig apparmor: add .kunitconfig 2026-02-01 12:01:19 -08:00
af_inet.c apparmor: push inet mediation into profile callbacks, and improve auditing 2026-08-10 22:49:41 -07:00
af_unix.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
apparmorfs.c fs: port ->mkdir() to pass const mnt_idmap 2026-09-23 09:19:50 +02:00
audit.c apparmor: refactory mount to use check_perms 2026-08-10 22:49:42 -07:00
capability.c apparmor: constify aa_profile parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
crypto.c apparmor: move initcalls to the LSM framework 2025-10-22 19:24:27 -04:00
domain.c apparmor: fix deadlock in complain-mode change_hat 2026-08-15 23:39:38 -07:00
file.c apparmor: add audit mode to provide a mechanism to silence complain messages 2026-08-10 22:49:42 -07:00
ipc.c apparmor: transition from a list of rules to a vector of rules 2025-07-20 02:31:06 -07:00
Kconfig apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabled 2026-07-30 06:42:58 -07:00
label.c apparmor: constify aa_label parameters on read-only query helpers 2026-08-10 22:49:43 -07:00
lib.c apparmor: policy_int make sure list heads are initialized before fail path 2026-08-26 00:03:13 -07:00
lsm.c fs: port mnt_idmap() and file_mnt_idmap() to const mnt_idmap 2026-09-23 09:19:51 +02:00
Makefile apparmor: refactor network sock mediation in preparation for inet mediation 2026-08-10 22:49:41 -07:00
match.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
mount.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
net.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
nulldfa.in apparmor: cleanup add proper line wrapping to nulldfa.in 2018-02-09 11:30:01 -08:00
path.c apparmor: Fix string overrun due to missing termination 2026-04-22 20:09:05 -07:00
policy_compat.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
policy_ns.c apparmor: fix: limit the number of levels of policy namespaces 2026-03-09 16:05:43 -07:00
policy_unpack_test.c + Features 2025-08-04 08:17:28 -07:00
policy_unpack.c apparmor: constify aa_dfa parameters on read-only compute paths 2026-08-10 22:49:43 -07:00
policy.c apparmor: fix deadlock in complain-mode change_hat 2026-08-15 23:39:38 -07:00
procattr.c apparmor: aa_getprocattr free procattr leak on format failure 2026-06-13 20:18:30 -07:00
resource.c apparmor: fix rlimit for posix cpu timers 2026-01-29 01:27:54 -08:00
secid.c lsm: secctx provider check on release 2024-12-04 14:59:57 -05:00
stacksplitdfa.in apparmor: use the dfa to do label parse string splitting 2018-02-09 11:30:01 -08:00
task.c apparmor: fix cred UAF caused by begin_current_label_crit_section() 2026-08-06 16:15:33 -07:00