summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* ima: simplify conditional statement to improve performanceDmitry Kasatkin2014-09-091-4/+2
* integrity: remove declaration of non-existing functionsDmitry Kasatkin2014-09-092-10/+0
* integrity: prevent flooding with 'Request for unknown key'Dmitry Kasatkin2014-09-091-2/+3
* ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin2014-09-096-16/+16
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-09-091-0/+7
* ima: provide flag to identify new empty filesDmitry Kasatkin2014-09-083-7/+13
* evm: prevent passing integrity check if xattr read failsDmitry Kasatkin2014-09-081-3/+4
* evm: fix checkpatch warningsDmitry Kasatkin2014-09-021-3/+0
* ima: fix fallback to use new_sync_read()Dmitry Kasatkin2014-09-021-4/+4
* ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin2014-09-021-1/+4
* ima: fix ima_alloc_atfm()Mimi Zohar2014-09-021-1/+4
* security: Silence shadow warningMark Rustad2014-09-021-1/+1
* Merge tag 'keys-next-20140805' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2014-08-065-81/+34
|\
| * X.509: Need to export x509_request_asymmetric_key()David Howells2014-08-031-0/+1
| * PKCS#7: X.509 certificate issuer and subject are mandatory fields in the ASN.1David Howells2014-07-311-4/+2
| * PKCS#7: Use x509_request_asymmetric_key()David Howells2014-07-293-72/+29
| * X.509: x509_request_asymmetric_keys() doesn't need string length argumentsDavid Howells2014-07-281-6/+3
| * PKCS#7: fix sparse non static symbol warningWei Yongjun2014-07-281-1/+1
* | Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-08-028-274/+366
|\ \
| * | netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore2014-08-018-157/+139
| * | netlabel: fix the catmap walking functionsPaul Moore2014-08-011-48/+54
| * | netlabel: fix the horribly broken catmap functionsPaul Moore2014-08-015-146/+240
| * | netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore2014-08-014-16/+26
* | | tpm: simplify code by using %*phN specifierAndy Shevchenko2014-07-291-3/+1
* | | tpm: Provide a generic means to override the chip returned timeoutsJason Gunthorpe2014-07-293-21/+75
* | | tpm: missing tpm_chip_put in tpm_get_random()Jarkko Sakkinen2014-07-291-3/+4
* | | tpm: Properly clean sysfs entries in error pathStefan Berger2014-07-291-1/+3
* | | tpm: Add missing tpm_do_selftest to ST33 I2C driverJason Gunthorpe2014-07-291-0/+1
* | | Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-07-302-15/+3
|\ \ \ | |_|/ |/| |
| * | Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore2014-07-282-15/+3
* | | KEYS: revert encrypted key changeMimi Zohar2014-07-281-1/+1
* | | Merge tag 'fw-restrict-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git...James Morris2014-07-2611-8/+104
|\ \ \
| * | | ima: add support for measuring and appraising firmwareMimi Zohar2014-07-258-5/+50
| * | | firmware_class: perform new LSM checksKees Cook2014-07-251-4/+26
| * | | security: introduce kernel_fw_from_file hookKees Cook2014-07-253-0/+29
* | | | Merge tag 'keys-next-20140725' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2014-07-261-0/+1
|\ \ \ \ | |/ / / |/| | |
| * | | PKCS#7: Missing inclusion of linux/err.hDavid Howells2014-07-251-0/+1
* | | | CAPABILITIES: remove undefined caps from all processesEric Paris2014-07-245-12/+13
* | | | Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2014-07-2448-217/+3025
|\| | |
| * | | Merge branch 'keys-fixes' into keys-nextDavid Howells2014-07-226-3/+20
| |\ \ \
| | * | | digsig: make crypto builtin if digsig selected as builtinDmitry Kasatkin2014-07-171-1/+2
| | * | | RSA: Don't select non-existent symbolJean Delvare2014-07-171-1/+0
| | * | | KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells2014-07-174-1/+18
| * | | | Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells2014-07-2213-25/+225
| |\ \ \ \
| | * | | | ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar2014-07-175-2/+63
| | * | | | KEYS: validate certificate trust only with builtin keysDmitry Kasatkin2014-07-174-4/+9
| | * | | | KEYS: validate certificate trust only with selected keyDmitry Kasatkin2014-07-173-0/+25
| | * | | | KEYS: make partial key id matching as a dedicated functionDmitry Kasatkin2014-07-172-19/+33
| | * | | | KEYS: verify a certificate is signed by a 'trusted' keyMimi Zohar2014-07-172-2/+95
| | * | | | KEYS: special dot prefixed keyring name bug fixMimi Zohar2014-07-171-2/+4