summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* LSM: Remove security_task_create() hook.Tetsuo Handa2017-07-184-22/+0
* apparmor: put back designators in struct initialisersStephen Rothwell2017-06-281-2/+2
* Merge tag 'seccomp-next' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris2017-06-272-25/+42
|\
| * seccomp: Switch from atomic_t to recount_tKees Cook2017-06-261-5/+5
| * seccomp: Adjust selftests to avoid double-joinKees Cook2017-06-261-17/+34
| * seccomp: Clean up core dump logicKees Cook2017-06-261-3/+3
* | Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2017-06-2331-129/+2028
|\ \
| * | selinux: enable genfscon labeling for tracefsJeff Vander Stoep2017-06-201-0/+1
| * | security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew2017-06-095-8/+63
| * | selinux: use kmem_cache for ebitmapJunil Lee2017-06-093-6/+27
| * | selinux: use pernet operations for hook registrationFlorian Westphal2017-06-021-4/+20
| * | selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens2017-05-235-3/+288
| * | selinux: Add IB Port SMP access vectorDaniel Jurgens2017-05-236-0/+83
| * | selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens2017-05-236-0/+84
| * | selinux: Allocate and free infiniband security hooksDaniel Jurgens2017-05-232-1/+29
| * | selinux: Create policydb version for Infiniband supportDaniel Jurgens2017-05-233-24/+118
| * | IB/core: Enforce security on management datagramsDaniel Jurgens2017-05-237-8/+195
| * | selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens2017-05-235-0/+109
| * | IB/core: Enforce PKey security on QPsDaniel Jurgens2017-05-2312-9/+907
| * | IB/core: IB cache enhancements to support Infiniband securityDaniel Jurgens2017-05-233-0/+26
| * | selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke2017-05-231-16/+0
| * | selinux: log policy capability state when a policy is loadedStephen Smalley2017-05-233-11/+27
| * | selinux: do not check open permission on socketsStephen Smalley2017-05-231-3/+7
| * | selinux: add a map permission check for mmapStephen Smalley2017-05-232-1/+13
| * | selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley2017-05-231-8/+15
| * | selinux: Return an error code only as a constant in sidtab_insert()Markus Elfring2017-05-231-17/+10
| * | selinux: Return directly after a failed memory allocation in policydb_index()Markus Elfring2017-05-231-10/+5
| * | selinux: Use task_alloc hook rather than task_create hookTetsuo Handa2017-05-231-2/+3
* | | IMA: update IMA policy documentation to include pcr= optionEric Richter2017-06-211-1/+7
* | | ima: Log the same audit cause whenever a file has no signatureThiago Jung Bauermann2017-06-211-1/+2
* | | ima: Simplify policy_func_show.Thiago Jung Bauermann2017-06-212-62/+21
* | | integrity: Small code improvementsThiago Jung Bauermann2017-06-216-9/+11
* | | ima: fix get_binary_runtime_size()Roberto Sassu2017-06-211-1/+1
* | | ima: use ima_parse_buf() to parse template dataRoberto Sassu2017-06-211-31/+13
* | | ima: use ima_parse_buf() to parse measurements headersRoberto Sassu2017-06-211-52/+28
* | | ima: introduce ima_parse_buf()Roberto Sassu2017-06-212-0/+67
* | | ima: Add cgroups2 to the defaults listLaura Abbott2017-06-211-0/+3
* | | ima: use memdup_user_nulGeliang Tang2017-06-211-9/+4
* | | ima: fix up #endif commentsTycho Andersen2017-06-211-2/+2
* | | IMA: Correct Kconfig dependencies for hash selectionBen Hutchings2017-06-211-4/+4
* | | ima: define is_ima_appraise_enabled()Mimi Zohar2017-06-212-0/+16
* | | ima: define Kconfig IMA_APPRAISE_BOOTPARAM optionMimi Zohar2017-06-212-0/+10
* | | ima: define a set of appraisal rules requiring file signaturesMimi Zohar2017-06-212-2/+30
* | | ima: extend the "ima_policy" boot command line to support multiple policiesMimi Zohar2017-06-212-11/+21
* | | Merge branch 'smack-for-4.13' of git://github.com/cschaufler/smack-next into ...James Morris2017-06-214-18/+31
|\ \ \
| * | | Smack: Use cap_capable in privilege checkCasey Schaufler2017-06-012-9/+12
| * | | Smack: Safer check for a socket in file_receiveCasey Schaufler2017-06-011-1/+1
| * | | smack: use pernet operations for hook registrationFlorian Westphal2017-06-011-8/+18
| |/ /
* | | tpm/tpm_atmel: remove unnecessary NULL checkGustavo A. R. Silva2017-06-191-7/+5
* | | tpm/st33zp24: Switch to devm_acpi_dev_add_driver_gpios()Andy Shevchenko2017-06-192-4/+2