summaryrefslogtreecommitdiffstats
path: root/security/selinux/hooks.c
Commit message (Expand)AuthorAgeFilesLines
* selinux: never allow relabeling on context mountsOndrej Mosnacek2019-05-081-9/+31
* selinux: do not override context on context mountsOndrej Mosnacek2019-04-051-1/+8
* security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblockJ. Bruce Fields2019-03-231-1/+4
* selinux: always allow mounting submountsOndrej Mosnacek2019-01-261-1/+1
* Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2017-09-121-17/+37
|\
| * selinux: constify nf_hook_opsArvind Yadav2017-08-281-1/+1
| * selinux: allow per-file labeling for cgroupfsAntonio Murdaca2017-08-221-1/+3
| * selinux: update my email addressStephen Smalley2017-08-171-1/+1
| * selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley2017-08-021-15/+32
| * selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel2017-07-251-0/+1
* | Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds2017-09-071-20/+6
|\ \
| * | selinux: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-19/+5
| * | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-011-1/+1
| |/
* / netfilter: nf_hook_ops structs can be constFlorian Westphal2017-07-311-1/+1
|/
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-07-051-36/+176
|\
| * selinux: enable genfscon labeling for tracefsJeff Vander Stoep2017-06-201-0/+1
| * security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew2017-06-091-2/+33
| * selinux: use pernet operations for hook registrationFlorian Westphal2017-06-021-4/+20
| * selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens2017-05-231-2/+5
| * selinux: Add IB Port SMP access vectorDaniel Jurgens2017-05-231-0/+25
| * selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens2017-05-231-0/+22
| * selinux: Allocate and free infiniband security hooksDaniel Jurgens2017-05-231-1/+24
| * selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens2017-05-231-0/+11
| * selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke2017-05-231-16/+0
| * selinux: do not check open permission on socketsStephen Smalley2017-05-231-3/+7
| * selinux: add a map permission check for mmapStephen Smalley2017-05-231-0/+12
| * selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley2017-05-231-8/+15
| * selinux: Use task_alloc hook rather than task_create hookTetsuo Handa2017-05-231-2/+3
* | selinux: fix double free in selinux_parse_opts_str()Paul Moore2017-06-131-3/+2
|/
* selinux: check for address length in selinux_socket_bind()Alexander Potapenko2017-03-101-0/+8
* security: mark LSM hooks as __ro_after_initJames Morris2017-03-061-1/+1
* selinux: fix kernel BUG on prlimit(..., NULL, NULL)Stephen Smalley2017-03-061-0/+2
* prlimit,security,selinux: add a security hook for prlimitStephen Smalley2017-03-061-0/+14
* Merge branch 'WIP.sched-core-for-linus' of git://git.kernel.org/pub/scm/linux...Linus Torvalds2017-03-031-1/+2
|\
| * sched/headers: Prepare for new header dependencies before moving code to <lin...Ingo Molnar2017-03-021-0/+1
| * sched/headers: Prepare for new header dependencies before moving code to <lin...Ingo Molnar2017-03-021-1/+1
* | selinux: wrap cgroup seclabel support with its own policy capabilityStephen Smalley2017-03-021-3/+4
|/
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2017-02-231-2/+1
|\
| * exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman2017-01-241-2/+1
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2017-02-221-2/+5
|\ \
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2017-02-111-1/+1
| |\ \
| | * | selinux: fix off-by-one in setprocattrStephen Smalley2017-02-081-1/+1
| | |/
| * / Introduce a sysctl that modifies the value of PROT_SOCK.Krister Johansen2017-01-241-1/+2
| |/
* | Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2017-02-101-191/+188
|\ \
| * | selinux: allow changing labels for cgroupfsAntonio Murdaca2017-02-071-0/+2
| * | security,selinux,smack: kill security_task_wait hookStephen Smalley2017-01-121-7/+0
| * | selinux: drop unused socket security classesStephen Smalley2017-01-121-6/+0
| * | proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley2017-01-091-12/+1
| * | selinux: clean up cred usage and simplifyStephen Smalley2017-01-091-177/+117
| * | selinux: allow context mounts on tmpfs, ramfs, devpts within user namespacesStephen Smalley2017-01-091-3/+7