summaryrefslogtreecommitdiffstats
path: root/security/selinux/hooks.c
Commit message (Expand)AuthorAgeFilesLines
* selinux: reject setexeccon() on MNT_NOSUID applications with -EACCESPaul Moore2014-06-031-2/+4
* selinux: Report permissive mode in avc: denied messages.Stephen Smalley2014-06-031-2/+3
* Merge tag 'keys-20140314' of git://git.kernel.org/pub/scm/linux/kernel/git/dh...James Morris2014-04-141-1/+1
|\
| * KEYS: Move the flags representing required permission to linux/key.hDavid Howells2014-03-141-1/+1
* | Merge commit 'v3.14' into nextJames Morris2014-04-141-8/+25
|\ \
| * | selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov2014-03-101-6/+7
| |/
| * Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2014-01-211-6/+1
| |\
| * | SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2014-01-121-2/+18
* | | selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore2014-03-191-9/+27
* | | selinux: put the mmap() DAC controls before the MAC controlsPaul Moore2014-03-191-12/+8
* | | security: replace strict_strto*() with kstrto*()Jingoo Han2014-02-061-2/+2
| |/ |/|
* | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-01-071-6/+1
|\ \ | |/ |/|
| * selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-161-2/+2
| * SELinux: remove duplicated include from hooks.cWei Yongjun2013-12-161-1/+0
| * selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2013-12-131-22/+18
| * selinux: fix broken peer recv checkChad Hanson2013-12-111-1/+3
| * selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-101-7/+35
| * selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-091-1/+1
| * selinux: pull address family directly from the request_sock structPaul Moore2013-12-041-5/+1
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-041-15/+53
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-041-2/+23
| * Merge tag 'v3.12'Paul Moore2013-11-081-19/+13
| |\
* | | selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-231-2/+2
* | | selinux: fix broken peer recv checkChad Hanson2013-12-231-1/+3
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2013-12-151-25/+112
|\ \ \
| * \ \ Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris2013-12-131-25/+112
| |\ \ \
| | * | | selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-121-7/+35
| | * | | selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-121-1/+1
| | * | | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-121-15/+53
| | * | | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-121-2/+23
| | * | | Merge tag 'v3.12'Paul Moore2013-11-261-19/+13
| | |\ \ \ | | | |/ / | | |/| / | | | |/
* | | / Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2013-12-151-22/+18
|/ / /
* | | Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds2013-11-211-52/+94
|\ \ \
| * | | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris2013-10-221-52/+94
| |\| |
| | * | Merge git://git.infradead.org/users/eparis/selinuxPaul Moore2013-09-181-52/+94
| | |\ \
| | | * | Revert "SELinux: do not handle seclabel as a special flag"Eric Paris2013-08-281-0/+3
| | | * | selinux: consider filesystem subtype in policiesAnand Avati2013-08-281-18/+22
| | | * | Add SELinux policy capability for always checking packet and peer classes.Chris PeBenito2013-07-251-5/+21
| | | * | SELinux: use a helper function to determine seclabelEric Paris2013-07-251-14/+24
| | | * | SELinux: pass a superblock to security_fs_useEric Paris2013-07-251-1/+1
| | | * | SELinux: do not handle seclabel as a special flagEric Paris2013-07-251-3/+0
| | | * | SELinux: do all flags twiddling in one placeEric Paris2013-07-251-7/+5
| | | * | SELinux: rename SE_SBLABELSUPP to SBLABEL_MNTEric Paris2013-07-251-14/+14
| | | * | SELinux: use define for number of bits in the mnt flags maskEric Paris2013-07-251-1/+4
| | | * | SELinux: make it harder to get the number of mnt opts wrongEric Paris2013-07-251-2/+3
| | | * | SELinux: remove crazy contortions around procEric Paris2013-07-251-1/+1
| | | * | SELinux: Enable setting security contexts on rootfs inodes.Stephen Smalley2013-07-251-0/+7
| | | * | selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()Paul Moore2013-07-251-2/+6
| | | * | lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore2013-07-251-1/+2
* | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2013-10-231-8/+7
|\ \ \ \ \ | | |_|_|/ | |/| | |