summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* selinux: initialize proto variable in selinux_ip_postroute_compat()Tom Rix2022-01-051-1/+1
* binder: use cred instead of task for selinux checksTodd Kjos2021-11-261-18/+13
* selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim2021-07-201-6/+7
* selinux: sel_avc_get_stat_idx should increase position indexVasily Averin2020-10-011-0/+1
* selinux: fix double freeTom Rix2020-06-291-0/+4
* selinux: properly handle multiple messages in selinux_netlink_send()Paul Moore2020-05-051-24/+45
* selinux: ensure we cleanup the internal AVC counters on error in avc_update()Jaihind Yadav2020-02-281-1/+1
* selinux: fix memory leak in policydb_init()Ondrej Mosnacek2019-08-061-1/+5
* selinux: never allow relabeling on context mountsOndrej Mosnacek2019-05-161-9/+31
* selinux: fix GPF on invalid policyStephen Smalley2019-01-261-1/+2
* selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko2018-09-191-8/+6
* selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover2018-06-061-1/+1
* selinux: do not check open permission on socketsStephen Smalley2018-04-131-3/+7
* selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke2018-04-081-16/+0
* selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke2018-04-081-1/+1
* selinux: check for address length in selinux_socket_bind()Alexander Potapenko2018-03-221-0/+8
* selinux: skip bounded transition processing if the policy isn't loadedPaul Moore2018-02-251-0/+3
* selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore2018-02-251-10/+8
* selinux: general protection fault in sock_has_permMark Salyzyn2018-02-031-0/+2
* selinux: fix off-by-one in setprocattrStephen Smalley2017-02-141-1/+1
* Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris2015-11-261-2/+2
|\
| * selinux: fix bug in conditional rules handlingStephen Smalley2015-11-241-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2015-11-102-5/+3
|\ \
| * | net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid()Eric Dumazet2015-11-082-15/+3
| * | selinux: fix random read in selinux_ip_postroute_compat()Eric Dumazet2015-11-051-4/+14
* | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2015-11-055-45/+36
|\ \ \ | |/ / |/| / | |/
| * selinux: Use a kmem_cache for allocation struct file_security_structSangwoo2015-10-211-2/+6
| * selinux: ioctl_has_perm should be staticGeliang Tang2015-10-211-1/+1
| * selinux: use sprintf return valueRasmus Villemoes2015-10-211-4/+1
| * selinux: use kstrdup() in security_get_bools()Rasmus Villemoes2015-10-211-7/+1
| * selinux: use kmemdup in security_sid_to_context_core()Rasmus Villemoes2015-10-211-2/+2
| * selinux: remove pointless cast in selinux_inode_setsecurity()Rasmus Villemoes2015-10-211-1/+1
| * selinux: introduce security_context_str_to_sidRasmus Villemoes2015-10-214-25/+20
| * selinux: do not check open perm on ftruncate callJeff Vander Stoep2015-10-211-1/+2
| * selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE defaultPaul Moore2015-10-211-2/+2
* | Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2015-10-171-4/+8
|\ \
| * | net: synack packets can be attached to request socketsEric Dumazet2015-10-111-4/+8
* | | netfilter: remove hook owner refcountingFlorian Westphal2015-10-161-5/+0
|/ /
* / netfilter: Pass priv instead of nf_hook_ops to netfilter hooksEric W. Biederman2015-09-181-5/+5
|/
* mm: mark most vm_operations_struct constKirill A. Shutemov2015-09-101-1/+1
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2015-09-0811-110/+892
|\
| * Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2015-08-1511-110/+892
| |\
| | * selinux: Create a common helper to determine an inode label [ver #3]David Howells2015-07-131-46/+41
| | * selinux: Augment BUG_ON assertion for secclass_map.Stephen Smalley2015-07-131-1/+2
| | * selinux: initialize sock security class to default valueStephen Smalley2015-07-131-0/+1
| | * selinux: reduce locking overhead in inode_free_security()Waiman Long2015-07-131-3/+14
| | * selinux: extended permissions for ioctlsJeff Vander Stoep2015-07-1311-60/+834
* | | fs: create and use seq_show_option for escapingKees Cook2015-09-041-1/+1
|/ /
* | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris2015-07-112-1/+8
|\|
| * selinux: fix mprotect PROT_EXEC regression caused by mm changeStephen Smalley2015-07-101-1/+2