summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* ima: Avoid blocking in RCU read-side critical sectionGUO Zihua2024-07-182-3/+6
* lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore2024-03-151-7/+6
* lsm: new security_file_ioctl_compat() hookAlfred Piccioni2024-02-231-0/+28
* selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün2024-01-251-0/+7
* selinux: set next pointer before attaching to listChristian Göttsche2023-08-301-1/+1
* selinux: don't use make's grouped targets feature yetPaul Moore2023-06-091-1/+5
* selinux: ensure av_permissions.h is built when neededPaul Moore2023-05-171-1/+1
* selinux: fix Makefile dependencies of flask.hOndrej Mosnacek2023-05-171-2/+2
* selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi2022-10-303-5/+6
* selinux: Add boundary check in put_entry()Xiu Jianfeng2022-08-211-0/+2
* lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore2022-06-093-9/+10
* include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakageEugene Syromiatnikov2022-05-251-1/+3
* selinux: fix bad cleanup on error in hashtab_duplicate()Ondrej Mosnacek2022-05-251-1/+2
* selinux: allow FIOCLEX and FIONCLEX with policy capabilityRichard Haines2022-04-084-1/+16
* selinux: use correct type for context lengthChristian Göttsche2022-04-081-1/+1
* LSM: general protection fault in legacy_parse_paramCasey Schaufler2022-04-081-3/+2
* selinux: check return value of sel_make_avc_filesChristian Göttsche2022-04-081-0/+2
* selinux: fix double free of cond_list on error pathsVratislav Bendel2022-02-081-1/+2
* selinux: fix potential memleak in selinux_add_opt()Bernard Zhao2022-01-271-2/+10
* selinux: initialize proto variable in selinux_ip_postroute_compat()Tom Rix2022-01-051-1/+1
* selinux: fix NULL-pointer dereference when hashtab allocation failsOndrej Mosnacek2021-11-261-5/+12
* selinux: fix race condition when computing ocontext SIDsOndrej Mosnacek2021-11-181-85/+77
* binder: use cred instead of task for selinux checksTodd Kjos2021-11-181-21/+15
* selinux: correct the return value when loads initial sidsXiu Jianfeng2021-08-121-6/+4
* selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim2021-07-191-6/+7
* selinux: add proper NULL termination to the secclass_map permissionsPaul Moore2021-05-141-2/+3
* selinux: fix race between old and new sidtabOndrej Mosnacek2021-04-143-37/+145
* selinux: fix cond_list corruption when changing booleansOndrej Mosnacek2021-04-143-69/+33
* selinux: make nslot handling in avtab more robustOndrej Mosnacek2021-04-141-10/+11
* selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek2021-03-303-33/+55
* selinux: don't log MAC_POLICY_LOAD record on failed policy loadOndrej Mosnacek2021-03-301-2/+1
* selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein2021-03-041-0/+4
* selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handlingPaul Moore2020-12-301-18/+13
* selinux: fix error initialization in inode_doinit_with_dentry()Tianyue Ren2020-12-301-3/+16
* Merge tag 'selinux-pr-20201113' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2020-11-141-1/+3
|\
| * selinux: Fix error return code in sel_ib_pkey_sid_slow()Chen Zhou2020-11-121-1/+3
* | Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2020-10-151-3/+5
|\ \
| * | LSM: Add "contents" flag to kernel_read_file hookKees Cook2020-10-051-2/+3
| * | LSM: Introduce kernel_post_load_data() hookKees Cook2020-10-051-1/+1
| * | fs/kernel_read_file: Split into separate include fileScott Branden2020-10-051-0/+1
* | | Merge tag 'selinux-pr-20201012' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2020-10-1317-498/+1068
|\ \ \ | |/ / |/| / | |/
| * selinux: Add helper functions to get and set checkreqprotLakshmi Ramasubramanian2020-09-153-5/+16
| * selinux: access policycaps with READ_ONCE/WRITE_ONCEStephen Smalley2020-09-112-8/+9
| * selinux: simplify away security_policydb_len()Ondrej Mosnacek2020-08-313-30/+10
| * selinux: move policy mutex to selinux_state, use in lockdep checksStephen Smalley2020-08-274-43/+22
| * selinux: fix error handling bugs in security_load_policy()Dan Carpenter2020-08-261-11/+23
| * selinux: convert policy read-write lock to RCUStephen Smalley2020-08-254-218/+280
| * selinux: delete repeated words in commentsRandy Dunlap2020-08-241-3/+3
| * selinux: add basic filtering for audit trace eventsPeter Enderborg2020-08-211-13/+15
| * selinux: add tracepoint on audited eventsThiébaud Weksteen2020-08-211-0/+5