summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
* apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
* apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
* apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
* apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
* apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
* apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
* apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
* apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
* apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
* apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
* apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36
* apparmor: fix disconnected bind mnts reconnectionJohn Johansen2016-07-121-1/+4
* apparmor: fix update the mtime of the profile file on replacementJohn Johansen2016-07-121-0/+2
* apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
* apparmor: fix uninitialized lsm_audit memberJohn Johansen2016-07-122-2/+4
* apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
* apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
* Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-092-2/+2
|\
| * KEYS: Strip trailing spacesDavid Howells2016-06-142-2/+2
* | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-081-0/+3
|\ \
| * | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| |/
* | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-077-64/+73
|\ \
| * | calipso: Add a label cache.Huw Davies2016-06-271-3/+6
| * | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-274-8/+10
| * | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-271-0/+15
| * | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-271-1/+1
| * | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| * | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-271-1/+1
| * | selinux: fix type mismatchHeinrich Schuchardt2016-06-151-1/+1
| * | selinux: import NetLabel category bitmaps correctlyPaul Moore2016-06-091-1/+1
| * | selinux: Only apply bounds checking to source typesStephen Smalley2016-05-311-48/+22
* | | ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
* | | ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
* | | ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
* | | ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4
* | | ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
* | | ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
* | | ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
* | | integrity: add measured_pcrs field to integrity cacheEric Richter2016-06-302-0/+3
| |/ |/|
* | security: tomoyo: simplify the gc kthread creationMike Danese2016-06-061-7/+2
* | LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler2016-06-061-4/+25
* | KEYS: Add placeholder for KDF usage with DHStephan Mueller2016-06-034-6/+13
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2016-05-271-1/+1
|\ \
| * | switch ->setxattr() to passing dentry and inode separatelyAl Viro2016-05-271-1/+1
* | | Yama: fix double-spinlock and user access in atomic contextJann Horn2016-05-261-6/+63
|/ /
* | security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko2016-05-201-12/+2
* | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-05-1934-185/+909
|\|
| * LSM: LoadPin: provide enablement CONFIGKees Cook2016-05-172-6/+15
| * Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-05-065-60/+127
| |\