summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* CAPABILITIES: remove undefined caps from all processesEric Paris2014-09-171-0/+3
* evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-261-2/+10
* ima: introduce ima_kernel_read()Dmitry Kasatkin2014-06-261-1/+31
* selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore2014-04-141-9/+27
* SELinux: bigendian problems with filename trans rulesEric Paris2014-03-061-4/+4
* SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley2014-02-201-0/+4
* SELinux: Fix memory leak upon loading policyTetsuo Handa2014-02-131-1/+13
* SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2014-01-252-3/+22
* selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2014-01-091-7/+36
* selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2014-01-093-16/+48
* selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2014-01-091-2/+2
* selinux: fix broken peer recv checkChad Hanson2014-01-091-1/+3
* selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-201-15/+53
* selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-201-2/+23
* selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore2013-12-041-4/+2
* Revert "ima: policy for RAMFS"Mimi Zohar2013-11-291-1/+0
* selinux: fix the labeled xfrm/IPsec reference count handlingPaul Moore2013-05-311-20/+14
* aio: don't include aio.h in sched.hKent Overstreet2013-05-072-0/+3
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2013-05-013-8/+4
|\
| * tomoyo_close_control: don't bother with return valueAl Viro2013-04-293-8/+4
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2013-05-012-4/+3
|\ \
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2013-04-223-0/+18
| |\ \
| * \ \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2013-04-011-3/+1
| |\ \ \
| * | | | selinux: replace obsolete NLMSG_* with type safe nlmsg_*Hong zhi guo2013-03-282-4/+3
| | |_|/ | |/| |
* | | | Merge branch 'akpm' (incoming from Andrew)Linus Torvalds2013-04-301-3/+10
|\ \ \ \
| * | | | KEYS: split call to call_usermodehelper_fns()Lucas De Marchi2013-04-301-3/+10
* | | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2013-04-309-108/+222
|\ \ \ \ \ | |/ / / / |/| | | |
| * | | | ima: eliminate passing d_name.name to process_measurement()Mimi Zohar2013-04-171-9/+5
| * | | | Smack: include magic.h in smackfs.cCasey Schaufler2013-04-031-0/+1
| * | | | selinux: make security_sb_clone_mnt_opts return an error on context mismatchJeff Layton2013-04-023-7/+39
| * | | | Fix NULL pointer dereference in smack_inode_unlink() and smack_inode_rmdir()Igor Zhbanov2013-03-191-2/+2
| * | | | Smack: add support for modification of existing rulesRafal Krypa2013-03-191-79/+170
| * | | | smack: SMACK_MAGIC to include/uapi/linux/magic.hJarkko Sakkinen2013-03-191-5/+0
| * | | | Smack: add missing support for transmute bit in smack_str_from_perm()Rafal Krypa2013-03-191-0/+2
| * | | | Smack: prevent revoke-subject from failing when unseen label is written to itRafal Krypa2013-03-191-3/+1
| * | | | tomoyo: use DEFINE_SRCU() to define tomoyo_ssLai Jiangshan2013-03-181-3/+2
* | | | | Merge branch 'for-3.10' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds2013-04-291-56/+211
|\ \ \ \ \ | |_|_|_|/ |/| | | |
| * | | | devcg: remove parent_cgroup.Rami Rosen2013-04-181-2/+0
| * | | | devcg: remove broken_hierarchy tagTejun Heo2013-04-081-9/+0
| * | | | devcg: propagate local changes down the hierarchyAristeu Rozanski2013-03-201-7/+132
| * | | | devcg: use css_online and css_offlineAristeu Rozanski2013-03-201-17/+42
| * | | | devcg: prepare may_access() for hierarchy supportAristeu Rozanski2013-03-201-18/+31
| * | | | devcg: expand may_access() logicAristeu Rozanski2013-03-201-9/+12
* | | | | selinux: add a skb_owned_by() hookEric Dumazet2013-04-093-0/+18
| |_|_|/ |/| | |
* | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2013-03-281-3/+1
|\ \ \ \ | |_|_|/ |/| | |
| * | | yama: Better permission check for ptracemeEric W. Biederman2013-03-261-3/+1
* | | | selinux: use GFP_ATOMIC under spin_lockDan Carpenter2013-03-191-1/+1
|/ / /
* | | Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and securit...Mathieu Desnoyers2013-03-121-2/+2
* | | keys: fix race with concurrent install_user_keyrings()David Howells2013-03-121-1/+1
| |/ |/|
* | userns: Stop oopsing in key_change_session_keyringEric W. Biederman2013-03-031-1/+1
|/