summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats2016-01-221-0/+1
* KEYS: Fix race between read and revokeDavid Howells2016-01-221-9/+9
* KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells2016-01-221-2/+4
* KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells2016-01-221-4/+4
* ima: extend "mask" policy matching supportMimi Zohar2015-08-161-5/+15
* ima: add support for new "euid" policy conditionMimi Zohar2015-08-161-4/+23
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-08-031-0/+12
* ima: fix ima_show_template_data_ascii()Mimi Zohar2015-08-033-4/+5
* KEYS: ensure we free the assoc array edit if edit is validColin Ian King2015-08-031-3/+5
* move d_rcu from overlapping d_child to overlapping d_aliasAl Viro2015-04-291-3/+3
* selinux: fix sel_write_enforce broken return valueJoe Perches2015-04-191-1/+1
* KEYS: close race between key lookup and freeingSasha Levin2015-01-291-2/+2
* KEYS: Fix stale key registration at error pathTakashi Iwai2015-01-081-1/+4
* selinux: fix inode security list corruptionStephen Smalley2014-11-141-1/+1
* evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-11-141-3/+6
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-11-141-0/+7
* ima: provide flag to identify new empty filesDmitry Kasatkin2014-10-303-7/+13
* CAPABILITIES: remove undefined caps from all processesEric Paris2014-09-171-0/+3
* evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-261-2/+10
* ima: introduce ima_kernel_read()Dmitry Kasatkin2014-06-261-1/+31
* ima: audit log files opened with O_DIRECT flagMimi Zohar2014-06-264-3/+19
* device_cgroup: check if exception removal is allowedAristeu Rozanski2014-06-071-3/+38
* device_cgroup: rework device access check and exception checkingAristeu Rozanski2014-06-071-40/+122
* ima: restore the original behavior for sending data with ima templateRoberto Sassu2014-04-263-4/+10
* selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore2014-04-141-9/+27
* Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller2014-03-188-29/+46
|\
| * selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov2014-03-108-29/+46
* | KEYS: Make the keyring cycle detector ignore other keyrings of the same nameDavid Howells2014-03-091-1/+5
|/
* Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-02-241-4/+4
|\
| * SELinux: bigendian problems with filename trans rulesEric Paris2014-02-201-4/+4
* | Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-02-102-0/+6
|\|
| * SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley2014-02-051-0/+4
| * selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message typesPaul Moore2014-02-051-0/+2
| * Merge tag 'v3.13' into stable-3.14Paul Moore2014-02-0554-1239/+2802
| |\
* | | security: select correct default LSM_MMAP_MIN_ADDR on arm on arm64Colin Cross2014-02-051-1/+1
* | | Merge git://git.infradead.org/users/eparis/auditLinus Torvalds2014-01-232-11/+6
|\ \ \
| * | | smack: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs2014-01-131-3/+2
| * | | selinux: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs2014-01-131-8/+4
| * | | Merge tag 'v3.12'Eric Paris2013-11-2233-619/+1720
| |\ \ \
* | \ \ \ Merge branch 'for-3.14' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds2014-01-211-4/+3
|\ \ \ \ \
| * | | | | cgroup: replace cftype->read_seq_string() with cftype->seq_show()Tejun Heo2013-12-051-4/+3
* | | | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2014-01-2111-148/+366
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | |
| * | | | | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-01-081-1/+13
| |\ \ \ \ \ | | | |_|_|/ | | |/| | |
| | * | | | SELinux: Fix memory leak upon loading policyTetsuo Handa2014-01-071-1/+13
| * | | | | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-01-077-39/+164
| |\| | | |
| | * | | | selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-161-2/+2
| | * | | | SELinux: remove duplicated include from hooks.cWei Yongjun2013-12-161-1/+0
| | * | | | selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2013-12-132-60/+22
| | * | | | selinux: fix broken peer recv checkChad Hanson2013-12-111-1/+3
| | * | | | selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-101-7/+35