summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISEAndy Lutomirski2015-09-041-1/+2
* capabilities: ambient capabilitiesAndy Lutomirski2015-09-042-10/+93
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2015-09-011-1/+1
|\
| * vfs: Commit to never having exectuables on proc and sysfs.Eric W. Biederman2015-07-101-1/+1
* | Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2015-08-311-3/+3
|\ \
| * \ Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/pau...Ingo Molnar2015-08-121-3/+3
| |\ \
| | * | rcu: Rename rcu_lockdep_assert() to RCU_LOCKDEP_WARN()Paul E. McKenney2015-07-221-3/+3
| | |/
* | / LSM: restore certain default error codesJan Beulich2015-08-261-5/+6
|/ /
* | Adding YAMA hooks also when YAMA is not stacked.Salvatore Mesoraca2015-08-041-0/+1
* | KEYS: ensure we free the assoc array edit if edit is validColin Ian King2015-07-281-3/+5
* | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris2015-07-112-1/+8
|\ \ | |/ |/|
| * selinux: fix mprotect PROT_EXEC regression caused by mm changeStephen Smalley2015-07-101-1/+2
| * selinux: don't waste ebitmap space when importing NetLabel categoriesPaul Moore2015-07-091-0/+6
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2015-07-041-13/+6
|\ \
| * | make simple_positive() publicAl Viro2015-06-231-13/+6
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2015-07-033-16/+13
|\ \ \
| * | | sysfs: Create mountpoints with sysfs_create_mount_pointEric W. Biederman2015-07-013-16/+13
* | | | Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2015-07-012-4/+4
|\ \ \ \
| * | | | kernel/params: constify struct kernel_param_ops usesLuis R. Rodriguez2015-05-282-4/+4
| |/ / /
* | | | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/auditLinus Torvalds2015-06-271-1/+1
|\ \ \ \
| * | | | lsm: rename duplicate labels in LSM_AUDIT_DATA_TASK audit message typeRichard Guy Briggs2015-05-291-1/+1
* | | | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2015-06-2728-2427/+1767
|\ \ \ \ \
| * | | | | ima: update builtin policiesMimi Zohar2015-06-161-9/+56
| * | | | | ima: extend "mask" policy matching supportMimi Zohar2015-06-161-5/+15
| * | | | | ima: add support for new "euid" policy conditionMimi Zohar2015-06-161-4/+23
| * | | | | ima: fix ima_show_template_data_ascii()Mimi Zohar2015-06-163-4/+5
| * | | | | Merge branch 'smack-for-4.2-stacked' of https://github.com/cschaufler/smack-n...James Morris2015-06-131-7/+9
| |\ \ \ \ \ | | |_|_|_|/ | |/| | | |
| | * | | | Smack: freeing an error pointer in smk_write_revoke_subj()Dan Carpenter2015-06-121-7/+9
| * | | | | selinux: fix setting of security labels on NFSJ. Bruce Fields2015-06-051-0/+1
| * | | | | selinux: Remove unused permission definitionsStephen Smalley2015-06-041-14/+8
| * | | | | selinux: enable genfscon labeling for sysfs and pstore filesStephen Smalley2015-06-041-1/+3
| * | | | | selinux: enable per-file labeling for debugfs files.Stephen Smalley2015-06-042-22/+22
| * | | | | selinux: update netlink socket classesStephen Smalley2015-06-042-10/+32
| * | | | | signals: don't abuse __flush_signals() in selinux_bprm_committed_creds()Oleg Nesterov2015-06-041-2/+4
| * | | | | selinux: Print 'sclass' as string when unrecognized netlink message occursMarek Milkovic2015-06-041-2/+3
| * | | | | Merge branch 'smack-for-4.2-stacked' of https://github.com/cschaufler/smack-n...James Morris2015-06-034-186/+314
| |\| | | |
| | * | | | Smack: allow multiple labels in onlycapRafal Krypa2015-06-023-69/+160
| | * | | | Smack: fix seq operations in smackfsRafal Krypa2015-06-021-30/+22
| | * | | | smack: pass error code through pointersLukasz Pawelczyk2015-05-153-97/+139
| | * | | | Smack: ignore private inode for smack_file_receiveSeung-Woo Kim2015-05-151-0/+3
| * | | | | ima: pass iint to ima_add_violation()Roberto Sassu2015-05-215-9/+13
| * | | | | ima: wrap event related data to the new ima_event_data structureRoberto Sassu2015-05-215-79/+61
| * | | | | integrity: add validity checks for 'path' parameterDmitry Kasatkin2015-05-213-2/+5
| * | | | | evm: fix potential race when removing xattrsDmitry Kasatkin2015-05-211-4/+3
| * | | | | evm: labeling pseudo filesystems exceptionMimi Zohar2015-05-211-0/+11
| * | | | | ima: remove definition of IMA_X509_PATHDmitry Kasatkin2015-05-211-7/+1
| * | | | | ima: limit file hash setting by user to fix and log modesDmitry Kasatkin2015-05-211-2/+6
| * | | | | ima: do not measure or appraise the NSFS filesystemMimi Zohar2015-05-211-0/+2
| * | | | | ima: skip measurement of cgroupfs files and update documentationRoberto Sassu2015-05-211-0/+2
| * | | | | ima: cleanup ima_init_policy() a littleDan Carpenter2015-05-131-10/+6
| |/ / / /