summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-07-2936-195/+345
|\
| * apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann2016-07-273-3/+7
| * apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen2016-07-121-1/+1
| * apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum2016-07-121-17/+19
| * apparmor: do not expose kernel stackHeinrich Schuchardt2016-07-121-1/+3
| * apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-123-13/+29
| * apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2016-07-121-0/+3
| * apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2016-07-121-5/+5
| * apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
| * apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
| * apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
| * apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
| * apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
| * apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
| * apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
| * apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
| * apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
| * apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
| * apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
| * apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36
| * apparmor: fix disconnected bind mnts reconnectionJohn Johansen2016-07-121-1/+4
| * apparmor: fix update the mtime of the profile file on replacementJohn Johansen2016-07-121-0/+2
| * apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
| * apparmor: fix uninitialized lsm_audit memberJohn Johansen2016-07-122-2/+4
| * apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
| * apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
| * Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-092-2/+2
| |\
| | * KEYS: Strip trailing spacesDavid Howells2016-06-142-2/+2
| * | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-081-0/+3
| |\ \
| | * | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| | |/
| * | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-077-64/+73
| |\ \
| | * | calipso: Add a label cache.Huw Davies2016-06-271-3/+6
| | * | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-274-8/+10
| | * | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-271-0/+15
| | * | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-271-1/+1
| | * | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| | * | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-271-1/+1
| | * | selinux: fix type mismatchHeinrich Schuchardt2016-06-151-1/+1
| | * | selinux: import NetLabel category bitmaps correctlyPaul Moore2016-06-091-1/+1
| | * | selinux: Only apply bounds checking to source typesStephen Smalley2016-05-311-48/+22
| * | | ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
| * | | ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
| * | | ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
| * | | ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4
| * | | ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
| * | | ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
| * | | ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
| * | | integrity: add measured_pcrs field to integrity cacheEric Richter2016-06-302-0/+3
| | |/ | |/|
| * | security: tomoyo: simplify the gc kthread creationMike Danese2016-06-061-7/+2
| * | LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler2016-06-061-4/+25