summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyringsEric Biggers2017-06-052-24/+31
* KEYS: Disallow keyrings beginning with '.' to be joined as session keyringsDavid Howells2017-06-051-2/+7
* KEYS: Reinstate EPERM for a key type name beginning with a '.'David Howells2017-06-051-0/+2
* KEYS: special dot prefixed keyring name bug fixMimi Zohar2017-06-051-2/+4
* KEYS: Fix an error code in request_master_key()Dan Carpenter2017-06-051-1/+1
* keys: Guard against null match function in keyring_search_aux()Ben Hutchings2017-04-041-3/+3
* vfs: Commit to never having exectuables on proc and sysfs.Eric W. Biederman2017-04-041-1/+1
* selinux: fix off-by-one in setprocattrStephen Smalley2017-02-261-1/+1
* apparmor: fix change_hat not finding hat after policy replacementJohn Johansen2017-02-231-2/+4
* KEYS: Fix short sprintf buffer in /proc/keys show functionDavid Howells2016-11-201-1/+1
* KEYS: potential uninitialized variableDan Carpenter2016-08-221-1/+1
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2016-02-161-1/+2
* KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats2016-01-251-0/+1
* KEYS: Fix race between read and revokeDavid Howells2016-01-051-9/+9
* KEYS: Don't permit request_key() to construct a new keyringDavid Howells2015-10-281-0/+3
* KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells2015-10-281-2/+4
* KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells2015-10-281-4/+4
* fs: create and use seq_show_option for escapingKees Cook2015-09-291-1/+1
* ima: extend "mask" policy matching supportMimi Zohar2015-08-271-5/+15
* ima: add support for new "euid" policy conditionMimi Zohar2015-08-271-4/+23
* sysfs: Create mountpoints with sysfs_create_mount_pointEric W. Biederman2015-08-203-16/+13
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-08-111-0/+12
* KEYS: ensure we free the assoc array edit if edit is validColin Ian King2015-08-111-3/+5
* ima: fix ima_show_template_data_ascii()Mimi Zohar2015-07-153-4/+5
* selinux: fix setting of security labels on NFSJ. Bruce Fields2015-07-151-1/+2
* selinux: fix sel_write_enforce broken return valueJoe Perches2015-04-101-1/+1
* smack: fix possible use after frees in task_security() callersAndrey Ryabinin2015-02-242-9/+21
* KEYS: close race between key lookup and freeingSasha Levin2015-01-151-2/+2
* move d_rcu from overlapping d_child to overlapping d_aliasAl Viro2015-01-151-3/+3
* KEYS: Fix stale key registration at error pathTakashi Iwai2015-01-151-1/+4
* selinux: fix inode security list corruptionStephen Smalley2014-11-171-1/+1
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-11-141-0/+7
* evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-11-131-3/+6
* ima: check xattr value length and type in the ima_inode_setxattr()Dmitry Kasatkin2014-11-132-0/+3
* ima: provide flag to identify new empty filesDmitry Kasatkin2014-10-303-7/+13
* ima: fix fallback to use new_sync_read()Dmitry Kasatkin2014-10-301-4/+4
* CAPABILITIES: remove undefined caps from all processesEric Paris2014-09-171-0/+3
* Merge branch 'serge-next-2' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2014-06-137-28/+114
|\
| * ima: introduce ima_kernel_read()Dmitry Kasatkin2014-06-121-1/+31
| * evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-121-2/+10
| * ima: check inode integrity cache in violation checkDmitry Kasatkin2014-06-121-2/+7
| * ima: prevent unnecessary policy checkingDmitry Kasatkin2014-06-121-9/+4
| * evm: provide option to protect additional SMACK xattrsDmitry Kasatkin2014-06-122-0/+22
| * evm: replace HMAC version with attribute maskDmitry Kasatkin2014-06-124-11/+33
| * ima: prevent new digsig xattr from being replacedMimi Zohar2014-06-121-3/+7
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2014-06-121-1/+1
|\ \ | |/ |/|
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2014-05-243-58/+159
| |\
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2014-05-121-3/+3
| |\ \
| * | | audit: add netlink audit protocol bind to check capabilities on multicast joinRichard Guy Briggs2014-04-221-1/+1
* | | | Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2014-06-1023-133/+382
|\ \ \ \