summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* tpm: use devm_add_action_or_resetSudip Mukherjee2016-07-191-4/+4
* tpm2_i2c_nuvoton: add irq validity checkAndrew Zamansky2016-07-191-4/+2
* tpm: read burstcount from TPM_STS in one 32-bit transactionAndrey Pronin2016-07-191-8/+3
* tpm: fix byte-order for the value read by tpm2_get_tpm_ptapronin@chromium.org2016-07-191-1/+1
* tpm_tis_core: convert max timeouts from msec to jiffiesapronin@chromium.org2016-07-191-4/+4
* apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen2016-07-121-1/+1
* apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum2016-07-121-17/+19
* apparmor: do not expose kernel stackHeinrich Schuchardt2016-07-121-1/+3
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-123-13/+29
* apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2016-07-121-0/+3
* apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2016-07-121-5/+5
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
* apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
* apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
* apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
* apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
* apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
* apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
* apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
* apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
* apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
* apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
* apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36
* apparmor: fix disconnected bind mnts reconnectionJohn Johansen2016-07-121-1/+4
* apparmor: fix update the mtime of the profile file on replacementJohn Johansen2016-07-121-0/+2
* apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
* apparmor: fix uninitialized lsm_audit memberJohn Johansen2016-07-122-2/+4
* apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
* apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
* Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-094-11/+29
|\
| * modsign: Make sign-file determine the format of the X.509 certDavid Howells2016-06-141-8/+26
| * KEYS: Strip trailing spacesDavid Howells2016-06-143-3/+3
* | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-082-1/+4
|\ \
| * | MAINTAINERS - Location of the Smack repositoryCasey Schaufler2016-07-071-1/+1
| * | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| |/
* | samples/seccomp: Add standalone config optionOlof Johansson2016-07-072-1/+8
* | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-0736-259/+3511
|\ \
| * | netlabel: Implement CALIPSO config functions for SMACK.Huw Davies2016-06-274-0/+238
| * | calipso: Add a label cache.Huw Davies2016-06-278-12/+360
| * | calipso: Add validation of CALIPSO option.Huw Davies2016-06-273-0/+74
| * | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-276-12/+19
| * | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-276-4/+308
| * | ipv6: constify the skb pointer of ipv6_find_tlv().Huw Davies2016-06-272-2/+2
| * | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-276-8/+163
| * | ipv6: Allow request socks to contain IPv6 options.Huw Davies2016-06-274-7/+27
| * | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| * | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-2710-10/+728
| * | netlabel: Move bitmap manipulation functions to the NetLabel core.Huw Davies2016-06-273-79/+85
| * | ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer.Huw Davies2016-06-272-0/+55
| * | netlabel: Add support for removing a CALIPSO DOI.Huw Davies2016-06-274-0/+150