summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-231-2/+2
* selinux: fix broken peer recv checkChad Hanson2013-12-231-1/+3
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2013-12-153-42/+165
|\
| * Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris2013-12-133-42/+165
| |\
| | * selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-121-7/+35
| | * selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-123-14/+47
| | * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-121-15/+53
| | * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-121-2/+23
| | * selinux: fix possible memory leakGeyslan G. Bem2013-12-041-4/+7
| | * Merge tag 'v3.12'Paul Moore2013-11-264-39/+27
| | |\
* | | | Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2013-12-152-60/+22
|/ / /
* | | Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds2013-11-2114-379/+417
|\ \ \
| * | | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris2013-10-2214-379/+417
| |\| |
| | * | selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore2013-09-261-4/+2
| | * | selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong2013-09-261-2/+2
| | * | Merge git://git.infradead.org/users/eparis/selinuxPaul Moore2013-09-1813-375/+415
| | |\ \
| | | * | Revert "SELinux: do not handle seclabel as a special flag"Eric Paris2013-08-282-1/+4
| | | * | selinux: consider filesystem subtype in policiesAnand Avati2013-08-282-22/+60
| | | * | Add SELinux policy capability for always checking packet and peer classes.Chris PeBenito2013-07-254-6/+30
| | | * | selinux: fix problems in netnode when BUG() is compiled outPaul Moore2013-07-251-0/+2
| | | * | SELinux: use a helper function to determine seclabelEric Paris2013-07-251-14/+24
| | | * | SELinux: pass a superblock to security_fs_useEric Paris2013-07-253-15/+11
| | | * | SELinux: do not handle seclabel as a special flagEric Paris2013-07-252-4/+1
| | | * | SELinux: change sbsec->behavior to shortEric Paris2013-07-253-3/+3
| | | * | SELinux: renumber the superblock optionsEric Paris2013-07-252-4/+5
| | | * | SELinux: do all flags twiddling in one placeEric Paris2013-07-251-7/+5
| | | * | SELinux: rename SE_SBLABELSUPP to SBLABEL_MNTEric Paris2013-07-252-15/+15
| | | * | SELinux: use define for number of bits in the mnt flags maskEric Paris2013-07-251-1/+4
| | | * | SELinux: make it harder to get the number of mnt opts wrongEric Paris2013-07-251-2/+3
| | | * | SELinux: remove crazy contortions around procEric Paris2013-07-251-1/+1
| | | * | SELinux: fix selinuxfs policy file on big endian systemsEric Paris2013-07-251-2/+1
| | | * | SELinux: Enable setting security contexts on rootfs inodes.Stephen Smalley2013-07-251-0/+7
| | | * | SELinux: Increase ebitmap_node size for 64-bit configurationWaiman Long2013-07-251-1/+7
| | | * | SELinux: Reduce overhead of mls_level_isvalid() function callWaiman Long2013-07-254-19/+27
| | | * | selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()Paul Moore2013-07-252-5/+8
| | | * | selinux: cleanup the XFRM headerPaul Moore2013-07-251-14/+5
| | | * | selinux: cleanup selinux_xfrm_decode_session()Paul Moore2013-07-251-11/+12
| | | * | selinux: cleanup some comment and whitespace issues in the XFRM codePaul Moore2013-07-251-13/+10
| | | * | selinux: cleanup selinux_xfrm_sock_rcv_skb() and selinux_xfrm_postroute_last()Paul Moore2013-07-252-60/+42
| | | * | selinux: cleanup selinux_xfrm_policy_lookup() and selinux_xfrm_state_pol_flow...Paul Moore2013-07-251-36/+18
| | | * | selinux: cleanup and consolidate the XFRM alloc/clone/delete/free codePaul Moore2013-07-251-31/+40
| | | * | lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore2013-07-253-111/+95
* | | | | Merge git://git.infradead.org/users/eparis/auditLinus Torvalds2013-11-211-0/+2
|\ \ \ \ \
| * | | | | selinux: apply selinux checks on new audit message typesEric Paris2013-11-051-0/+2
| | |/ / / | |/| | |
* | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2013-10-233-27/+15
|\ \ \ \ \ | | |_|_|/ | |/| | |
| * | | | selinux: remove 'flags' parameter from avc_audit()Linus Torvalds2013-10-043-4/+4
| * | | | selinux: avc_has_perm_flags has no more usersLinus Torvalds2013-10-042-17/+6
| * | | | selinux: remove 'flags' parameter from inode_has_permLinus Torvalds2013-10-041-7/+6
| | |/ / | |/| |
* | | | netfilter: pass hook ops to hookfnPatrick McHardy2013-10-141-5/+5
* | | | net ipv4: Convert ipv4.ip_local_port_range to be per netns v3Eric W. Biederman2013-09-301-1/+1
|/ / /