summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* integrity: path_check updateMimi Zohar2009-05-221-19/+29
* IMA: Add __init notation to ima functionsEric Paris2009-05-225-7/+7
* IMA: Minimal IMA policy and boot param for TCB IMA policyEric Paris2009-05-221-3/+27
* selinux: remove obsolete read buffer limit from sel_read_boolStephen Smalley2009-05-191-4/+0
* SELinux: move SELINUX_MAGIC into magic.hEric Paris2009-05-192-7/+4
* IMA: do not measure everything opened by root by defaultEric Paris2009-05-151-2/+0
* IMA: remove read permissions on the ima policy fileEric Paris2009-05-151-1/+5
* securityfs: securityfs_remove should handle IS_ERR pointersEric Paris2009-05-121-1/+1
* IMA: open all files O_LARGEFILEEric Paris2009-05-121-1/+2
* IMA: Handle dentry_open failuresEric Paris2009-05-121-4/+6
* IMA: use current_cred() instead of current->credEric Paris2009-05-122-2/+2
* Merge branch 'master' into nextJames Morris2009-05-0814-28/+39
|\
| * selinux: Fix send_sigiotask hookStephen Smalley2009-05-051-1/+1
| * Smack: check for SMACK xattr validity in smack_inode_setxattrEtienne Basset2009-04-181-5/+6
| * tomoyo: version bump to 2.2.0.Tetsuo Handa2009-04-148-10/+10
| * keys: Handle there being no fallback destination keyring for request_key()David Howells2009-04-091-3/+6
| * cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn2009-04-091-1/+0
| * tomoyo: remove "undelete domain" command.Tetsuo Handa2009-04-073-100/+5
| * CacheFiles: Export things for CacheFilesDavid Howells2009-04-031-0/+2
| * Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2009-04-021-0/+1
| |\
| | * Get rid of indirect include of fs_struct.hAl Viro2009-03-311-0/+1
| * | devcgroup: avoid using cgroup_lockLi Zefan2009-04-021-8/+13
| |/
* | integrity: remove __setup auditing msgsMimi Zohar2009-05-062-25/+4
* | integrity: use audit_log_stringMimi Zohar2009-05-061-13/+4
* | integrity: lsm audit rule matching fixMimi Zohar2009-05-061-4/+4
* | selinux: selinux_bprm_committed_creds() should wake up ->real_parent, not ->p...Oleg Nesterov2009-04-301-8/+3
* | SELinux: Don't flush inherited SIGKILL during execve()David Howells2009-04-301-4/+5
* | SELinux: drop secondary_ops->sysctlEric Paris2009-04-301-4/+0
* | smack: implement logging V3Etienne Basset2009-04-145-110/+600
* | smack: implement logging V3Etienne Basset2009-04-141-0/+386
* | tomoyo: remove "undelete domain" command.Tetsuo Handa2009-04-073-100/+5
* | don't raise all privs on setuid-root file with fE set (v2)Serge E. Hallyn2009-04-031-0/+32
* | Permissive domain in userspace object managerKaiGai Kohei2009-04-024-29/+11
|/
* smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset2009-03-284-10/+45
* netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore2009-03-282-118/+143
* lsm: Remove the socket_post_accept() hookPaul Moore2009-03-282-10/+0
* selinux: Remove the "compat_net" compatibility codePaul Moore2009-03-282-214/+7
* netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore2009-03-284-187/+82
* TOMOYO: Fix a typo.Tetsuo Handa2009-03-271-1/+1
* smack: convert smack to standard linux listsEtienne Basset2009-03-264-122/+168
* Merge branch 'master' into nextJames Morris2009-03-242-38/+14
|\
| * smack: fixes for unlabeled host supportetienne2009-03-052-50/+57
| * selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore2009-03-021-2/+3
| * selinux: Fix the NetLabel glue code for setsockopt()Paul Moore2009-02-231-1/+3
* | SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris2009-03-101-3/+9
* | SELinux: new permission between tty audit and audit socketEric Paris2009-03-063-1/+3
* | SELinux: open perm for sock filesEric Paris2009-03-063-0/+4
* | smack: fixes for unlabeled host supportetienne2009-03-051-15/+49
* | keys: make procfiles per-user-namespaceSerge E. Hallyn2009-02-271-6/+49
* | keys: skip keys from another user namespaceSerge E. Hallyn2009-02-271-0/+3