summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* block: fix part_pack_uuid() build errorMimi Zohar2013-02-261-5/+6
* ima: "remove enforce checking duplication" merge fixMimi Zohar2013-02-261-1/+2
* device_cgroup: don't grab mutex in rcu callbackJerry Snitselaar2013-02-211-9/+12
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2013-02-2118-193/+552
|\
| * ima: digital signature verification using asymmetric keysDmitry Kasatkin2013-02-065-1/+150
| * ima: rename hash calculation functionsDmitry Kasatkin2013-02-063-9/+9
| * ima: use new crypto_shash API instead of old crypto_hashDmitry Kasatkin2013-02-063-38/+41
| * ima: add policy support for file system uuidDmitry Kasatkin2013-02-061-1/+21
| * evm: add file system uuid to EVM hmacDmitry Kasatkin2013-02-064-0/+18
| * ima: differentiate appraise status only for hook specific rulesMimi Zohar2013-01-222-6/+12
| * ima: per hook cache integrity appraisal statusMimi Zohar2013-01-226-25/+136
| * ima: increase iint flag sizeMimi Zohar2013-01-221-12/+12
| * ima: added policy support for 'security.ima' typeDmitry Kasatkin2013-01-224-1/+25
| * ima: forbid write access to files with digital signaturesDmitry Kasatkin2013-01-161-2/+5
| * ima: move full pathname resolution to separate functionDmitry Kasatkin2013-01-163-31/+38
| * integrity: reduce storage size for ima_status and evm_statusDmitry Kasatkin2013-01-161-2/+2
| * ima: rename FILE_MMAP to MMAP_CHECKMimi Zohar2013-01-164-7/+8
| * ima: remove security.ima hexdumpDmitry Kasatkin2013-01-161-5/+0
| * ima: remove enforce checking duplicationDmitry Kasatkin2013-01-161-32/+20
| * ima: set appraise status in fix mode only when xattr is fixedDmitry Kasatkin2013-01-161-5/+6
| * evm: remove unused cleanup functionsDmitry Kasatkin2013-01-163-16/+0
| * ima: re-initialize IMA policy LSM infoMimi Zohar2013-01-161-10/+58
* | KEYS: Revert one application of "Fix unreachable code" patchDavid Howells2013-02-211-0/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2013-01-285-20/+88
|\ \
| * | tun: fix LSM/SELinux labeling of tun/tap devicesPaul Moore2013-01-144-19/+87
| * | selinux: add the "attach_queue" permission to the "tun_socket" classPaul Moore2013-01-141-1/+1
* | | security/device_cgroup: lock assert fails in dev_exception_clean()Jerry Snitselaar2013-01-221-0/+2
* | | evm: checking if removexattr is not a NULLDmitry Kasatkin2013-01-221-2/+2
|/ /
* / ima: fallback to MODULE_SIG_ENFORCE for existing kernel module syscallMimi Zohar2012-12-243-5/+11
|/
* keys: fix unreachable codeAlan Cox2012-12-201-2/+0
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2012-12-191-0/+2
|\
| * bridge: update selinux perm table for RTM_NEWMDB and RTM_DELMDBAmerigo Wang2012-12-151-0/+2
* | Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2012-12-196-3/+43
|\ \
| * | ima: support new kernel module syscallMimi Zohar2012-12-145-4/+33
| * | security: introduce kernel_module_from_file hookKees Cook2012-12-142-0/+11
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2012-12-181-8/+17
|\ \ \
| * | | Fix cap_capable to only allow owners in the parent user namespace to have caps.Eric W. Biederman2012-12-141-8/+17
* | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2012-12-171-3/+9
|\| | |
| * | | userns: Kill task_user_nsEric W. Biederman2012-11-201-3/+9
* | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2012-12-168-102/+153
|\ \ \ \ | |_|_|/ |/| | |
| * | | Smack: create a sysfs mount point for smackfsCasey Schaufler2012-12-141-0/+17
| * | | Smack: use select not depends in KconfigCasey Schaufler2012-12-141-1/+5
| * | | Yama: remove locking from delete pathKees Cook2012-11-201-7/+42
| * | | Yama: add RCU to drop read lockingKees Cook2012-11-201-23/+24
| * | | Merge branch 'modsign-keys-devel' into security-next-keysDavid Howells2012-10-027-63/+129
| |\ \ \
| | * | | KEYS: Add payload preparsing opportunity prior to key instantiate or updateDavid Howells2012-09-137-63/+129
| * | | | KEYS: Use keyring_alloc() to create special keyringsDavid Howells2012-10-021-0/+1
| * | | | KEYS: Reduce initial permissions on keysDavid Howells2012-10-024-19/+33
| * | | | KEYS: Make the session and process keyrings per-threadDavid Howells2012-10-023-54/+33
| * | | | key: Fix resource leakAlan Cox2012-09-281-2/+2