summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2017-09-2324-137/+2088
|\
| * apparmor: fix apparmorfs DAC access permissionsJohn Johansen2017-09-221-4/+4
| * apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen2017-09-221-1/+4
| * apparmor: fix incorrect type assignment when freeing proxiesJohn Johansen2017-09-221-1/+1
| * apparmor: ensure unconfined profiles have dfas initializedJohn Johansen2017-09-221-0/+2
| * apparmor: fix race condition in null profile creationJohn Johansen2017-09-221-3/+11
| * apparmor: move new_null_profile to after profile lookup fns()John Johansen2017-09-221-79/+79
| * apparmor: add base infastructure for socket mediationJohn Johansen2017-09-2212-16/+840
| * apparmor: add more debug asserts to apparmorfsJohn Johansen2017-09-221-0/+17
| * apparmor: make policy_unpack able to audit different info messagesJohn Johansen2017-09-222-16/+40
| * apparmor: add support for absolute root view based labelsJohn Johansen2017-09-222-1/+10
| * apparmor: cleanup conditional check for label in label_printJohn Johansen2017-09-221-14/+8
| * apparmor: add mount mediationJohn Johansen2017-09-229-4/+841
| * apparmor: add the ability to mediate signalsJohn Johansen2017-09-227-0/+231
| * apparmor: Redundant condition: prev_ns. in [label.c:1498]John Johansen2017-09-221-1/+1
| * apparmor: Fix an error code in aafs_create()Dan Carpenter2017-09-221-1/+3
| * apparmor: Fix logical error in verify_header()Christos Gkekas2017-09-221-1/+1
| * apparmor: Fix shadowed local variable in unpack_trans_table()Geert Uytterhoeven2017-09-221-2/+2
* | Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds2017-09-141-2/+4
|\ \
| * | fs: fix kernel_write prototypeChristoph Hellwig2017-09-041-1/+2
| * | fs: fix kernel_read prototypeChristoph Hellwig2017-09-041-1/+2
| |/
* | Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2017-09-1228-56/+78
|\ \
| * | selinux: constify nf_hook_opsArvind Yadav2017-08-281-1/+1
| * | selinux: allow per-file labeling for cgroupfsAntonio Murdaca2017-08-221-1/+3
| * | lsm_audit: update my email addressStephen Smalley2017-08-171-1/+1
| * | selinux: update my email addressStephen Smalley2017-08-1725-25/+25
| * | selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko2017-08-081-8/+6
| * | selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley2017-08-024-16/+42
| * | selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel2017-07-251-0/+1
| * | sync to Linus v4.13-rc2 for subsystem developers to work againstJames Morris2017-07-2524-334/+365
| |\|
| * | LSM: Remove security_task_create() hook.Tetsuo Handa2017-07-181-5/+0
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2017-09-111-21/+256
|\ \ \
| * | | Introduce v3 namespaced file capabilitiesSerge E. Hallyn2017-09-011-19/+251
| * | | security: Use user_namespace::level to avoid redundant iterations in cap_capa...Kirill Tkhai2017-07-201-2/+5
* | | | Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2017-09-071-2/+0
|\ \ \ \
| * | | | selinux: remove AVC init audit log messageRichard Guy Briggs2017-09-051-2/+0
| | |_|/ | |/| |
* | | | Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds2017-09-079-120/+23
|\ \ \ \
| * | | | smack: Remove redundant pdeath_signal clearingKees Cook2017-08-011-15/+0
| * | | | LSM: drop bprm_secureexec hookKees Cook2017-08-011-5/+0
| * | | | commoncap: Move cap_elevated calculation into bprm_set_credsKees Cook2017-08-011-42/+10
| * | | | commoncap: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-4/+8
| * | | | smack: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-17/+4
| * | | | selinux: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-19/+5
| * | | | apparmor: Refactor to remove bprm_secureexec hookKees Cook2017-08-014-23/+1
| * | | | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-014-4/+4
| |/ / /
* | | | netfilter: nf_hook_ops structs can be constFlorian Westphal2017-07-312-2/+2
* | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2017-07-214-1/+15
|\| | |
| * | | Merge tag 'gcc-plugins-v4.13-rc2' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2017-07-191-1/+1
| |\ \ \ | | |/ / | |/| |
| | * | randstruct: Mark various structs for randomizationKees Cook2017-06-301-1/+1
| * | | KEYS: DH: validate __spare fieldEric Biggers2017-07-142-0/+7