summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* selinux: remove redundant selinux_nlmsg_permHuaisheng Ye2020-01-161-39/+34
* selinux: fix wrong buffer types in policydb.cOndrej Mosnacek2020-01-161-2/+2
* selinux: reorder hooks to make runtime disable less brokenOndrej Mosnacek2020-01-101-31/+70
* selinux: treat atomic flags more carefullyOndrej Mosnacek2020-01-103-31/+61
* selinux: make default_noexec read-only after initStephen Smalley2020-01-101-1/+1
* selinux: move ibpkeys code under CONFIG_SECURITY_INFINIBAND.Ravi Kumar Siddojigari2020-01-102-2/+15
* selinux: remove redundant msg_msg_alloc_securityHuaisheng Ye2020-01-101-11/+6
* Documentation,selinux: fix references to old selinuxfs mount pointStephen Smalley2020-01-071-3/+4
* selinux: deprecate disabling SELinux and runtimePaul Moore2020-01-072-0/+10
* selinux: allow per-file labelling for binderfsHridya Valsaraju2020-01-061-0/+1
* selinuxfs: use scnprintf to get real length for inodeliuyang342020-01-061-2/+2
* selinux: remove set but not used variable 'sidtab'YueHaibing2019-12-241-8/+0
* selinux: ensure the policy has been loaded before reading the sidtab statsPaul Moore2019-12-231-0/+6
* selinux: ensure we cleanup the internal AVC counters on error in avc_update()Jaihind Yadav2019-12-211-1/+1
* selinux: randomize layout of key structuresStephen Smalley2019-12-184-4/+4
* selinux: clean up selinux_enabled/disabled/enforcing_bootStephen Smalley2019-12-187-18/+17
* selinux: remove unnecessary selinux cred requestYang Guo2019-12-121-4/+3
* selinux: ensure we cleanup the internal AVC counters on error in avc_insert()Paul Moore2019-12-101-27/+24
* security: only build lsm_audit if CONFIG_SECURITY=yStephen Smalley2019-12-101-1/+1
* selinux: clean up selinux_inode_permission MAY_NOT_BLOCK testsStephen Smalley2019-12-091-4/+4
* selinux: fall back to ref-walk if audit is requiredStephen Smalley2019-12-093-26/+17
* selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"Stephen Smalley2019-12-093-4/+30
* security,lockdown,selinux: implement SELinux lockdownStephen Smalley2019-12-095-27/+70
* selinux: cache the SID -> context string translationOndrej Mosnacek2019-12-094-94/+288
* selinux: sidtab reverse lookup hash tableJeff Vander Stoep2019-12-099-167/+306
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-0315-165/+526
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-226-38/+62
| * apparmor: reduce rcu_read_lock scope for aa_file_perm mediationJohn Johansen2019-11-221-3/+3
| * apparmor: fix wrong buffer allocation in aa_new_mountJohn Johansen2019-11-221-4/+4
| * apparmor: fix unsigned len comparison with less than zeroColin Ian King2019-11-221-5/+7
| * apparmor: increase left match history buffer sizeJohn Johansen2019-06-202-5/+4
| * apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior2019-06-203-12/+12
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-205-111/+164
| * apparmor: Force type-casting of current->real_credBharath Vedartham2019-06-201-1/+1
| * apparmor: fix spelling mistake "immutible" -> "immutable"Colin Ian King2019-04-171-1/+1
| * apparmor: fix blob compression when ns is forced on a policy loadJohn Johansen2019-04-112-4/+8
| * apparmor: fix missing ZLIB definesJohn Johansen2019-04-111-0/+2
| * apparmor: fix blob compression build failure on ppcJohn Johansen2019-04-111-1/+1
| * apparmor: Initial implementation of raw policy blob compressionChris Coulson2019-04-115-8/+285
* | Merge tag 'y2038-cleanups-5.5' of git://git.kernel.org:/pub/scm/linux/kernel/...Linus Torvalds2019-12-011-7/+3
|\ \
| * | y2038: move itimer reset into itimer.cArnd Bergmann2019-11-151-7/+3
* | | Merge tag 'selinux-pr-20191126' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-11-309-5/+74
|\ \ \
| * | | selinux: default_range glblub implementationJoshua Brindle2019-10-077-1/+62
| * | | selinux: allow labeling before policy is loadedJonathan Lebon2019-10-011-0/+12
| * | | selinux: remove load size limitzhanglin2019-10-011-4/+0
* | | | Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/po...Linus Torvalds2019-11-3012-97/+328
|\ \ \ \
| * | | | x86/efi: remove unused variablesYueHaibing2019-11-291-5/+0
| * | | | Merge branch 'topic/secureboot' into nextMichael Ellerman2019-11-1311-92/+326
| |\ \ \ \
| | * | | | powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain2019-11-133-1/+108
| | * | | | x86/efi: move common keyring handler functions to new fileNayna Jain2019-11-134-67/+115