summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* ima: fix get_binary_runtime_size()Roberto Sassu2017-06-211-1/+1
* ima: use ima_parse_buf() to parse template dataRoberto Sassu2017-06-211-31/+13
* ima: use ima_parse_buf() to parse measurements headersRoberto Sassu2017-06-211-52/+28
* ima: introduce ima_parse_buf()Roberto Sassu2017-06-212-0/+67
* ima: Add cgroups2 to the defaults listLaura Abbott2017-06-211-0/+3
* ima: use memdup_user_nulGeliang Tang2017-06-211-9/+4
* ima: fix up #endif commentsTycho Andersen2017-06-211-2/+2
* IMA: Correct Kconfig dependencies for hash selectionBen Hutchings2017-06-211-4/+4
* ima: define is_ima_appraise_enabled()Mimi Zohar2017-06-211-0/+10
* ima: define Kconfig IMA_APPRAISE_BOOTPARAM optionMimi Zohar2017-06-212-0/+10
* ima: define a set of appraisal rules requiring file signaturesMimi Zohar2017-06-211-1/+25
* ima: extend the "ima_policy" boot command line to support multiple policiesMimi Zohar2017-06-211-5/+10
* Merge branch 'smack-for-4.13' of git://github.com/cschaufler/smack-next into ...James Morris2017-06-214-18/+31
|\
| * Smack: Use cap_capable in privilege checkCasey Schaufler2017-06-012-9/+12
| * Smack: Safer check for a socket in file_receiveCasey Schaufler2017-06-011-1/+1
| * smack: use pernet operations for hook registrationFlorian Westphal2017-06-011-8/+18
* | apparmor: export that basic profile namespaces are supportedJohn Johansen2017-06-101-0/+7
* | apparmor: add stacked domain labels interfaceJohn Johansen2017-06-102-0/+8
* | apparmor: add domain label stacking info to apparmorfsJohn Johansen2017-06-103-0/+39
* | apparmor: move change_profile mediation to using labelsJohn Johansen2017-06-101-68/+123
* | apparmor: move change_hat mediation to using labelsJohn Johansen2017-06-101-102/+201
* | apparmor: move exec domain mediation to using labelsJohn Johansen2017-06-102-259/+678
* | apparmor: support v7 transition format compatible with label_parseJohn Johansen2017-06-102-7/+15
* | apparmor: mediate files when they are receivedJohn Johansen2017-06-102-0/+7
* | apparmor: rework file permission to cache file access in file->ctxJohn Johansen2017-06-101-6/+76
* | apparmor: move path_link mediation to using labelsJohn Johansen2017-06-103-47/+59
* | apparmor: refactor path name lookup and permission checks around labelsJohn Johansen2017-06-103-45/+85
* | apparmor: update aa_audit_file() to use labelsJohn Johansen2017-06-103-9/+18
* | apparmor: move aa_file_perm() to use labelsJohn Johansen2017-06-103-37/+64
* | apparmor: allow ptrace checks to be finer grained than just capabilityJohn Johansen2017-06-103-0/+68
* | apparmor: move ptrace checks to using labelsJohn Johansen2017-06-105-80/+58
* | apparmor: add cross check permission helper macrosJohn Johansen2017-06-101-1/+41
* | apparmor: move resource checks to using labelsJohn Johansen2017-06-103-42/+80
* | apparmor: move capability checks to using labelsJohn Johansen2017-06-105-29/+58
* | apparmor: update query interface to support label queriesJohn Johansen2017-06-101-7/+39
* | apparmor: switch getprocattr to using label_print fns()John Johansen2017-06-103-37/+27
* | apparmor: switch from profiles to using labels on contextsJohn Johansen2017-06-1020-529/+686
* | apparmor: add the base fns() for domain labelsJohn Johansen2017-06-102-0/+2561
* | apparmor: revalidate files during execJohn Johansen2017-06-104-0/+81
* | apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()John Johansen2017-06-102-11/+16
* | apparmor: convert aa_change_XXX bool parameters to flagsJohn Johansen2017-06-105-32/+29
* | apparmor: cleanup remove unused and not fully implemented profile renameJohn Johansen2017-06-101-37/+2
* | apparmor: refactor updating profiles to the newest parentJohn Johansen2017-06-101-4/+31
* | apparmor: share profile name on replacementJohn Johansen2017-06-103-9/+72
* | apparmor: convert to profile block critical sectionsJohn Johansen2017-06-108-56/+162
* | apparmor: move bprm_committing_creds/committed_creds to lsm.cJohn Johansen2017-06-103-32/+30
* | apparmor: fix display of ns nameJohn Johansen2017-06-101-1/+1
* | apparmor: fix apparmor_query dataJohn Johansen2017-06-101-2/+6
* | apparmor: fix policy load/remove semanticsJohn Johansen2017-06-102-15/+13
* | apparmor: add namespace lookup fns()John Johansen2017-06-103-4/+73