summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2008-03-18make selinux_parse_opts_str() staticAdrian Bunk1-1/+2
2008-03-06LSM/SELinux: Interfaces to allow FS to control mount optionsEric Paris2-81/+99
2008-02-14d_path: Use struct path in struct avc_audit_dataJan Blunck3-25/+24
2008-02-14Embed a struct path into struct nameidata instead of nd->{dentry,mnt}Jan Blunck1-2/+2
2008-02-11selinux: support 64-bit capabilitiesStephen Smalley5-2/+27
2008-02-06SELinux: Remove security_get_policycaps()Paul Moore2-34/+0
2008-02-05VFS/Security: Rework inode_getsecurity and callers to return resulting bufferDavid P. Quigley1-28/+15
2008-02-01[AUDIT] add session id to audit messagesEric Paris2-9/+13
2008-02-01[PATCH] switch audit_get_loginuid() to task_struct *Al Viro2-4/+4
2008-01-31[SELinux]: Fix double free in selinux_netlbl_sock_setsid()Paul Moore1-1/+0
2008-01-30selinux: make selinux_set_mnt_opts() staticAdrian Bunk1-2/+2
2008-01-30SELinux: Add warning messages on network denial due to errorPaul Moore3-8/+40
2008-01-30SELinux: Add network ingress and egress control permission checksPaul Moore1-122/+280
2008-01-30SELinux: Allow NetLabel to directly cache SIDsPaul Moore5-134/+55
2008-01-30SELinux: Enable dynamic enable/disable of the network access checksPaul Moore4-13/+83
2008-01-30SELinux: Better integration between peer labeling subsystemsPaul Moore6-100/+208
2008-01-30SELinux: Add a new peer class and permissions to the Flask definitionsPaul Moore4-0/+26
2008-01-30SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore6-8/+185
2008-01-30SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu...Paul Moore5-17/+416
2008-01-30SELinux: Only store the network interface's ifindexPaul Moore3-6/+15
2008-01-30SELinux: Convert the netif code to use ifindex valuesPaul Moore6-125/+155
2008-01-30NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu...Paul Moore3-15/+38
2008-01-30NetLabel: Add secid token support to the NetLabel secattr structPaul Moore2-6/+9
2008-01-28[NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy1-2/+2
2008-01-26selinux: fix labeling of /proc/net inodesStephen Smalley1-0/+3
2008-01-25selinux: make mls_compute_sid always polyinstantiateEamon Walsh1-9/+2
2008-01-25security/selinux: constify function pointer tables and fieldsJan Engelhardt1-1/+1
2008-01-25security: add a secctx_to_secid() hookDavid Howells1-0/+6
2008-01-25Security: add get, set, and cloning of superblock security informationEric Paris2-254/+495
2008-01-25security/selinux: Add missing "space"Joe Perches1-1/+1
2008-01-22selinux: fix memory leak in netlabel codePaul Moore2-4/+5
2007-12-06SELinux: detect dead booleansStephen Smalley1-13/+30
2007-12-06SELinux: do not clear f_op when removing entriesStephen Smalley1-27/+1
2007-11-08SELinux: add more validity checks on policy loadStephen Smalley7-38/+118
2007-11-08SELinux: fix bug in new ebitmap code.KaiGai Kohei1-1/+1
2007-11-08SELinux: suppress a warning for 64k pages.Stephen Rothwell1-6/+7
2007-10-23SELinux: always check SIGCHLD in selinux_task_waitEric Paris1-5/+1
2007-10-18sparse pointer use of zero as nullStephen Hemminger1-1/+1
2007-10-17security/ cleanupsAdrian Bunk1-20/+0
2007-10-17Implement file posix capabilitiesSerge E. Hallyn1-27/+47
2007-10-17security: Convert LSM into a static interfaceJames Morris2-2/+1
2007-10-17SELinux: kills warnings in Improve SELinux performance when AVC missesKaiGai Kohei2-6/+7
2007-10-17SELinux: improve performance when AVC misses.KaiGai Kohei4-237/+303
2007-10-17SELinux: policy selectable handling of unknown classes and permsEric Paris5-9/+106
2007-10-17SELinux: Improve read/write performanceYuichi Nakamura4-1/+61
2007-10-17SELinux: tune avtab to reduce memory usageYuichi Nakamura4-36/+82
2007-10-15[SELINUX]: Update for netfilter ->hook() arg changes.David S. Miller1-6/+5
2007-10-10[INET]: local port range robustnessStephen Hemminger1-17/+22
2007-10-10[NET]: Support multiple network namespaces with netlinkEric W. Biederman1-2/+3
2007-10-10[NET]: Make device event notification network namespace safeEric W. Biederman1-0/+4