summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-11-14selinux: fix inode security list corruptionStephen Smalley1-1/+1
2014-11-14evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin1-3/+6
2014-09-17CAPABILITIES: remove undefined caps from all processesEric Paris1-0/+3
2014-06-26evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar1-2/+10
2014-06-26ima: introduce ima_kernel_read()Dmitry Kasatkin1-1/+31
2014-04-14selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-03-06SELinux: bigendian problems with filename trans rulesEric Paris1-4/+4
2014-02-20SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley1-0/+4
2014-02-13SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2014-01-25SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2-3/+22
2014-01-09selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+36
2014-01-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-16/+48
2014-01-09selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2014-01-09selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-04selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore1-4/+2
2013-11-29Revert "ima: policy for RAMFS"Mimi Zohar1-1/+0
2013-05-31selinux: fix the labeled xfrm/IPsec reference count handlingPaul Moore1-20/+14
2013-05-07aio: don't include aio.h in sched.hKent Overstreet2-0/+3
2013-05-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds3-8/+4
2013-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2-4/+3
2013-04-30Merge branch 'akpm' (incoming from Andrew)Linus Torvalds1-3/+10
2013-04-30KEYS: split call to call_usermodehelper_fns()Lucas De Marchi1-3/+10
2013-04-30Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds9-108/+222
2013-04-29Merge branch 'for-3.10' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds1-56/+211
2013-04-29tomoyo_close_control: don't bother with return valueAl Viro3-8/+4
2013-04-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-0/+18
2013-04-18devcg: remove parent_cgroup.Rami Rosen1-2/+0
2013-04-17ima: eliminate passing d_name.name to process_measurement()Mimi Zohar1-9/+5
2013-04-09selinux: add a skb_owned_by() hookEric Dumazet3-0/+18
2013-04-08devcg: remove broken_hierarchy tagTejun Heo1-9/+0
2013-04-03Smack: include magic.h in smackfs.cCasey Schaufler1-0/+1
2013-04-02selinux: make security_sb_clone_mnt_opts return an error on context mismatchJeff Layton3-7/+39
2013-04-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+1
2013-03-28Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-3/+1
2013-03-28selinux: replace obsolete NLMSG_* with type safe nlmsg_*Hong zhi guo2-4/+3
2013-03-26yama: Better permission check for ptracemeEric W. Biederman1-3/+1
2013-03-20devcg: propagate local changes down the hierarchyAristeu Rozanski1-7/+132
2013-03-20devcg: use css_online and css_offlineAristeu Rozanski1-17/+42
2013-03-20devcg: prepare may_access() for hierarchy supportAristeu Rozanski1-18/+31
2013-03-20devcg: expand may_access() logicAristeu Rozanski1-9/+12
2013-03-19Fix NULL pointer dereference in smack_inode_unlink() and smack_inode_rmdir()Igor Zhbanov1-2/+2
2013-03-19Smack: add support for modification of existing rulesRafal Krypa1-79/+170
2013-03-19smack: SMACK_MAGIC to include/uapi/linux/magic.hJarkko Sakkinen1-5/+0
2013-03-19Smack: add missing support for transmute bit in smack_str_from_perm()Rafal Krypa1-0/+2
2013-03-19Smack: prevent revoke-subject from failing when unseen label is written to itRafal Krypa1-3/+1
2013-03-19selinux: use GFP_ATOMIC under spin_lockDan Carpenter1-1/+1
2013-03-18tomoyo: use DEFINE_SRCU() to define tomoyo_ssLai Jiangshan1-3/+2
2013-03-12Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and securit...Mathieu Desnoyers1-2/+2