summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2009-05-22Merge branch 'master' into nextJames Morris2-11/+11
2009-05-22smack: do not beyond ARRAY_SIZE of dataRoel Kluin1-1/+1
2009-05-22integrity: path_check updateMimi Zohar1-19/+29
2009-05-22IMA: Add __init notation to ima functionsEric Paris5-7/+7
2009-05-22IMA: Minimal IMA policy and boot param for TCB IMA policyEric Paris1-3/+27
2009-05-19selinux: remove obsolete read buffer limit from sel_read_boolStephen Smalley1-4/+0
2009-05-19SELinux: move SELINUX_MAGIC into magic.hEric Paris2-7/+4
2009-05-15IMA: do not measure everything opened by root by defaultEric Paris1-2/+0
2009-05-15IMA: remove read permissions on the ima policy fileEric Paris1-1/+5
2009-05-12securityfs: securityfs_remove should handle IS_ERR pointersEric Paris1-1/+1
2009-05-12IMA: open all files O_LARGEFILEEric Paris1-1/+2
2009-05-12IMA: Handle dentry_open failuresEric Paris1-4/+6
2009-05-12IMA: use current_cred() instead of current->credEric Paris2-2/+2
2009-05-09Reduce path_lookup() abusesAl Viro2-11/+11
2009-05-08Merge branch 'master' into nextJames Morris14-28/+39
2009-05-06integrity: remove __setup auditing msgsMimi Zohar2-25/+4
2009-05-06integrity: use audit_log_stringMimi Zohar1-13/+4
2009-05-06integrity: lsm audit rule matching fixMimi Zohar1-4/+4
2009-05-05selinux: Fix send_sigiotask hookStephen Smalley1-1/+1
2009-04-30selinux: selinux_bprm_committed_creds() should wake up ->real_parent, not ->p...Oleg Nesterov1-8/+3
2009-04-30SELinux: Don't flush inherited SIGKILL during execve()David Howells1-4/+5
2009-04-30SELinux: drop secondary_ops->sysctlEric Paris1-4/+0
2009-04-18Smack: check for SMACK xattr validity in smack_inode_setxattrEtienne Basset1-5/+6
2009-04-14tomoyo: version bump to 2.2.0.Tetsuo Handa8-10/+10
2009-04-14smack: implement logging V3Etienne Basset5-110/+600
2009-04-14smack: implement logging V3Etienne Basset1-0/+386
2009-04-09keys: Handle there being no fallback destination keyring for request_key()David Howells1-3/+6
2009-04-09cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn1-1/+0
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa3-100/+5
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa3-100/+5
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells1-0/+2
2009-04-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-0/+1
2009-04-02devcgroup: avoid using cgroup_lockLi Zefan1-8/+13
2009-04-03don't raise all privs on setuid-root file with fE set (v2)Serge E. Hallyn1-0/+32
2009-04-02Permissive domain in userspace object managerKaiGai Kohei4-29/+11
2009-03-31Get rid of indirect include of fs_struct.hAl Viro1-0/+1
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset4-10/+45
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore2-118/+143
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore2-10/+0
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore2-214/+7
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore4-187/+82
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa1-1/+1
2009-03-26smack: convert smack to standard linux listsEtienne Basset4-122/+168
2009-03-24Merge branch 'master' into nextJames Morris2-38/+14
2009-03-10SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris1-3/+9
2009-03-06SELinux: new permission between tty audit and audit socketEric Paris3-1/+3
2009-03-06SELinux: open perm for sock filesEric Paris3-0/+4
2009-03-05smack: fixes for unlabeled host supportetienne2-50/+57
2009-03-05smack: fixes for unlabeled host supportetienne1-15/+49
2009-03-02selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore1-2/+3