summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-12-15Smack: Signal delivery as an append operationCasey Schaufler3-7/+29
2016-12-15Smack: fix d_instantiate logic for sockfs and pipefsRafal Krypa1-7/+7
2016-12-14kdbus: Remove kdbus Linux Security Module hooksKarol Lewandowski4-111/+0
2016-12-14Smack: ignore private inode for file functionsSeung-Woo Kim1-0/+12
2016-12-14Smack: Assign smack_known_web label for kernel thread's socket in the sk_allo...jooseong lee1-2/+10
2016-12-14Smack: type confusion in smak sendmsg() handlerRoman Kubiak1-1/+1
2016-12-14Smack: File receive for socketsCasey Schaufler1-0/+22
2016-12-14lsm: smack: smack callbacks for kdbus security hooksPaul Osmialowski1-0/+61
2016-12-14lsm: kdbus security hooksPaul Osmialowski2-0/+47
2016-12-14lsm: smack: Make ipc/kdbus includes visible so smack callbacks could see themPaul Osmialowski1-0/+2
2016-12-14lsm: make security_file_receive available for external modulesKarol Lewandowski1-0/+1
2016-12-14Smack: limited capability for changing process labelZbigniew Jasinski4-42/+230
2016-12-14Smack: pipefs fix in smack_d_instantiateRoman Kubiak1-0/+3
2016-12-14Smack - Fix build error with bringup unconfiguredCasey Schaufler1-14/+18
2016-12-14Kernel threads excluded from smack checksRoman Kubiak1-0/+6
2016-12-14smack: allow mount opts setting over filesystems with binary mount dataVivek Trivedi2-40/+219
2016-12-14Smack: allow multiple labels in onlycapRafal Krypa3-69/+160
2016-12-14Smack: fix seq operations in smackfsRafal Krypa1-30/+22
2016-12-14smack: pass error code through pointersLukasz Pawelczyk3-97/+139
2016-12-14Smack: ignore private inode for smack_file_receiveSeung-Woo Kim1-0/+3
2016-12-14LOCAL / smack: add permissive mode for debugging purposeChanho Park5-0/+112
2016-11-23KEYS: Fix short sprintf buffer in /proc/keys show functionDavid Howells1-1/+1
2016-07-10KEYS: potential uninitialized variableDan Carpenter1-1/+1
2016-04-13KEYS: Fix handling of stored error in a negatively instantiated user keyDavid Howells3-2/+10
2016-04-13security: let security modules use PTRACE_MODE_* with bitmasksJann Horn2-7/+5
2016-04-11ptrace: use fsuid, fsgid, effective creds for fs access checksJann Horn1-1/+6
2016-03-04EVM: Use crypto_memneq() for digest comparisonsRyan Ware1-1/+2
2016-01-22KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats1-0/+1
2016-01-22KEYS: Fix race between read and revokeDavid Howells1-9/+9
2016-01-22KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells1-2/+4
2016-01-22KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells1-4/+4
2015-09-21fs: create and use seq_show_option for escapingKees Cook1-1/+1
2015-08-03selinux: fix mprotect PROT_EXEC regression caused by mm changeStephen Smalley1-1/+2
2015-08-03selinux: don't waste ebitmap space when importing NetLabel categoriesPaul Moore1-0/+6
2015-08-03ima: update builtin policiesMimi Zohar1-9/+56
2015-08-03ima: extend "mask" policy matching supportMimi Zohar1-5/+15
2015-08-03ima: add support for new "euid" policy conditionMimi Zohar1-4/+23
2015-08-03ima: fix ima_show_template_data_ascii()Mimi Zohar3-4/+5
2015-08-03evm: labeling pseudo filesystems exceptionMimi Zohar1-0/+11
2015-08-03ima: do not measure or appraise the NSFS filesystemMimi Zohar1-0/+2
2015-08-03ima: cleanup ima_init_policy() a littleDan Carpenter1-10/+6
2015-08-03ima: skip measurement of cgroupfs files and update documentationRoberto Sassu1-0/+2
2015-08-03KEYS: ensure we free the assoc array edit if edit is validColin Ian King1-3/+5
2015-07-21sysfs: Create mountpoints with sysfs_create_mount_pointEric W. Biederman3-16/+13
2015-07-10selinux: fix setting of security labels on NFSJ. Bruce Fields1-0/+1
2015-04-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds16-117/+117
2015-04-17tomoyo: reduce mmap_sem hold for mm->exe_fileDavidlohr Bueso1-5/+8
2015-04-15Merge branch 'akpm' (patches from Andrew)Linus Torvalds1-0/+1
2015-04-15kernel: conditionally support non-root users, groups and capabilitiesIulia Manda1-0/+1
2015-04-15VFS: security/: d_inode() annotationsDavid Howells4-12/+12