summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2017-02-10KEYS: Use memzero_explicit() for secret dataDan Carpenter1-1/+1
2017-02-10KEYS: Fix an error code in request_master_key()Dan Carpenter1-1/+1
2017-02-10sign-file: fix build error in sign-file.c with libresslFelix Fietkau1-1/+3
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris13-314/+341
2017-02-08Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-1/+1
2017-02-07selinux: allow changing labels for cgroupfsAntonio Murdaca1-0/+2
2017-02-07selinux: fix off-by-one in setprocattrStephen Smalley1-1/+1
2017-02-03tpm: silence an array overflow warningDan Carpenter1-2/+2
2017-02-03tpm: fix the type of owned field in cap_tStefan Berger1-1/+1
2017-02-03tpm: add securityfs support for TPM 2.0 firmware event logNayna Jain6-22/+279
2017-02-03tpm: enhance read_log_of() to support Physical TPM event logNayna Jain1-4/+23
2017-02-03tpm: enhance TPM 2.0 PCR extend to support multiple banksNayna Jain4-44/+71
2017-02-03tpm: implement TPM 2.0 capability to get active PCR banksNayna Jain2-0/+82
2017-02-03tpm: fix RC value check in tpm2_seal_trustedJarkko Sakkinen2-1/+6
2017-02-03tpm_tis: fix iTPM probe via probe_itpm() functionMaciej S. Szmigiero1-12/+13
2017-02-03tpm: Begin the process to deprecate user_read_timerJason Gunthorpe1-1/+4
2017-02-03tpm: remove tpm_read_index and tpm_write_index from tpm.hJarkko Sakkinen3-11/+18
2017-01-27ima: allow to check MAY_APPENDLans Zhang2-4/+5
2017-01-27ima: fix ima_d_path() possible race with renameMimi Zohar3-6/+24
2017-01-27Merge branch 'smack-for-4.11' of git://github.com/cschaufler/smack-next into ...James Morris3-27/+95
2017-01-23tpm: Check size of response before accessing dataStefan Berger5-51/+123
2017-01-23tpm_tis: use default timeout value if chip reports it as zeroMaciej S. Szmigiero4-26/+37
2017-01-23tpm: Do not print an error message when doing TPM auto startupJason Gunthorpe1-3/+6
2017-01-23tpm, tpm_crb: Handle 64-bit resource in crb_check_resource()Jiandi An1-3/+5
2017-01-23tpm/tpm_tis_spi: drop duplicate header module.hGeliang Tang1-1/+0
2017-01-23tpm/st33zp24: Remove unneeded linux/miscdevice.h includeCorentin Labbe1-1/+0
2017-01-23tpm/vtpm: fix kdoc warningsWinkler, Tomas2-63/+91
2017-01-23tmp: use pdev for parent device in tpm_chip_allocWinkler, Tomas1-4/+4
2017-01-23tpm/tpm2-chip: fix kdoc errorsWinkler, Tomas1-48/+56
2017-01-23tpm: add kdoc for tpm_transmit and tpm_transmit_cmdWinkler, Tomas1-5/+28
2017-01-23seccomp: dump core when using SECCOMP_RET_KILLMike Frysinger1-8/+21
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler11-17/+82
2017-01-16apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen1-1/+1
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen4-5/+5
2017-01-16apparmor: fix restricted endian type warnings for policy unpackJohn Johansen1-6/+6
2017-01-16apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen2-12/+12
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen1-0/+10
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen2-1/+103
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks2-1/+47
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua5-0/+245
2017-01-16apparmor: update cap audit to check SECURITY_CAP_NOAUDITJohn Johansen1-6/+10
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen2-29/+32
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen5-66/+28
2017-01-16apparmor: fix change_hat debug outputJohn Johansen1-4/+5
2017-01-16apparmor: remove unused op parameter from simple_write_to_buffer()John Johansen1-6/+3
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen12-161/+155
2017-01-16apparmor: change op from int to const char *John Johansen10-134/+84
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen5-144/+150
2017-01-16apparmor: fail task profile update if current_cred isn't real_credJohn Johansen1-0/+3
2017-01-16apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen2-22/+130