linux - Linux Kernel (branches are rebased on master from time to time)

Age	Commit message (Expand)	Author	Files	Lines
2016-07-12	apparmor: fix oops, validate buffer size in apparmor_setprocattr()	Vegard Nossum	1	-17/+19
2016-07-12	apparmor: do not expose kernel stack	Heinrich Schuchardt	1	-1/+3
2016-07-12	apparmor: fix module parameters can be changed after policy is locked	John Johansen	3	-13/+29
2016-07-12	apparmor: fix oops in profile_unpack() when policy_db is not present	John Johansen	1	-0/+3
2016-07-12	apparmor: don't check for vmalloc_addr if kvzalloc() failed	John Johansen	1	-5/+5
2016-07-12	apparmor: add missing id bounds check on dfa verification	John Johansen	2	-0/+3
2016-07-12	apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task	Jeff Mahoney	1	-2/+4
2016-07-12	apparmor: use list_next_entry instead of list_entry_next	Geliang Tang	1	-5/+3
2016-07-12	apparmor: fix refcount race when finding a child profile	John Johansen	1	-1/+3
2016-07-12	apparmor: fix ref count leak when profile sha1 hash is read	John Johansen	1	-0/+1
2016-07-12	apparmor: check that xindex is in trans_table bounds	John Johansen	1	-1/+1
2016-07-12	apparmor: ensure the target profile name is always audited	John Johansen	1	-11/+9
2016-07-12	apparmor: fix audit full profile hname on successful load	John Johansen	1	-1/+1
2016-07-12	apparmor: fix log failures for all profiles in a set	John Johansen	1	-10/+19
2016-07-12	apparmor: fix put() parent ref after updating the active ref	John Johansen	1	-1/+1
2016-07-12	apparmor: add parameter to control whether policy hashing is used	John Johansen	4	-6/+25
2016-07-12	apparmor: internal paths should be treated as disconnected	John Johansen	1	-28/+36
2016-07-12	apparmor: fix disconnected bind mnts reconnection	John Johansen	1	-1/+4
2016-07-12	apparmor: fix update the mtime of the profile file on replacement	John Johansen	1	-0/+2
2016-07-12	apparmor: exec should not be returning ENOENT when it denies	John Johansen	1	-1/+1
2016-07-12	apparmor: fix uninitialized lsm_audit member	John Johansen	2	-2/+4
2016-07-12	apparmor: fix replacement bug that adds new child to old parent	John Johansen	1	-1/+1
2016-07-12	apparmor: fix refcount bug in profile replacement	John Johansen	1	-2/+2
2016-07-09	Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...	James Morris	4	-11/+29
2016-07-08	Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...	James Morris	2	-1/+4
2016-07-07	MAINTAINERS - Location of the Smack repository	Casey Schaufler	1	-1/+1
2016-07-07	samples/seccomp: Add standalone config option	Olof Johansson	2	-1/+8
2016-07-07	Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...	James Morris	36	-259/+3511
2016-06-30	ima: extend the measurement entry specific pcr	Eric Richter	1	-3/+3
2016-06-30	ima: change integrity cache to store measured pcr	Eric Richter	3	-3/+11
2016-06-30	ima: redefine duplicate template entries	Eric Richter	1	-3/+4
2016-06-30	ima: change ima_measurements_show() to display the entry specific pcr	Eric Richter	1	-5/+4
2016-06-30	ima: include pcr for each measurement log entry	Eric Richter	4	-8/+13
2016-06-30	ima: extend ima_get_action() to return the policy pcr	Eric Richter	5	-7/+14
2016-06-30	ima: add policy support for extending different pcrs	Eric Richter	1	-1/+28
2016-06-30	integrity: add measured_pcrs field to integrity cache	Eric Richter	2	-0/+3
2016-06-27	netlabel: Implement CALIPSO config functions for SMACK.	Huw Davies	4	-0/+238
2016-06-27	calipso: Add a label cache.	Huw Davies	8	-12/+360
2016-06-27	calipso: Add validation of CALIPSO option.	Huw Davies	3	-0/+74
2016-06-27	netlabel: Pass a family parameter to netlbl_skbuff_err().	Huw Davies	6	-12/+19
2016-06-27	calipso: Allow the lsm to label the skbuff directly.	Huw Davies	6	-4/+308
2016-06-27	ipv6: constify the skb pointer of ipv6_find_tlv().	Huw Davies	2	-2/+2
2016-06-27	calipso: Allow request sockets to be relabelled by the lsm.	Huw Davies	6	-8/+163
2016-06-27	ipv6: Allow request socks to contain IPv6 options.	Huw Davies	4	-7/+27
2016-06-27	netlabel: Prevent setsockopt() from changing the hop-by-hop option.	Huw Davies	1	-1/+16
2016-06-27	calipso: Set the calipso socket label to match the secattr.	Huw Davies	10	-10/+728
2016-06-27	netlabel: Move bitmap manipulation functions to the NetLabel core.	Huw Davies	3	-79/+85
2016-06-27	ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer.	Huw Davies	2	-0/+55
2016-06-27	netlabel: Add support for removing a CALIPSO DOI.	Huw Davies	4	-0/+150
2016-06-27	netlabel: Add support for creating a CALIPSO protocol domain mapping.	Huw Davies	4	-5/+89