summaryrefslogtreecommitdiffstats
path: root/security/selinux/xfrm.c
AgeCommit message (Expand)AuthorFilesLines
2021-01-12selinux: mark selinux_xfrm_refcount as __read_mostlyOndrej Mosnacek1-1/+1
2020-11-23lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore1-6/+7
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-01-08SELinux: Abstract use of cred security blobCasey Schaufler1-2/+2
2018-12-19net: use skb_sec_path helper in more placesFlorian Westphal1-2/+2
2018-03-20selinux: wrap AVC stateStephen Smalley1-6/+11
2018-03-01selinux: wrap global selinux stateStephen Smalley1-2/+4
2017-11-30net: Create and use new helper xfrm_dst_child().David Miller1-1/+1
2015-06-18netfilter: Remove spurios included of netfilter.hEric W Biederman1-3/+0
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov1-6/+8
2013-12-12selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore1-10/+41
2013-12-04selinux: fix possible memory leakGeyslan G. Bem1-4/+7
2013-09-26selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong1-2/+2
2013-07-25selinux: cleanup selinux_xfrm_decode_session()Paul Moore1-11/+12
2013-07-25selinux: cleanup some comment and whitespace issues in the XFRM codePaul Moore1-13/+10
2013-07-25selinux: cleanup selinux_xfrm_sock_rcv_skb() and selinux_xfrm_postroute_last()Paul Moore1-52/+33
2013-07-25selinux: cleanup selinux_xfrm_policy_lookup() and selinux_xfrm_state_pol_flow...Paul Moore1-36/+18
2013-07-25selinux: cleanup and consolidate the XFRM alloc/clone/delete/free codePaul Moore1-31/+40
2013-07-25lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore1-109/+90
2013-05-31selinux: fix the labeled xfrm/IPsec reference count handlingPaul Moore1-20/+14
2013-03-19selinux: use GFP_ATOMIC under spin_lockDan Carpenter1-1/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma1-1/+1
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds1-3/+3
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller1-2/+2
2011-02-25selinux: Fix check for xfrm selinux context algorithmSteffen Klassert1-1/+1
2011-02-22xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller1-1/+1
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2009-08-17SELinux: Convert avc_audit to use lsm_audit.hThomas Liu1-2/+2
2009-07-13Revert "SELinux: Convert avc_audit to use lsm_audit.h"James Morris1-2/+2
2009-07-13SELinux: Convert avc_audit to use lsm_audit.hThomas Liu1-2/+2
2009-06-03net: skb->dst accessorsEric Dumazet1-1/+1
2008-11-14CRED: Wrap current->cred and a few other accessorsDavid Howells1-3/+3
2008-11-14CRED: Separate task security context from task_structDavid Howells1-3/+3
2008-04-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-6/+3
2008-04-21SELinux: xfrm.c whitespace, syntax, and static declaraction cleanupsEric Paris1-6/+3
2008-04-18security: Remove unnecessary inclusions of asm/semaphore.hMatthew Wilcox1-1/+0
2008-04-12LSM: Make the Labeled IPsec hooks more stack friendlyPaul Moore1-23/+16
2008-01-30SELinux: Enable dynamic enable/disable of the network access checksPaul Moore1-2/+16
2007-11-08SELinux: suppress a warning for 64k pages.Stephen Rothwell1-6/+7
2007-10-18sparse pointer use of zero as nullStephen Hemminger1-1/+1
2007-10-17security: Convert LSM into a static interfaceJames Morris1-1/+0
2007-07-25SELinux: null-terminate context string in selinux_xfrm_sec_ctx_allocVenkat Yekkirala1-1/+2
2006-12-02SELinux: peer secid consolidation for external network labelingPaul Moore1-33/+0
2006-12-02SELinux: Fix SA selection semanticsVenkat Yekkirala1-52/+49
2006-12-02SELinux: Return correct context for SO_PEERSECVenkat Yekkirala1-37/+3
2006-12-02SELinux: Various xfrm labeling fixesVenkat Yekkirala1-26/+9
2006-10-11IPsec: correct semantics for SELinux policy matchingVenkat Yekkirala1-12/+41
2006-09-22[MLSXFRM]: Auto-labeling of child socketsVenkat Yekkirala1-1/+0
2006-09-22[MLSXFRM]: Default labeling of socket specific IPSec policiesVenkat Yekkirala1-11/+22
2006-09-22[MLSXFRM]: Add flow labelingVenkat Yekkirala1-4/+7