summaryrefslogtreecommitdiffstats
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2009-01-04audit: validate comparison operations, store them in sane formAl Viro1-13/+13
2009-01-01cpumask: prepare for iterators to only go to nr_cpu_ids/nr_cpumask_bits.: coreRusty Russell1-1/+1
2008-12-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds2-4/+4
2008-12-20SELinux: don't check permissions for kernel mountsJames Morris1-0/+4
2008-12-20security: pass mount flags to security_sb_kern_mount()James Morris1-1/+1
2008-12-20SELinux: correctly detect proc filesystems of the form "proc/foo"Stephen Smalley1-1/+1
2008-11-14CRED: Allow kernel services to override LSM settings for task actionsDavid Howells1-0/+46
2008-11-14CRED: Add a kernel_service object class to SELinuxDavid Howells4-0/+10
2008-11-14CRED: Differentiate objective and effective subjective credentials on a taskDavid Howells1-24/+41
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells2-176/+118
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-146/+140
2008-11-14CRED: Pass credentials through dentry_open()David Howells1-6/+9
2008-11-14CRED: Make inode_has_perm() and file_has_perm() take a cred pointerDavid Howells1-48/+92
2008-11-14CRED: Wrap access to SELinux's task SIDDavid Howells1-194/+218
2008-11-14CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells1-4/+9
2008-11-14CRED: Wrap current->cred and a few other accessorsDavid Howells2-5/+9
2008-11-14CRED: Detach the credentials from task_structDavid Howells1-17/+15
2008-11-14CRED: Separate task security context from task_structDavid Howells4-62/+64
2008-11-14CRED: Constify the kernel_cap_t arguments to the capset LSM hooksDavid Howells1-4/+6
2008-11-14CRED: Neuter sys_capset()David Howells1-5/+5
2008-11-11Currently SELinux jumps through some ugly hoops to not audit a capbilityEric Paris1-17/+2
2008-11-11Add a new capable interface that will be used by systems that use audit toEric Paris1-7/+13
2008-11-09SELinux: Use unknown perm handling to handle unknown netlink msg typesEric Paris1-1/+1
2008-11-06Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-3/+5
2008-11-06Merge branch 'master' into nextJames Morris1-13/+9
2008-11-06selinux: recognize netlink messages for 'ip addrlabel'Michal Schmidt1-0/+3
2008-11-05SELinux: hold tasklist_lock and siglock while waking wait_chldexitEric Paris1-0/+7
2008-11-01SELinux: properly handle empty tty_files listEric Paris1-3/+5
2008-10-31misc: replace NIPQUAD()Harvey Harrison1-1/+1
2008-10-31SELinux: check open perms in dentry_open not inode_permissionEric Paris1-29/+30
2008-10-29net: replace %p6 with %pI6Harvey Harrison1-1/+1
2008-10-28misc: replace NIP6_FMT with %p6 format specifierHarvey Harrison1-1/+1
2008-10-28net: reduce structures when XFRM=nAlexey Dobriyan1-2/+2
2008-10-20Merge branches 'timers/clocksource', 'timers/hrtimers', 'timers/nohz', 'timer...Thomas Gleixner18-220/+946
2008-10-13vfs: Use const for kernel parser tableSteven Whitehouse1-1/+1
2008-10-13Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds5-110/+465
2008-10-13tty: Redo current tty lockingAlan Cox1-2/+0
2008-10-13tty: Make get_current_tty use a krefAlan Cox1-1/+2
2008-10-11Merge branch 'master' of git://git.infradead.org/users/pcmoore/lblnet-2.6_nex...James Morris5-110/+465
2008-10-10netlabel: Changes to the NetLabel security attributes to allow LSMs to pass f...Paul Moore1-1/+2
2008-10-10selinux: Cache NetLabel secattrs in the socket's security structPaul Moore4-39/+91
2008-10-10selinux: Set socket NetLabel based on connection endpointPaul Moore4-36/+142
2008-10-10netlabel: Add functionality to set the security attributes of a packetPaul Moore4-3/+125
2008-10-10selinux: Fix missing calls to netlbl_skbuff_err()Paul Moore3-5/+43
2008-10-10selinux: Fix a problem in security_netlbl_sid_to_secattr()Paul Moore1-2/+8
2008-10-10selinux: Better local/forward check in selinux_ip_postroute()Paul Moore1-45/+81
2008-10-10selinux: Correctly handle IPv4 packets on IPv6 sockets in all casesPaul Moore1-5/+17
2008-10-10selinux: Cleanup the NetLabel glue codePaul Moore1-28/+10
2008-10-04selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid()Paul Moore1-7/+4
2008-10-04selinux: Fix an uninitialized variable BUG/panic in selinux_secattr_to_sid()Paul Moore1-7/+4