summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-03-07ima: use static const char array definitionsMimi Zohar4-10/+10
2014-03-04ima: new helper: file_inode(file)Libo Chen1-1/+1
2014-02-17security: cleanup Makefiles to use standard syntax for specifying sub-directo...Sam Ravnborg2-8/+8
2014-02-06security: replace strict_strto*() with kstrto*()Jingoo Han7-12/+12
2014-01-08Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris1-1/+13
2014-01-07SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2014-01-07Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris7-39/+164
2014-01-06Merge to v3.13-rc7 for prerequisite changes in the Xen code for TPMJames Morris29-326/+361
2014-01-03ima: remove unneeded size_limit argument from ima_eventdigest_init_common()Roberto Sassu1-8/+6
2014-01-03ima: pass HASH_ALGO__LAST as hash algo in ima_eventdigest_init()Roberto Sassu1-2/+2
2014-01-03ima: change the default hash algorithm to SHA1 in ima_eventdigest_ng_init()Roberto Sassu1-1/+1
2013-12-31Smack: File receive audit correctionCasey Schaufler1-1/+1
2013-12-31Smack: Rationalize mount restrictionsCasey Schaufler1-54/+29
2013-12-23Smack: change rule cap checkCasey Schaufler1-1/+1
2013-12-23Smack: Make the syslog control configurableCasey Schaufler3-13/+99
2013-12-23selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-23selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-19Smack: Prevent the * and @ labels from being used in SMACK64EXECCasey Schaufler1-16/+37
2013-12-16selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-16SELinux: remove duplicated include from hooks.cWei Yongjun1-1/+0
2013-12-15Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds3-42/+165
2013-12-15Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2-60/+22
2013-12-13selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2-60/+22
2013-12-13Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris3-42/+165
2013-12-12selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+35
2013-12-12selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-12Merge tag 'keys-devel-20131210' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds3-17/+10
2013-12-11selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-11smack: fix: allow either entry be missing on access/access2 check (v2)Jarkko Sakkinen1-14/+15
2013-12-10selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+35
2013-12-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-04selinux: fix possible memory leakGeyslan G. Bem1-4/+7
2013-12-04selinux: pull address family directly from the request_sock structPaul Moore1-5/+1
2013-12-04selinux: ensure that the cached NetLabel secattr matches the desired SIDPaul Moore1-1/+30
2013-12-04selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-04selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-02ima: properly free ima_template_entry structuresRoberto Sassu3-5/+19
2013-12-02ima: Do not free 'entry' before it is initializedChristoph Paasch1-1/+0
2013-12-02security: shmem: implement kernel private shmem inodesEric Paris1-1/+1
2013-12-02KEYS: Fix searching of nested keyringsDavid Howells1-1/+1
2013-12-02KEYS: Fix multiple key add into associative arrayDavid Howells1-4/+3
2013-12-02KEYS: Fix the keyring hash functionDavid Howells1-4/+4
2013-12-02KEYS: Pre-clear struct key on allocationDavid Howells1-7/+1
2013-11-30ima: store address of template_fmt_copy in a pointer before calling strsepRoberto Sassu1-2/+4
2013-11-26Merge tag 'v3.12'Paul Moore33-619/+1720
2013-11-25selinux: fix possible memory leakGeyslan G. Bem1-4/+7
2013-11-25ima: make a copy of template_fmt in template_desc_init_fields()Roberto Sassu1-7/+14
2013-11-25ima: do not send field length to userspace for digest of ima templateRoberto Sassu3-5/+18