summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2009-04-02devcgroup: avoid using cgroup_lockLi Zefan1-8/+13
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset4-10/+45
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore2-118/+143
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore2-10/+0
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore2-214/+7
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore4-187/+82
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa1-1/+1
2009-03-26smack: convert smack to standard linux listsEtienne Basset4-122/+168
2009-03-24Merge branch 'master' into nextJames Morris2-38/+14
2009-03-10SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris1-3/+9
2009-03-06SELinux: new permission between tty audit and audit socketEric Paris3-1/+3
2009-03-06SELinux: open perm for sock filesEric Paris3-0/+4
2009-03-05smack: fixes for unlabeled host supportetienne2-50/+57
2009-03-05smack: fixes for unlabeled host supportetienne1-15/+49
2009-03-02selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore1-2/+3
2009-02-27keys: make procfiles per-user-namespaceSerge E. Hallyn1-6/+49
2009-02-27keys: skip keys from another user namespaceSerge E. Hallyn1-0/+3
2009-02-27keys: consider user namespace in key_permissionSerge E. Hallyn1-0/+5
2009-02-27keys: distinguish per-uid keys in different namespacesSerge E. Hallyn5-5/+16
2009-02-23selinux: Fix the NetLabel glue code for setsockopt()Paul Moore1-1/+3
2009-02-23integrity: ima iint radix_tree_lookup locking fixMimi Zohar1-0/+2
2009-02-23TOMOYO: Do not call tomoyo_realpath_init unless registered.Tetsuo Handa3-6/+5
2009-02-21integrity: ima scatterlist bug fixMimi Zohar1-2/+2
2009-02-19smack: fix lots of kernel-doc notationRandy Dunlap3-37/+34
2009-02-16TOMOYO: Don't create securityfs entries unless registered.Tetsuo Handa1-0/+4
2009-02-14TOMOYO: Fix exception policy read failure.Tetsuo Handa1-1/+1
2009-02-14SELinux: convert the avc cache hash list to an hlistEric Paris1-20/+27
2009-02-14SELinux: code readability with avc_cacheEric Paris1-19/+44
2009-02-14SELinux: remove unused av.decided fieldEric Paris4-14/+6
2009-02-14SELinux: more careful use of avd in avc_has_perm_noauditEric Paris1-19/+24
2009-02-14SELinux: remove the unused ae.usedEric Paris1-21/+7
2009-02-14SELinux: check seqno when updating an avc_nodeEric Paris1-3/+6
2009-02-14SELinux: NULL terminate al contexts from diskEric Paris1-2/+4
2009-02-14SELinux: better printk when file with invalid label foundEric Paris1-4/+13
2009-02-14SELinux: call capabilities code directoryEric Paris1-17/+13
2009-02-13ima: fix build errorRandy Dunlap1-2/+2
2009-02-12tomoyo: fix sparse warningTetsuo Handa1-4/+4
2009-02-12security: change link order of LSMs so security=tomoyo worksJames Morris1-1/+1
2009-02-12Kconfig and MakefileKentaro Takeda4-0/+15
2009-02-12LSM adapter functions.Kentaro Takeda2-0/+399
2009-02-12Domain transition handler.Kentaro Takeda1-0/+878
2009-02-12File operation restriction part.Kentaro Takeda1-0/+1241
2009-02-12Common functions for TOMOYO Linux.Kentaro Takeda2-0/+2561
2009-02-12Memory and pathname management functions.Kentaro Takeda2-0/+550
2009-02-12integrity: audit updateMimi Zohar6-21/+25
2009-02-06Merge branch 'master' into nextJames Morris11-39/+170
2009-02-06IMA: fix ima_delete_rules() definitionJames Morris1-1/+1
2009-02-06Integrity: IMA file free imbalanceMimi Zohar3-0/+61
2009-02-06integrity: IMA policy openMimi Zohar1-1/+16
2009-02-06integrity: IMA policyMimi Zohar4-4/+386