Age | Commit message (Expand) | Author | Files | Lines |
2008-04-12 | LSM: Make the Labeled IPsec hooks more stack friendly | Paul Moore | 4 | -45/+42 |
2008-04-12 | NetLabel: Allow passing the LSM domain as a shared pointer | Paul Moore | 2 | -2/+2 |
2008-04-10 | SELinux: don't BUG if fs reuses a superblock | Eric Paris | 1 | -4/+4 |
2008-04-08 | SELinux: more GFP_NOFS fixups to prevent selinux from re-entering the fs code | Stephen Smalley | 3 | -9/+13 |
2008-04-04 | selinux: prevent rentry into the FS | Josef Bacik | 1 | -2/+2 |
2008-04-03 | Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/... | David S. Miller | 5 | -83/+16 |
2008-04-02 | selinux: handle files opened with flags 3 by checking ioctl permission | Stephen Smalley | 1 | -0/+6 |
2008-03-26 | [NET] NETNS: Omit net_device->nd_net without CONFIG_NET_NS. | YOSHIFUJI Hideaki | 1 | -1/+1 |
2008-03-24 | smackfs: remove redundant lock, fix open(,O_RDWR) | Ahmed S. Darwish | 1 | -33/+2 |
2008-03-20 | file capabilities: remove cap_task_kill() | Serge Hallyn | 3 | -46/+0 |
2008-03-19 | smack: do not dereference NULL ipc object | Ahmed S. Darwish | 1 | -3/+6 |
2008-03-18 | make selinux_parse_opts_str() static | Adrian Bunk | 1 | -1/+2 |
2008-03-13 | smackfs: do not trust `count' in inodes write()s | Ahmed S. Darwish | 2 | -19/+20 |
2008-03-06 | LSM/SELinux: Interfaces to allow FS to control mount options | Eric Paris | 5 | -107/+128 |
2008-02-23 | Smack: update for file capabilities | Casey Schaufler | 1 | -13/+74 |
2008-02-23 | file capabilities: simplify signal check | Serge E. Hallyn | 1 | -1/+1 |
2008-02-19 | Smack: unlabeled outgoing ambient packets | Casey Schaufler | 2 | -23/+74 |
2008-02-14 | d_path: Use struct path in struct avc_audit_data | Jan Blunck | 3 | -25/+24 |
2008-02-14 | Embed a struct path into struct nameidata instead of nd->{dentry,mnt} | Jan Blunck | 2 | -3/+3 |
2008-02-13 | Smack: check for 'struct socket' with NULL sk | Ahmed S. Darwish | 1 | -4/+5 |
2008-02-11 | selinux: support 64-bit capabilities | Stephen Smalley | 5 | -2/+27 |
2008-02-07 | Convert ERR_PTR(PTR_ERR(p)) instances to ERR_CAST(p) | David Howells | 4 | -4/+4 |
2008-02-06 | SELinux: Remove security_get_policycaps() | Paul Moore | 2 | -34/+0 |
2008-02-06 | security: allow Kconfig to set default mmap_min_addr protection | Eric Paris | 2 | -1/+21 |
2008-02-05 | Smack: Simplified Mandatory Access Control Kernel | Casey Schaufler | 8 | -0/+4095 |
2008-02-05 | capabilities: introduce per-process capability bounding set | Serge E. Hallyn | 1 | -17/+27 |
2008-02-05 | Add 64-bit capability support to the kernel | Andrew Morgan | 2 | -36/+68 |
2008-02-05 | revert "capabilities: clean up file capability reading" | Andrew Morton | 1 | -15/+8 |
2008-02-05 | VFS/Security: Rework inode_getsecurity and callers to return resulting buffer | David P. Quigley | 3 | -31/+18 |
2008-02-01 | [AUDIT] add session id to audit messages | Eric Paris | 2 | -9/+13 |
2008-02-01 | [PATCH] switch audit_get_loginuid() to task_struct * | Al Viro | 2 | -4/+4 |
2008-01-31 | [SELinux]: Fix double free in selinux_netlbl_sock_setsid() | Paul Moore | 1 | -1/+0 |
2008-01-30 | security: compile capabilities by default | sergeh@us.ibm.com | 1 | -0/+1 |
2008-01-30 | selinux: make selinux_set_mnt_opts() static | Adrian Bunk | 1 | -2/+2 |
2008-01-30 | SELinux: Add warning messages on network denial due to error | Paul Moore | 3 | -8/+40 |
2008-01-30 | SELinux: Add network ingress and egress control permission checks | Paul Moore | 1 | -122/+280 |
2008-01-30 | SELinux: Allow NetLabel to directly cache SIDs | Paul Moore | 5 | -134/+55 |
2008-01-30 | SELinux: Enable dynamic enable/disable of the network access checks | Paul Moore | 4 | -13/+83 |
2008-01-30 | SELinux: Better integration between peer labeling subsystems | Paul Moore | 6 | -100/+208 |
2008-01-30 | SELinux: Add a new peer class and permissions to the Flask definitions | Paul Moore | 4 | -0/+26 |
2008-01-30 | SELinux: Add a capabilities bitmap to SELinux policy version 22 | Paul Moore | 6 | -8/+185 |
2008-01-30 | SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu... | Paul Moore | 5 | -17/+416 |
2008-01-30 | SELinux: Only store the network interface's ifindex | Paul Moore | 3 | -6/+15 |
2008-01-30 | SELinux: Convert the netif code to use ifindex values | Paul Moore | 6 | -125/+155 |
2008-01-30 | NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu... | Paul Moore | 3 | -15/+38 |
2008-01-30 | NetLabel: Add secid token support to the NetLabel secattr struct | Paul Moore | 2 | -6/+9 |
2008-01-28 | [NETFILTER]: Introduce NF_INET_ hook values | Patrick McHardy | 1 | -2/+2 |
2008-01-26 | selinux: fix labeling of /proc/net inodes | Stephen Smalley | 1 | -0/+3 |
2008-01-25 | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 8 | -277/+564 |
2008-01-24 | Kobject: convert remaining kobject_unregister() to kobject_put() | Greg Kroah-Hartman | 1 | -1/+1 |