linux - Linux Kernel (branches are rebased on master from time to time)

Age	Commit message (Expand)	Author	Files	Lines
2017-06-10	apparmor: fix apparmor_query data	John Johansen	1	-2/+6
2017-06-10	apparmor: fix policy load/remove semantics	John Johansen	2	-15/+13
2017-06-10	apparmor: add namespace lookup fns()	John Johansen	3	-4/+73
2017-06-10	apparmor: cleanup __find_child()	John Johansen	1	-8/+8
2017-06-10	apparmor: provide information about path buffer size at boot	John Johansen	1	-2/+9
2017-06-10	apparmor: add profile permission query ability	John Johansen	1	-1/+102
2017-06-10	apparmor: switch from file_perms to aa_perms	John Johansen	5	-48/+29
2017-06-10	apparmor: add gerneric permissions struct and support fns	John Johansen	4	-17/+153
2017-06-10	apparmor: add fn to test if profile supports a given mediation class	John Johansen	1	-0/+10
2017-06-10	apparmor: speed up transactional queries	John Johansen	1	-11/+114
2017-06-10	apparmor: add label data availability to the feature set	John Johansen	1	-0/+10
2017-06-10	apparmor: add mkdir/rmdir interface to manage policy namespaces	John Johansen	1	-1/+94
2017-06-10	apparmor: add policy revision file interface	John Johansen	4	-1/+116
2017-06-10	apparmor: provide finer control over policy management	John Johansen	3	-23/+35
2017-06-09	security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...	Scott Mayhew	2	-4/+38
2017-06-09	selinux: use kmem_cache for ebitmap	Junil Lee	3	-6/+27
2017-06-09	apparmor: rework perm mapping to a slightly broader set	John Johansen	5	-53/+133
2017-06-08	apparmor: move permissions into their own file to be more easily shared	John Johansen	4	-19/+43
2017-06-08	apparmor: convert from securityfs to apparmorfs for policy ns files	John Johansen	1	-26/+37
2017-06-08	apparmor: allow specifying an already created dir to create ns entries in	John Johansen	3	-7/+8
2017-06-08	apparmor: rename apparmor file fns and data to indicate use	John Johansen	9	-127/+172
2017-06-08	apparmor: add custom apparmorfs that will be used by policy namespace files	John Johansen	1	-17/+336
2017-06-08	apparmor: use macro template to simplify namespace seq_files	John Johansen	1	-29/+24
2017-06-08	apparmor: use macro template to simplify profile seq_files	John Johansen	1	-61/+36
2017-06-08	apparmor: move to per loaddata files, instead of replicating in profiles	John Johansen	7	-69/+409
2017-06-08	securityfs: add the ability to support symlinks	John Johansen	1	-21/+123
2017-06-08	apparmor: Move path lookup to using preallocated buffers	John Johansen	4	-86/+53
2017-06-08	apparmor: allow profiles to provide info to disconnected paths	John Johansen	6	-17/+34
2017-06-08	apparmor: make internal lib fn skipn_spaces available to the rest of apparmor	John Johansen	2	-1/+2
2017-06-08	apparmor: move file context into file.h	John Johansen	2	-32/+32
2017-06-08	security/apparmor: Use POSIX-compatible "printf '%s'"	Thomas Schneider	1	-2/+2
2017-06-08	apparmor: Fix error cod in __aa_fs_profile_mkdir()	Dan Carpenter	1	-2/+4
2017-06-08	apparmorfs: Use seq_putc() in two functions	Markus Elfring	1	-2/+2
2017-06-08	apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()	Markus Elfring	1	-4/+3
2017-06-02	selinux: use pernet operations for hook registration	Florian Westphal	1	-4/+20
2017-06-01	Smack: Use cap_capable in privilege check	Casey Schaufler	2	-9/+12
2017-06-01	Smack: Safer check for a socket in file_receive	Casey Schaufler	1	-1/+1
2017-06-01	smack: use pernet operations for hook registration	Florian Westphal	1	-8/+18
2017-05-23	selinux: Add a cache for quicker retreival of PKey SIDs	Daniel Jurgens	5	-3/+288
2017-05-23	selinux: Add IB Port SMP access vector	Daniel Jurgens	5	-0/+75
2017-05-23	selinux: Implement Infiniband PKey "Access" access vector	Daniel Jurgens	5	-0/+77
2017-05-23	selinux: Allocate and free infiniband security hooks	Daniel Jurgens	2	-1/+29
2017-05-23	selinux: Create policydb version for Infiniband support	Daniel Jurgens	3	-24/+118
2017-05-23	IB/core: Enforce security on management datagrams	Daniel Jurgens	1	-0/+6
2017-05-23	selinux lsm IB/core: Implement LSM notification system	Daniel Jurgens	3	-0/+33
2017-05-23	IB/core: Enforce PKey security on QPs	Daniel Jurgens	2	-0/+31
2017-05-23	selinux: Remove redundant check for unknown labeling behavior	Matthias Kaehlcke	1	-16/+0
2017-05-23	selinux: log policy capability state when a policy is loaded	Stephen Smalley	3	-11/+27
2017-05-23	selinux: do not check open permission on sockets	Stephen Smalley	1	-3/+7
2017-05-23	selinux: add a map permission check for mmap	Stephen Smalley	2	-1/+13