summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen3-7/+8
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen9-127/+172
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen1-17/+336
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen1-29/+24
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen1-61/+36
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen7-69/+409
2017-06-08securityfs: add the ability to support symlinksJohn Johansen1-21/+123
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen4-86/+53
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen6-17/+34
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen2-1/+2
2017-06-08apparmor: move file context into file.hJohn Johansen2-32/+32
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider1-2/+2
2017-06-08apparmor: Fix error cod in __aa_fs_profile_mkdir()Dan Carpenter1-2/+4
2017-06-08apparmorfs: Use seq_putc() in two functionsMarkus Elfring1-2/+2
2017-06-08apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()Markus Elfring1-4/+3
2017-06-05fs: switch ->s_uuid to uuid_tChristoph Hellwig2-2/+2
2017-06-05ima/policy: switch to use uuid_tChristoph Hellwig1-6/+5
2017-06-05block: remove blk_part_pack_uuidChristoph Hellwig1-2/+1
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal1-4/+20
2017-06-01Smack: Use cap_capable in privilege checkCasey Schaufler2-9/+12
2017-06-01Smack: Safer check for a socket in file_receiveCasey Schaufler1-1/+1
2017-06-01smack: use pernet operations for hook registrationFlorian Westphal1-8/+18
2017-05-25sel_write_validatetrans(): don't open-code memdup_user_nul()Al Viro1-7/+5
2017-05-23selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens5-3/+288
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens5-0/+75
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens5-0/+77
2017-05-23selinux: Allocate and free infiniband security hooksDaniel Jurgens2-1/+29
2017-05-23selinux: Create policydb version for Infiniband supportDaniel Jurgens3-24/+118
2017-05-23IB/core: Enforce security on management datagramsDaniel Jurgens1-0/+6
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens3-0/+33
2017-05-23IB/core: Enforce PKey security on QPsDaniel Jurgens2-0/+31
2017-05-23selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley3-11/+27
2017-05-23selinux: do not check open permission on socketsStephen Smalley1-3/+7
2017-05-23selinux: add a map permission check for mmapStephen Smalley2-1/+13
2017-05-23selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley1-8/+15
2017-05-23selinux: Return an error code only as a constant in sidtab_insert()Markus Elfring1-17/+10
2017-05-23selinux: Return directly after a failed memory allocation in policydb_index()Markus Elfring1-10/+5
2017-05-23selinux: Use task_alloc hook rather than task_create hookTetsuo Handa1-2/+3
2017-05-22Sync to mainline for security submaintainers to work againstJames Morris15-106/+63
2017-05-18doc: ReSTify keys-trusted-encrypted.txtKees Cook3-3/+3
2017-05-18doc: ReSTify keys-request-key.txtKees Cook2-2/+2
2017-05-18doc: ReSTify Yama.txtKees Cook1-1/+2
2017-05-18doc: ReSTify apparmor.txtKees Cook2-2/+2
2017-05-15security: Grammar s/allocates/allocated/Geert Uytterhoeven1-1/+1
2017-05-15LSM: Enable multiple calls to security_add_hooks() for the same LSMMickaël Salaün1-0/+19
2017-05-09Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds3-4/+4
2017-05-08apparmorfs: replace CURRENT_TIME with current_time()Deepa Dinamani1-1/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko1-16/+6
2017-05-08mm: introduce kv[mz]alloc helpersMichal Hocko5-44/+3
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-24 06:23:46 +0000