summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2019-07-07security/commoncap: Use xattr security prefix lenCarmeli Tamir1-2/+2
2019-07-04vfs: Convert smackfs to use the new mount APIDavid Howells1-12/+22
2019-07-04vfs: Convert selinuxfs to use the new mount APIDavid Howells1-5/+15
2019-07-04vfs: Convert securityfs to use the new mount APIDavid Howells1-6/+15
2019-07-04vfs: Convert apparmorfs to use the new mount APIDavid Howells1-5/+15
2019-07-03keys: Provide KEYCTL_GRANT_PERMISSIONDavid Howells4-1/+133
2019-07-01selinux: format all invalid context as untrustedRichard Guy Briggs1-10/+19
2019-06-30integrity: Introduce struct evm_xattrThiago Jung Bauermann3-7/+14
2019-06-30ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definitionThiago Jung Bauermann1-1/+7
2019-06-30IMA: Define a new template field bufPrakhar Srivastava5-1/+33
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells21-186/+496
2019-06-27keys: Pass the network namespace into request_key mechanismDavid Howells4-17/+36
2019-06-26keys: Network namespace domain tagDavid Howells1-1/+6
2019-06-26keys: Garbage collect keys for which the domain has been removedDavid Howells2-1/+17
2019-06-26keys: Include target namespace in match criteriaDavid Howells5-4/+39
2019-06-26keys: Move the user and user-session keyrings to the user_namespaceDavid Howells5-104/+187
2019-06-26keys: Namespace keyring namesDavid Howells2-57/+45
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells8-9/+22
2019-06-26keys: Cache the hash value to avoid lots of recalculationDavid Howells3-16/+22
2019-06-26keys: Simplify key description managementDavid Howells4-49/+30
2019-06-26keys: Kill off request_key_async{,_with_auxdata}David Howells1-50/+0
2019-06-24IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava4-0/+81
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller17-71/+65
2019-06-21Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds15-61/+15
2019-06-19IMA: support for per policy rule template formatsMatthew Garrett7-27/+76
2019-06-19keys: Cache result of request_key*() temporarily in task_structDavid Howells2-0/+55
2019-06-19keys: Provide request_key_rcu()David Howells1-0/+44
2019-06-19keys: Move the RCU locks outwards from the keyring search functionsDavid Howells6-60/+75
2019-06-19keys: Invalidate used request_key authentication keysDavid Howells2-3/+3
2019-06-19keys: Fix request_key() lack of Link perm check on found keyDavid Howells1-0/+10
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner15-61/+15
2019-06-19keys: Add capability-checking keyctl functionDavid Howells3-0/+40
2019-06-18apparmor: reset pos on failure to unpack for various functionsMike Salvatore1-8/+39
2019-06-18apparmor: enforce nullbyte at end of tag stringJann Horn1-1/+1
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen1-1/+10
2019-06-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller93-484/+133
2019-06-17integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven1-2/+3
2019-06-17locking/lockdep: Rename lockdep_assert_held_exclusive() -> lockdep_assert_hel...Nikolay Borisov1-4/+4
2019-06-14Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler1-5/+7
2019-06-14docs: cgroup-v1: convert docs to ReST and rename to *.rstMauro Carvalho Chehab1-1/+1
2019-06-14Merge tag 'v5.2-rc4' into mauroJonathan Corbet131-616/+157
2019-06-14ima: Use designated initializers for struct ima_event_dataThiago Jung Bauermann2-6/+11
2019-06-14ima: use the lsm policy update notifierJanne Karhunen3-20/+106
2019-06-14LSM: switch to blocking policy update notifiersJanne Karhunen3-12/+15
2019-06-14x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICYNayna Jain1-1/+2
2019-06-14ima: Make arch_policy_entry staticYueHaibing1-1/+1
2019-06-12Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2-13/+36
2019-06-12selinux: fix empty write to keycreate fileOndrej Mosnacek1-5/+6
2019-06-12selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang1-6/+14
2019-06-12selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang1-5/+14