summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-04-11Smack: fix the subject/object order in smack_ptrace_traceme()Lukasz Pawelczyk3-9/+29
2014-04-11Minor improvement of 'smack_sb_kern_mount'José Bollo1-3/+5
2014-03-19selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-03-19selinux: put the mmap() DAC controls before the MAC controlsPaul Moore1-12/+8
2014-03-12Merge branch 'next-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/zo...James Morris18-134/+153
2014-03-07evm: enable key retention service automaticallyDmitry Kasatkin1-2/+3
2014-03-07ima: skip memory allocation for empty filesDmitry Kasatkin1-8/+12
2014-03-07evm: EVM does not use MD5Dmitry Kasatkin1-1/+0
2014-03-07ima: return d_name.name if d_path failsDmitry Kasatkin2-7/+2
2014-03-07integrity: fix checkpatch errorsDmitry Kasatkin11-70/+69
2014-03-07ima: fix erroneous removal of security.ima xattrDmitry Kasatkin1-2/+4
2014-03-07security: integrity: Use a more current logging styleJoe Perches7-11/+27
2014-03-07ima: reduce memory usage when a template containing the n field is usedRoberto Sassu2-17/+13
2014-03-07ima: restore the original behavior for sending data with ima templateRoberto Sassu3-4/+10
2014-03-07Integrity: Pass commname via get_task_comm()Tetsuo Handa1-1/+2
2014-03-07ima: use static const char array definitionsMimi Zohar4-10/+10
2014-03-07security: have cap_dentry_init_security return errorJeff Layton1-1/+1
2014-03-04ima: new helper: file_inode(file)Libo Chen1-1/+1
2014-02-17security: cleanup Makefiles to use standard syntax for specifying sub-directo...Sam Ravnborg2-8/+8
2014-02-06security: replace strict_strto*() with kstrto*()Jingoo Han7-12/+12
2014-01-08Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris1-1/+13
2014-01-07SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2014-01-07Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris7-39/+164
2014-01-06Merge to v3.13-rc7 for prerequisite changes in the Xen code for TPMJames Morris29-326/+361
2014-01-03ima: remove unneeded size_limit argument from ima_eventdigest_init_common()Roberto Sassu1-8/+6
2014-01-03ima: pass HASH_ALGO__LAST as hash algo in ima_eventdigest_init()Roberto Sassu1-2/+2
2014-01-03ima: change the default hash algorithm to SHA1 in ima_eventdigest_ng_init()Roberto Sassu1-1/+1
2013-12-31Smack: File receive audit correctionCasey Schaufler1-1/+1
2013-12-31Smack: Rationalize mount restrictionsCasey Schaufler1-54/+29
2013-12-23Smack: change rule cap checkCasey Schaufler1-1/+1
2013-12-23Smack: Make the syslog control configurableCasey Schaufler3-13/+99
2013-12-23selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-23selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-19Smack: Prevent the * and @ labels from being used in SMACK64EXECCasey Schaufler1-16/+37
2013-12-16selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-16SELinux: remove duplicated include from hooks.cWei Yongjun1-1/+0
2013-12-15Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds3-42/+165
2013-12-15Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2-60/+22
2013-12-13selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2-60/+22
2013-12-13Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris3-42/+165
2013-12-12selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+35
2013-12-12selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-12Merge tag 'keys-devel-20131210' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds3-17/+10
2013-12-11selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-11smack: fix: allow either entry be missing on access/access2 check (v2)Jarkko Sakkinen1-14/+15
2013-12-10selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+35
2013-12-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-04selinux: fix possible memory leakGeyslan G. Bem1-4/+7