summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2010-12-23KEYS: Don't call up_write() if __key_link_begin() returns an errorDavid Howells1-1/+0
2010-11-15capabilities/syslog: open code cap_syslog logic to fix build failureEric Paris5-34/+10
2010-11-12Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2-3/+5
2010-11-12Restrict unprivileged access to kernel syslogDan Rosenberg2-0/+14
2010-11-11APPARMOR: Fix memory leak of apparmor_init()wzt.wzt@gmail.com1-2/+4
2010-11-11APPARMOR: Fix memory leak of alloc_namespace()wzt.wzt@gmail.com1-1/+1
2010-10-29convert get_sb_single() usersAl Viro3-16/+13
2010-10-28Fix install_process_keyring error handlingAndi Kleen1-1/+1
2010-10-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds4-4/+2
2010-10-26Merge branch 'ima-memory-use-fixes'Linus Torvalds5-177/+195
2010-10-26IMA: fix the ToMToU logicEric Paris1-5/+6
2010-10-26IMA: explicit IMA i_flag to remove global lock on inode_deleteEric Paris2-5/+12
2010-10-26IMA: drop refcnt from ima_iint_cache since it isn't neededEric Paris3-30/+19
2010-10-26IMA: only allocate iint when neededEric Paris2-39/+65
2010-10-26IMA: move read counter into struct inodeEric Paris4-34/+17
2010-10-26IMA: use i_writecount rather than a private counterEric Paris3-17/+6
2010-10-26IMA: use inode->i_lock to protect read and write countersEric Paris2-34/+24
2010-10-26IMA: convert internal flags from long to charEric Paris1-2/+2
2010-10-26IMA: use unsigned int instead of long for countersEric Paris3-9/+14
2010-10-26IMA: drop the inode opencount since it isn't needed for operationEric Paris3-14/+3
2010-10-26IMA: use rbtree instead of radix tree for inode information cacheEric Paris2-36/+75
2010-10-25fs: take dcache_lock inside __d_pathChristoph Hellwig2-4/+0
2010-10-25fs: do not assign default i_ino in new_inodeChristoph Hellwig2-0/+2
2010-10-22Merge branch 'llseek' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/bklLinus Torvalds3-3/+12
2010-10-21selinux: include vmalloc.h for vmalloc_userStephen Rothwell1-0/+1
2010-10-21selinux: implement mmap on /selinux/policyEric Paris2-1/+45
2010-10-21SELinux: allow userspace to read policy back out of the kernelEric Paris12-3/+1256
2010-10-21SELinux: drop useless (and incorrect) AVTAB_MAX_SIZEEric Paris2-3/+2
2010-10-21SELinux: deterministic ordering of range transition rulesEric Paris1-3/+13
2010-10-21security: secid_to_secctx returns len when data is NULLEric Paris2-3/+11
2010-10-21secmark: make secmark object handling genericEric Paris5-50/+59
2010-10-21AppArmor: Ensure the size of the copy is < the buffer allocated to hold itJohn Johansen1-1/+3
2010-10-21TOMOYO: Print URL information before panic().Tetsuo Handa1-1/+10
2010-10-21security: remove unused parameter from security_task_setscheduler()KOSAKI Motohiro4-12/+7
2010-10-21selinux: fix up style problem on /selinux/statusKaiGai Kohei2-11/+7
2010-10-21selinux: change to new flag variablematt mooney1-1/+1
2010-10-21selinux: really fix dependency causing parallel compile failure.Paul Gortmaker2-20/+6
2010-10-21selinux: fix parallel compile errorPaul Gortmaker1-1/+1
2010-10-21selinux: fast status update interface (/selinux/status)KaiGai Kohei5-1/+210
2010-10-21.gitignore: ignore apparmor/rlim_names.hYong Zhang1-0/+1
2010-10-21LSM: Fix security_module_enable() error.Tetsuo Handa1-10/+2
2010-10-21selinux: type_bounds_sanity_check has a meaningless variable declarationEric Paris1-2/+2
2010-10-21tomoyo: cleanup. don't store bogus pointerDan Carpenter1-2/+4
2010-10-15llseek: automatically add .llseek fopArnd Bergmann3-3/+12
2010-09-27TOMOYO: Don't abuse sys_getpid(), sys_getppid()Ben Hutchings2-4/+5
2010-09-10KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyringDavid Howells1-1/+2
2010-09-10KEYS: Fix RCU no-lock warning in keyctl_session_to_parent()David Howells1-0/+3
2010-09-08ima: always maintain countersMimi Zohar3-4/+9
2010-09-08AppArmor: Fix locking from removal of profile namespaceJohn Johansen1-2/+4
2010-09-08AppArmor: Fix splitting an fqname into separate namespace and profile namesJohn Johansen1-1/+1