linux - Linux Kernel (branches are rebased on master from time to time)

Age	Commit message (Expand)	Author	Files	Lines
2017-06-10	apparmor: switch from profiles to using labels on contexts	John Johansen	20	-529/+686
2017-06-10	apparmor: add the base fns() for domain labels	John Johansen	2	-0/+2561
2017-06-10	apparmor: revalidate files during exec	John Johansen	4	-0/+81
2017-06-10	apparmor: cleanup rename XXX_file_context() to XXX_file_ctx()	John Johansen	2	-11/+16
2017-06-10	apparmor: convert aa_change_XXX bool parameters to flags	John Johansen	5	-32/+29
2017-06-10	apparmor: cleanup remove unused and not fully implemented profile rename	John Johansen	1	-37/+2
2017-06-10	apparmor: refactor updating profiles to the newest parent	John Johansen	1	-4/+31
2017-06-10	apparmor: share profile name on replacement	John Johansen	3	-9/+72
2017-06-10	apparmor: convert to profile block critical sections	John Johansen	8	-56/+162
2017-06-10	apparmor: move bprm_committing_creds/committed_creds to lsm.c	John Johansen	3	-32/+30
2017-06-10	apparmor: fix display of ns name	John Johansen	1	-1/+1
2017-06-10	apparmor: fix apparmor_query data	John Johansen	1	-2/+6
2017-06-10	apparmor: fix policy load/remove semantics	John Johansen	2	-15/+13
2017-06-10	apparmor: add namespace lookup fns()	John Johansen	3	-4/+73
2017-06-10	apparmor: cleanup __find_child()	John Johansen	1	-8/+8
2017-06-10	apparmor: provide information about path buffer size at boot	John Johansen	1	-2/+9
2017-06-10	apparmor: add profile permission query ability	John Johansen	1	-1/+102
2017-06-10	apparmor: switch from file_perms to aa_perms	John Johansen	5	-48/+29
2017-06-10	apparmor: add gerneric permissions struct and support fns	John Johansen	4	-17/+153
2017-06-10	apparmor: add fn to test if profile supports a given mediation class	John Johansen	1	-0/+10
2017-06-10	apparmor: speed up transactional queries	John Johansen	1	-11/+114
2017-06-10	apparmor: add label data availability to the feature set	John Johansen	1	-0/+10
2017-06-10	apparmor: add mkdir/rmdir interface to manage policy namespaces	John Johansen	1	-1/+94
2017-06-10	apparmor: add policy revision file interface	John Johansen	4	-1/+116
2017-06-10	apparmor: provide finer control over policy management	John Johansen	3	-23/+35
2017-06-09	security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...	Scott Mayhew	2	-4/+38
2017-06-09	selinux: use kmem_cache for ebitmap	Junil Lee	3	-6/+27
2017-06-09	apparmor: rework perm mapping to a slightly broader set	John Johansen	5	-53/+133
2017-06-09	KEYS: fix refcount_inc() on zero	Mark Rutland	1	-7/+4
2017-06-09	KEYS: Convert KEYCTL_DH_COMPUTE to use the crypto KPP API	Mat Martineau	2	-103/+171
2017-06-09	KEYS: DH: ensure the KDF counter is properly aligned	Eric Biggers	1	-13/+3
2017-06-09	KEYS: DH: don't feed uninitialized "otherinfo" into KDF	Eric Biggers	1	-1/+1
2017-06-09	KEYS: DH: forbid using digest_null as the KDF hash	Eric Biggers	1	-1/+11
2017-06-09	KEYS: sanitize key structs before freeing	Eric Biggers	1	-3/+1
2017-06-09	KEYS: trusted: sanitize all key material	Eric Biggers	1	-28/+22
2017-06-09	KEYS: encrypted: sanitize all key material	Eric Biggers	1	-18/+13
2017-06-09	KEYS: user_defined: sanitize key payloads	Eric Biggers	1	-4/+12
2017-06-09	KEYS: sanitize add_key() and keyctl() key payloads	Eric Biggers	1	-3/+9
2017-06-09	KEYS: fix freeing uninitialized memory in key_update()	Eric Biggers	1	-3/+2
2017-06-09	KEYS: fix dereferencing NULL payload with nonzero length	Eric Biggers	1	-2/+2
2017-06-09	KEYS: encrypted: use constant-time HMAC comparison	Eric Biggers	1	-2/+3
2017-06-09	KEYS: encrypted: fix race causing incorrect HMAC calculations	Eric Biggers	1	-83/+32
2017-06-09	KEYS: encrypted: fix buffer overread in valid_master_desc()	Eric Biggers	1	-16/+15
2017-06-09	KEYS: encrypted: avoid encrypting/decrypting stack buffers	Eric Biggers	1	-8/+9
2017-06-09	KEYS: put keyring if install_session_keyring_to_cred() fails	Eric Biggers	1	-3/+4
2017-06-09	KEYS: Delete an error message for a failed memory allocation in get_derived_k...	Markus Elfring	1	-3/+2
2017-06-09	security: use READ_ONCE instead of deprecated ACCESS_ONCE	Davidlohr Bueso	1	-6/+6
2017-06-09	security/keys: add CONFIG_KEYS_COMPAT to Kconfig	Bilal Amarni	1	-0/+4
2017-06-08	apparmor: move permissions into their own file to be more easily shared	John Johansen	4	-19/+43
2017-06-08	apparmor: convert from securityfs to apparmorfs for policy ns files	John Johansen	1	-26/+37