summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2018-03-23ima: fail file signature verification on non-init mounted filesystemsMimi Zohar1-1/+14
2018-03-23IMA: Support using new creds in appraisal policyMatthew Garrett7-29/+79
2018-03-23security: Add a cred_getsecid hookMatthew Garrett3-0/+31
2018-03-22msg/security: Pass kern_ipc_perm not msg_queue into the msg_queue security hooksEric W. Biederman3-36/+36
2018-03-22shm/security: Pass kern_ipc_perm not shmid_kernel into the shm security hooksEric W. Biederman3-30/+30
2018-03-22sem/security: Pass kern_ipc_perm not sem_array into the sem security hooksEric W. Biederman3-30/+30
2018-03-23Merge tag 'v4.16-rc6' into next-generalJames Morris2-23/+88
2018-03-20selinux: wrap AVC stateStephen Smalley9-297/+512
2018-03-20selinux: wrap selinuxfs stateStephen Smalley1-177/+261
2018-03-20selinux: fix handling of uninitialized selinux state in get_bools/classesStephen Smalley1-0/+13
2018-03-13apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen2-12/+2
2018-03-13apparmor: add base infastructure for socket mediationJohn Johansen13-8/+786
2018-03-07usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as...Stephen Smalley4-16/+24
2018-03-02selinux: Fix ltp test connect-syscall failureRichard Haines1-12/+30
2018-03-02selinux: rename the {is,set}_enforcing() functionsPaul Moore6-14/+14
2018-03-01selinux: wrap global selinux stateStephen Smalley25-797/+1155
2018-02-28Smack: Handle CGROUP2 in the same way that CGROUPJosé Bollo1-0/+2
2018-02-27net: Convert smack_net_opsKirill Tkhai1-0/+1
2018-02-27net: Convert selinux_net_opsKirill Tkhai1-0/+1
2018-02-26selinux: fix typo in selinux_netlbl_sctp_sk_clone declarationArnd Bergmann1-1/+2
2018-02-26selinux: Add SCTP supportRichard Haines5-32/+408
2018-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-23/+88
2018-02-22integrity/security: fix digsig.c build error with header fileRandy Dunlap1-0/+1
2018-02-22security: Add support for SCTP security hooksRichard Haines1-0/+22
2018-02-22get rid of pointless includes of fs_struct.hAl Viro1-1/+0
2018-02-22KEYS: Use individual pages in big_key for crypto buffersDavid Howells1-23/+87
2018-02-12net: make getname() functions return length rather than use int* parameterDenys Vlasenko1-2/+3
2018-02-11vfs: do bulk POLL* -> EPOLL* replacementLinus Torvalds4-13/+13
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen4-14/+158
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen5-57/+43
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett4-34/+217
2018-02-09apparmor: cleanup: simplify code to get ns symlink nameJohn Johansen1-19/+6
2018-02-09apparmor: cleanup create_aafs() error pathJohn Johansen1-20/+12
2018-02-09apparmor: dfa split verification of table headersJohn Johansen1-48/+68
2018-02-09apparmor: dfa add support for state differential encodingJohn Johansen2-1/+29
2018-02-09apparmor: dfa move character match into a macroJohn Johansen1-47/+27
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen4-65/+110
2018-02-09apparmor: move context.h to cred.hJohn Johansen15-14/+14
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen6-98/+105
2018-02-09apparmor: cleanup, drop unused fn __aa_task_is_confined()John Johansen1-11/+0
2018-02-09apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen1-2/+3
2018-02-09apparmor: rename tctx to ctxJohn Johansen3-30/+29
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen4-129/+47
2018-02-09apparmor: move task domain change info to task securityJohn Johansen4-52/+132
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen5-46/+45
2018-02-09apparmor: audit unknown signal numbersJohn Johansen3-4/+12
2018-02-09apparmor: make signal label match work when matching stacked labelsJohn Johansen1-28/+12
2018-02-09security: apparmor: remove duplicate includesPravin Shedge1-1/+0
2018-02-09apparmor: root view labels should not be under user controlJohn Johansen1-3/+2
2018-02-09apparmor: cleanup add proper line wrapping to nulldfa.inJohn Johansen1-1/+107