summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2013-10-29apparmor: remove the "task" arg from may_change_ptraced_domain()Oleg Nesterov1-8/+6
2013-10-29apparmor: remove parent task info from audit loggingJohn Johansen2-7/+0
2013-10-29apparmor: remove tsk field from the apparmor_audit_structJohn Johansen1-8/+2
2013-10-29apparmor: fix capability to not use the current task, during reportingJohn Johansen6-22/+15
2013-10-30Merge branch 'smack-for-3.13' of git://git.gitorious.org/smack-next/kernel in...James Morris4-9/+34
2013-10-28Smack: Ptrace access check modeCasey Schaufler1-1/+1
2013-10-26ima: provide hash algo info in the xattrDmitry Kasatkin2-15/+59
2013-10-26ima: enable support for larger default filedata hash algorithmsMimi Zohar2-2/+59
2013-10-26ima: define kernel parameter 'ima_template=' to change configured defaultRoberto Sassu1-0/+31
2013-10-26ima: add Kconfig default measurement list templateMimi Zohar2-2/+27
2013-10-26ima: defer determining the appraisal hash algorithm for 'ima' templateRoberto Sassu1-1/+5
2013-10-26ima: add audit log support for larger hashesMimi Zohar1-1/+4
2013-10-25ima: switch to new template management mechanismRoberto Sassu5-97/+107
2013-10-25ima: define new template ima-ng and template fields d-ng and n-ngRoberto Sassu3-17/+150
2013-10-25ima: define template fields library and new helpersRoberto Sassu6-8/+242
2013-10-25ima: new templates management mechanismRoberto Sassu4-1/+146
2013-10-25ima: define new function ima_alloc_init_template() to APIRoberto Sassu3-39/+76
2013-10-25ima: pass the filename argument up to ima_add_template_entry()Roberto Sassu4-10/+13
2013-10-25ima: pass the file descriptor to ima_add_violation()Roberto Sassu3-5/+5
2013-10-25ima: ima_calc_boot_agregate must use SHA1Dmitry Kasatkin3-5/+31
2013-10-25ima: support arbitrary hash algorithms in ima_calc_buffer_hashDmitry Kasatkin2-6/+25
2013-10-25ima: provide dedicated hash algo allocation functionDmitry Kasatkin1-14/+29
2013-10-25ima: differentiate between template hash and file data hash sizesMimi Zohar6-12/+12
2013-10-25ima: use dynamically allocated hash storageDmitry Kasatkin4-30/+49
2013-10-25ima: pass full xattr with the signatureDmitry Kasatkin4-5/+7
2013-10-25ima: read and use signature hash algorithmDmitry Kasatkin6-25/+94
2013-10-25ima: provide support for arbitrary hash algorithmsDmitry Kasatkin7-32/+98
2013-10-25Revert "ima: policy for RAMFS"Mimi Zohar1-1/+0
2013-10-25ima: fix script messagesDmitry Kasatkin6-13/+13
2013-10-24device_cgroup: remove can_attachSerge Hallyn1-11/+0
2013-10-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller5-30/+17
2013-10-22Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris16-392/+432
2013-10-18Smack: Implement lock security modeCasey Schaufler4-8/+33
2013-10-16apparmor: fix bad lock balance when introspecting policyJohn Johansen1-3/+1
2013-10-16apparmor: fix memleak of the profile hashJohn Johansen1-0/+1
2013-10-14netfilter: pass hook ops to hookfnPatrick McHardy1-5/+5
2013-10-09net: fix build errors if ipv6 is disabledEric Dumazet1-0/+2
2013-10-09ipv6: make lookups simpler and fasterEric Dumazet1-3/+2
2013-10-04selinux: remove 'flags' parameter from avc_audit()Linus Torvalds3-4/+4
2013-10-04selinux: avc_has_perm_flags has no more usersLinus Torvalds2-17/+6
2013-10-04selinux: remove 'flags' parameter from inode_has_permLinus Torvalds1-7/+6
2013-10-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-20/+21
2013-09-30net ipv4: Convert ipv4.ip_local_port_range to be per netns v3Eric W. Biederman1-1/+1
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen2-2/+5
2013-09-30apparmor: Use shash crypto API interface for profile hashesTyler Hicks1-18/+16
2013-09-26selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore1-4/+2
2013-09-26selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong1-2/+2
2013-09-25KEYS: initialize root uid and session keyrings earlyMimi Zohar1-0/+10
2013-09-25KEYS: Add a 'trusted' flag and a 'trusted only' flagDavid Howells2-0/+12
2013-09-24KEYS: Add per-user_namespace registers for persistent per-UID kerberos cachesDavid Howells7-0/+213