summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-09-17ima: added ima_policy_flag variableRoberto Sassu4-5/+34
2014-09-17ima: return an error code from ima_add_boot_aggregate()Roberto Sassu1-6/+15
2014-09-17ima: provide 'ima_appraise=log' kernel optionDmitry Kasatkin2-2/+5
2014-09-17ima: move keyring initialization to ima_init()Dmitry Kasatkin2-8/+6
2014-09-16KEYS: Make the key matching functions return boolDavid Howells3-8/+8
2014-09-16KEYS: Remove key_type::match in favour of overriding default by match_preparseDavid Howells9-23/+15
2014-09-16KEYS: Remove key_type::def_lookup_typeDavid Howells3-9/+5
2014-09-16KEYS: Preparse match dataDavid Howells7-44/+65
2014-09-16Merge tag 'keys-next-fixes-20140916' into keys-nextDavid Howells1-2/+2
2014-09-16Merge tag 'keys-fixes-20140916' into keys-nextDavid Howells1-0/+2
2014-09-16KEYS: Reinstate EPERM for a key type name beginning with a '.'David Howells1-0/+2
2014-09-16KEYS: Fix missing staticsDavid Howells1-2/+2
2014-09-10selinux: make the netif cache namespace awarePaul Moore4-36/+46
2014-09-09security: make security_file_set_fowner, f_setown and __f_setown void returnJeff Layton4-9/+6
2014-09-09integrity: make integrity files as 'integrity' moduleDmitry Kasatkin1-3/+3
2014-09-09integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin3-14/+18
2014-09-09integrity: move asymmetric keys config optionDmitry Kasatkin1-12/+12
2014-09-09ima: initialize only required templateDmitry Kasatkin1-24/+4
2014-09-09ima: remove usage of filename parameterDmitry Kasatkin2-14/+10
2014-09-09ima: remove unnecessary appraisal testDmitry Kasatkin1-2/+0
2014-09-09ima: add missing '__init' keywordsDmitry Kasatkin3-5/+3
2014-09-09ima: remove unnecessary extra variableDmitry Kasatkin1-4/+5
2014-09-09ima: simplify conditional statement to improve performanceDmitry Kasatkin1-4/+2
2014-09-09integrity: remove declaration of non-existing functionsDmitry Kasatkin2-10/+0
2014-09-09integrity: prevent flooding with 'Request for unknown key'Dmitry Kasatkin1-2/+3
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin3-12/+12
2014-09-09evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin1-0/+7
2014-09-09Documentation: Docbook: Fix generated DocBook/kernel-api.xmlMasanari Iida1-1/+1
2014-09-08selinux: register nf hooks with single nf_register_hooks callJiri Pirko1-25/+10
2014-09-08ima: provide flag to identify new empty filesDmitry Kasatkin3-7/+13
2014-09-08evm: prevent passing integrity check if xattr read failsDmitry Kasatkin1-3/+4
2014-09-03selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute()Paul Moore1-0/+1
2014-09-03KEYS: Increase root_maxkeys and root_maxbytes sizesSteve Dickson1-2/+2
2014-09-02evm: fix checkpatch warningsDmitry Kasatkin1-3/+0
2014-09-02ima: fix fallback to use new_sync_read()Dmitry Kasatkin1-4/+4
2014-09-02ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin1-1/+4
2014-09-02ima: fix ima_alloc_atfm()Mimi Zohar1-1/+4
2014-08-29Make Smack operate on smack_known struct where it still used char*Lukasz Pawelczyk4-255/+233
2014-08-29Fix a bidirectional UDS connect check typoLukasz Pawelczyk1-2/+2
2014-08-29Small fixes in comments describing function parametersLukasz Pawelczyk1-9/+9
2014-08-28Smack: Bring-up access modeCasey Schaufler5-27/+294
2014-08-28selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID.Stephen Smalley1-12/+47
2014-08-27module: rename KERNEL_PARAM_FL_NOARG to avoid confusionJani Nikula1-2/+2
2014-08-26tomoyo: Fix pathname calculation breakage.Tetsuo Handa1-2/+3
2014-08-25Smack: Fix setting label on successful file openMarcin Niesluchowski1-1/+3
2014-08-09Merge branch 'stable-3.17' of git://git.infradead.org/users/pcmoore/selinuxLinus Torvalds3-6/+4
2014-08-08Smack: remove unneeded NULL-termination from securtity labelKonstantin Khlebnikov1-3/+3
2014-08-08Smack: handle zero-length security labels without panicKonstantin Khlebnikov2-3/+3
2014-08-08Smack: fix behavior of smack_inode_listsecurityKonstantin Khlebnikov1-5/+4
2014-08-07selinux: remove unused variabled in the netport, netnode, and netif cachesPaul Moore3-6/+4