summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-06-15selinux: fix type mismatchHeinrich Schuchardt1-1/+1
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore1-1/+1
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley1-48/+22
2016-05-17LSM: LoadPin: provide enablement CONFIGKees Cook2-6/+15
2016-05-06Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris5-60/+127
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris19-112/+516
2016-05-04Yama: use atomic allocations when reportingSasha Levin1-2/+2
2016-05-04Merge branch 'keys-trust' into keys-nextDavid Howells10-62/+128
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar2-1/+29
2016-05-01ima: fix ima_inode_post_setattrMimi Zohar2-1/+2
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley2-17/+25
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook6-0/+205
2016-04-21Yama: consolidate error reportingKees Cook1-10/+21
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore1-1/+1
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore1-8/+13
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore1-2/+11
2016-04-14selinux: Change bool variable name to index.Prarit Bhargava2-4/+4
2016-04-12KEYS: Add KEYCTL_DH_COMPUTE commandMat Martineau6-0/+193
2016-04-12Security: Keys: Big keys stored encryptedKirill Marinushkin2-18/+184
2016-04-12KEYS: user_update should use copy of payload made during preparsingDavid Howells1-31/+11
2016-04-12security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSAAndreas Ziegler1-1/+0
2016-04-11IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells4-53/+32
2016-04-11KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTEDDavid Howells3-39/+4
2016-04-11KEYS: Move the point of trust determination to __key_link()David Howells2-4/+35
2016-04-11KEYS: Add a facility to restrict new links into a keyringDavid Howells8-33/+124
2016-04-11security: drop the unused hook skb_owned_byPaolo Abeni1-1/+0
2016-04-05selinux: restrict kernel module loadingJeff Vander Stoep2-1/+48
2016-04-05selinux: consolidate the ptrace parent lookup codePaul Moore1-21/+17
2016-04-05selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore2-4/+3
2016-04-05selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()Paul Moore1-3/+5
2016-03-20Merge branch 'mm-pkeys-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-1/+8
2016-03-17Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/greg...Linus Torvalds1-2/+2
2016-03-17Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds20-227/+450
2016-03-17Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-32/+50
2016-03-04Merge tag 'keys-next-20160303' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris5-25/+12
2016-03-04Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/selinux in...James Morris1-1/+1
2016-03-03X.509: Make algo identifiers text instead of enumDavid Howells2-4/+5
2016-03-03akcipher: Move the RSA DER encoding check to the crypto layerDavid Howells1-0/+1
2016-02-26Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux in...James Morris1-1/+1
2016-02-26Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris13-163/+418
2016-02-22Merge branch 'smack-for-4.6' of https://github.com/cschaufler/smack-next into...James Morris1-32/+14
2016-02-21ima: require signed IMA policyMimi Zohar1-0/+7
2016-02-21ima: measure and appraise the IMA policy itselfMimi Zohar4-3/+24
2016-02-21ima: load policy using pathDmitry Kasatkin1-2/+43
2016-02-21ima: support for kexec image and initramfsMimi Zohar3-7/+27
2016-02-21ima: remove firmware and module specific cached status infoMimi Zohar5-39/+28
2016-02-21module: replace copy_module_from_fd with kernel versionMimi Zohar2-34/+13
2016-02-21security: define kernel_read_file hookMimi Zohar2-0/+29
2016-02-21firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar2-24/+10