aboutsummaryrefslogtreecommitdiff
path: root/security/commoncap.c
AgeCommit message (Expand)AuthorFilesLines
2017-10-19commoncap: move assignment of fs_ns to avoid null pointer dereferenceGravatar Colin Ian King 1-1/+2
2017-09-24Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Gravatar Linus Torvalds 1-3/+3
2017-09-23security: fix description of values returned by cap_inode_need_killprivGravatar Stefan Berger 1-3/+3
2017-09-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Gravatar Linus Torvalds 1-21/+256
2017-09-01Introduce v3 namespaced file capabilitiesGravatar Serge E. Hallyn 1-19/+251
2017-08-01commoncap: Move cap_elevated calculation into bprm_set_credsGravatar Kees Cook 1-42/+10
2017-08-01commoncap: Refactor to remove bprm_secureexec hookGravatar Kees Cook 1-4/+8
2017-07-20security: Use user_namespace::level to avoid redundant iterations in cap_capa...Gravatar Kirill Tkhai 1-2/+5
2017-03-06security: mark LSM hooks as __ro_after_initGravatar James Morris 1-1/+1
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Gravatar Linus Torvalds 1-2/+3
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPGravatar Eric W. Biederman 1-1/+1
2017-01-24exec: Test the ptracer's saved cred to see if the tracee can gain capsGravatar Eric W. Biederman 1-1/+2
2017-01-24exec: Don't reset euid and egid when the tracee has CAP_SETUIDGravatar Eric W. Biederman 1-1/+1
2017-01-19LSM: Add /sys/kernel/security/lsmGravatar Casey Schaufler 1-1/+2
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersGravatar Andreas Gruenbacher 1-15/+10
2016-06-24fs: Treat foreign mounts as nosuidGravatar Andy Lutomirski 1-1/+7
2016-06-24fs: Limit file caps to the user namespace of the super blockGravatar Seth Forshee 1-0/+2
2016-05-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Gravatar Linus Torvalds 1-3/+3
2016-04-22security: Introduce security_settime64()Gravatar Baolin Wang 1-1/+1
2016-04-11->getxattr(): pass dentry and inode as separate argumentsGravatar Al Viro 1-3/+3
2016-01-20ptrace: use fsuid, fsgid, effective creds for fs access checksGravatar Jann Horn 1-1/+6
2015-09-04capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISEGravatar Andy Lutomirski 1-1/+2
2015-09-04capabilities: ambient capabilitiesGravatar Andy Lutomirski 1-10/+92
2015-05-12LSM: Switch to lists of hooksGravatar Casey Schaufler 1-8/+33
2015-04-15VFS: security/: d_backing_inode() annotationsGravatar David Howells 1-3/+3
2015-01-25file->f_path.dentry is pinned down for as long as the file is open...Gravatar Al Viro 1-5/+1
2014-11-19kill f_dentry usesGravatar Al Viro 1-1/+1
2014-07-24CAPABILITIES: remove undefined caps from all processesGravatar Eric Paris 1-0/+3
2014-07-24commoncap: don't alloc the credential unless needed in cap_task_prctlGravatar Tetsuo Handa 1-42/+30
2013-08-30capabilities: allow nice if we are privilegedGravatar Serge Hallyn 1-4/+4
2013-08-30userns: Allow PR_CAPBSET_DROP in a user namespace.Gravatar Eric W. Biederman 1-1/+1
2013-02-26kill f_vfsmntGravatar Al Viro 1-1/+1
2012-12-14Fix cap_capable to only allow owners in the parent user namespace to have caps.Gravatar Eric W. Biederman 1-8/+17
2012-05-31split ->file_mmap() into ->mmap_addr()/->mmap_file()Gravatar Al Viro 1-18/+3
2012-05-31split cap_mmap_addr() out of cap_file_mmap()Gravatar Al Viro 1-9/+23
2012-05-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Gravatar Linus Torvalds 1-25/+36
2012-05-04Merge tag 'v3.4-rc5' into nextGravatar James Morris 1-0/+6
2012-05-03userns: Convert capabilities related permsion checksGravatar Eric W. Biederman 1-15/+26
2012-05-03userns: Store uid and gid values in struct cred with kuid_t and kgid_t typesGravatar Eric W. Biederman 1-2/+1
2012-04-26userns: Simplify the user_namespace by making userns->creator a kuid.Gravatar Eric W. Biederman 1-2/+3
2012-04-19security: fix compile error in commoncap.cGravatar Jonghwan Choi 1-0/+1
2012-04-18fcaps: clear the same personality flags as suid when fcaps are usedGravatar Eric Paris 1-0/+5
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsGravatar Andy Lutomirski 1-2/+5
2012-04-07userns: Add an explicit reference to the parent user namespaceGravatar Eric W. Biederman 1-1/+1
2012-04-07userns: Use cred->user_ns instead of cred->user->user_nsGravatar Eric W. Biederman 1-7/+7
2012-02-14security: trim security.hGravatar Al Viro 1-0/+1
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityGravatar Linus Torvalds 1-17/+7
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Gravatar Eric Paris 1-8/+0
2012-01-05capabilities: remove the task from capable LSM hook entirelyGravatar Eric Paris 1-9/+7
2011-08-16capabilities: initialize has_capGravatar Serge Hallyn 1-1/+1