aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Gravatar Huw Davies 4-8/+10
2016-06-27calipso: Allow the lsm to label the skbuff directly.Gravatar Huw Davies 1-0/+15
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Gravatar Huw Davies 1-1/+1
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Gravatar Huw Davies 1-1/+16
2016-06-27calipso: Set the calipso socket label to match the secattr.Gravatar Huw Davies 1-1/+1
2016-06-24selinux: Add support for unprivileged mounts from user namespacesGravatar Seth Forshee 1-0/+23
2016-06-24Smack: Handle labels consistently in untrusted mountsGravatar Seth Forshee 1-10/+19
2016-06-24Smack: Add support for unprivileged mounts from user namespacesGravatar Seth Forshee 2-12/+37
2016-06-24fs: Treat foreign mounts as nosuidGravatar Andy Lutomirski 2-2/+8
2016-06-24fs: Limit file caps to the user namespace of the super blockGravatar Seth Forshee 1-0/+2
2016-06-24KEYS: Use skcipher for big keysGravatar Herbert Xu 1-12/+18
2016-06-16KEYS: potential uninitialized variableGravatar Dan Carpenter 1-1/+1
2016-06-15selinux: fix type mismatchGravatar Heinrich Schuchardt 1-1/+1
2016-06-14KEYS: Strip trailing spacesGravatar David Howells 2-2/+2
2016-06-10vfs: make the string hashes salt the hashGravatar Linus Torvalds 3-4/+4
2016-06-09selinux: import NetLabel category bitmaps correctlyGravatar Paul Moore 1-1/+1
2016-06-08Smack: ignore null signal in smack_task_killGravatar Rafal Krypa 1-0/+3
2016-06-06security: tomoyo: simplify the gc kthread creationGravatar Mike Danese 1-7/+2
2016-06-06LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPGravatar Casey Schaufler 1-4/+25
2016-06-03KEYS: Add placeholder for KDF usage with DHGravatar Stephan Mueller 4-6/+13
2016-05-31selinux: Only apply bounds checking to source typesGravatar Stephen Smalley 1-48/+22
2016-05-29securityfs: ->d_parent is never NULL or negativeGravatar Al Viro 1-5/+6
2016-05-29drbd: ->d_parent is never NULL or negativeGravatar Al Viro 1-4/+0
2016-05-27Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Gravatar Linus Torvalds 1-1/+1
2016-05-27switch ->setxattr() to passing dentry and inode separatelyGravatar Al Viro 1-1/+1
2016-05-26Yama: fix double-spinlock and user access in atomic contextGravatar Jann Horn 1-6/+63
2016-05-20security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatGravatar Andy Shevchenko 1-12/+2
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Gravatar Linus Torvalds 34-185/+909
2016-05-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextGravatar Linus Torvalds 1-1/+3
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Gravatar Linus Torvalds 13-106/+83
2016-05-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Gravatar Linus Torvalds 4-14/+15
2016-05-17Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Gravatar Linus Torvalds 2-2/+2
2016-05-17LSM: LoadPin: provide enablement CONFIGGravatar Kees Cook 2-6/+15
2016-05-17Merge branch 'ovl-fixes' into for-linusGravatar Al Viro 1-2/+2
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netGravatar David S. Miller 1-2/+2
2016-05-06Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...Gravatar James Morris 5-60/+127
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...Gravatar James Morris 19-112/+516
2016-05-04Yama: use atomic allocations when reportingGravatar Sasha Levin 1-2/+2
2016-05-04Merge branch 'keys-trust' into keys-nextGravatar David Howells 10-62/+128
2016-05-04ima: fix the string representation of the LSM/IMA hook enumeration orderingGravatar Mimi Zohar 1-2/+2
2016-05-01ima: add support for creating files using the mknodat syscallGravatar Mimi Zohar 2-1/+29
2016-05-01ima: fix ima_inode_post_setattrGravatar Mimi Zohar 2-1/+2
2016-04-26selinux: apply execstack check on thread stacksGravatar Stephen Smalley 1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksGravatar Stephen Smalley 2-17/+25
2016-04-22security: Introduce security_settime64()Gravatar Baolin Wang 2-2/+2
2016-04-21LSM: LoadPin for kernel file loading restrictionsGravatar Kees Cook 6-0/+205
2016-04-21Yama: consolidate error reportingGravatar Kees Cook 1-10/+21
2016-04-20rtnetlink: add new RTM_GETSTATS message to dump link statsGravatar Roopa Prabhu 1-1/+3
2016-04-19selinux: check ss_initialized before revalidating an inode labelGravatar Paul Moore 1-1/+1
2016-04-19selinux: delay inode label lookup as long as possibleGravatar Paul Moore 1-8/+13