aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2019-01-28LSM: Add 'name' field for SafeSetID in DEFINE_LSMGravatar Micah Morton 1-0/+1
2019-01-25selinux: log invalid contexts in AVCsGravatar Ondrej Mosnacek 3-5/+50
2019-01-25selinux: replace some BUG_ON()s with a WARN_ON()Gravatar Ondrej Mosnacek 1-2/+3
2019-01-25selinux: inline some AVC functions used only onceGravatar Ondrej Mosnacek 1-82/+58
2019-01-25LSM: add SafeSetID module that gates setid callsGravatar Micah Morton 7-1/+526
2019-01-25audit: add support for fcaps v3Gravatar Richard Guy Briggs 1-0/+2
2019-01-24tomoyo: Allow multiple use_group lines.Gravatar Tetsuo Handa 3-22/+42
2019-01-24tomoyo: Coding style fix.Gravatar Tetsuo Handa 15-105/+309
2019-01-23tomoyo: Swicth from cred->security to task_struct->security.Gravatar Tetsuo Handa 5-122/+108
2019-01-22security: keys: annotate implicit fall throughsGravatar Mathieu Malaterre 1-0/+4
2019-01-22security: keys: annotate implicit fall throughsGravatar Mathieu Malaterre 1-0/+3
2019-01-22security: keys: annotate implicit fall throughGravatar Mathieu Malaterre 1-0/+1
2019-01-22apparmor: Adjust offset when accessing task blob.Gravatar Tetsuo Handa 1-1/+1
2019-01-22Merge tag 'v5.0-rc3' into next-generalGravatar James Morris 3-2/+12
2019-01-18LSM: Make some functions staticGravatar Wei Yongjun 1-3/+3
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Gravatar Tetsuo Handa 5-22/+11
2019-01-17Merge branch 'fixes-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/gi...Gravatar Linus Torvalds 2-1/+10
2019-01-16LSM: Check for NULL cred-security on freeGravatar James Morris 1-0/+7
2019-01-16Yama: Check for pid death before checking ancestryGravatar Kees Cook 1-1/+3
2019-01-16Merge tag 'selinux-pr-20190115' of git://git.kernel.org/pub/scm/linux/kernel/...Gravatar Linus Torvalds 1-1/+2
2019-01-10selinux: do not override context on context mountsGravatar Ondrej Mosnacek 1-1/+8
2019-01-10selinux: never allow relabeling on context mountsGravatar Ondrej Mosnacek 1-9/+31
2019-01-10selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_linkGravatar Stephen Smalley 3-30/+4
2019-01-10selinux: avoid silent denials in permissive mode under RCU walkGravatar Stephen Smalley 3-3/+25
2019-01-10selinux: fix GPF on invalid policyGravatar Stephen Smalley 1-1/+2
2019-01-10LSM: generalize flag passing to security_capableGravatar Micah Morton 9-39/+37
2019-01-08TOMOYO: Update LSM flags to no longer be exclusiveGravatar Kees Cook 1-1/+1
2019-01-08LSM: Infrastructure management of the ipc security blobGravatar Casey Schaufler 5-121/+108
2019-01-08Smack: Abstract use of ipc security blobsGravatar Casey Schaufler 2-5/+20
2019-01-08SELinux: Abstract use of ipc security blobsGravatar Casey Schaufler 2-9/+22
2019-01-08LSM: Infrastructure management of the task securityGravatar Casey Schaufler 3-27/+60
2019-01-08LSM: Infrastructure management of the inode securityGravatar Casey Schaufler 5-98/+90
2019-01-08Smack: Abstract use of inode security blobGravatar Casey Schaufler 2-18/+23
2019-01-08SELinux: Abstract use of inode security blobGravatar Casey Schaufler 3-15/+21
2019-01-08LSM: Infrastructure management of the file securityGravatar Casey Schaufler 7-51/+71
2019-01-08Smack: Abstract use of file security blobGravatar Casey Schaufler 2-4/+13
2019-01-08SELinux: Abstract use of file security blobGravatar Casey Schaufler 2-9/+14
2019-01-08Infrastructure management of the cred security blobGravatar Casey Schaufler 10-102/+150
2019-01-08TOMOYO: Abstract use of cred security blobGravatar Casey Schaufler 4-16/+64
2019-01-08AppArmor: Abstract use of cred security blobGravatar Casey Schaufler 4-10/+24
2019-01-08SELinux: Remove unused selinux_is_enabledGravatar Casey Schaufler 5-29/+1
2019-01-08SELinux: Remove cred security blob poisoningGravatar Casey Schaufler 1-6/+0
2019-01-08SELinux: Abstract use of cred security blobGravatar Casey Schaufler 3-29/+34
2019-01-08Smack: Abstract use of cred security blobGravatar Casey Schaufler 4-43/+53
2019-01-08procfs: add smack subdir to attrsGravatar Casey Schaufler 1-4/+20
2019-01-08capability: Initialize as LSM_ORDER_FIRSTGravatar Kees Cook 2-6/+8
2019-01-08LSM: Introduce enum lsm_orderGravatar Kees Cook 1-1/+8
2019-01-08Yama: Initialize as ordered LSMGravatar Kees Cook 3-3/+8
2019-01-08LoadPin: Initialize as ordered LSMGravatar Kees Cook 3-40/+8
2019-01-08LSM: Split LSM preparation from initializationGravatar Kees Cook 1-6/+15