aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-02-26Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux in...Gravatar James Morris 1-1/+1
2016-02-19selinux: Don't sleep inside inode_getsecid hookGravatar Andreas Gruenbacher 1-1/+1
2016-02-12EVM: Use crypto_memneq() for digest comparisonsGravatar Ryan Ware 1-1/+2
2016-02-09selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tablesGravatar Lorenzo Colitti 1-0/+1
2016-01-28KEYS: Only apply KEY_FLAG_KEEP to a key if a parent keyring has it setGravatar David Howells 1-1/+2
2016-01-22wrappers for ->i_mutex accessGravatar Al Viro 3-11/+11
2016-01-20ptrace: use fsuid, fsgid, effective creds for fs access checksGravatar Jann Horn 1-1/+6
2016-01-20security: let security modules use PTRACE_MODE_* with bitmasksGravatar Jann Horn 2-7/+5
2016-01-20KEYS: Fix keyring ref leak in join_session_keyring()Gravatar Yevgeny Pats 1-0/+1
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Gravatar Linus Torvalds 29-160/+967
2016-01-14Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...Gravatar James Morris 1-8/+2
2016-01-12Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Gravatar Linus Torvalds 4-168/+82
2016-01-11Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Gravatar Linus Torvalds 1-2/+0
2016-01-10Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...Gravatar James Morris 3-21/+17
2016-01-08Merge branch 'for-linus' into work.miscGravatar Al Viro 1-9/+9
2016-01-08selinux: Inode label revalidation performance fixGravatar Andreas Gruenbacher 1-8/+2
2016-01-07KEYS: refcount bug fixGravatar Mimi Zohar 2-12/+8
2016-01-04fix the leak in integrity_read_file()Gravatar Al Viro 1-5/+6
2016-01-04selinuxfs: switch to memdup_user_nul()Gravatar Al Viro 1-73/+41
2016-01-04convert a bunch of open-coded instances of memdup_user_nul()Gravatar Al Viro 2-90/+35
2016-01-03ima: ima_write_policy() limit lockingGravatar Petko Manolov 1-9/+9
2015-12-26Merge branch 'smack-for-4.5' of https://github.com/cschaufler/smack-next into...Gravatar James Morris 1-1/+23
2015-12-26Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...Gravatar James Morris 8-73/+274
2015-12-26Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...Gravatar James Morris 19-84/+623
2015-12-24IMA: policy can be updated zero timesGravatar Sasha Levin 3-0/+14
2015-12-24selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()Gravatar Vladis Dronov 1-4/+5
2015-12-24selinux: export validatetrans decisionsGravatar Andrew Perepechko 4-8/+111
2015-12-24selinux: Revalidate invalid inode security labelsGravatar Andreas Gruenbacher 1-8/+68
2015-12-24security: Add hook to invalidate inode security labelsGravatar Andreas Gruenbacher 3-10/+34
2015-12-24selinux: Add accessor functions for inode->i_securityGravatar Andreas Gruenbacher 1-41/+56
2015-12-24security: Make inode argument of inode_getsecid non-constGravatar Andreas Gruenbacher 3-3/+3
2015-12-24security: Make inode argument of inode_getsecurity non-constGravatar Andreas Gruenbacher 3-3/+3
2015-12-24selinux: Remove unused variable in selinux_inode_init_securityGravatar Andreas Gruenbacher 1-2/+0
2015-12-20keys, trusted: seal with a TPM2 authorization policyGravatar Jarkko Sakkinen 1-0/+26
2015-12-20keys, trusted: select hash algorithm for TPM2 chipsGravatar Jarkko Sakkinen 2-1/+27
2015-12-20keys, trusted: fix: *do not* allow duplicate key optionsGravatar Jarkko Sakkinen 1-0/+3
2015-12-19KEYS: Fix race between read and revokeGravatar David Howells 1-9/+9
2015-12-17Smack: type confusion in smak sendmsg() handlerGravatar Roman Kubiak 1-1/+1
2015-12-15security/integrity: make ima/ima_mok.c explicitly non-modularGravatar Paul Gortmaker 1-3/+2
2015-12-15ima: update appraise flags after policy update completesGravatar Mimi Zohar 1-2/+5
2015-12-15IMA: prevent keys on the .ima_blacklist from being removedGravatar Mimi Zohar 1-0/+2
2015-12-15KEYS: prevent keys from being removed from specified keyringsGravatar Mimi Zohar 2-11/+51
2015-12-15IMA: allow reading back the current IMA policyGravatar Petko Manolov 4-8/+253
2015-12-15IMA: create machine owner and blacklist keyringsGravatar Petko Manolov 4-0/+87
2015-12-15IMA: policy can now be updated multiple timesGravatar Petko Manolov 3-28/+75
2015-12-15evm: EVM_LOAD_X509 depends on EVMGravatar Arnd Bergmann 1-1/+1
2015-12-15evm: reset EVM status when file attributes changeGravatar Dmitry Kasatkin 1-0/+13
2015-12-15evm: provide a function to set the EVM key from the kernelGravatar Dmitry Kasatkin 2-14/+46
2015-12-15evm: enable EVM when X509 certificate is loadedGravatar Dmitry Kasatkin 4-3/+14
2015-12-15evm: load an x509 certificate from the kernelGravatar Dmitry Kasatkin 4-0/+33