aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2017-09-28Merge commit 'keys-fixes-20170927' into fixes-v4.14-rc3Gravatar James Morris 9-152/+137
2017-09-25security/keys: rewrite all of big_key cryptoGravatar Jason A. Donenfeld 2-71/+60
2017-09-25security/keys: properly zero out sensitive key material in big_keyGravatar Jason A. Donenfeld 1-6/+6
2017-09-25KEYS: use kmemdup() in request_key_auth_new()Gravatar Eric Biggers 1-3/+2
2017-09-25KEYS: restrict /proc/keys by credentials at open timeGravatar Eric Biggers 1-6/+2
2017-09-25KEYS: reset parent each time before searching key_user_treeGravatar Eric Biggers 1-2/+2
2017-09-25KEYS: prevent KEYCTL_READ on negative keyGravatar Eric Biggers 1-0/+5
2017-09-25KEYS: prevent creating a different user's keyringsGravatar Eric Biggers 4-12/+21
2017-09-25KEYS: fix writing past end of user-supplied buffer in keyring_read()Gravatar Eric Biggers 1-9/+5
2017-09-25KEYS: fix key refcount leak in keyctl_read_key()Gravatar Eric Biggers 1-1/+1
2017-09-25KEYS: fix key refcount leak in keyctl_assume_authority()Gravatar Eric Biggers 1-4/+2
2017-09-25KEYS: don't revoke uninstantiated key in request_key_auth_new()Gravatar Eric Biggers 1-1/+0
2017-09-25KEYS: fix cred refcount leak in request_key_auth_new()Gravatar Eric Biggers 1-37/+31
2017-09-24Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Gravatar Linus Torvalds 1-3/+3
2017-09-23security: fix description of values returned by cap_inode_need_killprivGravatar Stefan Berger 1-3/+3
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Gravatar Linus Torvalds 24-137/+2088
2017-09-22apparmor: fix apparmorfs DAC access permissionsGravatar John Johansen 1-4/+4
2017-09-22apparmor: fix build failure on sparc caused by undeclared signalsGravatar John Johansen 1-1/+4
2017-09-22apparmor: fix incorrect type assignment when freeing proxiesGravatar John Johansen 1-1/+1
2017-09-22apparmor: ensure unconfined profiles have dfas initializedGravatar John Johansen 1-0/+2
2017-09-22apparmor: fix race condition in null profile creationGravatar John Johansen 1-3/+11
2017-09-22apparmor: move new_null_profile to after profile lookup fns()Gravatar John Johansen 1-79/+79
2017-09-22apparmor: add base infastructure for socket mediationGravatar John Johansen 12-16/+840
2017-09-22apparmor: add more debug asserts to apparmorfsGravatar John Johansen 1-0/+17
2017-09-22apparmor: make policy_unpack able to audit different info messagesGravatar John Johansen 2-16/+40
2017-09-22apparmor: add support for absolute root view based labelsGravatar John Johansen 2-1/+10
2017-09-22apparmor: cleanup conditional check for label in label_printGravatar John Johansen 1-14/+8
2017-09-22apparmor: add mount mediationGravatar John Johansen 9-4/+841
2017-09-22apparmor: add the ability to mediate signalsGravatar John Johansen 7-0/+231
2017-09-22apparmor: Redundant condition: prev_ns. in [label.c:1498]Gravatar John Johansen 1-1/+1
2017-09-22apparmor: Fix an error code in aafs_create()Gravatar Dan Carpenter 1-1/+3
2017-09-22apparmor: Fix logical error in verify_header()Gravatar Christos Gkekas 1-1/+1
2017-09-22apparmor: Fix shadowed local variable in unpack_trans_table()Gravatar Geert Uytterhoeven 1-2/+2
2017-09-14Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Gravatar Linus Torvalds 1-2/+4
2017-09-12Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Gravatar Linus Torvalds 28-56/+78
2017-09-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Gravatar Linus Torvalds 1-21/+256
2017-09-07Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/gi...Gravatar Linus Torvalds 1-2/+0
2017-09-07Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Gravatar Linus Torvalds 9-120/+23
2017-09-05selinux: remove AVC init audit log messageGravatar Richard Guy Briggs 1-2/+0
2017-09-04fs: fix kernel_write prototypeGravatar Christoph Hellwig 1-1/+2
2017-09-04fs: fix kernel_read prototypeGravatar Christoph Hellwig 1-1/+2
2017-09-01Introduce v3 namespaced file capabilitiesGravatar Serge E. Hallyn 1-19/+251
2017-08-28selinux: constify nf_hook_opsGravatar Arvind Yadav 1-1/+1
2017-08-22selinux: allow per-file labeling for cgroupfsGravatar Antonio Murdaca 1-1/+3
2017-08-17lsm_audit: update my email addressGravatar Stephen Smalley 1-1/+1
2017-08-17selinux: update my email addressGravatar Stephen Smalley 25-25/+25
2017-08-08selinux: use GFP_NOWAIT in the AVC kmem_cachesGravatar Michal Hocko 1-8/+6
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsGravatar Stephen Smalley 4-16/+42
2017-08-01smack: Remove redundant pdeath_signal clearingGravatar Kees Cook 1-15/+0
2017-08-01LSM: drop bprm_secureexec hookGravatar Kees Cook 1-5/+0