linux-dev - Linux kernel development work

Age	Commit message (Expand)	Author	Files	Lines
2016-06-27	netlabel: Prevent setsockopt() from changing the hop-by-hop option.	Huw Davies	1	-1/+16
2016-06-27	calipso: Set the calipso socket label to match the secattr.	Huw Davies	10	-10/+728
2016-06-27	netlabel: Move bitmap manipulation functions to the NetLabel core.	Huw Davies	3	-79/+85
2016-06-27	ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer.	Huw Davies	2	-0/+55
2016-06-27	netlabel: Add support for removing a CALIPSO DOI.	Huw Davies	4	-0/+150
2016-06-27	netlabel: Add support for creating a CALIPSO protocol domain mapping.	Huw Davies	4	-5/+89
2016-06-27	netlabel: Add support for enumerating the CALIPSO DOI list.	Huw Davies	4	-0/+165
2016-06-27	netlabel: Add support for querying a CALIPSO DOI.	Huw Davies	4	-0/+193
2016-06-27	netlabel: Initial support for the CALIPSO netlink protocol.	Huw Davies	12	-2/+604
2016-06-27	netlabel: Add an address family to domain hash entries.	Huw Davies	6	-58/+192
2016-06-27	netlabel: Mark rcu pointers with __rcu.	Huw Davies	2	-4/+4
2016-06-15	selinux: fix type mismatch	Heinrich Schuchardt	1	-1/+1
2016-06-09	netlabel: handle sparse category maps in netlbl_catmap_getlong()	Paul Moore	1	-5/+4
2016-06-09	selinux: import NetLabel category bitmaps correctly	Paul Moore	1	-1/+1
2016-06-07	iucv: properly clone LSM attributes to newly created child sockets	Paul Moore	1	-1/+4
2016-06-06	netlabel: add address family checks to netlbl_{sock,req}_delattr()	Paul Moore	1	-2/+10
2016-05-31	selinux: Only apply bounds checking to source types	Stephen Smalley	1	-48/+22
2016-05-17	LSM: LoadPin: provide enablement CONFIG	Kees Cook	2	-6/+15
2016-05-04	Yama: use atomic allocations when reporting	Sasha Levin	1	-2/+2
2016-05-04	seccomp: Fix comment typo	Mickaël Salaün	1	-1/+1
2016-05-01	ima: add support for creating files using the mknodat syscall	Mimi Zohar	4	-1/+37
2016-05-01	ima: fix ima_inode_post_setattr	Mimi Zohar	2	-1/+2
2016-05-01	vfs: forbid write access when reading a file into memory	Dmitry Kasatkin	1	-8/+21
2016-04-27	fs: fix over-zealous use of "const"	Kees Cook	1	-1/+1
2016-04-26	selinux: apply execstack check on thread stacks	Stephen Smalley	1	-2/+3
2016-04-26	selinux: distinguish non-init user namespace capability checks	Stephen Smalley	2	-17/+25
2016-04-21	LSM: LoadPin for kernel file loading restrictions	Kees Cook	9	-0/+233
2016-04-21	fs: define a string representation of the kernel_read_file_id enumeration	Mimi Zohar	1	-6/+25
2016-04-21	Yama: consolidate error reporting	Kees Cook	1	-10/+21
2016-04-21	string_helpers: add kstrdup_quotable_file	Kees Cook	2	-0/+33
2016-04-21	string_helpers: add kstrdup_quotable_cmdline	Kees Cook	2	-0/+35
2016-04-21	string_helpers: add kstrdup_quotable	Kees Cook	2	-0/+30
2016-04-19	selinux: check ss_initialized before revalidating an inode label	Paul Moore	1	-1/+1
2016-04-19	selinux: delay inode label lookup as long as possible	Paul Moore	1	-8/+13
2016-04-19	selinux: don't revalidate an inode's label when explicitly setting it	Paul Moore	1	-2/+11
2016-04-14	selinux: Change bool variable name to index.	Prarit Bhargava	2	-4/+4
2016-04-12	KEYS: Add KEYCTL_DH_COMPUTE command	Mat Martineau	8	-0/+233
2016-04-12	Security: Keys: Big keys stored encrypted	Kirill Marinushkin	2	-18/+184
2016-04-12	KEYS: user_update should use copy of payload made during preparsing	David Howells	1	-31/+11
2016-04-12	security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA	Andreas Ziegler	1	-1/+0
2016-04-11	IMA: Use the the system trusted keyrings instead of .ima_mok	David Howells	5	-64/+34
2016-04-11	certs: Add a secondary system keyring that can be added to dynamically	David Howells	3	-16/+88
2016-04-11	KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED	David Howells	7	-59/+9
2016-04-11	KEYS: Move the point of trust determination to __key_link()	David Howells	9	-76/+100
2016-04-11	KEYS: Make the system trusted keyring depend on the asymmetric key type	David Howells	2	-1/+2
2016-04-11	X.509: Move the trust validation code out to its own file	David Howells	4	-80/+116
2016-04-11	X.509: Use verify_signature() if we have a struct key * to use	David Howells	1	-2/+1
2016-04-11	KEYS: Generalise x509_request_asymmetric_key()	David Howells	5	-39/+37
2016-04-11	KEYS: Move x509_request_asymmetric_key() to asymmetric_type.c	David Howells	4	-95/+94
2016-04-11	KEYS: Add a facility to restrict new links into a keyring	David Howells	15	-52/+198