aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux/hooks.c (unfollow)
AgeCommit message (Expand)AuthorFilesLines
2020-02-07fs_parse: fold fs_parameter_desc/fs_parameter_specAl Viro1-7/+3
2020-02-07fs_parser: remove fs_parameter_description name fieldEric Sandeen1-2/+1
2020-02-05selinux: fix typo in filesystem nameHridya Valsaraju1-1/+1
2020-01-20selinux: fix regression introduced by move_mount(2) syscallStephen Smalley1-0/+10
2020-01-16selinux: remove redundant allocation and helper functionsPaul Moore1-58/+36
2020-01-16selinux: remove redundant selinux_nlmsg_permHuaisheng Ye1-39/+34
2020-01-10selinux: reorder hooks to make runtime disable less brokenOndrej Mosnacek1-31/+70
2020-01-10selinux: treat atomic flags more carefullyOndrej Mosnacek1-10/+11
2020-01-10selinux: make default_noexec read-only after initStephen Smalley1-1/+1
2020-01-10selinux: remove redundant msg_msg_alloc_securityHuaisheng Ye1-11/+6
2020-01-06selinux: allow per-file labelling for binderfsHridya Valsaraju1-0/+1
2019-12-18selinux: clean up selinux_enabled/disabled/enforcing_bootStephen Smalley1-7/+5
2019-12-12selinux: remove unnecessary selinux cred requestYang Guo1-4/+3
2019-12-09selinux: clean up selinux_inode_permission MAY_NOT_BLOCK testsStephen Smalley1-4/+4
2019-12-09selinux: fall back to ref-walk if audit is requiredStephen Smalley1-4/+7
2019-12-09selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"Stephen Smalley1-2/+3
2019-12-09security,lockdown,selinux: implement SELinux lockdownStephen Smalley1-0/+30
2019-11-26net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port)Maciej ┼╗enczykowski1-2/+2
2019-11-15y2038: move itimer reset into itimer.cArnd Bergmann1-7/+3
2019-10-17perf_event: Add support for LSM and SELinux checksJoel Fernandes (Google)1-0/+69
2019-10-01selinux: allow labeling before policy is loadedJonathan Lebon1-0/+12
2019-09-04selinux: fix residual uses of current_security() for the SELinux blobStephen Smalley1-1/+1
2019-08-12fanotify, inotify, dnotify, security: add security hook for fs notificationsAaron Goidel1-0/+47
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"Linus Torvalds1-15/+1
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells1-1/+15
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-06-14LSM: switch to blocking policy update notifiersJanne Karhunen1-1/+1
2019-06-12selinux: fix empty write to keycreate fileOndrej Mosnacek1-5/+6
2019-06-12selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang1-6/+14
2019-06-12selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang1-5/+14
2019-05-20selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni1-2/+8
2019-05-10Revert "selinux: do not report error on connect(AF_UNSPEC)"Paolo Abeni1-4/+4
2019-05-08selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni1-4/+4
2019-04-15selinux: Check address length before reading address familyTetsuo Handa1-1/+6
2019-04-04kernfs: fix xattr name handling in LSM helpersOndrej Mosnacek1-5/+4
2019-03-22selinux: Make selinux_kernfs_init_security staticYueHaibing1-2/+2
2019-03-20selinux: implement the kernfs_init_security hookOndrej Mosnacek1-0/+66
2019-03-20selinux: try security xattr after genfs for kernfs filesystemsOndrej Mosnacek1-73/+84
2019-03-11security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblockJ. Bruce Fields1-1/+4
2019-03-11selinux: add the missing walk_size + len check in selinux_sctp_bind_connectXin Long1-0/+3
2019-02-28introduce cloning of fs_contextAl Viro1-0/+39
2019-02-28selinux: Implement the new mount API LSM hooksDavid Howells1-5/+44
2019-02-22doc: sctp: Merge and clean up rst filesKees Cook1-1/+1
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa1-1/+0
2019-01-10selinux: do not override context on context mountsOndrej Mosnacek1-1/+8
2019-01-10selinux: never allow relabeling on context mountsOndrej Mosnacek1-9/+31
2019-01-10selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_linkStephen Smalley1-3/+2
2019-01-10selinux: avoid silent denials in permissive mode under RCU walkStephen Smalley1-1/+3
2019-01-10LSM: generalize flag passing to security_capableMicah Morton1-9/+9
2019-01-08LSM: Infrastructure management of the ipc security blobCasey Schaufler1-85/+13