aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux/hooks.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-01-09selinux: allow context mounts on tmpfs, ramfs, devpts within user namespacesStephen Smalley1-3/+7
2017-01-09selinux: handle ICMPv6 consistently with ICMPStephen Smalley1-1/+2
2017-01-09selinux: add security in-core xattr support for tracefsYongqin Liu1-0/+1
2017-01-09selinux: support distinctions among all network address familiesStephen Smalley1-0/+73
2016-12-14Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-47/+73
2016-11-22selinux: Convert isec->lock into a spinlockAndreas Gruenbacher1-38/+63
2016-11-16posix-timers: Make them configurableNicolas Pitre1-4/+7
2016-11-14selinux: Clean up initialization of isec->sclassAndreas Gruenbacher1-6/+4
2016-11-14proc: Pass file mode to proc_pid_make_inodeAndreas Gruenbacher1-0/+1
2016-11-14selinux: Minor cleanupsAndreas Gruenbacher1-1/+2
2016-11-14SELinux: Use GFP_KERNEL for selinux_parse_opts_str().Tetsuo Handa1-2/+3
2016-10-20mm: Change vm_is_stack_for_task() to vm_is_stack_for_current()Andy Lutomirski1-1/+1
2016-10-10Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-12/+7
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher1-12/+7
2016-09-19lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILEVivek Goyal1-8/+8
2016-08-10selinux: Implement dentry_create_files_as() hookVivek Goyal1-0/+22
2016-08-08selinux: Pass security pointer to determine_inode_label()Vivek Goyal1-9/+10
2016-08-08selinux: Implementation for inode_copy_up_xattr() hookVivek Goyal1-0/+16
2016-08-08selinux: Implementation for inode_copy_up() hookVivek Goyal1-0/+21
2016-08-08security: Use IS_ENABLED() instead of checking for built-in or moduleJavier Martinez Canillas1-6/+6
2016-08-06Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-1/+1
2016-07-29Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-3/+18
2016-07-20qstr: constify dentry_init_securityAl Viro1-1/+1
2016-07-07Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris1-3/+18
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies1-3/+3
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies1-0/+15
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee1-0/+23
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski1-1/+1
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-42/+102
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-1/+1
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley1-7/+7
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore1-1/+1
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore1-8/+13
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore1-2/+11
2016-04-11->getxattr(): pass dentry and inode as separate argumentsAl Viro1-4/+5
2016-04-10don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro1-1/+1
2016-04-05selinux: restrict kernel module loadingJeff Vander Stoep1-0/+47
2016-04-05selinux: consolidate the ptrace parent lookup codePaul Moore1-21/+17
2016-04-05selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore1-1/+1
2016-04-05selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()Paul Moore1-3/+5
2016-03-28constify security_sb_mount()Al Viro1-1/+1
2016-03-17Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/ttyLinus Torvalds1-2/+2
2016-02-19selinux: Don't sleep inside inode_getsecid hookAndreas Gruenbacher1-1/+1
2016-01-27tty: Make tty_files_lock per-ttyPeter Hurley1-2/+2
2016-01-08selinux: Inode label revalidation performance fixAndreas Gruenbacher1-8/+2
2015-12-24selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()Vladis Dronov1-4/+5
2015-12-24selinux: Revalidate invalid inode security labelsAndreas Gruenbacher1-8/+68
2015-12-24security: Add hook to invalidate inode security labelsAndreas Gruenbacher1-10/+20
2015-12-24selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher1-41/+56