aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-10-20selinux: bpf: Add addtional check for bpf object file receiveChenbo Feng1-0/+49
2017-10-20selinux: bpf: Add selinux check for eBPF syscall operationsChenbo Feng3-0/+117
2017-09-12Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds26-50/+77
2017-09-07Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/auditLinus Torvalds1-2/+0
2017-09-07Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linuxLinus Torvalds1-20/+6
2017-09-05selinux: remove AVC init audit log messageRichard Guy Briggs1-2/+0
2017-08-28selinux: constify nf_hook_opsArvind Yadav1-1/+1
2017-08-22selinux: allow per-file labeling for cgroupfsAntonio Murdaca1-1/+3
2017-08-17selinux: update my email addressStephen Smalley25-25/+25
2017-08-08selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko1-8/+6
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley4-16/+42
2017-08-01selinux: Refactor to remove bprm_secureexec hookKees Cook1-19/+5
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal1-1/+1
2017-07-25selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel1-0/+1
2017-07-18xfrm: remove flow cacheFlorian Westphal1-3/+1
2017-07-05Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-7/+5
2017-07-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+2
2017-07-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds14-106/+743
2017-06-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+2
2017-06-21rtnetlink: add NEWCACHEREPORT message typeJulien Gomes1-1/+2
2017-06-20selinux: enable genfscon labeling for tracefsJeff Vander Stoep1-0/+1
2017-06-13selinux: fix double free in selinux_parse_opts_str()Paul Moore1-3/+2
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native labeling behaviorScott Mayhew1-2/+33
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee3-6/+27
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal1-4/+20
2017-05-25sel_write_validatetrans(): don't open-code memdup_user_nul()Al Viro1-7/+5
2017-05-23selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens5-3/+288
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens4-0/+70
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens4-0/+66
2017-05-23selinux: Allocate and free infiniband security hooksDaniel Jurgens2-1/+29
2017-05-23selinux: Create policydb version for Infiniband supportDaniel Jurgens3-24/+118
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens2-0/+13
2017-05-23selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley3-11/+27
2017-05-23selinux: do not check open permission on socketsStephen Smalley1-3/+7
2017-05-23selinux: add a map permission check for mmapStephen Smalley2-1/+13
2017-05-23selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley1-8/+15
2017-05-23selinux: Return an error code only as a constant in sidtab_insert()Markus Elfring1-17/+10
2017-05-23selinux: Return directly after a failed memory allocation in policydb_index()Markus Elfring1-10/+5
2017-05-23selinux: Use task_alloc hook rather than task_create hookTetsuo Handa1-2/+3
2017-05-09Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-2/+2
2017-05-03Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds10-62/+81
2017-04-26fs: constify tree_descr arrays passed to simple_fill_super()Eric Biggers1-2/+2
2017-03-31selinux: Fix an uninitialized variable bugDan Carpenter1-1/+1
2017-03-29selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke1-1/+1
2017-03-29selinuxfs: Use seq_puts() in sel_avc_stats_seq_show()Markus Elfring1-4/+4
2017-03-29selinux: Adjust two checks for null pointersMarkus Elfring1-2/+2
2017-03-29selinux: Use kmalloc_array() in sidtab_init()Markus Elfring1-1/+1
2017-03-29selinux: Return directly after a failed kzalloc() in roles_init()Markus Elfring1-2/+1