aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux (follow)
AgeCommit message (Expand)AuthorFilesLines
2016-07-29Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds6-63/+72
2016-07-07Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris6-63/+72
2016-06-27calipso: Add a label cache.Huw Davies1-3/+6
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies3-7/+9
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies1-0/+15
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies1-1/+1
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies1-1/+16
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies1-1/+1
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee1-0/+23
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski1-1/+1
2016-06-15selinux: fix type mismatchHeinrich Schuchardt1-1/+1
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore1-1/+1
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley1-48/+22
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds5-60/+127
2016-05-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+3
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-1/+1
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley2-17/+25
2016-04-20rtnetlink: add new RTM_GETSTATS message to dump link statsRoopa Prabhu1-1/+3
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore1-1/+1
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore1-8/+13
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore1-2/+11
2016-04-14selinux: Change bool variable name to index.Prarit Bhargava2-4/+4
2016-04-11->getxattr(): pass dentry and inode as separate argumentsAl Viro1-4/+5
2016-04-10don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro1-1/+1
2016-04-05selinux: restrict kernel module loadingJeff Vander Stoep2-1/+48
2016-04-05selinux: consolidate the ptrace parent lookup codePaul Moore1-21/+17
2016-04-05selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore2-4/+3
2016-04-05selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()Paul Moore1-3/+5
2016-03-28constify security_sb_mount()Al Viro1-1/+1
2016-03-17Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/ttyLinus Torvalds1-2/+2
2016-03-17Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds1-1/+1
2016-03-04Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris1-1/+1
2016-02-26Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux into for-linusJames Morris1-1/+1
2016-02-19selinux: Don't sleep inside inode_getsecid hookAndreas Gruenbacher1-1/+1
2016-02-14Merge 4.5-rc4 into tty-nextGreg Kroah-Hartman1-0/+1
2016-02-09selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tablesLorenzo Colitti1-0/+1
2016-01-28selinux: use absolute path to include directoryAndy Shevchenko1-1/+1
2016-01-27tty: Make tty_files_lock per-ttyPeter Hurley1-2/+2
2016-01-22wrappers for ->i_mutex accessAl Viro1-2/+2
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds6-69/+256
2016-01-08selinux: Inode label revalidation performance fixAndreas Gruenbacher1-8/+2
2016-01-04selinuxfs: switch to memdup_user_nul()Al Viro1-73/+41
2015-12-24selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()Vladis Dronov1-4/+5
2015-12-24selinux: export validatetrans decisionsAndrew Perepechko4-8/+111
2015-12-24selinux: Revalidate invalid inode security labelsAndreas Gruenbacher1-8/+68
2015-12-24security: Add hook to invalidate inode security labelsAndreas Gruenbacher2-10/+26
2015-12-24selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher1-41/+56
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-1/+1
2015-12-24security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher1-1/+1