aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux (unfollow)
AgeCommit message (Expand)AuthorFilesLines
2014-06-18selinux: introduce str_read() helperNamhyung Kim1-96/+37
2014-06-17SELinux: use ARRAY_SIZEHimangi Saraogi1-4/+4
2014-06-03selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones1-0/+3
2014-06-03selinux: conditionally reschedule in mls_convert_context while loading selinux policyDave Jones1-0/+2
2014-06-03selinux: reject setexeccon() on MNT_NOSUID applications with -EACCESPaul Moore1-2/+4
2014-06-03selinux: Report permissive mode in avc: denied messages.Stephen Smalley3-5/+11
2014-05-15selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones1-0/+3
2014-05-15selinux: conditionally reschedule in mls_convert_context while loading selinux policyDave Jones1-0/+2
2014-05-15selinux: reject setexeccon() on MNT_NOSUID applications with -EACCESPaul Moore1-2/+4
2014-05-01selinux: Report permissive mode in avc: denied messages.Stephen Smalley3-5/+11
2014-04-22audit: add netlink audit protocol bind to check capabilities on multicast joinRichard Guy Briggs1-1/+1
2014-04-22locks: rename file-private locks to "open file description locks"Jeff Layton1-3/+3
2014-03-31locks: add new fcntl cmd values for handling file private locksJeff Layton1-0/+3
2014-03-19selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-03-19selinux: put the mmap() DAC controls before the MAC controlsPaul Moore1-12/+8
2014-03-14KEYS: Move the flags representing required permission to linux/key.hDavid Howells1-1/+1
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov6-26/+40
2014-03-05selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-02-28selinux: put the mmap() DAC controls before the MAC controlsPaul Moore1-12/+8
2014-02-20SELinux: bigendian problems with filename trans rulesEric Paris1-4/+4
2014-02-12flowcache: Make flow cache name space awareFan Du1-2/+3
2014-02-06security: replace strict_strto*() with kstrto*()Jingoo Han2-3/+3
2014-02-05SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley1-0/+4
2014-02-05selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message typesPaul Moore1-0/+2
2014-01-13selinux: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs1-8/+4
2014-01-12SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2-3/+22
2014-01-07SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2013-12-23selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-23selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-16selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2013-12-16SELinux: remove duplicated include from hooks.cWei Yongjun1-1/+0
2013-12-15Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2-60/+22
2013-12-13selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2-60/+22
2013-12-12selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()Paul Moore1-7/+35
2013-12-12selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-11selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-10selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()Paul Moore1-7/+35
2013-12-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-14/+47
2013-12-04selinux: fix possible memory leakGeyslan G. Bem1-4/+7
2013-12-04selinux: pull address family directly from the request_sock structPaul Moore1-5/+1
2013-12-04selinux: ensure that the cached NetLabel secattr matches the desired SIDPaul Moore1-1/+30
2013-12-04selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-04selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-11-25selinux: fix possible memory leakGeyslan G. Bem1-4/+7
2013-11-19SELinux: security_load_policy: Silence frame-larger-than warningTim Gardner1-22/+32
2013-11-19SELinux: Update policy version to support constraints infoRichard Haines4-10/+101
2013-11-05selinux: apply selinux checks on new audit message typesEric Paris1-0/+2
2013-10-14netfilter: pass hook ops to hookfnPatrick McHardy1-5/+5