aboutsummaryrefslogtreecommitdiffstats
path: root/security (unfollow)
AgeCommit message (Expand)AuthorFilesLines
2015-08-26LSM: restore certain default error codesJan Beulich1-5/+6
2015-08-04Adding YAMA hooks also when YAMA is not stacked.Salvatore Mesoraca1-0/+1
2015-07-28KEYS: ensure we free the assoc array edit if edit is validColin Ian King1-3/+5
2015-07-10selinux: fix mprotect PROT_EXEC regression caused by mm changeStephen Smalley1-1/+2
2015-07-09selinux: don't waste ebitmap space when importing NetLabel categoriesPaul Moore1-0/+6
2015-07-01sysfs: Create mountpoints with sysfs_create_mount_pointEric W. Biederman3-16/+13
2015-06-23make simple_positive() publicAl Viro1-13/+6
2015-06-18netfilter: Remove spurios included of netfilter.hEric W Biederman1-3/+0
2015-06-16ima: update builtin policiesMimi Zohar1-9/+56
2015-06-16ima: extend "mask" policy matching supportMimi Zohar1-5/+15
2015-06-16ima: add support for new "euid" policy conditionMimi Zohar1-4/+23
2015-06-16ima: fix ima_show_template_data_ascii()Mimi Zohar3-4/+5
2015-06-12Smack: freeing an error pointer in smk_write_revoke_subj()Dan Carpenter1-7/+9
2015-06-05selinux: fix setting of security labels on NFSJ. Bruce Fields1-0/+1
2015-06-04selinux: Remove unused permission definitionsStephen Smalley1-14/+8
2015-06-04selinux: enable genfscon labeling for sysfs and pstore filesStephen Smalley1-1/+3
2015-06-04selinux: enable per-file labeling for debugfs files.Stephen Smalley2-22/+22
2015-06-04selinux: update netlink socket classesStephen Smalley2-10/+32
2015-06-04signals: don't abuse __flush_signals() in selinux_bprm_committed_creds()Oleg Nesterov1-2/+4
2015-06-04selinux: Print 'sclass' as string when unrecognized netlink message occursMarek Milkovic1-2/+3
2015-06-02Smack: allow multiple labels in onlycapRafal Krypa3-69/+160
2015-06-02Smack: fix seq operations in smackfsRafal Krypa1-30/+22
2015-05-29lsm: rename duplicate labels in LSM_AUDIT_DATA_TASK audit message typeRichard Guy Briggs1-1/+1
2015-05-28kernel/params: constify struct kernel_param_ops usesLuis R. Rodriguez2-4/+4
2015-05-21ima: pass iint to ima_add_violation()Roberto Sassu5-9/+13
2015-05-21ima: wrap event related data to the new ima_event_data structureRoberto Sassu5-79/+61
2015-05-21integrity: add validity checks for 'path' parameterDmitry Kasatkin3-2/+5
2015-05-21evm: fix potential race when removing xattrsDmitry Kasatkin1-4/+3
2015-05-21evm: labeling pseudo filesystems exceptionMimi Zohar1-0/+11
2015-05-21ima: remove definition of IMA_X509_PATHDmitry Kasatkin1-7/+1
2015-05-21ima: limit file hash setting by user to fix and log modesDmitry Kasatkin1-2/+6
2015-05-21ima: do not measure or appraise the NSFS filesystemMimi Zohar1-0/+2
2015-05-21ima: skip measurement of cgroupfs files and update documentationRoberto Sassu1-0/+2
2015-05-15smack: pass error code through pointersLukasz Pawelczyk3-97/+139
2015-05-15Smack: ignore private inode for smack_file_receiveSeung-Woo Kim1-0/+3
2015-05-13ima: cleanup ima_init_policy() a littleDan Carpenter1-10/+6
2015-05-12LSM: Remove unused capability.cCasey Schaufler1-1158/+0
2015-05-12LSM: Switch to lists of hooksCasey Schaufler11-321/+570
2015-05-12LSM: Add security module hook list headsCasey Schaufler5-402/+406
2015-05-12LSM: Introduce security hook calling MacrosCasey Schaufler1-207/+226
2015-05-12LSM: Split security.hCasey Schaufler7-7/+7
2015-05-11security: make inode_follow_link RCU-walk awareNeilBrown3-6/+20
2015-05-11security/selinux: pass 'flags' arg to avc_audit() and avc_has_perm_flags()NeilBrown3-4/+25
2015-05-10SECURITY: remove nameidata arg from inode_follow_link.NeilBrown3-5/+4
2015-04-17tomoyo: reduce mmap_sem hold for mm->exe_fileDavidlohr Bueso1-5/+8
2015-04-15kernel: conditionally support non-root users, groups and capabilitiesIulia Manda1-0/+1
2015-04-15VFS: security/: d_inode() annotationsDavid Howells4-12/+12
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells12-105/+105
2015-04-15lsm: copy comm before calling audit_log to avoid race in string printingRichard Guy Briggs1-6/+9
2015-04-13selinux/nlmsg: add a build time check for rtnl/xfrm cmdsNicolas Dichtel1-0/+3