aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux/ss
AgeCommit message (Expand)AuthorFilesLines
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds2-12/+52
2026-08-04selinux: check level category sets once at load timeStephen Smalley2-17/+30
2026-08-03selinux: require every boolean value to be definedBryam Vargas1-0/+19
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas1-5/+19
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas1-5/+46
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas1-1/+3
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas1-0/+12
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas1-0/+3
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley1-0/+35
2026-07-02selinux: tighten type validation during policy loadStephen Smalley1-3/+8
2026-07-01selinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen1-9/+9
2026-06-17Merge tag 'selinux-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds14-140/+497
2026-05-06selinux: check for simple typesChristian Göttsche3-2/+29
2026-05-06selinux: more strict bounds checkChristian Göttsche3-2/+31
2026-05-06selinux: beef up isvalid checksChristian Göttsche8-58/+83
2026-05-06selinux: reorder policydb_index()Christian Göttsche1-5/+6
2026-05-06selinux: check type attr map overflowsChristian Göttsche3-0/+33
2026-05-06selinux: check length fields in policiesChristian Göttsche4-0/+68
2026-05-06selinux: more strict policy parsingChristian Göttsche7-60/+232
2026-05-06selinux: use u16 for security classesChristian Göttsche3-8/+9
2026-05-06selinux: avoid nontransitive comparisonChristian Göttsche1-8/+9
2026-05-05selinux: prune /sys/fs/selinux/userStephen Smalley1-125/+0
2026-04-29selinux: switch two allocations to use kzalloc_objs()Stephen Smalley1-2/+2
2026-02-22Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL usesKees Cook2-7/+7
2026-02-21Convert more 'alloc_obj' cases to default GFP_KERNEL argumentsLinus Torvalds2-4/+2
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds4-31/+31
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook5-59/+56
2025-12-03Merge tag 'selinux-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds1-36/+3
2025-10-23selinux: improve bucket distribution uniformity of avc_hash()Hongru Zhang1-0/+6
2025-10-23selinux: Move avtab_hash() to a shared location for future reuseHongru Zhang1-40/+1
2025-10-22selinux: move initcalls to the LSM frameworkPaul Moore1-19/+7
2025-07-28Merge tag 'selinux-pr-20250725' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds4-1/+43
2025-06-19selinux: add __GFP_NOWARN to hashtab_init() allocationsPaul Moore1-1/+2
2025-06-19selinux: introduce neveraudit typesStephen Smalley3-0/+41
2025-06-19selinux: change security_compute_sid to return the ssid or tsid on matchStephen Smalley1-5/+11
2025-04-12selinux: remove a duplicated includePaul Moore1-1/+0
2025-04-11selinux: support wildcard match in genfsconTakaya Saeki1-4/+15
2025-04-11selinux: constify network address pointerChristian Göttsche1-2/+2
2025-03-17selinux: get netif_wildcard policycap from policy instead of cacheChristian Göttsche1-2/+1
2025-03-07selinux: support wildcard network interface namesChristian Göttsche1-3/+13
2025-01-21Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds14-149/+149
2025-01-07selinux: make more use of str_read() when loading the policyChristian Göttsche3-22/+12
2025-01-07selinux: avoid unnecessary indirection in struct level_datumChristian Göttsche3-17/+10
2025-01-07selinux: use known type instead of void pointerChristian Göttsche8-74/+77
2025-01-07selinux: rename comparison functions for clarityChristian Göttsche7-16/+16
2025-01-07selinux: rework match_ipv6_addrmask()Christian Göttsche1-7/+5
2025-01-07selinux: constify and reconcile function parameter namesChristian Göttsche2-3/+3
2025-01-07selinux: avoid using types indicating user space interactionChristian Göttsche1-1/+1
2025-01-04selinux: match extended permissions to their base permissionsThiébaud Weksteen1-7/+21
2024-12-15selinux: ignore unknown extended permissionsThiébaud Weksteen1-2/+6
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.