summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-06-30ima: extend ima_get_action() to return the policy pcrEric Richter5-7/+14
2016-06-30ima: add policy support for extending different pcrsEric Richter1-1/+28
2016-06-30integrity: add measured_pcrs field to integrity cacheEric Richter2-0/+3
2016-06-27calipso: Add a label cache.Huw Davies1-3/+6
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies4-8/+10
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies1-0/+15
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies1-1/+1
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies1-1/+16
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies1-1/+1
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee1-0/+23
2016-06-24Smack: Handle labels consistently in untrusted mountsSeth Forshee1-10/+19
2016-06-24Smack: Add support for unprivileged mounts from user namespacesSeth Forshee2-12/+37
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski2-2/+8
2016-06-24fs: Limit file caps to the user namespace of the super blockSeth Forshee1-0/+2
2016-06-24KEYS: Use skcipher for big keysHerbert Xu1-12/+18
2016-06-17KEYS: potential uninitialized variableDan Carpenter1-1/+1
2016-06-15selinux: fix type mismatchHeinrich Schuchardt1-1/+1
2016-06-14KEYS: Strip trailing spacesDavid Howells2-2/+2
2016-06-11vfs: make the string hashes salt the hashLinus Torvalds3-4/+4
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore1-1/+1
2016-06-08Smack: ignore null signal in smack_task_killRafal Krypa1-0/+3
2016-06-06security: tomoyo: simplify the gc kthread creationMike Danese1-7/+2
2016-06-06LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler1-4/+25
2016-06-03KEYS: Add placeholder for KDF usage with DHStephan Mueller4-6/+13
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley1-48/+22
2016-05-29securityfs: ->d_parent is never NULL or negativeAl Viro1-5/+6
2016-05-29drbd: ->d_parent is never NULL or negativeAl Viro1-4/+0
2016-05-28Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+1
2016-05-28switch ->setxattr() to passing dentry and inode separatelyAl Viro1-1/+1
2016-05-26Yama: fix double-spinlock and user access in atomic contextJann Horn1-6/+63
2016-05-21security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko1-12/+2
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds34-185/+909
2016-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+3
2016-05-18Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds13-106/+83
2016-05-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds4-14/+15
2016-05-17Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-2/+2
2016-05-17LSM: LoadPin: provide enablement CONFIGKees Cook2-6/+15
2016-05-17Merge branch 'ovl-fixes' into for-linusAl Viro1-2/+2
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+2
2016-05-06Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris5-60/+127
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris19-112/+516
2016-05-04Yama: use atomic allocations when reportingSasha Levin1-2/+2
2016-05-04Merge branch 'keys-trust' into keys-nextDavid Howells10-62/+128
2016-05-04ima: fix the string representation of the LSM/IMA hook enumeration orderingMimi Zohar1-2/+2
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar2-1/+29
2016-05-01ima: fix ima_inode_post_setattrMimi Zohar2-1/+2
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley2-17/+25
2016-04-22security: Introduce security_settime64()Baolin Wang2-2/+2
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook6-0/+205