summaryrefslogtreecommitdiff
path: root/security/selinux/ss/services.c
AgeCommit message (Expand)AuthorFilesLines
2017-12-06selinux: skip bounded transition processing if the policy isn't loadedPaul Moore1-0/+3
2017-11-29selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore1-10/+8
2017-09-20selinux: Use kmem_cache for hashtab_nodeKyeongdon Kim1-0/+4
2017-08-17selinux: update my email addressStephen Smalley1-1/+1
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley1-1/+6
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee1-0/+4
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens1-0/+41
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens1-0/+40
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley1-0/+23
2017-03-30selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke1-1/+1
2017-03-02selinux: wrap cgroup seclabel support with its own policy capabilityStephen Smalley1-0/+4
2017-01-09selinux: support distinctions among all network address familiesStephen Smalley1-0/+3
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley1-48/+22
2016-04-14selinux: Change bool variable name to index.Prarit Bhargava1-3/+3
2015-12-24selinux: export validatetrans decisionsAndrew Perepechko1-7/+27
2015-10-22selinux: use sprintf return valueRasmus Villemoes1-4/+1
2015-10-22selinux: use kstrdup() in security_get_bools()Rasmus Villemoes1-7/+1
2015-10-22selinux: use kmemdup in security_sid_to_context_core()Rasmus Villemoes1-2/+2
2015-10-22selinux: introduce security_context_str_to_sidRasmus Villemoes1-0/+5
2015-07-13selinux: extended permissions for ioctlsJeff Vander Stoep1-20/+193
2015-04-07selinux: reconcile security_netlbl_secattr_to_sid() and mls_import_netlbl_cat()Paul Moore1-5/+1
2014-09-23selinux: normalize audit log formattingRichard Guy Briggs1-6/+8
2014-06-24selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long1-9/+32
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov1-2/+4
2014-02-10Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-0/+4
2014-02-05SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley1-0/+4
2014-01-24Merge git://git.infradead.org/users/eparis/auditLinus Torvalds1-8/+4
2014-01-14selinux: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs1-8/+4
2013-12-13selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore1-38/+4
2013-11-20SELinux: security_load_policy: Silence frame-larger-than warningTim Gardner1-22/+32
2013-08-28selinux: consider filesystem subtype in policiesAnand Avati1-4/+38
2013-07-25Add SELinux policy capability for always checking packet and peer classes.Chris PeBenito1-0/+3
2013-07-25SELinux: pass a superblock to security_fs_useEric Paris1-12/+9
2013-07-25SELinux: change sbsec->behavior to shortEric Paris1-1/+1
2012-09-21userns: Convert selinux to use kuid and kgid where appropriateEric W. Biederman1-1/+1
2012-04-09SELinux: avc: remove the useless fields in avc_add_callbackWanlong Gao1-4/+2
2012-04-09SELinux: possible NULL deref in context_struct_to_stringEric Paris1-3/+5
2012-04-09SELinux: add default_type statementsEric Paris1-4/+10
2012-04-09SELinux: allow default source/target selectors for user/role/rangeEric Paris1-7/+25
2011-09-10selinux: sparse fix: fix warnings in netlink codeJames Morris1-2/+0
2011-09-10selinux: sparse fix: move selinux_complete_initJames Morris1-1/+0
2011-08-02doc: Update the email address for Paul Moore in various source filesPaul Moore1-1/+1
2011-05-27selinux: don't pass in NULL avd to avc_has_perm_noauditLinus Torvalds1-1/+2
2011-05-24Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into fo...James Morris1-32/+40
2011-04-28SELinux: put name based create rules in a hashtableEric Paris1-10/+10
2011-04-28SELinux: skip filename trans rules if ttype does not match parent dirEric Paris1-0/+9
2011-04-28SELinux: rename filename_compute_type argument to *type instead of *conEric Paris1-3/+3
2011-04-28SELinux: fix comment to state filename_compute_type takes an objname not a qstrEric Paris1-1/+1
2011-04-25SELinux: security_read_policy should take a size_t not ssize_tEric Paris1-1/+1
2011-04-07selinux: Fix regression for XorgStephen Smalley1-1/+1