summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2023-07-19selinux: de-brand SELinuxStephen Smalley4-11/+11
2023-07-19selinux: avoid implicit conversions regarding enforcing statusChristian Göttsche3-6/+7
2023-07-19selinux: fix implicit conversions in the symtabChristian Göttsche2-2/+2
2023-07-19selinux: use consistent type for AV rule specifierChristian Göttsche3-3/+3
2023-07-19selinux: avoid implicit conversions in the LSM hooksChristian Göttsche1-16/+10
2023-07-19selinux: avoid implicit conversions in the AVC codeChristian Göttsche1-7/+8
2023-07-19selinux: avoid implicit conversions in the netif codeChristian Göttsche1-2/+2
2023-07-19selinux: consistently use u32 as sequence number type in the status codeChristian Göttsche2-2/+2
2023-07-19selinux: avoid avtab overflowsChristian Göttsche1-2/+2
2023-07-19selinux: check for multiplication overflow in put_entry()Christian Göttsche1-2/+5
2023-07-14security: Constify sk in the sk_getsecid hook.Guillaume Nault1-2/+2
2023-07-10selinux: introduce an initial SID for early boot processesOndrej Mosnacek6-2/+65
2023-07-10selinux: cleanup the policycap accessor functionsPaul Moore1-24/+11
2023-07-10security: Allow all LSMs to provide xattrs for inode_init_security hookRoberto Sassu1-8/+9
2023-06-06selinux: avoid bool as identifier nameChristian Göttsche2-5/+5
2023-06-02selinux: fix Makefile for versions of make < v4.3Paul Moore1-3/+14
2023-05-31selinux: make labeled NFS work when mounted before policy loadOndrej Mosnacek2-17/+42
2023-05-30selinux: cleanup exit_sel_fs() declarationXiu Jianfeng1-1/+0
2023-05-23selinux: deprecated fs oconChristian Göttsche2-1/+5
2023-05-18selinux: make header files self-includingChristian Göttsche2-0/+4
2023-05-18selinux: keep context struct members in syncChristian Göttsche1-0/+1
2023-05-18selinux: Implement mptcp_add_subflow hookPaolo Abeni2-2/+22
2023-05-08selinux: small cleanups in selinux_audit_rule_init()Paul Moore1-20/+18
2023-05-08selinux: declare read-only data arrays constChristian Göttsche3-3/+3
2023-05-08selinux: retain const qualifier on string literal in avtab_hash_eval()Christian Göttsche2-2/+2
2023-05-08selinux: drop return at end of void function avc_insert()Christian Göttsche1-1/+0
2023-05-08selinux: avc: drop unused function avc_disable()Christian Göttsche2-22/+0
2023-05-08selinux: adjust typos in commentsChristian Göttsche6-6/+6
2023-05-08selinux: do not leave dangling pointer behindChristian Göttsche1-0/+1
2023-05-08selinux: more Makefile tweaksPaul Moore1-10/+9
2023-04-13selinux: ensure av_permissions.h is built when neededPaul Moore1-1/+1
2023-04-12selinux: fix Makefile dependencies of flask.hOndrej Mosnacek1-2/+2
2023-04-04selinux: stop returning node from avc_insert()Stephen Smalley1-13/+11
2023-03-20selinux: remove the runtime disable functionalityPaul Moore4-137/+8
2023-03-20selinux: remove the 'checkreqprot' functionalityPaul Moore4-56/+11
2023-03-14selinux: stop passing selinux_state pointers and their offspringStephen Smalley18-995/+651
2023-03-08selinux: uninline unlikely parts of avc_has_perm_noaudit()Paul Moore1-28/+57
2023-02-24Merge tag 'mm-stable-2023-02-20-13-37' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds1-3/+3
2023-02-10mm: replace vma->vm_flags direct modifications with modifier callsSuren Baghdasaryan1-3/+3
2023-01-19fs: port inode_owner_or_capable() to mnt_idmapChristian Brauner1-3/+2
2023-01-19fs: port acl to mnt_idmapChristian Brauner1-3/+3
2023-01-19fs: port xattr to mnt_idmapChristian Brauner1-4/+5
2023-01-19fs: port ->permission() to pass mnt_idmapChristian Brauner1-2/+2
2022-12-13Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-7/+6
2022-12-13Merge tag 'selinux-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-47/+52
2022-12-13Merge tag 'fs.acl.rework.v6.2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-0/+22
2022-11-09selinux: remove the sidtab context conversion indirect callsPaul Moore4-44/+45
2022-11-05lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore1-7/+6
2022-10-20selinux: implement get, set and remove acl hookChristian Brauner1-0/+22
2022-10-19selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi3-5/+6