summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2016-02-24ptrace: use fsuid, fsgid, effective creds for fs access checksJann Horn1-1/+6
2016-01-25KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats1-0/+1
2016-01-25KEYS: Fix race between read and revokeDavid Howells1-9/+9
2015-11-18KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells1-2/+4
2015-11-18KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells1-4/+4
2015-08-19ima: extend "mask" policy matching supportMimi Zohar1-5/+15
2015-08-19ima: add support for new "euid" policy conditionMimi Zohar1-4/+23
2015-06-10lsm: copy comm before calling audit_log to avoid race in string printingRichard Guy Briggs1-6/+9
2015-04-27nick kvfree() from apparmorAl Viro2-15/+0
2015-04-22selinux: fix sel_write_enforce broken return valueJoe Perches1-1/+1
2015-04-09Don't leak a key reference if request_key() tries to use a revoked keyringDavid Jeffery1-0/+1
2015-02-16SELinux: fix selinuxfs policy file on big endian systemsEric Paris1-2/+1
2015-01-29move d_rcu from overlapping d_child to overlapping d_aliasAl Viro1-3/+3
2015-01-29KEYS: close race between key lookup and freeingSasha Levin1-2/+2
2015-01-07KEYS: Fix stale key registration at error pathTakashi Iwai1-1/+4
2014-11-13selinux: fix inode security list corruptionStephen Smalley1-1/+1
2014-11-13evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin1-3/+6
2014-09-17CAPABILITIES: remove undefined caps from all processesEric Paris1-0/+3
2014-06-23evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar1-2/+10
2014-06-23ima: introduce ima_kernel_read()Dmitry Kasatkin1-1/+31
2014-06-20ima: audit log files opened with O_DIRECT flagMimi Zohar4-3/+18
2014-06-09device_cgroup: check if exception removal is allowedAristeu Rozanski1-3/+38
2014-06-09device_cgroup: rework device access check and exception checkingAristeu Rozanski1-40/+122
2014-04-13selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-03-12SELinux: Increase ebitmap_node size for 64-bit configurationWaiman Long1-1/+7
2014-03-12SELinux: Reduce overhead of mls_level_isvalid() function callWaiman Long4-19/+27
2014-03-05SELinux: bigendian problems with filename trans rulesEric Paris1-4/+4
2014-02-20SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley1-0/+4
2014-02-14SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2014-01-25SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2-3/+22
2014-01-10selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+36
2014-01-10selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-16/+48
2014-01-10selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2014-01-10selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-04selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore1-4/+2
2013-11-29Revert "ima: policy for RAMFS"Mimi Zohar1-1/+0
2013-10-16apparmor: fix bad lock balance when introspecting policyJohn Johansen1-3/+1
2013-10-16apparmor: fix memleak of the profile hashJohn Johansen1-0/+1
2013-10-05selinux: remove 'flags' parameter from avc_audit()Linus Torvalds3-4/+4
2013-10-05selinux: avc_has_perm_flags has no more usersLinus Torvalds2-17/+6
2013-10-04selinux: remove 'flags' parameter from inode_has_permLinus Torvalds1-7/+6
2013-09-30apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen2-2/+5
2013-09-30apparmor: Use shash crypto API interface for profile hashesTyler Hicks1-18/+16
2013-09-08Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-5/+5
2013-09-08Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds28-547/+1666
2013-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+6
2013-09-05Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-0/+2
2013-09-04Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds1-39/+26
generated by cgit v1.2.3 (git 2.39.0) at 2024-09-01 19:31:30 +0300