summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-09-09evm: prevent passing integrity check if xattr read failsDmitry Kasatkin1-3/+4
2014-09-03selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute()Paul Moore1-0/+1
2014-09-03evm: fix checkpatch warningsDmitry Kasatkin1-3/+0
2014-09-03ima: fix fallback to use new_sync_read()Dmitry Kasatkin1-4/+4
2014-09-03ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin1-1/+4
2014-09-03ima: fix ima_alloc_atfm()Mimi Zohar1-1/+4
2014-08-29Make Smack operate on smack_known struct where it still used char*Lukasz Pawelczyk4-255/+233
2014-08-29Fix a bidirectional UDS connect check typoLukasz Pawelczyk1-2/+2
2014-08-29Small fixes in comments describing function parametersLukasz Pawelczyk1-9/+9
2014-08-29Smack: Bring-up access modeCasey Schaufler5-27/+294
2014-08-28selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID.Stephen Smalley1-12/+47
2014-08-26Smack: Fix setting label on successful file openMarcin Niesluchowski1-1/+3
2014-08-09Smack: remove unneeded NULL-termination from securtity labelKonstantin Khlebnikov1-3/+3
2014-08-09Smack: handle zero-length security labels without panicKonstantin Khlebnikov2-3/+3
2014-08-09Smack: fix behavior of smack_inode_listsecurityKonstantin Khlebnikov1-5/+4
2014-08-05Merge tag 'v3.16' into nextPaul Moore27-175/+490
2014-08-02Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris5-102/+70
2014-08-01netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore5-26/+26
2014-08-01netlabel: fix the horribly broken catmap functionsPaul Moore2-82/+50
2014-08-01netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore1-1/+1
2014-07-29Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-11/+2
2014-07-28Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore1-11/+2
2014-07-28KEYS: revert encrypted key changeMimi Zohar1-1/+1
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar6-4/+41
2014-07-25security: introduce kernel_fw_from_file hookKees Cook2-0/+12
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris1-0/+3
2014-07-24Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris12-57/+209
2014-07-24commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa1-42/+30
2014-07-23Merge branch 'keys-fixes' into keys-nextDavid Howells1-1/+14
2014-07-23Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells6-4/+67
2014-07-23KEYS: request_key_auth: Provide key preparsingDavid Howells1-0/+13
2014-07-23KEYS: keyring: Provide key preparsingDavid Howells1-11/+23
2014-07-23KEYS: big_key: Use key preparsingDavid Howells1-16/+25
2014-07-23KEYS: user: Use key preparsingDavid Howells1-19/+22
2014-07-23KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells1-5/+4
2014-07-23KEYS: Allow expiry time to be set when preparsing a keyDavid Howells1-0/+8
2014-07-23KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells2-3/+5
2014-07-19Merge tag 'seccomp-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris1-2/+2
2014-07-19Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris11-160/+101
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook1-2/+2
2014-07-18KEYS: Provide a generic instantiation functionDavid Howells1-0/+30
2014-07-17KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells1-1/+14
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar5-2/+63
2014-07-17KEYS: special dot prefixed keyring name bug fixMimi Zohar1-2/+4
2014-07-17ima: provide double buffering for hash calculationDmitry Kasatkin1-16/+49
2014-07-17ima: introduce multi-page collect buffersDmitry Kasatkin1-2/+96
2014-07-17ima: use ahash API for file hash calculationDmitry Kasatkin1-4/+183
2014-07-17audit: fix dangling keywords in integrity ima message outputRichard Guy Briggs2-4/+4
2014-07-17ima: delay template descriptor lookup until useDmitry Kasatkin1-1/+2
2014-07-17ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin1-4/+0
generated by cgit v1.2.3 (git 2.39.0) at 2024-08-08 20:30:15 +0300