aboutsummaryrefslogtreecommitdiffstats
path: root/security/security.c
AgeCommit message (Expand)AuthorFilesLines
2013-01-14tun: fix LSM/SELinux labeling of tun/tap devicesPaul Moore1-5/+23
2012-12-14ima: support new kernel module syscallMimi Zohar1-1/+6
2012-12-14security: introduce kernel_module_from_file hookKees Cook1-0/+5
2012-10-11consitify do_mount() argumentsAl Viro1-2/+2
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-0/+27
2012-09-21userns: Teach security_path_chown to take kuids and kgidsEric W. Biederman1-1/+1
2012-09-07ima: add ima_inode_setxattr/removexattr function and callsMimi Zohar1-0/+6
2012-09-05security: allow Yama to be unconditionally stackedKees Cook1-0/+21
2012-07-03security: Fix nommu build.Paul Mundt1-0/+1
2012-07-02security: Fix nommu build.Paul Mundt1-0/+1
2012-06-01take calculation of final prot in security_mmap_file() into a helperAl Viro1-18/+28
2012-06-01take security_mmap_file() outside of ->mmap_semAl Viro1-3/+30
2012-05-31split ->file_mmap() into ->mmap_addr()/->mmap_file()Al Viro1-4/+8
2012-04-09SELinux: rename dentry_open to file_openEric Paris1-2/+2
2012-02-14security: trim security.hAl Viro1-0/+2
2012-02-14mm: collapse security_vm_enough_memory() variants into a single functionAl Viro1-14/+0
2012-02-10security: create task_free security callbackKees Cook1-0/+5
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-30/+5
2012-01-06switch security_path_chmod() to struct path *Al Viro1-4/+3
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Eric Paris1-6/+0
2012-01-05capabilities: remove all _real_ interfacesEric Paris1-24/+0
2012-01-05capabilities: introduce security_capable_noauditEric Paris1-0/+6
2012-01-05capabilities: reverse arguments to security_capableEric Paris1-1/+1
2012-01-05capabilities: remove the task from capable LSM hook entirelyEric Paris1-4/+3
2012-01-03switch ->path_mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->path_mkdir() to umode_tAl Viro1-1/+1
2012-01-03switch security_path_chmod() to umode_tAl Viro1-1/+1
2012-01-03switch ->mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->create() to umode_tAl Viro1-1/+1
2012-01-03switch vfs_mkdir() and ->mkdir() to umode_tAl Viro1-1/+1
2012-01-03security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not setJan Kara1-1/+1
2011-10-25Merge branch 'next' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-11/+65
2011-10-18bluetooth: Properly clone LSM attributes to newly created child connectionsPaul Moore1-0/+1
2011-09-14evm: fix security/security_old_init_security return codeMimi Zohar1-2/+2
2011-09-09security: sparse fix: Move security_fixup_op to security.hJames Morris1-3/+0
2011-08-09Merge branch 'next-evm' of git://git.kernel.org/pub/scm/linux/kernel/git/zoha...James Morris1-7/+64
2011-07-20->permission() sanitizing: don't pass flags to exec_permission()Al Viro1-10/+0
2011-07-20->permission() sanitizing: don't pass flags to ->inode_permission()Al Viro1-2/+5
2011-07-18evm: add evm_inode_setattr to prevent updating an invalid security.evmMimi Zohar1-1/+6
2011-07-18evm: call evm_inode_init_security from security_inode_init_securityMimi Zohar1-6/+12
2011-07-18security: imbed evm calls in security hooksMimi Zohar1-2/+14
2011-07-18integrity: move ima inode integrity data managementMimi Zohar1-1/+2
2011-07-18security: new security_inode_init_security API adds function callbackMimi Zohar1-3/+36
2011-04-22SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen1-4/+2
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn1-6/+10
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds1-3/+4
2011-03-16Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-7/+12
2011-03-15Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-1/+1
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller1-2/+2
2011-03-08Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris1-7/+9
2011-03-08Merge branch 'master'; commit 'v2.6.38-rc7' into nextJames Morris1-3/+2
2011-03-03LSM: Pass -o remount options to the LSMEric Paris1-0/+5
2011-02-22xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller1-1/+2
2011-02-11security: add cred argument to security_capable()Chris Wright1-3/+2
2011-02-02time: Correct the *settime* parametersRichard Cochran1-1/+1
2011-02-01security: remove unused security_sysctl hookLucian Adrian Grijincu1-5/+0
2011-02-01fs/vfs/security: pass last path component to LSM on inode creationEric Paris1-2/+4
2011-01-24CacheFiles: Add calls to path-based security hooksDavid Howells1-0/+3
2011-01-07Merge branch 'vfs-scale-working' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-0/+9
2011-01-07fs: rcu-walk for path lookupNick Piggin1-0/+9
2011-01-05af_unix: Avoid socket->sk NULL OOPS in stream connect security hooks.David S. Miller1-2/+1
2010-11-15capabilities/syslog: open code cap_syslog logic to fix build failureEric Paris1-2/+2
2010-10-26Merge branch 'ima-memory-use-fixes'Linus Torvalds1-9/+1
2010-10-26IMA: only allocate iint when neededEric Paris1-9/+1
2010-10-21secmark: make secmark object handling genericEric Paris1-0/+18
2010-10-21security: remove unused parameter from security_task_setscheduler()KOSAKI Motohiro1-3/+2
2010-10-21LSM: Fix security_module_enable() error.Tetsuo Handa1-10/+2
2010-08-10Merge branch 'writable_limits' of git://decibel.fi.muni.cz/~xslaby/linuxLinus Torvalds1-2/+3
2010-08-10Merge branch 'for-linus' of git://git.infradead.org/users/eparis/notifyLinus Torvalds1-2/+14
2010-08-02LSM: Remove unused arguments from security_path_truncate().Tetsuo Handa1-3/+2
2010-07-28fsnotify: new fsnotify hooks and events types for access decisionsEric Paris1-2/+14
2010-07-16rlimits: security, add task_struct to setrlimitJiri Slaby1-2/+3
2010-05-17LSM: Add __init to fixup function.Tetsuo Handa1-2/+2
2010-04-12security: remove dead hook acctEric Paris1-5/+0
2010-04-12security: remove dead hook key_session_to_parentEric Paris1-7/+0
2010-04-12security: remove dead hook task_setgroupsEric Paris1-5/+0
2010-04-12security: remove dead hook task_setgidEric Paris1-5/+0
2010-04-12security: remove dead hook task_setuidEric Paris1-5/+0
2010-04-12security: remove dead hook cred_commitEric Paris1-5/+0
2010-04-12security: remove dead hook inode_deleteEric Paris1-7/+0
2010-04-12security: remove dead hook sb_post_pivotrootEric Paris1-5/+0
2010-04-12security: remove dead hook sb_post_addmountEric Paris1-5/+0
2010-04-12security: remove dead hook sb_post_remountEric Paris1-5/+0
2010-04-12security: remove dead hook sb_umount_busyEric Paris1-5/+0
2010-04-12security: remove dead hook sb_umount_closeEric Paris1-5/+0
2010-04-12security: remove sb_check_sb hooksEric Paris1-5/+0
2010-03-09Merge branch 'next-queue' into nextJames Morris1-1/+1
2010-03-03Security: Add __init to register_security to disable load a security module o...wzt.wzt@gmail.com1-1/+1
2010-03-01Merge branch 'next' into for-linusJames Morris1-21/+28
2010-02-24Security: add static to security_ops and default_security_ops variablewzt.wzt@gmail.com1-2/+9
2010-02-07Take ima_file_free() to proper place.Al Viro1-2/+0
2010-02-04syslog: distinguish between /proc/kmsg and syscallsKees Cook1-2/+2
2010-01-15security: correct error returns for get/set security with private inodesJames Morris1-2/+2
2009-12-08LSM: Rename security_path_ functions argument names.Tetsuo Handa1-15/+15
2009-11-10security: report the module name to security_module_requestEric Paris1-2/+2
2009-11-09Config option to set a default LSMJohn Johansen1-3/+6
2009-10-25LSM: imbed ima calls in the security hooksMimi Zohar1-3/+25
2009-10-12LSM: Add security_path_chroot().Tetsuo Handa1-0/+5
2009-10-12LSM: Add security_path_chmod() and security_path_chown().Tetsuo Handa1-0/+15
2009-09-10LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security contex...David P. Quigley1-0/+18
2009-09-02KEYS: Add a keyctl to install a process's session keyring on its parent [try #6]David Howells1-0/+17
2009-09-01lsm: Add hooks to the TUN driverPaul Moore1-0/+18
2009-08-14security: introducing security_request_moduleEric Paris1-0/+5
2009-06-25security: rename ptrace_may_access => ptrace_access_checkIngo Molnar1-2/+2
2009-06-04security: use mmap_min_addr indepedently of security modelsChristoph Lameter1-3/+0
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells1-0/+2
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore1-5/+0
2009-01-07Merge branch 'next' into for-linusJames Morris1-4/+22
2009-01-07CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]David Howells1-4/+22
2009-01-07Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() ...James Morris1-21/+4
2009-01-05CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]David Howells1-4/+21
2008-12-31introduce new LSM hooks where vfsmount is available.Kentaro Takeda1-0/+66
2008-12-20security: pass mount flags to security_sb_kern_mount()James Morris1-2/+2
2008-11-25CRED: fix sparse warningsHannes Eder1-3/+3
2008-11-14CRED: Allow kernel services to override LSM settings for task actionsDavid Howells1-0/+10
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells1-18/+8
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-31/+27
2008-11-14CRED: Pass credentials through dentry_open()David Howells1-2/+2
2008-11-14CRED: Detach the credentials from task_structDavid Howells1-4/+4
2008-11-14CRED: Constify the kernel_cap_t arguments to the capset LSM hooksDavid Howells1-6/+6
2008-11-14CRED: Neuter sys_capset()David Howells1-10/+8
2008-11-11Add a new capable interface that will be used by systems that use audit toEric Paris1-1/+6
2008-10-30nfsd: fix vm overcommit crashAlan Cox1-0/+9
2008-08-28Merge branch 'master' into nextJames Morris1-3/+7
2008-08-20security: add/fix security kernel-docRandy Dunlap1-4/+4
2008-08-14security: Fix setting of PF_SUPERPRIV by __capable()David Howells1-3/+7
2008-07-26[patch 3/4] fat: dont call notify_changeMiklos Szeredi1-0/+1
2008-07-26[PATCH] pass MAY_OPEN to vfs_permission() explicitlyAl Viro1-2/+2
2008-07-14security: remove register_security hookJames Morris1-29/+0
2008-07-14security: remove dummy moduleMiklos Szeredi1-10/+5
2008-07-14security: remove unused sb_get_mnt_opts hookMiklos Szeredi1-6/+0
2008-07-14LSM/SELinux: show LSM mount options in /proc/mountsEric Paris1-0/+5
2008-07-14security: fix return of void-valued expressionsJames Morris1-3/+3
2008-07-14Security: split proc ptrace checking into read vs. attachStephen Smalley1-2/+3
2008-04-29Security: Make secctx_to_secid() take const secdataDavid Howells1-1/+1
2008-04-29keys: add keyctl function to get a security labelDavid Howells1-0/+5
2008-04-29xattr: add missing consts to function argumentsDavid Howells1-6/+6
2008-04-28capabilities: implement per-process securebitsAndrew G. Morgan1-2/+2
2008-04-21[PATCH] switch a bunch of LSM hooks from nameidata to pathAl Viro1-10/+10
2008-04-18Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-1/+72
2008-04-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6.26Linus Torvalds1-10/+11
2008-04-19security: fix up documentation for security_module_enableJames Morris1-1/+1
2008-04-19Security: Introduce security= boot parameterAhmed S. Darwish1-1/+37
2008-04-19LSM/Audit: Introduce generic Audit LSM hooksAhmed S. Darwish1-0/+25
2008-04-19LSM: Introduce inode_getsecid and ipc_getsecid hooksAhmed S. Darwish1-0/+10
2008-04-18security: replace remaining __FUNCTION__ occurrencesHarvey Harrison1-4/+4
2008-04-12LSM: Make the Labeled IPsec hooks more stack friendlyPaul Moore1-10/+11
2008-03-06LSM/SELinux: Interfaces to allow FS to control mount optionsEric Paris1-8/+15
2008-02-06security: allow Kconfig to set default mmap_min_addr protectionEric Paris1-1/+3
2008-02-05VFS/Security: Rework inode_getsecurity and callers to return resulting bufferDavid P. Quigley1-2/+2
2008-01-25security: add a secctx_to_secid() hookDavid Howells1-0/+6
2008-01-25security: remove security_sb_post_mountroot hookH. Peter Anvin1-5/+0
2008-01-25Security: add get, set, and cloning of superblock security informationEric Paris1-0/+20
2007-10-17security/ cleanupsAdrian Bunk1-57/+1
2007-10-17Implement file posix capabilitiesSerge E. Hallyn1-0/+10
2007-10-17security: Convert LSM into a static interfaceJames Morris1-8/+956
2007-07-11security: unexport mmap_min_addrAdrian Bunk1-1/+0
2007-07-11security: Protection for exploiting null dereference using mmapEric Paris1-0/+2
2007-02-14[PATCH] remove many unneeded #includes of sched.hTim Schmielau1-1/+0
2006-06-30Remove obsolete #include <linux/config.h>Jörn Engel1-1/+0
2006-03-25[PATCH] refactor capable() to one implementation, add __capable() helperChris Wright1-23/+0
2006-01-11[PATCH] move capable() to capability.hRandy.Dunlap1-0/+1
2005-04-16Linux-2.6.12-rc2v2.6.12-rc2Linus Torvalds1-0/+203