aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2012-04-10Smack: build when CONFIG_AUDIT not definedKees Cook1-4/+15
2012-04-03lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit...Linus Torvalds4-13/+12
2012-04-03SELinux: do not allocate stack space for AVC data unless neededEric Paris2-14/+27
2012-04-03SELinux: remove avd from slow_avc_audit()Eric Paris1-2/+2
2012-04-03SELinux: remove avd from selinux_audit_dataEric Paris1-1/+0
2012-04-03LSM: shrink the common_audit_data data unionEric Paris4-88/+122
2012-04-03LSM: shrink sizeof LSM specific portion of common_audit_dataEric Paris15-97/+238
2012-03-31Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2-71/+48
2012-03-31get rid of pointless includes of ext2_fs.hAl Viro1-5/+4
2012-03-31selinuxfs: merge dentry allocation into sel_make_dir()Al Viro1-66/+44
2012-03-31selinux: inline avc_audit() and avc_has_perm_noaudit() into callerLinus Torvalds1-2/+2
2012-03-31selinux: don't inline slow-path code into avc_has_perm_noaudit()Linus Torvalds1-14/+38
2012-03-29Merge branch 'x86-x32-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-1/+1
2012-03-28Merge tag 'split-asm_system_h-for-linus-20120328' of git://git.kernel.org/pub...Linus Torvalds2-1/+2
2012-03-28Remove all #inclusions of asm/system.hDavid Howells1-1/+0
2012-03-28apparmor: Fix change_onexec when called from a confined taskJohn Johansen2-1/+4
2012-03-26SELinux: selinux/xfrm.h needs net/flow.hDavid Howells1-0/+2
2012-03-23usermodehelper: kill umh_wait, renumber UMH_* constantsOleg Nesterov1-1/+1
2012-03-23usermodehelper: use UMH_WAIT_PROC consistentlyOleg Nesterov1-1/+1
2012-03-23Merge tag 'nfs-for-3.4-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfsLinus Torvalds2-16/+22
2012-03-22security: optimize avc_audit() common pathLinus Torvalds1-29/+41
2012-03-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-6/+2
2012-03-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds38-191/+856
2012-03-21Merge branch 'kmap_atomic' of git://github.com/congwang/linuxLinus Torvalds1-2/+2
2012-03-20switch unix_sock to struct pathAl Viro1-6/+2
2012-03-20Merge branch 'for-3.4' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cg...Linus Torvalds1-6/+4
2012-03-20tomoyo: remove the second argument of k[un]map_atomic()Cong Wang1-2/+2
2012-03-20Merge branch 'for-security' of git://git.kernel.org/pub/scm/linux/kernel/git/...James Morris1-2/+2
2012-03-19AppArmor: Fix location of const qualifier on generated string tablesTetsuo Handa1-2/+2
2012-03-20TOMOYO: Return error if fails to delete a domainTetsuo Handa1-4/+5
2012-03-15Merge branch 'for-security' of git://git.kernel.org/pub/scm/linux/kernel/git/...James Morris13-52/+189
2012-03-14AppArmor: add const qualifiers to string arraysJan Engelhardt4-7/+7
2012-03-14AppArmor: Add ability to load extended policyJohn Johansen4-1/+50
2012-03-15TOMOYO: Return appropriate value to poll().Tetsuo Handa4-43/+26
2012-03-14AppArmor: Move path failure information into aa_get_name and renameJohn Johansen4-19/+29
2012-03-14AppArmor: Update dfa matching routines.John Johansen3-4/+81
2012-03-14AppArmor: Minor cleanup of d_namespace_path to consolidate error handlingJohn Johansen1-10/+6
2012-03-14AppArmor: Retrieve the dentry_path for error reporting when path lookup failsJohn Johansen1-6/+9
2012-03-14AppArmor: Add const qualifiers to generated string tablesJohn Johansen1-2/+3
2012-03-14AppArmor: Fix oops in policy unpack auditingJohn Johansen1-2/+3
2012-03-14AppArmor: Fix error returned when a path lookup is disconnectedJohn Johansen1-1/+1
2012-03-07KEYS: testing wrong bit for KEY_FLAG_REVOKEDDan Carpenter1-1/+2
2012-03-01Created a function for setting timeouts on keysBryan Schumaker2-16/+22
2012-03-01TOMOYO: Fix mount flags checking order.Tetsuo Handa1-18/+20
2012-02-28security: fix ima kconfig warningRandy Dunlap1-1/+1
2012-02-27AppArmor: Fix the error case for chroot relative path name lookupJohn Johansen1-3/+2
2012-02-27AppArmor: fix mapping of META_READ to audit and quiet flagsJohn Johansen1-2/+1
2012-02-27AppArmor: Fix underflow in xindex calculationJohn Johansen1-1/+1
2012-02-27AppArmor: Fix dropping of allowed operations that are force auditedJohn Johansen2-3/+3
2012-02-27AppArmor: Add mising end of structure test to caps unpackingJohn Johansen1-0/+2
2012-02-27AppArmor: export known rlimit names/value mappings in securityfsKees Cook4-6/+29
2012-02-27AppArmor: add "file" details to securityfsKees Cook2-0/+16
2012-02-27AppArmor: add initial "features" directory to securityfsKees Cook2-0/+65
2012-02-27AppArmor: refactor securityfs to use structuresKees Cook2-42/+114
2012-02-19Replace the fd_sets in struct fdtable with an array of unsigned longsDavid Howells1-1/+1
2012-02-16IMA: fix audit res field to indicate 1 for success and 0 for failureEric Paris2-2/+2
2012-02-16Yama: add PR_SET_PTRACER_ANYKees Cook1-2/+6
2012-02-14security: trim security.hAl Viro4-0/+8
2012-02-14mm: collapse security_vm_enough_memory() variants into a single functionAl Viro1-14/+0
2012-02-10security: Yama LSMKees Cook5-0/+343
2012-02-10security: create task_free security callbackKees Cook2-0/+10
2012-02-09Merge branch 'next-queue' into nextJames Morris3-2/+16
2012-02-02cgroup: remove cgroup_subsys argument from callbacksLi Zefan1-6/+4
2012-01-23Merge git://git.samba.org/sfrench/cifs-2.6Linus Torvalds3-0/+39
2012-01-19ima: policy for RAMFSDmitry Kasatkin1-0/+1
2012-01-19ima: fix Kconfig dependenciesFabio Estevam1-1/+1
2012-01-19keys: fix user_defined key sparse messagesMimi Zohar1-3/+3
2012-01-19ima: fix cred sparse warningMimi Zohar1-1/+2
2012-01-19KEYS: Allow special keyrings to be clearedDavid Howells1-1/+14
2012-01-17keys: add a "logon" key typeJeff Layton3-0/+39
2012-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds9-22/+34
2012-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2-15/+20
2012-01-18integrity: digital signature config option name changeDmitry Kasatkin3-4/+4
2012-01-18lib: digital signature config option name changeDmitry Kasatkin1-1/+1
2012-01-18encrypted-keys: fix rcu and sparse messagesMimi Zohar2-2/+2
2012-01-18keys: fix trusted/encrypted keys sparse rcu_assign_pointer messagesMimi Zohar3-4/+6
2012-01-18KEYS: Add missing smp_rmb() primitives to the keyring search codeDavid Howells2-8/+18
2012-01-18TOMOYO: Accept \000 as a valid character.Tetsuo Handa1-3/+3
2012-01-17audit: no leading space in audit_log_d_path prefixKees Cook1-2/+2
2012-01-17audit: treat s_id as an untrusted stringKees Cook2-13/+18
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds5-85/+27
2012-01-13module_param: make bool parameters really bool (drivers & misc)Rusty Russell2-11/+11
2012-01-10Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds16-59/+259
2012-01-10securityfs: fix object creation racesAl Viro1-141/+50
2012-01-09Merge branch 'for-3.3' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cg...Linus Torvalds1-3/+4
2012-01-09Merge branch 'next' into for-linusJames Morris16-59/+259
2012-01-08Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds13-60/+46
2012-01-06switch security_path_chmod() to struct path *Al Viro4-17/+11
2012-01-06vfs: prefer ->dentry->d_sb to ->mnt->mnt_sbAl Viro2-3/+3
2012-01-06Merge branches 'vfsmount-guts', 'umode_t' and 'partitions' into ZAl Viro10-34/+34
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Eric Paris4-34/+0
2012-01-05ptrace: do not audit capability check when outputing /proc/pid/statEric Paris1-1/+1
2012-01-05capabilities: remove all _real_ interfacesEric Paris1-24/+0
2012-01-05capabilities: introduce security_capable_noauditEric Paris1-0/+6
2012-01-05capabilities: reverse arguments to security_capableEric Paris1-1/+1
2012-01-05capabilities: remove the task from capable LSM hook entirelyEric Paris4-30/+24
2012-01-05selinux: sparse fix: fix several warnings in the security server codJames Morris5-7/+9
2012-01-05selinux: sparse fix: fix warnings in netlink codeJames Morris6-5/+6
2012-01-05selinux: sparse fix: eliminate warnings for selinuxfsJames Morris3-6/+4
2012-01-05selinux: sparse fix: declare selinux_disable() in security.hJames Morris2-1/+1
2012-01-05selinux: sparse fix: move selinux_complete_initJames Morris2-1/+1
2012-01-05selinux: sparse fix: make selinux_secmark_refcount staticJames Morris1-1/+1
2012-01-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2012-01-03vfs: trim includes a bitAl Viro1-0/+1
2012-01-03switch ->path_mknod() to umode_tAl Viro4-4/+4
2012-01-03switch ->path_mkdir() to umode_tAl Viro4-4/+4
2012-01-03tomoyo_mini_stat: switch to umode_tAl Viro2-3/+3
2012-01-03switch securityfs_create_file() to umode_tAl Viro3-8/+8
2012-01-03switch security_path_chmod() to umode_tAl Viro4-4/+4
2012-01-03get rid of open-coded S_ISREG(), etc.Al Viro2-2/+2
2012-01-03switch ->mknod() to umode_tAl Viro3-3/+3
2012-01-03switch ->create() to umode_tAl Viro3-3/+3
2012-01-03switch vfs_mkdir() and ->mkdir() to umode_tAl Viro3-3/+3
2012-01-03vfs: for usbfs, etc. internal vfsmounts ->mnt_sb->s_root == ->mnt_rootAl Viro1-1/+1
2012-01-03btrfs, nfs, apparmor: don't pull mnt_namespace.h for no reason...Al Viro1-1/+0
2012-01-03tomoyo: stop including hell knows whatAl Viro1-8/+0
2012-01-03security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not setJan Kara1-1/+1
2011-12-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller4-35/+66
2011-12-21SELinux: Fix RCU deref check warning in sel_netport_insert()David Howells1-1/+3
2011-12-20SELinux: Fix RCU deref check warning in sel_netport_insert()David Howells1-1/+3
2011-12-20evm: prevent racing during tfm allocationDmitry Kasatkin1-0/+9
2011-12-20evm: key must be set once during initializationDmitry Kasatkin1-4/+6
2011-12-19ima: fix invalid memory referenceRoberto Sassu1-5/+11
2011-12-19ima: free duplicate measurement memoryRoberto Sassu2-2/+3
2011-12-19selinux: Casting (void *) value returned by kmalloc is uselessThomas Meyer1-1/+1
2011-12-16apparmor: fix module parameter handlingRusty Russell1-3/+3
2011-12-12cgroup: introduce cgroup_taskset and use it in subsys->can_attach(), cancel_a...Tejun Heo1-3/+4
2011-12-12Security: tomoyo: add .gitignore fileGreg Kroah-Hartman1-0/+2
2011-12-12tomoyo: add missing rcu_dereference()Kees Cook1-1/+1
2011-12-09apparmor: add missing rcu_dereference()Kees Cook1-1/+1
2011-12-08TOMOYO: Fix pathname handling of disconnected paths.Tetsuo Handa1-1/+9
2011-12-08evm: prevent racing during tfm allocationDmitry Kasatkin1-3/+11
2011-12-08evm: key must be set once during initializationDmitry Kasatkin1-7/+8
2011-12-06fix apparmor dereferencing potentially freed dentry, sanitize __d_path() APIAl Viro2-29/+39
2011-12-06inet_diag: Partly rename inet_ to sock_Pavel Emelyanov1-1/+1
2011-12-03ipv6: Add fragment reporting to ipv6_skip_exthdr().Jesse Gross2-2/+4
2011-11-22net: remove ipv6_addr_copy()Alexey Dobriyan3-6/+6
2011-11-22digsig: build dependency fixDmitry Kasatkin1-1/+1
2011-11-18Merge branch 'next-evm-digsig' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris7-30/+226
2011-11-18Merge branch 'encrypted-key-fixes' of git://git.kernel.org/pub/scm/linux/kern...James Morris3-4/+9
2011-11-18Merge branch 'for-1111' of git://gitorious.org/smack-next/kernel into for-linusJames Morris1-76/+39
2011-11-17KEYS: Give key types their own lockdep class for key->semDavid Howells1-0/+3
2011-11-16encrypted-keys: module build fixesMimi Zohar2-3/+8
2011-11-16encrypted-keys: fix error return codeMimi Zohar1-1/+1
2011-11-16Merge branch 'master'; commit 'v3.2-rc2' into nextJames Morris10-7/+14
2011-11-15KEYS: Fix a NULL pointer deref in the user-defined key typeDavid Howells1-1/+2
2011-11-16selinuxfs: remove custom hex_to_bin()Andy Shevchenko1-10/+4
2011-11-11Smack: smackfs cipso seq read repairCasey Schaufler1-76/+39
2011-11-09evm: digital signature verification supportDmitry Kasatkin3-30/+142
2011-11-09integrity: digital signature verification using multiple keyringsDmitry Kasatkin4-0/+84
2011-11-06Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2-0/+2
2011-11-02Merge branch 'for-linus' of git://git.selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-0/+30
2011-11-02Merge branch 'for-linus' of git://github.com/richardweinberger/linuxLinus Torvalds1-1/+1
2011-11-02um: switch to use of drivers/KconfigAl Viro1-1/+1
2011-10-31security: follow rename pack_hex_byte() to hex_byte_pack()Andy Shevchenko2-2/+2
2011-10-31Cross Memory AttachChristopher Yeoh2-2/+2
2011-10-31selinux: Add export.h to files using EXPORT_SYMBOL/THIS_MODULEPaul Gortmaker2-0/+2
2011-10-29TOMOYO: Fix interactive judgment functionality.Tetsuo Handa1-0/+30
2011-10-25Merge branch 'next' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds72-1201/+4164
2011-10-22Merge branch 'master' of git://gitorious.org/smack-next/kernel into nextJames Morris3-24/+51
2011-10-22TOMOYO: Fix incomplete read after seek.Tetsuo Handa1-0/+1
2011-10-20Smack: allow to access /smack/access as normal userJarkko Sakkinen3-23/+50
2011-10-19TOMOYO: Fix unused kernel config option.Tetsuo Handa1-2/+4
2011-10-18bluetooth: Properly clone LSM attributes to newly created child connectionsPaul Moore1-0/+1
2011-10-18Smack: fix: invalid length set for the result of /smack/accessJarkko Sakkinen1-1/+1
2011-10-14Smack: compilation fixJarkko Sakkinen1-0/+1
2011-10-12Smack: fix for /smack/access output, use string instead of byteJarkko Sakkinen1-2/+5
2011-10-12Smack: domain transition protections (v3)Jarkko Sakkinen1-11/+42
2011-10-12Smack: Provide information for UDS getsockopt(SO_PEERCRED)Casey Schaufler1-0/+9
2011-10-12Smack: Clean up commentsCasey Schaufler3-12/+10
2011-10-12Smack: Repair processing of fcntlCasey Schaufler1-25/+42
2011-10-12Smack: Rule list lookup performanceCasey Schaufler4-121/+220
2011-10-12Smack: check permissions from user space (v2)Jarkko Sakkinen1-63/+117
2011-10-12TOMOYO: Fix quota and garbage collector.Tetsuo Handa2-0/+18
2011-10-12TOMOYO: Remove redundant tasklist_lock.Tetsuo Handa1-4/+0
2011-09-28TOMOYO: Fix domain transition failure warning.Tetsuo Handa1-1/+2
2011-09-27Merge branch 'next-hex2bin' of git://github.com/mzohar/linux-evm into nextJames Morris2-7/+26
2011-09-26TOMOYO: Remove tomoyo_policy_memory_lock spinlock.Tetsuo Handa3-27/+27
2011-09-26TOMOYO: Simplify garbage collector.Tetsuo Handa5-319/+186
2011-09-26TOMOYO: Fix make namespacecheck warnings.Tetsuo Handa5-7/+9
2011-09-20encrypted-keys: check hex2bin resultMimi Zohar1-3/+11
2011-09-20trusted-keys: check hex2bin resultMimi Zohar1-4/+15
2011-09-19TOMOYO: Allow specifying domain transition preference.Tetsuo Handa5-12/+137
2011-09-15encrypted-keys: IS_ERR need include/err.hStephen Rothwell1-0/+1
2011-09-15Merge branch 'next-evm' of git://github.com/mzohar/linux-evm into nextJames Morris14-84/+155
2011-09-15TOMOYO: Bump version.Tetsuo Handa3-9/+9
2011-09-14evm: clean verification statusDmitry Kasatkin1-0/+1
2011-09-14evm: permit mode bits to be updatedMimi Zohar1-17/+13
2011-09-14evm: posix acls modify i_modeMimi Zohar3-5/+46
2011-09-14evm: limit verifying current security.evm integrityMimi Zohar1-34/+24
2011-09-14evm: fix security/security_old_init_security return codeMimi Zohar1-2/+2
2011-09-14evm: remove TCG_TPM dependencyMimi Zohar1-2/+1
2011-09-14encrypted-keys: remove trusted-keys dependencyMimi Zohar5-28/+67
2011-09-14encrypted-keys: create encrypted-keys directoryMimi Zohar6-1/+6
2011-09-14TOMOYO: Avoid race when retrying "file execute" permission check.Tetsuo Handa1-34/+22
2011-09-14TOMOYO: Allow domain transition without execve().Tetsuo Handa4-28/+210
2011-09-14TOMOYO: Allow controlling generation of access granted logs for per an entry ...Tetsuo Handa5-1/+38
2011-09-14TOMOYO: Add socket operation restriction support.Tetsuo Handa10-17/+1215
2011-09-14TOMOYO: Add environment variable name restriction support.Tetsuo Handa7-10/+266
2011-09-09security: sparse fix: Move security_fixup_op to security.hJames Morris1-3/+0
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-14 14:38:47 +0000