aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2018-06-04Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-3/+8
2018-06-04Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-4/+3
2018-06-04Merge branch 'hch.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds1-32/+2
2018-05-30Merge tag 'selinux-pr-20180530' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+1
2018-05-29selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover1-1/+1
2018-05-24capabilities: Allow privileged user in s_user_ns to set security.* xattrsEric W. Biederman1-2/+6
2018-05-21Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds1-4/+16
2018-05-17Merge tag 'selinux-pr-20180516' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-22/+28
2018-05-16proc: introduce proc_create_seq{,_data}Christoph Hellwig1-32/+2
2018-05-14selinux: correctly handle sa_family cases in selinux_sctp_bind_connect()Alexey Kodanev1-1/+2
2018-05-14selinux: fix address family in bind() and connect() to match address/portAlexey Kodanev1-11/+7
2018-05-14selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()Alexey Kodanev1-10/+19
2018-05-14__inode_security_revalidate() never gets NULL opt_dentryAl Viro1-4/+3
2018-05-13fix breakage caused by d_find_alias() semantics changeAl Viro1-4/+16
2018-05-03evm: Don't update hmacs in user ns mountsSeth Forshee1-1/+2
2018-04-24Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-0/+2
2018-04-13Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds32-523/+2117
2018-04-11ipc/msg: introduce msgctl(MSG_STAT_ANY)Davidlohr Bueso2-0/+2
2018-04-11ipc/sem: introduce semctl(SEM_STAT_ANY)Davidlohr Bueso2-0/+2
2018-04-11ipc/shm: introduce shmctl(SHM_STAT_ANY)Davidlohr Bueso2-0/+2
2018-04-10commoncap: Handle memory allocation failure.Tetsuo Handa1-0/+2
2018-04-10Merge tag 'trace-v4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/rost...Linus Torvalds1-1/+7
2018-04-09selinux: fix missing dput() before selinuxfs unmountStephen Smalley1-0/+1
2018-04-07Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds16-68/+207
2018-04-07Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds1-0/+2
2018-04-07Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds4-27/+35
2018-04-06Merge tag 'selinux-pr-20180403' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds28-1224/+2311
2018-04-06Merge branch 'akpm' (patches from Andrew)Linus Torvalds2-1/+1
2018-04-06Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+0
2018-04-06init, tracing: instrument security and console initcall trace eventsAbderrahmane Benbachir1-1/+7
2018-04-05headers: untangle kmemleak.h from mm.hRandy Dunlap2-1/+1
2018-04-03Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-201/+120
2018-03-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextDavid S. Miller1-6/+1
2018-03-30apparmor: fix memory leak on buffer on error exit pathColin Ian King1-1/+3
2018-03-31security: convert security hooks to use hlistSargun Dhillon1-11/+11
2018-03-29security: Remove rtnl_lock() in selinux_xfrm_notify_policyload()Kirill Tkhai1-2/+0
2018-03-29net: Introduce net_rwsem to protect net_namespace_listKirill Tkhai1-0/+2
2018-03-28macro: introduce COUNT_ARGS() macroAlexei Starovoitov1-6/+1
2018-03-27ipc/smack: Tidy up from the change in type of the ipc security hooksEric W. Biederman1-139/+58
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai2-2/+0
2018-03-27Merge branch 'smack-for-4.17' of git://github.com/cschaufler/next-smack into ...James Morris1-0/+2
2018-03-25ima: Fallback to the builtin hash algorithmPetr Vorel2-0/+15
2018-03-25ima: Add smackfs to the default appraise/measure listMartin Townsend1-0/+2
2018-03-25evm: check for remount ro in progress before writingSascha Hauer1-2/+6
2018-03-25ima: Improvements in ima_appraise_measurement()Thiago Jung Bauermann1-13/+22
2018-03-25ima: Simplify ima_eventsig_init()Thiago Jung Bauermann1-8/+3
2018-03-25integrity: Remove unused macro IMA_ACTION_RULE_FLAGSThiago Jung Bauermann1-1/+0
2018-03-25ima: drop vla in ima_audit_measurement()Tycho Andersen1-6/+10
2018-03-25ima: Fix Kconfig to select TPM 2.0 CRB interfaceJiandi An1-0/+1
2018-03-23apparmor: fix dangling symlinks to policy rawdata after replacementJohn Johansen1-31/+95
2018-03-23apparmor: Fix an error code in verify_table_headers()Dan Carpenter1-1/+1
2018-03-23apparmor: fix error returns checks by making size a ssize_tColin Ian King1-1/+1
2018-03-23evm: Constify *integrity_status_msg[]Hernán Gonzalez1-1/+1
2018-03-23evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.cHernán Gonzalez3-4/+3
2018-03-23ima: fail signature verification based on policyMimi Zohar4-6/+14
2018-03-23ima: clear IMA_HASHMimi Zohar1-1/+1
2018-03-23ima: re-evaluate files on privileged mounted filesystemsMimi Zohar1-2/+11
2018-03-23ima: fail file signature verification on non-init mounted filesystemsMimi Zohar1-1/+14
2018-03-23IMA: Support using new creds in appraisal policyMatthew Garrett7-29/+79
2018-03-23security: Add a cred_getsecid hookMatthew Garrett3-0/+31
2018-03-22msg/security: Pass kern_ipc_perm not msg_queue into the msg_queue security hooksEric W. Biederman3-36/+36
2018-03-22shm/security: Pass kern_ipc_perm not shmid_kernel into the shm security hooksEric W. Biederman3-30/+30
2018-03-22sem/security: Pass kern_ipc_perm not sem_array into the sem security hooksEric W. Biederman3-30/+30
2018-03-23Merge tag 'v4.16-rc6' into next-generalJames Morris2-23/+88
2018-03-20selinux: wrap AVC stateStephen Smalley9-297/+512
2018-03-20selinux: wrap selinuxfs stateStephen Smalley1-177/+261
2018-03-20selinux: fix handling of uninitialized selinux state in get_bools/classesStephen Smalley1-0/+13
2018-03-13apparmor: remove POLICY_MEDIATES_SAFEJohn Johansen2-12/+2
2018-03-13apparmor: add base infastructure for socket mediationJohn Johansen13-8/+786
2018-03-07usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as...Stephen Smalley4-16/+24
2018-03-02selinux: Fix ltp test connect-syscall failureRichard Haines1-12/+30
2018-03-02selinux: rename the {is,set}_enforcing() functionsPaul Moore6-14/+14
2018-03-01selinux: wrap global selinux stateStephen Smalley25-797/+1155
2018-02-28Smack: Handle CGROUP2 in the same way that CGROUPJosé Bollo1-0/+2
2018-02-27net: Convert smack_net_opsKirill Tkhai1-0/+1
2018-02-27net: Convert selinux_net_opsKirill Tkhai1-0/+1
2018-02-26selinux: fix typo in selinux_netlbl_sctp_sk_clone declarationArnd Bergmann1-1/+2
2018-02-26selinux: Add SCTP supportRichard Haines5-32/+408
2018-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-23/+88
2018-02-22integrity/security: fix digsig.c build error with header fileRandy Dunlap1-0/+1
2018-02-22security: Add support for SCTP security hooksRichard Haines1-0/+22
2018-02-22get rid of pointless includes of fs_struct.hAl Viro1-1/+0
2018-02-22KEYS: Use individual pages in big_key for crypto buffersDavid Howells1-23/+87
2018-02-12net: make getname() functions return length rather than use int* parameterDenys Vlasenko1-2/+3
2018-02-11vfs: do bulk POLL* -> EPOLL* replacementLinus Torvalds4-13/+13
2018-02-09apparmor: improve overlapping domain attachment resolutionJohn Johansen4-14/+158
2018-02-09apparmor: convert attaching profiles via xattrs to use dfa matchingJohn Johansen5-57/+43
2018-02-09apparmor: Add support for attaching profiles via xattr, presence and valueMatthew Garrett4-34/+217
2018-02-09apparmor: cleanup: simplify code to get ns symlink nameJohn Johansen1-19/+6
2018-02-09apparmor: cleanup create_aafs() error pathJohn Johansen1-20/+12
2018-02-09apparmor: dfa split verification of table headersJohn Johansen1-48/+68
2018-02-09apparmor: dfa add support for state differential encodingJohn Johansen2-1/+29
2018-02-09apparmor: dfa move character match into a macroJohn Johansen1-47/+27
2018-02-09apparmor: update domain transitions that are subsets of confinement at nnpJohn Johansen4-65/+110
2018-02-09apparmor: move context.h to cred.hJohn Johansen15-14/+14
2018-02-09apparmor: move task related defines and fns to task.X filesJohn Johansen6-98/+105
2018-02-09apparmor: cleanup, drop unused fn __aa_task_is_confined()John Johansen1-11/+0
2018-02-09apparmor: cleanup fixup description of aa_replace_profilesJohn Johansen1-2/+3
2018-02-09apparmor: rename tctx to ctxJohn Johansen3-30/+29
2018-02-09apparmor: drop cred_ctx and reference the label directlyJohn Johansen4-129/+47
2018-02-09apparmor: move task domain change info to task securityJohn Johansen4-52/+132
2018-02-09apparmor: rename task_ctx to the more accurate cred_ctxJohn Johansen5-46/+45
2018-02-09apparmor: audit unknown signal numbersJohn Johansen3-4/+12
2018-02-09apparmor: make signal label match work when matching stacked labelsJohn Johansen1-28/+12
2018-02-09security: apparmor: remove duplicate includesPravin Shedge1-1/+0
2018-02-09apparmor: root view labels should not be under user controlJohn Johansen1-3/+2
2018-02-09apparmor: cleanup add proper line wrapping to nulldfa.inJohn Johansen1-1/+107
2018-02-09apparmor: provide a bounded version of label_parseJohn Johansen2-11/+27
2018-02-09apparmor: use the dfa to do label parse string splittingJohn Johansen5-11/+170
2018-02-09apparmor: add first substr match to dfaJohn Johansen2-0/+124
2018-02-09apparmor: split load data into management struct and data blobJohn Johansen2-4/+11
2018-02-09apparmor: fix logging of the existence test for signalsJohn Johansen2-2/+4
2018-02-09apparmor: fix resource audit messages when auditing peerJohn Johansen1-4/+4
2018-02-09apparmor: fix display of .ns_name for containersJohn Johansen1-3/+1
2018-02-07Merge tag 'iversion-v4.16-2' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-1/+1
2018-02-06pids: introduce find_get_task_by_vpid() helperMike Rapoport1-8/+3
2018-02-03Merge tag 'usercopy-v4.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-0/+14
2018-02-02ima: re-initialize iint->atomic_flagsMimi Zohar1-0/+1
2018-02-01Merge tag 'char-misc-4.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-0/+1
2018-02-01iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}Goffredo Baroncelli1-1/+1
2018-01-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+1
2018-01-31Merge tag 'selinux-pr-20180130' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds3-14/+13
2018-01-31Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds4-21/+20
2018-01-31Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds3-12/+39
2018-01-31Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds11-105/+294
2018-01-30Merge branch 'misc.poll' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds5-9/+9
2018-01-30Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-7/+0
2018-01-29Merge tag 'iversion-v4.16-1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2-2/+5
2018-01-29IMA: switch IMA over to new i_version APIJeff Layton2-2/+4
2018-01-18ima/policy: fix parsing of fsuuidMike Rapoport1-1/+1
2018-01-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller4-26/+41
2018-01-15usercopy: Allow strict enforcement of whitelistsKees Cook1-0/+14
2018-01-14Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-1/+1
2018-01-14security/Kconfig: Correct the Documentation reference for PTIW. Trevor King1-1/+1
2018-01-12apparmor: Fix regression in profile conflict logicMatthew Garrett1-4/+5
2018-01-12apparmor: fix ptrace label match when matching stacked labelsJohn Johansen2-21/+35
2018-01-10Smack: Privilege check on key operationsCasey Schaufler3-11/+34
2018-01-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-13/+31
2018-01-08tpm: use struct tpm_chip for tpm_chip_find_get()Jarkko Sakkinen4-21/+20
2018-01-07Merge tag 'apparmor-pr-2018-01-07' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-1/+11
2018-01-05apparmor: fix regression in mount mediation when feature set is pinnedJohn Johansen1-1/+11
2018-01-03Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-0/+1
2018-01-03x86/pti: Enable PTI by defaultThomas Gleixner1-0/+1
2018-01-03Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/pau...Ingo Molnar1-7/+0
2018-01-02Merge 4.15-rc6 into char-misc-nextGreg Kroah-Hartman1-0/+10
2018-01-02capabilities: fix buffer overread on very short xattrEric Biggers1-12/+9
2017-12-29Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-0/+10
2017-12-27Smack: fix dereferenced before checkVasyl Gomonovych1-1/+5
2017-12-23x86/mm/pti: Add KconfigDave Hansen1-0/+10
2017-12-18/dev/mem: Add bounce buffer for copy-outKees Cook1-0/+1
2017-12-18ima: Use i_version only when filesystem supports itSascha Hauer1-1/+2
2017-12-18integrity: remove unneeded initializations in integrity_iint_cache entriesJeff Layton1-4/+0
2017-12-18ima: log message to module appraisal errorBruno E. O. Meneguele1-1/+3
2017-12-18ima: pass filename to ima_rdwr_violation_check()Roberto Sassu1-3/+3
2017-12-18ima: Fix line continuation formatJoe Perches1-6/+5
2017-12-18ima: support new "hash" and "dont_hash" policy actionsMimi Zohar5-20/+63
2017-12-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller3-26/+47
2017-12-13ima: Use i_version only when filesystem supports itSascha Hauer1-1/+2
2017-12-11ima: re-introduce own integrity cache lockDmitry Kasatkin4-40/+77
2017-12-11EVM: Add support for portable signature formatMatthew Garrett5-21/+91
2017-12-11EVM: Allow userland to permit modification of EVM-protected metadataMatthew Garrett3-12/+53
2017-12-11ima: relax requiring a file signature for new files with zero lengthMimi Zohar1-1/+2
2017-12-08KEYS: reject NULL restriction string when type is specifiedEric Biggers1-14/+10
2017-12-08security: keys: remove redundant assignment to key_refColin Ian King1-1/+0
2017-12-08KEYS: add missing permission check for request_key() destinationEric Biggers1-9/+37
2017-12-08KEYS: remove unnecessary get/put of explicit dest_keyringEric Biggers1-2/+0
2017-12-05selinux: skip bounded transition processing if the policy isn't loadedPaul Moore1-0/+3
2017-12-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-5/+7
2017-12-04keyring: Remove now-redundant smp_read_barrier_depends()Paul E. McKenney1-7/+0
2017-11-30Merge tag 'apparmor-pr-2017-11-30' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-5/+7
2017-11-30net: Create and use new helper xfrm_dst_child().David Miller1-1/+1
2017-11-28selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore1-10/+8
2017-11-27apparmor: fix oops in audit_signal_cb hookJohn Johansen1-5/+7
2017-11-27apparmor: annotate ->poll() instancesAl Viro1-2/+2
2017-11-27tomoyo: annotate ->poll() instancesAl Viro4-7/+7
2017-11-27Rename superblock flags (MS_xyz -> SB_xyz)Linus Torvalds2-2/+2
2017-11-25Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds1-2/+2
2017-11-23Merge branch 'next-keys' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds7-56/+47
2017-11-23Merge tag 'apparmor-pr-2017-11-21' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds11-71/+91
2017-11-24Merge tag 'keys-next-20171123' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris7-56/+47
2017-11-21treewide: Switch DEFINE_TIMER callbacks to struct timer_list *Kees Cook1-2/+2
2017-11-21apparmor: fix possible recursive lock warning in __aa_create_nsJohn Johansen5-21/+21
2017-11-21apparmor: fix locking when creating a new complain profile.John Johansen1-3/+15
2017-11-21apparmor: fix profile attachment for special unconfined profilesJohn Johansen1-1/+3
2017-11-21apparmor: ensure that undecidable profile attachments failJohn Johansen1-14/+32
2017-11-21apparmor: fix leak of null profile name if profile allocation failsJohn Johansen1-1/+2
2017-11-21apparmor: remove unused redundant variable stopColin Ian King1-3/+0
2017-11-21apparmor: Fix bool initialization/comparisonThomas Meyer1-4/+4
2017-11-21apparmor: initialized returned struct aa_permsArnd Bergmann3-22/+12
2017-11-21apparmor: fix spelling mistake: "resoure" -> "resource"Colin Ian King1-2/+2
2017-11-20security: replace FSF address with web source in license noticesMartin Kepplinger2-4/+2
2017-11-20ima: do not update security.ima if appraisal status is not INTEGRITY_PASSRoberto Sassu1-0/+3
2017-11-15Merge tag 'modules-for-v4.15' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-8/+8
2017-11-15Merge tag 'selinux-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-36/+47
2017-11-15Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds5-67/+222
2017-11-15security: keys: Replace time_t with time64_t for struct key_preparsed_payloadBaolin Wang1-4/+4
2017-11-15security: keys: Replace time_t/timespec with time64_tBaolin Wang7-52/+43
2017-11-14Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-39/+17
2017-11-13Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-1/+1
2017-11-13Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2-15/+4