aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2019-07-22UBUNTU: ubuntu: AUFS -- update to c8bcd8c8a52e387b3da4c5970b59f033468f3813Wen-chien Jesse Sung3-0/+12
2019-07-22security: fix compile error in commoncap.cJonghwan Choi1-0/+1
2019-07-22fcaps: clear the same personality flags as suid when fcaps are usedEric Paris1-0/+5
2019-07-22TOMOYO: Fix mount flags checking order.Tetsuo Handa1-18/+20
2019-07-22ima: fix invalid memory referenceRoberto Sassu1-5/+11
2019-07-22ima: free duplicate measurement memoryRoberto Sassu2-2/+3
2019-07-22SELinux: Fix RCU deref check warning in sel_netport_insert()David Howells1-1/+3
2019-07-22fix apparmor dereferencing potentially freed dentry, sanitize __d_path() APIAl Viro2-30/+44
2019-07-22KEYS: Fix a NULL pointer deref in the user-defined key typeDavid Howells1-1/+2
2019-07-22security: fix build failure without android aidBin Wang1-0/+2
2019-07-22base code from marvellLubomir Rintel1-0/+9
2011-08-04AppArmor: Fix masking of capabilities in complain modeJohn Johansen1-1/+1
2011-08-04AppArmor: Fix reference to rcu protected pointer outside of rcu_read_lockJohn Johansen1-1/+1
2011-06-21KEYS: Fix error handling in construct_key_and_link()David Howells1-1/+2
2011-06-20Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-7/+1
2011-06-20devcgroup_inode_permission: take "is it a device node" checks to inlined wrapperAl Viro1-7/+1
2011-06-17KEYS/DNS: Fix ____call_usermodehelper() to not lose the session keyringDavid Howells1-2/+1
2011-06-15Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris2-1/+39
2011-06-14SELinux: skip file_name_trans_write() when policy downgraded.Roy.Li1-0/+3
2011-06-14TOMOYO: Fix oops in tomoyo_mount_acl().Tetsuo Handa1-1/+1
2011-06-09AppArmor: Fix sleep in invalid context from task_setrlimitJohn Johansen1-1/+1
2011-06-08selinux: simplify and clean up inode_has_perm()Linus Torvalds1-10/+15
2011-06-01AppArmor: fix oops in apparmor_setprocattrKees Cook1-1/+2
2011-05-27Merge branch 'docs-move' of git://git.kernel.org/pub/scm/linux/kernel/git/rdu...Linus Torvalds6-7/+7
2011-05-26selinux: don't pass in NULL avd to avc_has_perm_noauditLinus Torvalds2-11/+4
2011-05-26cgroups: add per-thread subsystem callbacksBen Blum1-2/+1
2011-05-26selinux: fix case of names with whitespace/multibytes on /selinux/createKohei Kaigai1-1/+36
2011-05-26Merge commit 'v2.6.39' into 20110526Eric Paris16-64/+148
2011-05-26Set cred->user_ns in key_replace_session_keyringSerge E. Hallyn1-0/+1
2011-05-24Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into fo...James Morris11-208/+370
2011-05-24Merge branch 'next' into for-linusJames Morris15-41/+66
2011-05-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-4/+4
2011-05-19selinux: avoid unnecessary avc cache stat hit countLinus Torvalds3-9/+11
2011-05-19selinux: de-crapify avc cache stat code generationLinus Torvalds1-5/+1
2011-05-19Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-31/+3
2011-05-19Create Documentation/security/,Randy Dunlap6-7/+7
2011-05-19Merge branch 'master' into nextJames Morris7-36/+69
2011-05-13Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris1-4/+0
2011-05-12SELinux: delete debugging printks from filename_trans rule processingEric Paris1-4/+0
2011-05-12TOMOYO: Fix wrong domainname validation.Tetsuo Handa1-1/+1
2011-05-11SELINUX: add /sys/fs/selinux mount point to put selinuxfsGreg Kroah-Hartman1-1/+11
2011-05-07security,rcu: convert call_rcu(sel_netif_free) to kfree_rcu()Lai Jiangshan1-17/+1
2011-05-07security,rcu: convert call_rcu(user_update_rcu_disposal) to kfree_rcu()Lai Jiangshan1-14/+2
2011-05-04Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris2-4/+5
2011-04-28flex_array: flex_array_prealloc takes a number of elements, not an endEric Paris1-3/+3
2011-04-28SELinux: pass last path component in may_createEric Paris1-1/+2
2011-04-28SELinux: introduce path_has_permEric Paris1-14/+30
2011-04-28flex_array: flex_array_prealloc takes a number of elements, not an endEric Paris1-3/+3
2011-04-28SELinux: pass last path component in may_createEric Paris1-1/+2
2011-04-28SELinux: put name based create rules in a hashtableEric Paris3-61/+135
2011-04-28SELinux: generic hashtab entry counterEric Paris1-2/+2
2011-04-28SELinux: calculate and print hashtab stats with a generic functionEric Paris1-19/+13
2011-04-28SELinux: skip filename trans rules if ttype does not match parent dirEric Paris3-0/+17
2011-04-28SELinux: rename filename_compute_type argument to *type instead of *conEric Paris1-3/+3
2011-04-28SELinux: fix comment to state filename_compute_type takes an objname not a qstrEric Paris1-1/+1
2011-04-26Merge branch 'master' into for-nextJiri Kosina15-71/+163
2011-04-25SELINUX: Make selinux cache VFS RCU walks safeEric Paris3-25/+55
2011-04-25SMACK: smack_file_lock can use the struct pathEric Paris1-2/+2
2011-04-25LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATHEric Paris4-42/+50
2011-04-25LSM: split LSM_AUDIT_DATA_FS into _PATH and _INODEEric Paris5-68/+74
2011-04-25SELINUX: Make selinux cache VFS RCU walks safeEric Paris3-25/+55
2011-04-25SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen4-7/+13
2011-04-25SELinux: security_read_policy should take a size_t not ssize_tEric Paris2-2/+2
2011-04-25SELinux: silence build warning when !CONFIG_BUGEric Paris2-0/+3
2011-04-22SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen4-7/+13
2011-04-20SELinux: delete debugging printks from filename_trans rule processingEric Paris1-4/+0
2011-04-20TOMOYO: Fix refcount leak in tomoyo_mount_acl().Tetsuo Handa1-0/+1
2011-04-19Merge branch 'master'; commit 'v2.6.39-rc3' into nextJames Morris8-13/+13
2011-04-19TOMOYO: Fix infinite loop bug when reading /sys/kernel/security/tomoyo/auditTetsuo Handa1-3/+2
2011-04-19TOMOYO: Don't add / for allow_unmount permission check.Tetsuo Handa1-1/+0
2011-04-19TOMOYO: Fix race on updating profile's comment line.Tetsuo Handa1-2/+10
2011-04-10treewide: remove extra semicolonsJustin P. Mattock1-4/+4
2011-04-07Initialize policydb.process_class eariler.Harry Ciao1-5/+5
2011-04-07selinux: Fix regression for XorgStephen Smalley1-1/+1
2011-04-04capabilities: do not special case exec of initEric Paris1-9/+4
2011-04-01selinux: add type_transition with name extension support for selinuxfsKohei Kaigai3-12/+25
2011-03-31Fix common misspellingsLucas De Marchi8-13/+13
2011-03-31tomoyo: fix memory leak in tomoyo_commit_ok()Xiaochen Wang1-0/+1
2011-03-30Merge branch 'next-queue' into nextJames Morris9-25/+47
2011-03-29selinux: Fix regression for XorgStephen Smalley1-1/+1
2011-03-28SELinux: Write class field in role_trans_write.Harry Ciao1-2/+9
2011-03-28SELinux: Compute role in newcontext for all classesHarry Ciao1-11/+9
2011-03-28SELinux: Add class support to the role_trans structureHarry Ciao3-2/+18
2011-03-23userns: rename is_owner_or_cap to inode_owner_or_capableSerge E. Hallyn1-1/+1
2011-03-23userns: allow ptrace from non-init user namespacesSerge E. Hallyn1-8/+32
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn4-20/+52
2011-03-22security: select correct default LSM_MMAP_MIN_ADDR on ARM.Paul Gortmaker1-0/+1
2011-03-17KEYS: Make request_key() and co. return an error for a negative keyDavid Howells1-0/+6
2011-03-17KEYS: Improve /proc/keysDavid Howells7-25/+40
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds6-13/+15
2011-03-16Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds33-578/+1243
2011-03-15Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-2/+2
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller3-5/+5
2011-03-09Merge branch 'security-next' of git://git.kernel.org/pub/scm/linux/kernel/git...James Morris2-7/+33
2011-03-08AppArmor: kill unused macros in lsm.cShan Wei1-2/+0
2011-03-08AppArmor: cleanup generated files correctlyMichal Hocko1-1/+1
2011-03-08Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris13-216/+434
2011-03-08KEYS: Add an iovec version of KEYCTL_INSTANTIATEDavid Howells3-7/+150
2011-03-08KEYS: Add a new keyctl op to reject a key with a specified error codeDavid Howells6-13/+56
2011-03-08KEYS: Add a key type op to permit the key description to be vettedDavid Howells1-0/+8
2011-03-08KEYS: Add an RCU payload dereference macroDavid Howells3-6/+3
2011-03-08Merge branch 'master'; commit 'v2.6.38-rc7' into nextJames Morris24-671/+930
2011-03-05AppArmor: Cleanup make file to remove cruft and make it easier to readJohn Johansen1-5/+33
2011-03-03netlink: kill eff_cap from struct netlink_skb_parmsPatrick McHardy1-2/+1
2011-03-03SELinux: implement the new sb_remount LSM hookEric Paris1-0/+86
2011-03-03LSM: Pass -o remount options to the LSMEric Paris2-0/+11
2011-03-03SELinux: Compute SID for the newly created socketHarry Ciao1-6/+21
2011-03-03SELinux: Socket retains creator role and MLS attributeHarry Ciao3-7/+29
2011-03-03SELinux: Auto-generate security_is_socket_classHarry Ciao1-0/+4
2011-03-03netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parmsPatrick McHardy1-2/+4
2011-03-03TOMOYO: Fix memory leak upon file open.Tetsuo Handa1-4/+1
2011-02-25Revert "selinux: simplify ioctl checking"Eric Paris1-8/+42
2011-02-25selinux: drop unused packet flow permissionsEric Paris1-2/+1
2011-02-25selinux: Fix packet forwarding checks on postroutingSteffen Klassert1-18/+5
2011-02-25selinux: Fix wrong checks for selinux_policycap_netpeerSteffen Klassert1-18/+6
2011-02-25selinux: Fix check for xfrm selinux context algorithmSteffen Klassert1-1/+1
2011-02-23ima: remove unnecessary call to ima_must_measureMimi Zohar3-15/+7
2011-02-22xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller4-4/+5
2011-02-11security: add cred argument to security_capable()Chris Wright1-3/+2
2011-02-10IMA: remove IMA imbalance checkingMimi Zohar2-104/+4
2011-02-10IMA: maintain i_readcount in the VFS layerMimi Zohar2-19/+8
2011-02-10IMA: convert i_readcount to atomicMimi Zohar2-8/+10
2011-02-09Smack: correct final mmap check comparisonCasey Schaufler1-1/+1
2011-02-09security:smack: kill unused SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITEShan Wei1-8/+0
2011-02-09Smack: correct behavior in the mmap hookCasey Schaufler1-36/+49
2011-02-07CRED: Fix BUG() upon security_cred_alloc_blank() failureTetsuo Handa1-1/+5
2011-02-02time: Correct the *settime* parametersRichard Cochran2-2/+2
2011-02-01security: remove unused security_sysctl hookLucian Adrian Grijincu2-11/+0
2011-02-01security/selinux: fix /proc/sys/ labelingLucian Adrian Grijincu1-102/+18
2011-02-01SELinux: Use dentry name in new object labelingEric Paris6-37/+197
2011-02-01fs/vfs/security: pass last path component to LSM on inode creationEric Paris4-6/+13
2011-01-26KEYS: Fix __key_link_end() quota fixup on errorDavid Howells4-20/+27
2011-01-24selinux: return -ENOMEM when memory allocation failsDavidlohr Bueso2-3/+3
2011-01-24trusted keys: Fix a memory leak in trusted_update().Jesper Juhl1-0/+1
2011-01-24CacheFiles: Add calls to path-based security hooksDavid Howells1-0/+3
2011-01-24security:selinux: kill unused MAX_AVTAB_HASH_MASK and ebitmap_startbitShan Wei2-2/+0
2011-01-24encrypted-keys: rename encrypted_defined files to encryptedMimi Zohar3-2/+3
2011-01-24trusted-keys: rename trusted_defined files to trustedMimi Zohar3-2/+2
2011-01-21KEYS: Fix up comments in key management codeDavid Howells11-366/+777
2011-01-21KEYS: Do some style cleanup in the key management code.David Howells10-248/+80
2011-01-19trusted-keys: avoid scattring va_end()Tetsuo Handa1-17/+13
2011-01-19trusted-keys: check for NULL before using itTetsuo Handa1-0/+5
2011-01-19trusted-keys: another free memory bugfixTetsuo Handa1-3/+5
2011-01-17Subject: [PATCH] Smack: mmap controls for library containmentCasey Schaufler4-178/+522
2011-01-14trusted-keys: free memory bugfixMimi Zohar1-5/+7
2011-01-13Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jiko...Linus Torvalds1-1/+1
2011-01-10Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds21-1061/+3611
2011-01-10headers: kobject.h reduxAlexey Dobriyan1-0/+1
2011-01-10headers: path.h reduxAlexey Dobriyan2-3/+1
2011-01-10Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris10-930/+943
2011-01-10Merge branch 'master' into nextJames Morris8-28/+42
2011-01-07Merge branch 'vfs-scale-working' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds3-6/+20
2011-01-07fs: rcu-walk for path lookupNick Piggin1-0/+9
2011-01-07fs: dcache rationalise dget variantsNick Piggin1-1/+1
2011-01-07fs: dcache remove dcache_lockNick Piggin1-4/+0
2011-01-07fs: dcache scale subdirsNick Piggin1-2/+10
2011-01-07fs: dcache scale d_unhashedNick Piggin1-0/+1
2011-01-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds4-21/+20
2011-01-05af_unix: Avoid socket->sk NULL OOPS in stream connect security hooks.David S. Miller4-15/+14
2011-01-03ima: fix add LSM rule bugMimi Zohar1-0/+2
2010-12-26Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller6-35/+10
2010-12-23KEYS: Don't call up_write() if __key_link_begin() returns an errorDavid Howells1-1/+0
2010-12-22Merge branch 'master' into for-nextJiri Kosina8-35/+27
2010-12-16SELinux: define permissions for DCB netlink messagesEric Paris1-0/+2
2010-12-15encrypted-keys: style and other cleanupMimi Zohar2-37/+29
2010-12-15encrypted-keys: verify datablob size before converting to binaryMimi Zohar1-14/+15
2010-12-15trusted-keys: kzalloc and other cleanupMimi Zohar1-18/+16
2010-12-15trusted-keys: additional TSS return code and other error handlingMimi Zohar1-62/+87
2010-12-07Smack: Transmute labels on specified directoriesJarkko Sakkinen4-43/+139
2010-12-07selinux: cache sidtab_context_to_sid resultsEric Paris2-2/+39
2010-12-02SELinux: do not compute transition labels on mountpoint labeled filesystemsEric Paris1-1/+4
2010-12-02This patch adds a new security attribute to Smack calledCasey Schaufler4-54/+176
2010-11-30SELinux: merge policydb_index_classes and policydb_index_othersEric Paris1-59/+10
2010-11-30selinux: convert part of the sym_val_to_name array to use flex_arrayEric Paris5-68/+127
2010-11-30selinux: convert type_val_to_struct to flex_arrayEric Paris3-13/+34
2010-11-30SELinux: do not set automatic i_ino in selinuxfsEric Paris1-1/+0
2010-11-30selinux: rework security_netlbl_secattr_to_sidEric Paris1-21/+21
2010-11-30SELinux: standardize return code handling in selinuxfs.cEric Paris1-171/+157
2010-11-30SELinux: standardize return code handling in selinuxfs.cEric Paris1-337/+311
2010-11-30SELinux: standardize return code handling in policydb.cEric Paris1-287/+268
2010-11-30keys: add missing include file for trusted and encrypted keysMimi Zohar2-0/+2
2010-11-29Smack: UDS revisionCasey Schaufler1-43/+63
2010-11-29keys: add new key-type encryptedMimi Zohar4-0/+980
2010-11-29keys: add new trusted key-typeMimi Zohar4-0/+1301
2010-11-29security: Define CAP_SYSLOGSerge E. Hallyn1-1/+1
2010-11-23SELinux: indicate fatal error in compat netfilter codeEric Paris1-2/+2
2010-11-23SELinux: Only return netlink error when we know the return is fatalEric Paris1-4/+4
2010-11-17SELinux: return -ECONNREFUSED from ip_postroute to signal fatal errorEric Paris1-8/+8
2010-11-15capabilities/syslog: open code cap_syslog logic to fix build failureEric Paris5-34/+10
2010-11-12Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2-3/+5
2010-11-12Restrict unprivileged access to kernel syslogDan Rosenberg2-0/+14
2010-11-11APPARMOR: Fix memory leak of apparmor_init()wzt.wzt@gmail.com1-2/+4
2010-11-11APPARMOR: Fix memory leak of alloc_namespace()wzt.wzt@gmail.com1-1/+1
2010-11-01tree-wide: fix comment/printk typosUwe Kleine-König1-1/+1
2010-10-29convert get_sb_single() usersAl Viro3-16/+13
2010-10-28Fix install_process_keyring error handlingAndi Kleen1-1/+1
2010-10-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds4-4/+2
2010-10-26Merge branch 'ima-memory-use-fixes'Linus Torvalds5-177/+195
2010-10-26IMA: fix the ToMToU logicEric Paris1-5/+6
2010-10-26IMA: explicit IMA i_flag to remove global lock on inode_deleteEric Paris2-5/+12