aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2011-08-08TOMOYO: Fix incomplete read of /sys/kernel/security/tomoyo/profileTetsuo Handa1-1/+4
2011-08-01doc: Update the email address for Paul Moore in various source filesPaul Moore16-16/+16
2011-07-27Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds24-2647/+5954
2011-07-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+1
2011-07-26atomic: use <linux/atomic.h>Arun Sharma2-2/+2
2011-07-26ima: fmode_t misspelled as mode_t...Al Viro1-1/+1
2011-07-25Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-1/+0
2011-07-24VFS : mount lock scalability for internal mountsTim Chen1-0/+1
2011-07-22Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds6-14/+9
2011-07-22Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds3-45/+5
2011-07-22Merge branch 'ptrace' of git://git.kernel.org/pub/scm/linux/kernel/git/oleg/miscLinus Torvalds2-3/+3
2011-07-20security,rcu: Convert call_rcu(sel_netport_free) to kfree_rcu()Lai Jiangshan1-18/+2
2011-07-20security,rcu: Convert call_rcu(sel_netnode_free) to kfree_rcu()Lai Jiangshan1-18/+2
2011-07-20security,rcu: Convert call_rcu(whitelist_item_free) to kfree_rcu()Lai Jiangshan1-9/+1
2011-07-20get rid of pointless checks for dentry->sb == NULLAl Viro1-1/+1
2011-07-20->permission() sanitizing: don't pass flags to exec_permission()Al Viro1-10/+0
2011-07-20selinux: don't transliterate MAY_NOT_BLOCK to IPERM_FLAG_RCUAl Viro2-3/+3
2011-07-20->permission() sanitizing: don't pass flags to ->inode_permission()Al Viro4-7/+12
2011-07-14TOMOYO: Update kernel-doc.Tetsuo Handa13-62/+269
2011-07-11Merge branch 'master' into for-nextJiri Kosina6-13/+45
2011-07-11TOMOYO: Enable conditional ACL.Tetsuo Handa5-33/+80
2011-07-11TOMOYO: Allow using argv[]/envp[] of execve() as conditions.Tetsuo Handa6-10/+589
2011-07-11TOMOYO: Allow using executable's realpath and symlink's target as conditions.Tetsuo Handa5-4/+228
2011-07-11TOMOYO: Allow using owner/group etc. of file objects as conditions.Tetsuo Handa4-0/+457
2011-07-11TOMOYO: Allow using UID/GID etc. of current thread as conditions.Tetsuo Handa8-37/+651
2011-07-08rcu: treewide: Do not use rcu_read_lock_held when calling rcu_dereference_checkMichal Hocko1-1/+0
2011-07-08TOMOYO: Remove /sys/kernel/security/tomoyo/.domain_status interface.Tetsuo Handa3-76/+0
2011-07-05Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller1-1/+2
2011-07-01TOMOYO: Fix wrong domainname in tomoyo_init_log().Tetsuo Handa1-1/+1
2011-06-30TOMOYO: Cleanup header file.Tetsuo Handa1-117/+96
2011-06-30TOMOYO: Fix build error with CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER=y .Tetsuo Handa1-0/+2
2011-06-30Merge branch 'for-security' of git://git.kernel.org/pub/scm/linux/kernel/git/...James Morris2-2/+2
2011-06-30Merge branch 'linus' into nextJames Morris6-13/+45
2011-06-29AppArmor: Fix masking of capabilities in complain modeJohn Johansen1-1/+1
2011-06-29AppArmor: Fix reference to rcu protected pointer outside of rcu_read_lockJohn Johansen1-1/+1
2011-06-29TOMOYO: Make several options configurable.Tetsuo Handa3-23/+117
2011-06-29TOMOYO: Add built-in policy support.Tetsuo Handa4-10/+108
2011-06-29TOMOYO: Rename meminfo to stat and show more statistics.Tetsuo Handa6-143/+206
2011-06-29TOMOYO: Cleanup part 4.Tetsuo Handa6-121/+177
2011-06-29TOMOYO: Fix lockdep warning.Tetsuo Handa3-51/+276
2011-06-29TOMOYO: Change pathname for non-rename()able filesystems.Tetsuo Handa2-54/+180
2011-06-29TOMOYO: Add policy namespace support.Tetsuo Handa8-299/+669
2011-06-29TOMOYO: Add ACL group support.Tetsuo Handa5-11/+88
2011-06-29TOMOYO: Add auditing interface.Tetsuo Handa9-235/+557
2011-06-29TOMOYO: Simplify profile structure.Tetsuo Handa3-168/+83
2011-06-29TOMOYO: Rename directives.Tetsuo Handa4-59/+113
2011-06-29TOMOYO: Use struct for passing ACL line.Tetsuo Handa8-371/+347
2011-06-29TOMOYO: Cleanup part 3.Tetsuo Handa9-153/+410
2011-06-29TOMOYO: Cleanup part 2.Tetsuo Handa5-359/+204
2011-06-29TOMOYO: Cleanup part 1.Tetsuo Handa8-535/+71
2011-06-27encrypted-keys: add ecryptfs format supportRoberto Sassu4-8/+180
2011-06-27encrypted-keys: add key format supportRoberto Sassu1-40/+101
2011-06-27encrypted-keys: added additional debug messagesRoberto Sassu1-11/+34
2011-06-27encrypted-keys: fixed valid_master_desc() function descriptionRoberto Sassu1-1/+1
2011-06-27encrypted_keys: avoid dumping the master key if the request failsRoberto Sassu1-3/+5
2011-06-22ptrace: s/tracehook_tracer_task()/ptrace_parent()/Tejun Heo2-3/+3
2011-06-21net: remove mm.h inclusion from netdevice.hAlexey Dobriyan1-0/+1
2011-06-21KEYS: Fix error handling in construct_key_and_link()David Howells1-1/+2
2011-06-20Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-7/+1
2011-06-20devcgroup_inode_permission: take "is it a device node" checks to inlined wrapperAl Viro1-7/+1
2011-06-17KEYS/DNS: Fix ____call_usermodehelper() to not lose the session keyringDavid Howells1-2/+1
2011-06-15Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris2-1/+39
2011-06-14SELinux: skip file_name_trans_write() when policy downgraded.Roy.Li1-0/+3
2011-06-14TOMOYO: Fix oops in tomoyo_mount_acl().Tetsuo Handa1-1/+1
2011-06-14KEYS: Don't return EAGAIN to keyctl_assume_authority()David Howells1-0/+2
2011-06-09AppArmor: Fix sleep in invalid context from task_setrlimitJohn Johansen1-1/+1
2011-06-08selinux: simplify and clean up inode_has_perm()Linus Torvalds1-10/+15
2011-06-01AppArmor: fix oops in apparmor_setprocattrKees Cook1-1/+2
2011-05-27Merge branch 'docs-move' of git://git.kernel.org/pub/scm/linux/kernel/git/rdu...Linus Torvalds6-7/+7
2011-05-26selinux: don't pass in NULL avd to avc_has_perm_noauditLinus Torvalds2-11/+4
2011-05-26cgroups: add per-thread subsystem callbacksBen Blum1-2/+1
2011-05-26selinux: fix case of names with whitespace/multibytes on /selinux/createKohei Kaigai1-1/+36
2011-05-26Merge commit 'v2.6.39' into 20110526Eric Paris16-64/+148
2011-05-26Set cred->user_ns in key_replace_session_keyringSerge E. Hallyn1-0/+1
2011-05-24Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into fo...James Morris11-208/+370
2011-05-24Merge branch 'next' into for-linusJames Morris15-41/+66
2011-05-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-4/+4
2011-05-19selinux: avoid unnecessary avc cache stat hit countLinus Torvalds3-9/+11
2011-05-19selinux: de-crapify avc cache stat code generationLinus Torvalds1-5/+1
2011-05-19Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-31/+3
2011-05-19Create Documentation/security/,Randy Dunlap6-7/+7
2011-05-19Merge branch 'master' into nextJames Morris7-36/+69
2011-05-13Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris1-4/+0
2011-05-12SELinux: delete debugging printks from filename_trans rule processingEric Paris1-4/+0
2011-05-12TOMOYO: Fix wrong domainname validation.Tetsuo Handa1-1/+1
2011-05-11SELINUX: add /sys/fs/selinux mount point to put selinuxfsGreg Kroah-Hartman1-1/+11
2011-05-07security,rcu: convert call_rcu(sel_netif_free) to kfree_rcu()Lai Jiangshan1-17/+1
2011-05-07security,rcu: convert call_rcu(user_update_rcu_disposal) to kfree_rcu()Lai Jiangshan1-14/+2
2011-05-04Merge branch 'for-linus' of git://git.infradead.org/users/eparis/selinux into...James Morris2-4/+5
2011-04-28flex_array: flex_array_prealloc takes a number of elements, not an endEric Paris1-3/+3
2011-04-28SELinux: pass last path component in may_createEric Paris1-1/+2
2011-04-28SELinux: introduce path_has_permEric Paris1-14/+30
2011-04-28flex_array: flex_array_prealloc takes a number of elements, not an endEric Paris1-3/+3
2011-04-28SELinux: pass last path component in may_createEric Paris1-1/+2
2011-04-28SELinux: put name based create rules in a hashtableEric Paris3-61/+135
2011-04-28SELinux: generic hashtab entry counterEric Paris1-2/+2
2011-04-28SELinux: calculate and print hashtab stats with a generic functionEric Paris1-19/+13
2011-04-28SELinux: skip filename trans rules if ttype does not match parent dirEric Paris3-0/+17
2011-04-28SELinux: rename filename_compute_type argument to *type instead of *conEric Paris1-3/+3
2011-04-28SELinux: fix comment to state filename_compute_type takes an objname not a qstrEric Paris1-1/+1
2011-04-26Merge branch 'master' into for-nextJiri Kosina15-71/+163
2011-04-25SELINUX: Make selinux cache VFS RCU walks safeEric Paris3-25/+55
2011-04-25SMACK: smack_file_lock can use the struct pathEric Paris1-2/+2
2011-04-25LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATHEric Paris4-42/+50
2011-04-25LSM: split LSM_AUDIT_DATA_FS into _PATH and _INODEEric Paris5-68/+74
2011-04-25SELINUX: Make selinux cache VFS RCU walks safeEric Paris3-25/+55
2011-04-25SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen4-7/+13
2011-04-25SELinux: security_read_policy should take a size_t not ssize_tEric Paris2-2/+2
2011-04-25SELinux: silence build warning when !CONFIG_BUGEric Paris2-0/+3
2011-04-22SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen4-7/+13
2011-04-20SELinux: delete debugging printks from filename_trans rule processingEric Paris1-4/+0
2011-04-20TOMOYO: Fix refcount leak in tomoyo_mount_acl().Tetsuo Handa1-0/+1
2011-04-19Merge branch 'master'; commit 'v2.6.39-rc3' into nextJames Morris8-13/+13
2011-04-19TOMOYO: Fix infinite loop bug when reading /sys/kernel/security/tomoyo/auditTetsuo Handa1-3/+2
2011-04-19TOMOYO: Don't add / for allow_unmount permission check.Tetsuo Handa1-1/+0
2011-04-19TOMOYO: Fix race on updating profile's comment line.Tetsuo Handa1-2/+10
2011-04-10treewide: remove extra semicolonsJustin P. Mattock1-4/+4
2011-04-07Initialize policydb.process_class eariler.Harry Ciao1-5/+5
2011-04-07selinux: Fix regression for XorgStephen Smalley1-1/+1
2011-04-04capabilities: do not special case exec of initEric Paris1-9/+4
2011-04-01selinux: add type_transition with name extension support for selinuxfsKohei Kaigai3-12/+25
2011-03-31Fix common misspellingsLucas De Marchi8-13/+13
2011-03-31tomoyo: fix memory leak in tomoyo_commit_ok()Xiaochen Wang1-0/+1
2011-03-30Merge branch 'next-queue' into nextJames Morris9-25/+47
2011-03-29selinux: Fix regression for XorgStephen Smalley1-1/+1
2011-03-28SELinux: Write class field in role_trans_write.Harry Ciao1-2/+9
2011-03-28SELinux: Compute role in newcontext for all classesHarry Ciao1-11/+9
2011-03-28SELinux: Add class support to the role_trans structureHarry Ciao3-2/+18
2011-03-23userns: rename is_owner_or_cap to inode_owner_or_capableSerge E. Hallyn1-1/+1
2011-03-23userns: allow ptrace from non-init user namespacesSerge E. Hallyn1-8/+32
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn4-20/+52
2011-03-22security: select correct default LSM_MMAP_MIN_ADDR on ARM.Paul Gortmaker1-0/+1
2011-03-17KEYS: Make request_key() and co. return an error for a negative keyDavid Howells1-0/+6
2011-03-17KEYS: Improve /proc/keysDavid Howells7-25/+40
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds6-13/+15
2011-03-16Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds33-578/+1243
2011-03-15Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-2/+2
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller3-5/+5
2011-03-09Merge branch 'security-next' of git://git.kernel.org/pub/scm/linux/kernel/git...James Morris2-7/+33
2011-03-08AppArmor: kill unused macros in lsm.cShan Wei1-2/+0
2011-03-08AppArmor: cleanup generated files correctlyMichal Hocko1-1/+1
2011-03-08Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris13-216/+434
2011-03-08KEYS: Add an iovec version of KEYCTL_INSTANTIATEDavid Howells3-7/+150
2011-03-08KEYS: Add a new keyctl op to reject a key with a specified error codeDavid Howells6-13/+56
2011-03-08KEYS: Add a key type op to permit the key description to be vettedDavid Howells1-0/+8
2011-03-08KEYS: Add an RCU payload dereference macroDavid Howells3-6/+3
2011-03-08Merge branch 'master'; commit 'v2.6.38-rc7' into nextJames Morris24-671/+930
2011-03-05AppArmor: Cleanup make file to remove cruft and make it easier to readJohn Johansen1-5/+33
2011-03-03netlink: kill eff_cap from struct netlink_skb_parmsPatrick McHardy1-2/+1
2011-03-03SELinux: implement the new sb_remount LSM hookEric Paris1-0/+86
2011-03-03LSM: Pass -o remount options to the LSMEric Paris2-0/+11
2011-03-03SELinux: Compute SID for the newly created socketHarry Ciao1-6/+21
2011-03-03SELinux: Socket retains creator role and MLS attributeHarry Ciao3-7/+29
2011-03-03SELinux: Auto-generate security_is_socket_classHarry Ciao1-0/+4
2011-03-03netlink: kill loginuid/sessionid/sid members from struct netlink_skb_parmsPatrick McHardy1-2/+4
2011-03-03TOMOYO: Fix memory leak upon file open.Tetsuo Handa1-4/+1
2011-02-25Revert "selinux: simplify ioctl checking"Eric Paris1-8/+42
2011-02-25selinux: drop unused packet flow permissionsEric Paris1-2/+1
2011-02-25selinux: Fix packet forwarding checks on postroutingSteffen Klassert1-18/+5
2011-02-25selinux: Fix wrong checks for selinux_policycap_netpeerSteffen Klassert1-18/+6
2011-02-25selinux: Fix check for xfrm selinux context algorithmSteffen Klassert1-1/+1
2011-02-23ima: remove unnecessary call to ima_must_measureMimi Zohar3-15/+7
2011-02-22xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller4-4/+5
2011-02-11security: add cred argument to security_capable()Chris Wright1-3/+2
2011-02-10IMA: remove IMA imbalance checkingMimi Zohar2-104/+4
2011-02-10IMA: maintain i_readcount in the VFS layerMimi Zohar2-19/+8
2011-02-10IMA: convert i_readcount to atomicMimi Zohar2-8/+10
2011-02-09Smack: correct final mmap check comparisonCasey Schaufler1-1/+1
2011-02-09security:smack: kill unused SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITEShan Wei1-8/+0
2011-02-09Smack: correct behavior in the mmap hookCasey Schaufler1-36/+49
2011-02-07CRED: Fix BUG() upon security_cred_alloc_blank() failureTetsuo Handa1-1/+5
2011-02-02time: Correct the *settime* parametersRichard Cochran2-2/+2
2011-02-01security: remove unused security_sysctl hookLucian Adrian Grijincu2-11/+0
2011-02-01security/selinux: fix /proc/sys/ labelingLucian Adrian Grijincu1-102/+18
2011-02-01SELinux: Use dentry name in new object labelingEric Paris6-37/+197
2011-02-01fs/vfs/security: pass last path component to LSM on inode creationEric Paris4-6/+13
2011-01-26KEYS: Fix __key_link_end() quota fixup on errorDavid Howells4-20/+27
2011-01-24selinux: return -ENOMEM when memory allocation failsDavidlohr Bueso2-3/+3
2011-01-24trusted keys: Fix a memory leak in trusted_update().Jesper Juhl1-0/+1
2011-01-24CacheFiles: Add calls to path-based security hooksDavid Howells1-0/+3
2011-01-24security:selinux: kill unused MAX_AVTAB_HASH_MASK and ebitmap_startbitShan Wei2-2/+0
2011-01-24encrypted-keys: rename encrypted_defined files to encryptedMimi Zohar3-2/+3
2011-01-24trusted-keys: rename trusted_defined files to trustedMimi Zohar3-2/+2
2011-01-21KEYS: Fix up comments in key management codeDavid Howells11-366/+777
2011-01-21KEYS: Do some style cleanup in the key management code.David Howells10-248/+80
2011-01-19trusted-keys: avoid scattring va_end()Tetsuo Handa1-17/+13
2011-01-19trusted-keys: check for NULL before using itTetsuo Handa1-0/+5
2011-01-19trusted-keys: another free memory bugfixTetsuo Handa1-3/+5
2011-01-17Subject: [PATCH] Smack: mmap controls for library containmentCasey Schaufler4-178/+522
2011-01-14trusted-keys: free memory bugfixMimi Zohar1-5/+7
2011-01-13Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/jiko...Linus Torvalds1-1/+1
2011-01-10Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds21-1061/+3611
2011-01-10headers: kobject.h reduxAlexey Dobriyan1-0/+1
2011-01-10headers: path.h reduxAlexey Dobriyan2-3/+1
2011-01-10Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris10-930/+943
2011-01-10Merge branch 'master' into nextJames Morris8-28/+42
2011-01-07Merge branch 'vfs-scale-working' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds3-6/+20
2011-01-07fs: rcu-walk for path lookupNick Piggin1-0/+9
2011-01-07fs: dcache rationalise dget variantsNick Piggin1-1/+1
2011-01-07fs: dcache remove dcache_lockNick Piggin1-4/+0