summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* apparmor: name null-XXX profiles after the executableJohn Johansen2017-01-163-17/+47
* apparmor: pass gfp_t parameter into profile allocationJohn Johansen2017-01-164-8/+9
* apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen2017-01-165-38/+79
* apparmor: update policy_destroy to use new debug assertsJohn Johansen2017-01-161-9/+2
* apparmor: pass gfp param into aa_policy_init()John Johansen2017-01-164-7/+7
* apparmor: constify policy name and hnameJohn Johansen2017-01-163-4/+4
* apparmor: rename hname_tail to basenameJohn Johansen2017-01-163-4/+4
* apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen2017-01-162-8/+8
* apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen2017-01-163-4/+43
* apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen2017-01-161-0/+11
* apparmor: allow ns visibility question to consider subnsesJohn Johansen2017-01-164-8/+14
* apparmor: add fn to lookup profiles by fqnameJohn Johansen2017-01-164-7/+38
* apparmor: add lib fn to find the "split" for fqnamesJohn Johansen2017-01-162-0/+55
* apparmor: add strn version of aa_find_nsJohn Johansen2017-01-162-6/+29
* apparmor: add strn version of lookup_profile fnJohn Johansen2017-01-162-11/+27
* apparmor: rename replacedby to proxyJohn Johansen2017-01-165-65/+65
* apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen2017-01-163-5/+5
* apparmor: rename sid to secidJohn Johansen2017-01-164-65/+65
* apparmor: rename namespace to ns to improve code line lengthsJohn Johansen2017-01-168-128/+122
* apparmor: split apparmor policy namespaces code into its own fileJohn Johansen2017-01-1610-391/+454
* apparmor: split out shared policy_XXX fns to libJohn Johansen2017-01-164-132/+137
* apparmor: move lib definitions into separate lib includeJohn Johansen2017-01-165-82/+99
* apparmor: use designated initializersKees Cook2017-01-152-5/+7
* AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa2017-01-151-1/+2
* Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds2016-12-244-4/+4
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2016-12-221-0/+2
|\
| * selinux: use the kernel headers when building scripts/selinuxPaul Moore2016-12-211-0/+2
* | ima: platform-independent hash valueAndreas Steffen2016-12-201-2/+4
* | ima: define a canonical binary_runtime_measurements list formatMimi Zohar2016-12-205-13/+62
* | ima: support restoring multiple template formatsMimi Zohar2016-12-201-3/+49
* | ima: store the builtin/custom template definitions in a listMimi Zohar2016-12-203-11/+43
* | ima: on soft reboot, save the measurement listMimi Zohar2016-12-203-1/+119
* | ima: maintain memory size needed for serializing the measurement listMimi Zohar2016-12-203-2/+64
* | ima: permit duplicate measurement list entriesMimi Zohar2016-12-201-6/+10
* | ima: on soft reboot, restore the measurement listMimi Zohar2016-12-206-0/+255
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2016-12-162-2/+2
|\ \
| | \
| | \
| | \
| | \
| *---. \ Merge branches 'work.namei', 'work.dcache' and 'work.iov_iter' into for-linusAl Viro2016-12-151-1/+1
| |\ \ \ \
| | | | * | [iov_iter] new primitives - copy_from_iter_full() and friendsAl Viro2016-12-051-1/+1
| | | |/ / | | |/| |
| * | | | don't open-code file_inode()Al Viro2016-12-041-1/+1
| |/ / /
* | | | Merge branch 'akpm' (patches from Andrew)Linus Torvalds2016-12-141-1/+1
|\ \ \ \
| * | | | mm: add locked parameter to get_user_pages_remote()Lorenzo Stoakes2016-12-141-1/+1
* | | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2016-12-141-2/+10
|\ \ \ \ \
| * | | | | Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"Eric W. Biederman2016-12-021-2/+10
* | | | | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-12-1414-137/+166
|\ \ \ \ \ \ | |_|/ / / / |/| | | | |
| * | | | | Yama: allow access for the current ptrace parentJosh Stone2016-12-051-1/+15
| * | | | | Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2016-11-244-51/+84
| |\ \ \ \ \ | | | |_|_|/ | | |/| | |
| | * | | | selinux: Convert isec->lock into a spinlockAndreas Gruenbacher2016-11-222-40/+66
| | * | | | selinux: keep SELinux in sync with new capability definitionsStephen Smalley2016-11-211-0/+4
| | * | | | selinux: normalize input to /sys/fs/selinux/enforceStephen Smalley2016-11-201-0/+2
| | * | | | selinux: Clean up initialization of isec->sclassAndreas Gruenbacher2016-11-141-6/+4
OpenPOWER on IntegriCloud