summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
...
| * | | apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-123-13/+29
| * | | apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2016-07-121-0/+3
| * | | apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2016-07-121-5/+5
| * | | apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
| * | | apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
| * | | apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
| * | | apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
| * | | apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
| * | | apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
| * | | apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
| * | | apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
| * | | apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
| * | | apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
| * | | apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
| * | | apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36
| * | | apparmor: fix disconnected bind mnts reconnectionJohn Johansen2016-07-121-1/+4
| * | | apparmor: fix update the mtime of the profile file on replacementJohn Johansen2016-07-121-0/+2
| * | | apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
| * | | apparmor: fix uninitialized lsm_audit memberJohn Johansen2016-07-122-2/+4
| * | | apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
| * | | apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
| * | | Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-092-2/+2
| |\ \ \
| | * | | KEYS: Strip trailing spacesDavid Howells2016-06-142-2/+2
| * | | | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-081-0/+3
| |\ \ \ \
| | * | | | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| | |/ / /
| * | | | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-077-64/+73
| |\ \ \ \
| | * | | | calipso: Add a label cache.Huw Davies2016-06-271-3/+6
| | * | | | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-274-8/+10
| | * | | | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-271-0/+15
| | * | | | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-271-1/+1
| | * | | | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| | * | | | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-271-1/+1
| | * | | | selinux: fix type mismatchHeinrich Schuchardt2016-06-151-1/+1
| | * | | | selinux: import NetLabel category bitmaps correctlyPaul Moore2016-06-091-1/+1
| | * | | | selinux: Only apply bounds checking to source typesStephen Smalley2016-05-311-48/+22
| * | | | | ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
| * | | | | ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
| * | | | | ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
| * | | | | ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4
| * | | | | ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
| * | | | | ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
| * | | | | ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
| * | | | | integrity: add measured_pcrs field to integrity cacheEric Richter2016-06-302-0/+3
| | |/ / / | |/| | |
| * | | | security: tomoyo: simplify the gc kthread creationMike Danese2016-06-061-7/+2
| * | | | LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler2016-06-061-4/+25
* | | | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds2016-07-295-8/+73
|\ \ \ \ \
| * | | | | evm: Translate user/group ids relative to s_user_ns when computing HMACSeth Forshee2016-07-051-2/+2
| * | | | | selinux: Add support for unprivileged mounts from user namespacesSeth Forshee2016-06-241-0/+23
| * | | | | Smack: Handle labels consistently in untrusted mountsSeth Forshee2016-06-241-10/+19
| * | | | | Smack: Add support for unprivileged mounts from user namespacesSeth Forshee2016-06-242-12/+37
OpenPOWER on IntegriCloud