aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* selinux: update netlink socket classesStephen Smalley2019-07-062-10/+32
* selinux: Remove unused permission definitionsStephen Smalley2019-07-061-14/+8
* lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore2019-07-065-124/+110
* xattr: Constify ->name member of "struct xattr".Tetsuo Handa2019-07-065-24/+14
* SELinux: remove crazy contortions around procEric Paris2019-07-061-1/+1
* selinux: remove 'flags' parameter from avc_audit()Linus Torvalds2019-07-063-4/+4
* selinux: remove 'flags' parameter from inode_has_permLinus Torvalds2019-07-061-7/+6
* SELinux: Institute file_path_has_perm()David Howells2019-07-061-6/+18
* selinux: fix problems in netnode when BUG() is compiled outPaul Moore2019-07-061-0/+2
* selinux: ensure that the cached NetLabel secattr matches the desired SIDPaul Moore2019-07-061-1/+30
* selinux: avc_has_perm_flags has no more usersLinus Torvalds2019-07-062-17/+6
* selinux: convert WARN_ONCE() to printk() in selinux_nlmsg_perm()Richard Guy Briggs2019-07-061-3/+4
* selinux: enable genfs labeling on tracefsJeff Vander Stoep2019-07-061-0/+1
* selinux: check for address length in selinux_socket_bind()Alexander Potapenko2019-07-061-0/+8
* KEYS: put keyring if install_session_keyring_to_cred() failsEric Biggers2019-07-061-3/+4
* security: Used macros from compiler.h instead of __attribute__((...))Gideon Israel Dsouza2019-07-061-1/+2
* selinux: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs2019-07-061-8/+4
* SELinux: security_load_policy: Silence frame-larger-than warningTim Gardner2019-07-061-22/+32
* selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore2019-07-061-10/+8
* selinux: skip bounded transition processing if the policy isn't loadedPaul Moore2019-07-061-0/+3
* selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover2019-05-021-1/+1
* Revert "GCC: Fix up for gcc 5+"Moyster2018-11-302-3/+0
* Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds2018-11-294-4/+4
* GCC: Fix up for gcc 5+mydongistiny2018-11-292-0/+3
* disable ptrace_scope by defaultDaniel Micay2018-05-161-1/+1
* UPSTREAM: KEYS: encrypted: fix buffer overread in valid_master_desc()Eric Biggers2018-05-161-16/+15
* BACKPORT: audit: consistently record PIDs with task_tgid_nr()Paul Moore2017-12-281-2/+2
* KEYS: Fix an error code in request_master_key()Dan Carpenter2017-11-061-1/+1
* KEYS: encrypted: fix dereference of NULL user_key_payloadEric Biggers2017-11-061-0/+7
* KEYS: prevent creating a different user's keyringsEric Biggers2017-11-064-12/+23
* KEYS: don't let add_key() update an uninstantiated keyDavid Howells2017-11-061-0/+10
* KEYS: fix dereferencing NULL payload with nonzero lengthEric Biggers2017-11-061-2/+2
* apparmor: do not expose kernel stackHeinrich Schuchardt2017-07-041-1/+3
* apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2017-07-043-13/+29
* apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2017-07-041-0/+3
* apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2017-07-041-5/+5
* apparmor: add missing id bounds check on dfa verificationJohn Johansen2017-07-042-0/+3
* apparmor: check that xindex is in trans_table boundsJohn Johansen2017-07-041-1/+1
* apparmor: internal paths should be treated as disconnectedJohn Johansen2017-07-041-28/+36
* apparmor: fix disconnected bind mnts reconnectionJohn Johansen2017-07-041-1/+4
* apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2017-07-041-1/+1
* apparmor: fix uninitialized lsm_audit memberJohn Johansen2017-07-042-2/+4
* KEYS: Disallow keyrings beginning with '.' to be joined as session keyringsDavid Howells2017-06-171-2/+7
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2017-06-171-1/+2
* selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones2017-05-241-0/+3
* selinux: conditionally reschedule in mls_convert_context while loading selinu...Dave Jones2017-05-241-0/+2
* selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long2017-05-241-9/+31
* selinux: fix a possible memory leak in cond_read_node()Namhyung Kim2017-05-241-1/+1
* selinux: simple cleanup for cond_read_node()Namhyung Kim2017-05-241-7/+2
* selinux: normalize audit log formattingRichard Guy Briggs2017-05-241-6/+8