aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* KEYS: Disallow keyrings beginning with '.' to be joined as session keyringsDavid Howells2017-06-171-2/+7
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2017-06-171-1/+2
* selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones2017-05-241-0/+3
* selinux: conditionally reschedule in mls_convert_context while loading selinu...Dave Jones2017-05-241-0/+2
* selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long2017-05-241-9/+31
* selinux: fix a possible memory leak in cond_read_node()Namhyung Kim2017-05-241-1/+1
* selinux: simple cleanup for cond_read_node()Namhyung Kim2017-05-241-7/+2
* selinux: normalize audit log formattingRichard Guy Briggs2017-05-241-6/+8
* selinux: cleanup error reporting in selinux_nlmsg_perm()Richard Guy Briggs2017-05-241-4/+3
* selinux: Remove unused function avc_sidcmp()Rickard Strandqvist2017-05-241-5/+0
* selinux: quiet the filesystem labeling behavior messagePaul Moore2017-05-241-4/+0
* SELinux: do all flags twiddling in one placeEric Paris2017-05-241-7/+5
* selinux: add force_audit sysfs node to enable logging of dontauditimoseyon2017-05-242-0/+7
* selinux: remove unused variabled in the netport, netnode, and netif cachesPaul Moore2017-05-243-6/+4
* IKSWL-3373: selinux: Improve avc loggingJoel Voss2017-05-241-0/+4
* KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyringsEric Biggers2017-05-202-24/+31
* KEYS: Change the name of the dead type to ".dead" to prevent user accessDavid Howells2017-05-071-1/+1
* BACKPORT: selinux: restrict kernel module loadingJeff Vander Stoep2017-04-252-1/+34
* BACKPORT: UPSTREAM: selinux: fix off-by-one in setprocattrStephen Smalley2017-04-161-1/+1
* ANDROID: export security_path_chownDaniel Rosenberg2017-04-131-0/+1
* vfs: Add permission2 for filesystems with per mount permissionsDaniel Rosenberg2017-04-131-1/+1
* BACKPORT: commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa2017-04-131-43/+31
* security: keys: fix maybe-uninitialized warningsNathan Chancellor2017-04-131-4/+4
* kernel: Fix few typosMasanari Iida2017-04-111-1/+1
* UPSTREAM: capabilities: ambient capabilitiesAndy Lutomirski2016-11-182-10/+93
* KEYS: Fix handling of stored error in a negatively instantiated user keyDavid Howells2016-11-173-2/+10
* KEYS: Fix short sprintf buffer in /proc/keys show functionDavid Howells2016-11-171-1/+1
* Revert "security/selinux: force permissive"fire8552016-11-171-2/+0
* security: let security modules use PTRACE_MODE_* with bitmasksJann Horn2016-11-071-2/+2
* security/selinux: force permissiveDespairFactor2016-11-071-0/+2
* selinux: enable genfscon labeling for sysfs and pstore filesStephen Smalley2016-09-101-1/+3
* selinux: enable per-file labeling for debugfs files.Stephen Smalley2016-09-102-22/+22
* security: lsm_audit: add ioctl specific auditingJeff Vander Stoep2016-09-101-0/+15
* selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tablesLorenzo Colitti2016-09-101-3/+4
* selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message typesPaul Moore2016-09-101-0/+2
* selinux/nlmsg: add XFRM_MSG_MAPPINGNicolas Dichtel2016-09-101-0/+1
* selinux/nlmsg: add XFRM_MSG_MIGRATENicolas Dichtel2016-09-101-0/+1
* selinux/nlmsg: add XFRM_MSG_REPORTNicolas Dichtel2016-09-101-0/+1
* selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFONicolas Dichtel2016-09-101-0/+2
* selinux/nlmsg: add XFRM_MSG_GETSPDINFONicolas Dichtel2016-09-101-0/+1
* selinux/nlmsg: add XFRM_MSG_NEWSPDINFONicolas Dichtel2016-09-101-0/+1
* UPSTREAM: selinux: fix bug in conditional rules handlingStephen Smalley2016-09-101-2/+2
* selinux: Android kernel compatibility with M userspaceJeff Vander Stoep2016-09-101-8/+61
* selinux: extended permissions for ioctlsJeff Vander Stoep2016-09-1011-60/+834
* selinux: remove unnecessary pointer reassignmentJeff Vander Stoep2016-09-101-4/+2
* selinux: do not check open perm on ftruncate callJeff Vander Stoep2016-09-101-1/+2
* FROMLIST: security,perf: Allow further restriction of perf_event_openJeff Vander Stoep2016-09-101-0/+9
* 3.10.102-> 3.10.103Jan Engelmohr2016-09-101-1/+1
* Linux 3.10.98 (accumulative patch)Stefan Guendhoer2016-08-261-1/+6
* Linux 3.10.95 (accumulative patch)Stefan Guendhoer2016-08-263-13/+16