summaryrefslogtreecommitdiff
path: root/security/selinux/hooks.c
AgeCommit message (Expand)AuthorFilesLines
2017-09-12Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-17/+37
2017-09-08Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-20/+6
2017-08-29selinux: constify nf_hook_opsArvind Yadav1-1/+1
2017-08-22selinux: allow per-file labeling for cgroupfsAntonio Murdaca1-1/+3
2017-08-17selinux: update my email addressStephen Smalley1-1/+1
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley1-15/+32
2017-08-01selinux: Refactor to remove bprm_secureexec hookKees Cook1-19/+5
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal1-1/+1
2017-07-25selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel1-0/+1
2017-07-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-36/+176
2017-06-20selinux: enable genfscon labeling for tracefsJeff Vander Stoep1-0/+1
2017-06-13selinux: fix double free in selinux_parse_opts_str()Paul Moore1-3/+2
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew1-2/+33
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal1-4/+20
2017-05-23selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens1-2/+5
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens1-0/+25
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens1-0/+22
2017-05-23selinux: Allocate and free infiniband security hooksDaniel Jurgens1-1/+24
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens1-0/+11
2017-05-23selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2017-05-23selinux: do not check open permission on socketsStephen Smalley1-3/+7
2017-05-23selinux: add a map permission check for mmapStephen Smalley1-0/+12
2017-05-23selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley1-8/+15
2017-05-23selinux: Use task_alloc hook rather than task_create hookTetsuo Handa1-2/+3
2017-03-10selinux: check for address length in selinux_socket_bind()Alexander Potapenko1-0/+8
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-03-06selinux: fix kernel BUG on prlimit(..., NULL, NULL)Stephen Smalley1-0/+2
2017-03-06prlimit,security,selinux: add a security hook for prlimitStephen Smalley1-0/+14
2017-03-03Merge branch 'WIP.sched-core-for-linus' of git://git.kernel.org/pub/scm/linux...Linus Torvalds1-1/+2
2017-03-02sched/headers: Prepare for new header dependencies before moving code to <lin...Ingo Molnar1-0/+1
2017-03-02sched/headers: Prepare for new header dependencies before moving code to <lin...Ingo Molnar1-1/+1
2017-03-02selinux: wrap cgroup seclabel support with its own policy capabilityStephen Smalley1-3/+4
2017-02-24Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-2/+1
2017-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-2/+5
2017-02-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-191/+188
2017-02-08selinux: fix off-by-one in setprocattrStephen Smalley1-1/+1
2017-02-08Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-1/+1
2017-02-08selinux: allow changing labels for cgroupfsAntonio Murdaca1-0/+2
2017-02-08selinux: fix off-by-one in setprocattrStephen Smalley1-1/+1
2017-01-24Introduce a sysctl that modifies the value of PROT_SOCK.Krister Johansen1-1/+2
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman1-2/+1
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+1
2017-01-12security,selinux,smack: kill security_task_wait hookStephen Smalley1-7/+0
2017-01-12selinux: drop unused socket security classesStephen Smalley1-6/+0
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley1-12/+1
2017-01-09selinux: clean up cred usage and simplifyStephen Smalley1-177/+117
2017-01-09selinux: allow context mounts on tmpfs, ramfs, devpts within user namespacesStephen Smalley1-3/+7
2017-01-09selinux: handle ICMPv6 consistently with ICMPStephen Smalley1-1/+2