summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2017-06-11apparmor: fix policy load/remove semanticsJohn Johansen2-15/+13
2017-06-11apparmor: add namespace lookup fns()John Johansen3-4/+73
2017-06-11apparmor: cleanup __find_child()John Johansen1-8/+8
2017-06-11apparmor: provide information about path buffer size at bootJohn Johansen1-2/+9
2017-06-11apparmor: add profile permission query abilityJohn Johansen1-1/+102
2017-06-11apparmor: switch from file_perms to aa_permsJohn Johansen5-48/+29
2017-06-11apparmor: add gerneric permissions struct and support fnsJohn Johansen4-17/+153
2017-06-11apparmor: add fn to test if profile supports a given mediation classJohn Johansen1-0/+10
2017-06-11apparmor: speed up transactional queriesJohn Johansen1-11/+114
2017-06-11apparmor: add label data availability to the feature setJohn Johansen1-0/+10
2017-06-11apparmor: add mkdir/rmdir interface to manage policy namespacesJohn Johansen1-1/+94
2017-06-11apparmor: add policy revision file interfaceJohn Johansen4-1/+116
2017-06-11apparmor: provide finer control over policy managementJohn Johansen3-23/+35
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew2-4/+38
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee3-6/+27
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen5-53/+133
2017-06-09KEYS: fix refcount_inc() on zeroMark Rutland1-7/+4
2017-06-09KEYS: Convert KEYCTL_DH_COMPUTE to use the crypto KPP APIMat Martineau2-103/+171
2017-06-09KEYS: DH: ensure the KDF counter is properly alignedEric Biggers1-13/+3
2017-06-09KEYS: DH: don't feed uninitialized "otherinfo" into KDFEric Biggers1-1/+1
2017-06-09KEYS: DH: forbid using digest_null as the KDF hashEric Biggers1-1/+11
2017-06-09KEYS: sanitize key structs before freeingEric Biggers1-3/+1
2017-06-09KEYS: trusted: sanitize all key materialEric Biggers1-28/+22
2017-06-09KEYS: encrypted: sanitize all key materialEric Biggers1-18/+13
2017-06-09KEYS: user_defined: sanitize key payloadsEric Biggers1-4/+12
2017-06-09KEYS: sanitize add_key() and keyctl() key payloadsEric Biggers1-3/+9
2017-06-09KEYS: fix freeing uninitialized memory in key_update()Eric Biggers1-3/+2
2017-06-09KEYS: fix dereferencing NULL payload with nonzero lengthEric Biggers1-2/+2
2017-06-09KEYS: encrypted: use constant-time HMAC comparisonEric Biggers1-2/+3
2017-06-09KEYS: encrypted: fix race causing incorrect HMAC calculationsEric Biggers1-83/+32
2017-06-09KEYS: encrypted: fix buffer overread in valid_master_desc()Eric Biggers1-16/+15
2017-06-09KEYS: encrypted: avoid encrypting/decrypting stack buffersEric Biggers1-8/+9
2017-06-09KEYS: put keyring if install_session_keyring_to_cred() failsEric Biggers1-3/+4
2017-06-09KEYS: Delete an error message for a failed memory allocation in get_derived_k...Markus Elfring1-3/+2
2017-06-09security: use READ_ONCE instead of deprecated ACCESS_ONCEDavidlohr Bueso1-6/+6
2017-06-09security/keys: add CONFIG_KEYS_COMPAT to KconfigBilal Amarni1-0/+4
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen4-19/+43
2017-06-08apparmor: convert from securityfs to apparmorfs for policy ns filesJohn Johansen1-26/+37
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen3-7/+8
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen9-127/+172
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen1-17/+336
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen1-29/+24
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen1-61/+36
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen7-69/+409
2017-06-08securityfs: add the ability to support symlinksJohn Johansen1-21/+123
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen4-86/+53
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen6-17/+34
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen2-1/+2
2017-06-08apparmor: move file context into file.hJohn Johansen2-32/+32
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider1-2/+2