summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2018-12-01selinux: Add __GFP_NOWARN to allocation at str_read()Tetsuo Handa1-1/+1
2018-09-19selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko1-8/+6
2018-06-06selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover1-1/+1
2018-04-13selinux: do not check open permission on socketsStephen Smalley1-3/+7
2018-04-08selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2018-04-08selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke1-1/+1
2018-03-22selinux: check for address length in selinux_socket_bind()Alexander Potapenko1-0/+8
2018-02-25selinux: skip bounded transition processing if the policy isn't loadedPaul Moore1-0/+3
2018-02-25selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore1-10/+8
2017-02-15selinux: fix off-by-one in setprocattrStephen Smalley1-1/+1
2016-10-20mm: Change vm_is_stack_for_task() to vm_is_stack_for_current()Andy Lutomirski1-1/+1
2016-10-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-1/+1
2016-10-11Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds1-12/+7
2016-10-10Merge branch 'printk-cleanups'Linus Torvalds1-2/+2
2016-10-09printk: reinstate KERN_CONT for printing continuation linesLinus Torvalds1-2/+2
2016-10-08xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher1-12/+7
2016-09-28fs: Replace CURRENT_TIME with current_time() for inode timestampsDeepa Dinamani1-1/+1
2016-09-19lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILEVivek Goyal1-8/+8
2016-09-14selinux: fix error return code in policydb_read()Wei Yongjun1-0/+1
2016-08-30selinux: fix overflow and 0 length allocationsWilliam Roberts2-0/+5
2016-08-30selinux: initialize structuresWilliam Roberts1-4/+4
2016-08-30selinux: detect invalid ebitmapWilliam Roberts1-0/+3
2016-08-19selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAXWilliam Roberts2-42/+0
2016-08-10selinux: Implement dentry_create_files_as() hookVivek Goyal1-0/+22
2016-08-09selinux: Pass security pointer to determine_inode_label()Vivek Goyal1-9/+10
2016-08-09selinux: Implementation for inode_copy_up_xattr() hookVivek Goyal1-0/+16
2016-08-09selinux: Implementation for inode_copy_up() hookVivek Goyal1-0/+21
2016-08-08security: Use IS_ENABLED() instead of checking for built-in or moduleJavier Martinez Canillas1-6/+6
2016-08-06Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2016-07-30Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds6-63/+72
2016-07-21qstr: constify dentry_init_securityAl Viro1-1/+1
2016-07-07Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris6-63/+72
2016-06-27calipso: Add a label cache.Huw Davies1-3/+6
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies3-7/+9
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies1-0/+15
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies1-1/+1
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies1-1/+16
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies1-1/+1
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee1-0/+23
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski1-1/+1
2016-06-15selinux: fix type mismatchHeinrich Schuchardt1-1/+1
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore1-1/+1
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley1-48/+22
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds5-60/+127
2016-05-18Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+3
2016-05-18Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley1-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley2-17/+25
2016-04-20rtnetlink: add new RTM_GETSTATS message to dump link statsRoopa Prabhu1-1/+3
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore1-1/+1