summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2024-09-04selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei1-1/+1
2024-07-18ima: Avoid blocking in RCU read-side critical sectionGUO Zihua2-3/+6
2024-03-15lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore1-7/+6
2024-02-23lsm: new security_file_ioctl_compat() hookAlfred Piccioni1-0/+28
2024-01-26selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün1-0/+7
2023-08-30selinux: set next pointer before attaching to listChristian Göttsche1-1/+1
2023-06-09selinux: don't use make's grouped targets feature yetPaul Moore1-1/+5
2023-05-17selinux: ensure av_permissions.h is built when neededPaul Moore1-1/+1
2023-05-17selinux: fix Makefile dependencies of flask.hOndrej Mosnacek1-2/+2
2022-10-30selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi3-5/+6
2022-08-21selinux: Add boundary check in put_entry()Xiu Jianfeng1-0/+2
2022-06-09lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore3-9/+10
2022-05-25include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakageEugene Syromiatnikov1-1/+3
2022-05-25selinux: fix bad cleanup on error in hashtab_duplicate()Ondrej Mosnacek1-1/+2
2022-04-08selinux: allow FIOCLEX and FIONCLEX with policy capabilityRichard Haines4-1/+16
2022-04-08selinux: use correct type for context lengthChristian Göttsche1-1/+1
2022-04-08LSM: general protection fault in legacy_parse_paramCasey Schaufler1-3/+2
2022-04-08selinux: check return value of sel_make_avc_filesChristian Göttsche1-0/+2
2022-02-08selinux: fix double free of cond_list on error pathsVratislav Bendel1-1/+2
2022-01-27selinux: fix potential memleak in selinux_add_opt()Bernard Zhao1-2/+10
2022-01-05selinux: initialize proto variable in selinux_ip_postroute_compat()Tom Rix1-1/+1
2021-11-26selinux: fix NULL-pointer dereference when hashtab allocation failsOndrej Mosnacek1-5/+12
2021-11-18selinux: fix race condition when computing ocontext SIDsOndrej Mosnacek1-85/+77
2021-11-18binder: use cred instead of task for selinux checksTodd Kjos1-21/+15
2021-08-12selinux: correct the return value when loads initial sidsXiu Jianfeng1-6/+4
2021-07-19selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim1-6/+7
2021-05-14selinux: add proper NULL termination to the secclass_map permissionsPaul Moore1-2/+3
2021-04-14selinux: fix race between old and new sidtabOndrej Mosnacek3-37/+145
2021-04-14selinux: fix cond_list corruption when changing booleansOndrej Mosnacek3-69/+33
2021-04-14selinux: make nslot handling in avtab more robustOndrej Mosnacek1-10/+11
2021-03-30selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek3-33/+55
2021-03-30selinux: don't log MAC_POLICY_LOAD record on failed policy loadOndrej Mosnacek1-2/+1
2021-03-04selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein1-0/+4
2020-12-30selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handlingPaul Moore1-18/+13
2020-12-30selinux: fix error initialization in inode_doinit_with_dentry()Tianyue Ren1-3/+16
2020-11-14Merge tag 'selinux-pr-20201113' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+3
2020-11-13selinux: Fix error return code in sel_ib_pkey_sid_slow()Chen Zhou1-1/+3
2020-10-15Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-3/+5
2020-10-14Merge tag 'selinux-pr-20201012' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds17-498/+1068
2020-10-05LSM: Add "contents" flag to kernel_read_file hookKees Cook1-2/+3
2020-10-05LSM: Introduce kernel_post_load_data() hookKees Cook1-1/+1
2020-10-05fs/kernel_read_file: Split into separate include fileScott Branden1-0/+1
2020-09-15selinux: Add helper functions to get and set checkreqprotLakshmi Ramasubramanian3-5/+16
2020-09-11selinux: access policycaps with READ_ONCE/WRITE_ONCEStephen Smalley2-8/+9
2020-08-31selinux: simplify away security_policydb_len()Ondrej Mosnacek3-30/+10
2020-08-27selinux: move policy mutex to selinux_state, use in lockdep checksStephen Smalley4-43/+22
2020-08-26selinux: fix error handling bugs in security_load_policy()Dan Carpenter1-11/+23
2020-08-25selinux: convert policy read-write lock to RCUStephen Smalley4-218/+280
2020-08-24selinux: delete repeated words in commentsRandy Dunlap1-3/+3
2020-08-24treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2-10/+2