summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2009-06-15keys: Handle there being no fallback destination keyring for request_key()David Howells1-3/+6
2009-06-15SELinux: BUG in SELinux compat_net codeEric Paris1-1/+1
2009-05-19smack: Set the proper NetLabel security attributes for connection requestsPaul Moore2-56/+75
2009-05-19selinux: Remove dead code labeled networking codePaul Moore1-77/+0
2009-05-19selinux: Set the proper NetLabel security attributes for connection requestsPaul Moore3-43/+16
2009-05-19selinux: Add new NetLabel glue code to handle labeling of connection requestsPaul Moore3-67/+72
2009-05-09unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)Eugene Teo1-0/+1
2009-04-27cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn1-1/+0
2009-04-27security/smack: fix oops when setting a size 0 SMACK64 xattrEtienne Basset1-1/+3
2009-03-05smack: fixes for unlabeled host supportetienne2-50/+57
2009-03-02selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore1-2/+3
2009-02-23selinux: Fix the NetLabel glue code for setsockopt()Paul Moore1-1/+3
2009-01-28smackfs load append mode fixCasey Schaufler1-1/+1
2009-01-18security: introduce missing kfreeVegard Nossum1-0/+1
2009-01-14[CVE-2009-0029] System call wrappers part 28Heiko Carstens1-2/+2
2009-01-14[CVE-2009-0029] System call wrappers part 27Heiko Carstens1-9/+9
2009-01-08remove lots of double-semicolonsFernando Carrijo1-1/+1
2009-01-08devices cgroup: allow mkfifoSerge E. Hallyn1-0/+3
2009-01-08devcgroup: use list_for_each_entry_rcu()Lai Jiangshan1-1/+1
2009-01-07Merge branch 'next' into for-linusJames Morris13-266/+616
2009-01-07CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]David Howells3-25/+46
2009-01-07Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() ...James Morris6-73/+23
2009-01-06Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds3-8/+3
2009-01-05zero i_uid/i_gid on inode allocationAl Viro2-5/+0
2009-01-05inode->i_op is never NULLAl Viro1-3/+3
2009-01-05SELinux: shrink sizeof av_inhert selinux_class_perm and contextEric Paris3-10/+12
2009-01-05CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]David Howells6-23/+73
2009-01-05Merge branch 'master' of git://git.infradead.org/users/pcmoore/lblnet-2.6_nex...James Morris7-230/+557
2009-01-04audit: validate comparison operations, store them in sane formAl Viro2-16/+16
2009-01-03Merge branch 'cpus4096-for-linus-3' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-1/+1
2009-01-01cpumask: prepare for iterators to only go to nr_cpu_ids/nr_cpumask_bits.: coreRusty Russell1-1/+1
2009-01-01keys: fix sparse warning by adding __user annotation to castJames Morris1-1/+1
2009-01-01introduce new LSM hooks where vfsmount is available.Kentaro Takeda3-0/+132
2008-12-31smack: Add support for unlabeled network hosts and networksCasey Schaufler4-195/+538
2008-12-31selinux: Deprecate and schedule the removal of the the compat_net functionalityPaul Moore3-38/+11
2008-12-31netlabel: Update kernel configuration APIPaul Moore1-5/+16
2008-12-29KEYS: Fix variable uninitialisation warningsDavid Howells1-3/+3
2008-12-29Merge branch 'next' into for-linusJames Morris1-4/+16
2008-12-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds2-4/+4
2008-12-25smackfs: check for allocation failures in smk_set_access()Sergio Luis1-4/+16
2008-12-20SELinux: don't check permissions for kernel mountsJames Morris1-0/+4
2008-12-20security: pass mount flags to security_sb_kern_mount()James Morris4-5/+6
2008-12-20SELinux: correctly detect proc filesystems of the form "proc/foo"Stephen Smalley1-1/+1
2008-11-25CRED: fix sparse warningsHannes Eder1-3/+3
2008-11-15capabilities: define get_vfs_caps_from_disk when file caps are not enabledEric Paris1-0/+6
2008-11-14CRED: Allow kernel services to override LSM settings for task actionsDavid Howells4-0/+105
2008-11-14CRED: Add a kernel_service object class to SELinuxDavid Howells4-0/+10
2008-11-14CRED: Differentiate objective and effective subjective credentials on a taskDavid Howells1-24/+41
2008-11-14CRED: Prettify commoncap.cDavid Howells1-52/+248
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells8-335/+214