summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2015-09-18selinux/nlmsg: add XFRM_MSG_MAPPINGNicolas Dichtel1-0/+1
2015-09-18selinux/nlmsg: add XFRM_MSG_MIGRATENicolas Dichtel1-0/+1
2015-09-18selinux/nlmsg: add XFRM_MSG_REPORTNicolas Dichtel1-0/+1
2015-09-18selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFONicolas Dichtel1-0/+2
2015-09-18selinux/nlmsg: add XFRM_MSG_GETSPDINFONicolas Dichtel1-0/+1
2015-06-19selinux: fix sel_write_enforce broken return valueJoe Perches1-1/+1
2015-06-19smack: fix possible use after frees in task_security() callersAndrey Ryabinin2-11/+23
2015-04-14move d_rcu from overlapping d_child to overlapping d_aliasAl Viro1-3/+3
2015-04-14KEYS: close race between key lookup and freeingSasha Levin1-2/+2
2015-04-14KEYS: Fix stale key registration at error pathTakashi Iwai1-1/+4
2015-02-02evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin1-3/+6
2015-02-02selinux: fix inode security list corruptionStephen Smalley1-1/+1
2014-06-26evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar1-2/+10
2014-04-14selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore1-9/+27
2014-03-12SELinux: bigendian problems with filename trans rulesEric Paris1-4/+4
2014-02-20SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley1-0/+4
2014-02-13SELinux: Fix memory leak upon loading policyTetsuo Handa1-1/+13
2014-01-29SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2-3/+22
2014-01-08selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore1-7/+36
2014-01-08selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore3-16/+48
2014-01-08selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov1-2/+2
2014-01-08selinux: fix broken peer recv checkChad Hanson1-1/+3
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore1-15/+53
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore1-2/+23
2013-12-04selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore1-4/+2
2013-11-29Revert "ima: policy for RAMFS"Mimi Zohar1-1/+0
2013-03-28key: Fix resource leakAlan Cox1-2/+2
2013-03-21selinux: use GFP_ATOMIC under spin_lockDan Carpenter1-1/+1
2013-03-14Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and securit...Mathieu Desnoyers1-2/+2
2013-03-14keys: fix race with concurrent install_user_keyrings()David Howells1-1/+1
2013-01-28evm: checking if removexattr is not a NULLDmitry Kasatkin1-2/+2
2012-11-26selinux: fix sel_netnode_insert() suspicious rcu dereferenceDave Jones1-1/+2
2012-10-07Yama: handle 32-bit userspace prctlKees Cook1-1/+1
2012-08-09posix_types.h: Cleanup stale __NFDBITS and related definitionsJosh Boyer1-1/+1
2012-06-01SELinux: if sel_make_bools errors don't leave inconsistent stateEric Paris1-0/+1
2012-04-19security: fix compile error in commoncap.cJonghwan Choi1-0/+1
2012-04-18fcaps: clear the same personality flags as suid when fcaps are usedEric Paris1-0/+5
2012-04-18Smack: move label list initializationCasey Schaufler2-25/+33
2012-04-11Smack: build when CONFIG_AUDIT not definedKees Cook1-4/+15
2012-04-03lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit...Linus Torvalds4-13/+12
2012-04-03SELinux: do not allocate stack space for AVC data unless neededEric Paris2-14/+27
2012-04-03SELinux: remove avd from slow_avc_audit()Eric Paris1-2/+2
2012-04-03SELinux: remove avd from selinux_audit_dataEric Paris1-1/+0
2012-04-03LSM: shrink the common_audit_data data unionEric Paris4-88/+122
2012-04-03LSM: shrink sizeof LSM specific portion of common_audit_dataEric Paris15-97/+238
2012-04-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2-71/+48
2012-04-01get rid of pointless includes of ext2_fs.hAl Viro1-5/+4
2012-04-01selinuxfs: merge dentry allocation into sel_make_dir()Al Viro1-66/+44
2012-03-31selinux: inline avc_audit() and avc_has_perm_noaudit() into callerLinus Torvalds1-2/+2
2012-03-31selinux: don't inline slow-path code into avc_has_perm_noaudit()Linus Torvalds1-14/+38