| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2017-06-11 | apparmor: update query interface to support label queries | John Johansen | 1 | -7/+39 |
| 2017-06-11 | apparmor: switch getprocattr to using label_print fns() | John Johansen | 3 | -37/+27 |
| 2017-06-11 | apparmor: switch from profiles to using labels on contexts | John Johansen | 20 | -529/+686 |
| 2017-06-11 | apparmor: add the base fns() for domain labels | John Johansen | 2 | -0/+2561 |
| 2017-06-11 | apparmor: revalidate files during exec | John Johansen | 4 | -0/+81 |
| 2017-06-11 | apparmor: cleanup rename XXX_file_context() to XXX_file_ctx() | John Johansen | 2 | -11/+16 |
| 2017-06-11 | apparmor: convert aa_change_XXX bool parameters to flags | John Johansen | 5 | -32/+29 |
| 2017-06-11 | apparmor: cleanup remove unused and not fully implemented profile rename | John Johansen | 1 | -37/+2 |
| 2017-06-11 | apparmor: refactor updating profiles to the newest parent | John Johansen | 1 | -4/+31 |
| 2017-06-11 | apparmor: share profile name on replacement | John Johansen | 3 | -9/+72 |
| 2017-06-11 | apparmor: convert to profile block critical sections | John Johansen | 8 | -56/+162 |
| 2017-06-11 | apparmor: move bprm_committing_creds/committed_creds to lsm.c | John Johansen | 3 | -32/+30 |
| 2017-06-11 | apparmor: fix display of ns name | John Johansen | 1 | -1/+1 |
| 2017-06-11 | apparmor: fix apparmor_query data | John Johansen | 1 | -2/+6 |
| 2017-06-11 | apparmor: fix policy load/remove semantics | John Johansen | 2 | -15/+13 |
| 2017-06-11 | apparmor: add namespace lookup fns() | John Johansen | 3 | -4/+73 |
| 2017-06-11 | apparmor: cleanup __find_child() | John Johansen | 1 | -8/+8 |
| 2017-06-11 | apparmor: provide information about path buffer size at boot | John Johansen | 1 | -2/+9 |
| 2017-06-11 | apparmor: add profile permission query ability | John Johansen | 1 | -1/+102 |
| 2017-06-11 | apparmor: switch from file_perms to aa_perms | John Johansen | 5 | -48/+29 |
| 2017-06-11 | apparmor: add gerneric permissions struct and support fns | John Johansen | 4 | -17/+153 |
| 2017-06-11 | apparmor: add fn to test if profile supports a given mediation class | John Johansen | 1 | -0/+10 |
| 2017-06-11 | apparmor: speed up transactional queries | John Johansen | 1 | -11/+114 |
| 2017-06-11 | apparmor: add label data availability to the feature set | John Johansen | 1 | -0/+10 |
| 2017-06-11 | apparmor: add mkdir/rmdir interface to manage policy namespaces | John Johansen | 1 | -1/+94 |
| 2017-06-11 | apparmor: add policy revision file interface | John Johansen | 4 | -1/+116 |
| 2017-06-11 | apparmor: provide finer control over policy management | John Johansen | 3 | -23/+35 |
| 2017-06-09 | security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l... | Scott Mayhew | 2 | -4/+38 |
| 2017-06-09 | selinux: use kmem_cache for ebitmap | Junil Lee | 3 | -6/+27 |
| 2017-06-09 | apparmor: rework perm mapping to a slightly broader set | John Johansen | 5 | -53/+133 |
| 2017-06-09 | KEYS: fix refcount_inc() on zero | Mark Rutland | 1 | -7/+4 |
| 2017-06-09 | KEYS: Convert KEYCTL_DH_COMPUTE to use the crypto KPP API | Mat Martineau | 2 | -103/+171 |
| 2017-06-09 | KEYS: DH: ensure the KDF counter is properly aligned | Eric Biggers | 1 | -13/+3 |
| 2017-06-09 | KEYS: DH: don't feed uninitialized "otherinfo" into KDF | Eric Biggers | 1 | -1/+1 |
| 2017-06-09 | KEYS: DH: forbid using digest_null as the KDF hash | Eric Biggers | 1 | -1/+11 |
| 2017-06-09 | KEYS: sanitize key structs before freeing | Eric Biggers | 1 | -3/+1 |
| 2017-06-09 | KEYS: trusted: sanitize all key material | Eric Biggers | 1 | -28/+22 |
| 2017-06-09 | KEYS: encrypted: sanitize all key material | Eric Biggers | 1 | -18/+13 |
| 2017-06-09 | KEYS: user_defined: sanitize key payloads | Eric Biggers | 1 | -4/+12 |
| 2017-06-09 | KEYS: sanitize add_key() and keyctl() key payloads | Eric Biggers | 1 | -3/+9 |
| 2017-06-09 | KEYS: fix freeing uninitialized memory in key_update() | Eric Biggers | 1 | -3/+2 |
| 2017-06-09 | KEYS: fix dereferencing NULL payload with nonzero length | Eric Biggers | 1 | -2/+2 |
| 2017-06-09 | KEYS: encrypted: use constant-time HMAC comparison | Eric Biggers | 1 | -2/+3 |
| 2017-06-09 | KEYS: encrypted: fix race causing incorrect HMAC calculations | Eric Biggers | 1 | -83/+32 |
| 2017-06-09 | KEYS: encrypted: fix buffer overread in valid_master_desc() | Eric Biggers | 1 | -16/+15 |
| 2017-06-09 | KEYS: encrypted: avoid encrypting/decrypting stack buffers | Eric Biggers | 1 | -8/+9 |
| 2017-06-09 | KEYS: put keyring if install_session_keyring_to_cred() fails | Eric Biggers | 1 | -3/+4 |
| 2017-06-09 | KEYS: Delete an error message for a failed memory allocation in get_derived_k... | Markus Elfring | 1 | -3/+2 |
| 2017-06-09 | security: use READ_ONCE instead of deprecated ACCESS_ONCE | Davidlohr Bueso | 1 | -6/+6 |
| 2017-06-09 | security/keys: add CONFIG_KEYS_COMPAT to Kconfig | Bilal Amarni | 1 | -0/+4 |
