summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2024-09-25Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-1/+1
2024-09-24Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+1
2024-09-19selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore1-1/+1
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-127/+100
2024-09-16Merge tag 'selinux-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds8-76/+68
2024-09-16Merge tag 'vfs-6.12.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds1-1/+1
2024-09-13security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko1-1/+1
2024-09-04selinux: fix style problems in security/selinux/include/audit.hPaul Moore1-23/+23
2024-08-30Merge tag 'lsm-pr-20240830' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+2
2024-08-29selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew1-2/+2
2024-08-28selinux: simplify avc_xperms_audit_required()Zhen Lei1-2/+2
2024-08-28selinux: mark both IPv4 and IPv6 accepted connection sockets as labeledGuido Trentalancia1-1/+1
2024-08-28file: reclaim 24 bytes from f_ownerChristian Brauner1-1/+1
2024-08-28selinux: replace kmem_cache_create() with KMEM_CACHE()Eric Suen4-23/+8
2024-08-27selinux: annotate false positive data race to avoid KCSAN warningsStephen Smalley1-1/+6
2024-08-08selinux: revert our use of vma_is_initial_heap()Paul Moore1-1/+11
2024-08-07selinux: add the processing of the failure of avc_add_xperms_decision()Zhen Lei1-1/+5
2024-08-07selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei1-1/+1
2024-07-31lsm: Refactor return value of LSM hook inode_copy_up_xattrXu Kuohai1-2/+2
2024-07-31lsm: Refactor return value of LSM hook vm_enough_memoryXu Kuohai1-11/+4
2024-07-29lsm: infrastructure management of the perf_event security blobCasey Schaufler2-14/+10
2024-07-29lsm: infrastructure management of the infiniband blobCasey Schaufler2-13/+8
2024-07-29lsm: infrastructure management of the dev_tun blobCasey Schaufler2-16/+11
2024-07-29lsm: infrastructure management of the key security blobCasey Schaufler2-17/+11
2024-07-29lsm: infrastructure management of the sock securityCasey Schaufler3-54/+54
2024-07-29selinux: refactor code to return ERR_PTR in selinux_netlbl_sock_genattrGaosheng Cui1-9/+9
2024-07-29selinux: Streamline type determination in security_compute_sidCanfeng Guo1-17/+19
2024-07-17Merge tag 'lsm-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-16/+22
2024-07-17Merge tag 'selinux-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+1
2024-07-09selinux,smack: remove the capability checks in the removexattr hooksPaul Moore1-8/+2
2024-07-02selinux: Use 1UL for EBITMAP_BIT to match maps typeCanfeng Guo1-1/+1
2024-06-13ima: Avoid blocking in RCU read-side critical sectionGUO Zihua2-3/+6
2024-06-04lsm: fixup the inode xattr capability handlingPaul Moore1-8/+20
2024-05-15Merge tag 'integrity-v6.10' of ssh://ra.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-1/+1
2024-05-15Merge tag 'selinux-pr-20240513' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds12-126/+146
2024-05-14netlabel: fix RCU annotation for IPv4 options on socket creationDavide Caratti1-1/+4
2024-05-01selinux: constify source policy in cond_policydb_dup()Christian Göttsche4-14/+17
2024-05-01selinux: avoid printk_ratelimit()Christian Göttsche1-2/+1
2024-05-01selinux: pre-allocate the status pageChristian Göttsche1-0/+6
2024-04-10security: allow finer granularity in permitting copy-up of security xattrsStefan Berger1-1/+1
2024-04-04selinux: clarify return code in filename_trans_read_helper_compat()Ondrej Mosnacek1-0/+1
2024-04-02selinux: avoid dereference of garbage after mount failureChristian Göttsche1-5/+7
2024-03-28selinux: use u32 as bit position type in ebitmap codeChristian Göttsche2-35/+34
2024-03-28selinux: improve symtab string hashingChristian Göttsche1-11/+11
2024-03-28selinux: dump statistics for more hash tablesChristian Göttsche2-7/+19
2024-03-28selinux: make more use of current_sid()Christian Göttsche2-21/+8
2024-03-27selinux: update numeric format specifiers for ebitmapsChristian Göttsche1-6/+6
2024-03-26selinux: improve error checking in sel_write_load()Paul Moore1-14/+16
2024-03-26selinux: cleanup selinux_lsm_getattr()Paul Moore1-18/+18
2024-03-26selinux: reject invalid ebitmapsChristian Göttsche1-0/+11