summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2008-04-19Security: Introduce security= boot parameterAhmed S. Darwish6-4/+65
2008-04-19Audit: Final renamings and cleanupAhmed S. Darwish1-0/+65
2008-04-19SELinux: use new audit hooks, remove redundant exportsAhmed S. Darwish2-11/+42
2008-04-19LSM/Audit: Introduce generic Audit LSM hooksAhmed S. Darwish2-1/+55
2008-04-19SELinux: remove redundant exportsAhmed S. Darwish1-42/+0
2008-04-19SELinux: setup new inode/ipc getsecid hooksAhmed S. Darwish1-2/+17
2008-04-19LSM: Introduce inode_getsecid and ipc_getsecid hooksAhmed S. Darwish2-1/+25
2008-04-18security: enhance DEFAULT_MMAP_MIN_ADDR descriptionmaximilian attems1-4/+6
2008-04-18SELinux: add netport.[ch]James Morris2-0/+317
2008-04-18SELinux: Add network port SID cachePaul Moore5-21/+17
2008-04-18SELinux: turn mount options strings into definesEric Paris2-8/+13
2008-04-18selinux/ss/services.c should #include <linux/selinux.h>Adrian Bunk1-0/+1
2008-04-18selinux: introduce permissive typesEric Paris6-6/+48
2008-04-18selinux: remove ptrace_sidRoland McGrath2-25/+47
2008-04-18SELinux: requesting no permissions in avc_has_perm_noaudit is a BUG()Eric Paris1-1/+3
2008-04-18security: code cleanupAndrew Morton1-1/+1
2008-04-18security: replace remaining __FUNCTION__ occurrencesHarvey Harrison8-26/+26
2008-04-18SELinux: create new open permissionEric Paris6-2/+47
2008-04-18selinux: selinux/netlabel.c should #include "netlabel.h"Adrian Bunk1-0/+1
2008-04-18SELinux: unify printk messagesJames Morris5-76/+76
2008-04-18SELinux: remove unused backpointers from security objectsJames Morris2-14/+0
2008-04-18SELinux: Correct the NetLabel locking for the sk_security_structPaul Moore4-87/+15
2008-04-18Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds...David S. Miller3-15/+19
2008-04-13LSM: Make the Labeled IPsec hooks more stack friendlyPaul Moore4-45/+42
2008-04-13NetLabel: Allow passing the LSM domain as a shared pointerPaul Moore2-2/+2
2008-04-10SELinux: don't BUG if fs reuses a superblockEric Paris1-4/+4
2008-04-08SELinux: more GFP_NOFS fixups to prevent selinux from re-entering the fs codeStephen Smalley3-9/+13
2008-04-04selinux: prevent rentry into the FSJosef Bacik1-2/+2
2008-04-04Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...David S. Miller5-83/+16
2008-04-02selinux: handle files opened with flags 3 by checking ioctl permissionStephen Smalley1-0/+6
2008-03-25[NET] NETNS: Omit net_device->nd_net without CONFIG_NET_NS.YOSHIFUJI Hideaki1-1/+1
2008-03-25smackfs: remove redundant lock, fix open(,O_RDWR)Ahmed S. Darwish1-33/+2
2008-03-20file capabilities: remove cap_task_kill()Serge Hallyn3-46/+0
2008-03-20smack: do not dereference NULL ipc objectAhmed S. Darwish1-3/+6
2008-03-18make selinux_parse_opts_str() staticAdrian Bunk1-1/+2
2008-03-13smackfs: do not trust `count' in inodes write()sAhmed S. Darwish2-19/+20
2008-03-06LSM/SELinux: Interfaces to allow FS to control mount optionsEric Paris5-107/+128
2008-02-24Smack: update for file capabilitiesCasey Schaufler1-13/+74
2008-02-24file capabilities: simplify signal checkSerge E. Hallyn1-1/+1
2008-02-19Smack: unlabeled outgoing ambient packetsCasey Schaufler2-23/+74
2008-02-15d_path: Use struct path in struct avc_audit_dataJan Blunck3-25/+24
2008-02-15Embed a struct path into struct nameidata instead of nd->{dentry,mnt}Jan Blunck2-3/+3
2008-02-14Smack: check for 'struct socket' with NULL skAhmed S. Darwish1-4/+5
2008-02-11selinux: support 64-bit capabilitiesStephen Smalley5-2/+27
2008-02-07Convert ERR_PTR(PTR_ERR(p)) instances to ERR_CAST(p)David Howells4-4/+4
2008-02-06SELinux: Remove security_get_policycaps()Paul Moore2-34/+0
2008-02-06security: allow Kconfig to set default mmap_min_addr protectionEric Paris2-1/+21
2008-02-05Smack: Simplified Mandatory Access Control KernelCasey Schaufler8-0/+4095
2008-02-05capabilities: introduce per-process capability bounding setSerge E. Hallyn1-17/+27
2008-02-05Add 64-bit capability support to the kernelAndrew Morgan2-36/+68