aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2014-04-26ima: restore the original behavior for sending data with ima templateRoberto Sassu
2014-04-14selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore
2014-03-18Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...David S. Miller
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov
2014-03-09KEYS: Make the keyring cycle detector ignore other keyrings of the same nameDavid Howells
2014-02-24Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux i...James Morris
2014-02-20SELinux: bigendian problems with filename trans rulesEric Paris
2014-02-10Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux i...James Morris
2014-02-05SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley
2014-02-05selinux: add SOCK_DIAG_BY_FAMILY to the list of netlink message typesPaul Moore
2014-02-05Merge tag 'v3.13' into stable-3.14Paul Moore
2014-02-05security: select correct default LSM_MMAP_MIN_ADDR on arm on arm64Colin Cross
2014-01-23Merge git://git.infradead.org/users/eparis/auditLinus Torvalds
2014-01-21Merge branch 'for-3.14' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds
2014-01-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2014-01-13smack: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs
2014-01-13selinux: call WARN_ONCE() instead of calling audit_log_start()Richard Guy Briggs
2014-01-12SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt
2014-01-08Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris
2014-01-07SELinux: Fix memory leak upon loading policyTetsuo Handa
2014-01-07Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris
2014-01-06Merge to v3.13-rc7 for prerequisite changes in the Xen code for TPMJames Morris
2014-01-03ima: remove unneeded size_limit argument from ima_eventdigest_init_common()Roberto Sassu
2014-01-03ima: pass HASH_ALGO__LAST as hash algo in ima_eventdigest_init()Roberto Sassu
2014-01-03ima: change the default hash algorithm to SHA1 in ima_eventdigest_ng_init()Roberto Sassu
2013-12-31Smack: File receive audit correctionCasey Schaufler
2013-12-31Smack: Rationalize mount restrictionsCasey Schaufler
2013-12-23Smack: change rule cap checkCasey Schaufler
2013-12-23Smack: Make the syslog control configurableCasey Schaufler
2013-12-23selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov
2013-12-23selinux: fix broken peer recv checkChad Hanson
2013-12-19Smack: Prevent the * and @ labels from being used in SMACK64EXECCasey Schaufler
2013-12-16selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov
2013-12-16SELinux: remove duplicated include from hooks.cWei Yongjun
2013-12-15Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2013-12-15Revert "selinux: consider filesystem subtype in policies"Linus Torvalds
2013-12-13selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore
2013-12-13Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris
2013-12-12selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore
2013-12-12selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore
2013-12-12selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore
2013-12-12Merge tag 'keys-devel-20131210' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2013-12-11selinux: fix broken peer recv checkChad Hanson
2013-12-11smack: fix: allow either entry be missing on access/access2 check (v2)Jarkko Sakkinen
2013-12-10selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore
2013-12-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore
2013-12-05cgroup: replace cftype->read_seq_string() with cftype->seq_show()Tejun Heo
2013-12-04selinux: fix possible memory leakGeyslan G. Bem
2013-12-04selinux: pull address family directly from the request_sock structPaul Moore