aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2009-07-19security: use mmap_min_addr indepedently of security modelsChristoph Lameter
2009-07-02IMA: open all files O_LARGEFILEEric Paris
2009-07-02IMA: Handle dentry_open failuresEric Paris
2009-07-02IMA: use current_cred() instead of current->credEric Paris
2009-05-27tomoyo: add missing call to cap_bprm_set_credsHerton Ronaldo Krzesinski
2009-05-09Reduce path_lookup() abusesAl Viro
2009-05-05selinux: Fix send_sigiotask hookStephen Smalley
2009-04-18Smack: check for SMACK xattr validity in smack_inode_setxattrEtienne Basset
2009-04-14tomoyo: version bump to 2.2.0.Tetsuo Handa
2009-04-09keys: Handle there being no fallback destination keyring for request_key()David Howells
2009-04-09cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells
2009-04-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2009-04-02devcgroup: avoid using cgroup_lockLi Zefan
2009-03-31Get rid of indirect include of fs_struct.hAl Viro
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa
2009-03-26smack: convert smack to standard linux listsEtienne Basset
2009-03-24Merge branch 'master' into nextJames Morris
2009-03-10SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris
2009-03-06SELinux: new permission between tty audit and audit socketEric Paris
2009-03-06SELinux: open perm for sock filesEric Paris
2009-03-05smack: fixes for unlabeled host supportetienne
2009-03-05smack: fixes for unlabeled host supportetienne
2009-03-02selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore
2009-02-27keys: make procfiles per-user-namespaceSerge E. Hallyn
2009-02-27keys: skip keys from another user namespaceSerge E. Hallyn
2009-02-27keys: consider user namespace in key_permissionSerge E. Hallyn
2009-02-27keys: distinguish per-uid keys in different namespacesSerge E. Hallyn
2009-02-23selinux: Fix the NetLabel glue code for setsockopt()Paul Moore
2009-02-23integrity: ima iint radix_tree_lookup locking fixMimi Zohar
2009-02-23TOMOYO: Do not call tomoyo_realpath_init unless registered.Tetsuo Handa
2009-02-21integrity: ima scatterlist bug fixMimi Zohar
2009-02-19smack: fix lots of kernel-doc notationRandy Dunlap
2009-02-16TOMOYO: Don't create securityfs entries unless registered.Tetsuo Handa
2009-02-14TOMOYO: Fix exception policy read failure.Tetsuo Handa
2009-02-14SELinux: convert the avc cache hash list to an hlistEric Paris
2009-02-14SELinux: code readability with avc_cacheEric Paris
2009-02-14SELinux: remove unused av.decided fieldEric Paris
2009-02-14SELinux: more careful use of avd in avc_has_perm_noauditEric Paris
2009-02-14SELinux: remove the unused ae.usedEric Paris
2009-02-14SELinux: check seqno when updating an avc_nodeEric Paris
2009-02-14SELinux: NULL terminate al contexts from diskEric Paris
2009-02-14SELinux: better printk when file with invalid label foundEric Paris
2009-02-14SELinux: call capabilities code directoryEric Paris