aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2013-10-25ima: switch to new template management mechanismRoberto Sassu
2013-10-25ima: define new template ima-ng and template fields d-ng and n-ngRoberto Sassu
2013-10-25ima: define template fields library and new helpersRoberto Sassu
2013-10-25ima: new templates management mechanismRoberto Sassu
2013-10-25ima: define new function ima_alloc_init_template() to APIRoberto Sassu
2013-10-25ima: pass the filename argument up to ima_add_template_entry()Roberto Sassu
2013-10-25ima: pass the file descriptor to ima_add_violation()Roberto Sassu
2013-10-25ima: ima_calc_boot_agregate must use SHA1Dmitry Kasatkin
2013-10-25ima: support arbitrary hash algorithms in ima_calc_buffer_hashDmitry Kasatkin
2013-10-25ima: provide dedicated hash algo allocation functionDmitry Kasatkin
2013-10-25ima: differentiate between template hash and file data hash sizesMimi Zohar
2013-10-25ima: use dynamically allocated hash storageDmitry Kasatkin
2013-10-25ima: pass full xattr with the signatureDmitry Kasatkin
2013-10-25ima: read and use signature hash algorithmDmitry Kasatkin
2013-10-25ima: provide support for arbitrary hash algorithmsDmitry Kasatkin
2013-10-25Revert "ima: policy for RAMFS"Mimi Zohar
2013-10-25ima: fix script messagesDmitry Kasatkin
2013-10-22Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris
2013-09-26selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore
2013-09-26selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong
2013-09-25KEYS: initialize root uid and session keyrings earlyMimi Zohar
2013-09-25KEYS: Add a 'trusted' flag and a 'trusted only' flagDavid Howells
2013-09-24KEYS: Add per-user_namespace registers for persistent per-UID kerberos cachesDavid Howells
2013-09-24KEYS: Implement a big key type that can save to tmpfsDavid Howells
2013-09-24KEYS: Expand the capacity of a keyringDavid Howells
2013-09-24KEYS: Drop the permissions argument from __keyring_search_one()David Howells
2013-09-24KEYS: Define a __key_get() wrapper to use rather than atomic_inc()David Howells
2013-09-24KEYS: Search for auth-key by name rather than target key IDDavid Howells
2013-09-24KEYS: Introduce a search context structureDavid Howells
2013-09-24KEYS: Consolidate the concept of an 'index key' for key accessDavid Howells
2013-09-24KEYS: key_is_dead() should take a const key pointer argumentDavid Howells
2013-09-24KEYS: Use bool in make_key_ref() and is_key_possessed()David Howells
2013-09-24KEYS: Skip key state checks when checking for possessionDavid Howells
2013-09-24security: remove erroneous comment about capabilities.o link orderingEric Paris
2013-09-18Merge git://git.infradead.org/users/eparis/selinuxPaul Moore
2013-09-07Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2013-09-07Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2013-09-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2013-09-04Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2013-09-03Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds
2013-08-30capabilities: allow nice if we are privilegedSerge Hallyn
2013-08-30userns: Allow PR_CAPBSET_DROP in a user namespace.Eric W. Biederman
2013-08-28Revert "SELinux: do not handle seclabel as a special flag"Eric Paris
2013-08-28selinux: consider filesystem subtype in policiesAnand Avati
2013-08-23Merge branch 'smack-for-3.12' of git://git.gitorious.org/smack-next/kernel in...James Morris
2013-08-20module/lsm: Have apparmor module parameters work with no argsSteven Rostedt
2013-08-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-08-14apparmor: add the ability to report a sha1 hash of loaded policyJohn Johansen
2013-08-14apparmor: export set of capabilities supported by the apparmor moduleJohn Johansen
2013-08-14apparmor: add the profile introspection file to interfaceJohn Johansen