summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2017-02-22Merge tag 'driver-core-4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds-3/+39
2017-02-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds-3/+8
2017-02-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds-1839/+3314
2017-02-20Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds-8/+2
2017-02-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-1/+1
2017-02-10KEYS: Use memzero_explicit() for secret dataDan Carpenter-1/+1
2017-02-10KEYS: Fix an error code in request_master_key()Dan Carpenter-1/+1
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris-276/+327
2017-02-08selinux: fix off-by-one in setprocattrStephen Smalley-1/+1
2017-02-08Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux i...James Morris-1/+1
2017-02-07selinux: allow changing labels for cgroupfsAntonio Murdaca-0/+2
2017-02-07selinux: fix off-by-one in setprocattrStephen Smalley-1/+1
2017-01-27ima: allow to check MAY_APPENDLans Zhang-4/+5
2017-01-27ima: fix ima_d_path() possible race with renameMimi Zohar-6/+24
2017-01-27Merge branch 'smack-for-4.11' of git://github.com/cschaufler/smack-next into ...James Morris-27/+95
2017-01-24Introduce a sysctl that modifies the value of PROT_SOCK.Krister Johansen-1/+2
2017-01-19Introduce STATIC_USERMODEHELPER to mediate call_usermodehelper()Greg Kroah-Hartman-0/+35
2017-01-19Make static usermode helper binaries constantGreg Kroah-Hartman-3/+4
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler-9/+71
2017-01-16apparmor: fix undefined reference to `aa_g_hash_policy'John Johansen-1/+1
2017-01-16apparmor: replace remaining BUG_ON() asserts with AA_BUG()John Johansen-5/+5
2017-01-16apparmor: fix restricted endian type warnings for policy unpackJohn Johansen-6/+6
2017-01-16apparmor: fix restricted endian type warnings for dfa unpackJohn Johansen-12/+12
2017-01-16apparmor: add check for apparmor enabled in module parameters missing itJohn Johansen-0/+10
2017-01-16apparmor: add per cpu work buffers to avoid allocating buffers at every hookJohn Johansen-1/+103
2017-01-16apparmor: sysctl to enable unprivileged user ns AppArmor policy loadingTyler Hicks-1/+47
2017-01-16apparmor: support querying extended trusted helper extra dataWilliam Hua-0/+245
2017-01-16apparmor: update cap audit to check SECURITY_CAP_NOAUDITJohn Johansen-6/+10
2017-01-16apparmor: make computing policy hashes conditional on kernel parameterJohn Johansen-29/+32
2017-01-16apparmor: convert change_profile to use fqname later to give better controlJohn Johansen-66/+28
2017-01-16apparmor: fix change_hat debug outputJohn Johansen-4/+5
2017-01-16apparmor: remove unused op parameter from simple_write_to_buffer()John Johansen-6/+3
2017-01-16apparmor: change aad apparmor_audit_data macro to a fn macroJohn Johansen-161/+155
2017-01-16apparmor: change op from int to const char *John Johansen-134/+84
2017-01-16apparmor: rename context abreviation cxt to the more standard ctxJohn Johansen-144/+150
2017-01-16apparmor: fail task profile update if current_cred isn't real_credJohn Johansen-0/+3
2017-01-16apparmor: add per policy ns .load, .replace, .remove interface filesJohn Johansen-22/+130
2017-01-16apparmor: pass the subject profile into profile replace/removeJohn Johansen-16/+21
2017-01-16apparmor: audit policy ns specified in policy loadJohn Johansen-24/+77
2017-01-16apparmor: allow introspecting the loaded policy pre internal transformJohn Johansen-58/+278
2017-01-16apparmor: add ns name to the audit data for policy loadsJohn Johansen-10/+25
2017-01-16apparmor: add profile and ns params to aa_may_manage_policy()John Johansen-14/+12
2017-01-16apparmor: add ns being viewed as a param to policy_admin_capable()John Johansen-10/+16
2017-01-16apparmor: add ns being viewed as a param to policy_view_capable()John Johansen-8/+35
2017-01-16apparmor: allow specifying the profile doing the managementJohn Johansen-11/+21
2017-01-16apparmor: allow introspecting the policy namespace nameJohn Johansen-0/+24
2017-01-16apparmor: Make aa_remove_profile() callable from a different viewJohn Johansen-5/+7
2017-01-16apparmor: track ns level so it can be used to help in view checksJohn Johansen-0/+1
2017-01-16apparmor: add special .null file used to "close" fds at execJohn Johansen-1/+81
2017-01-16apparmor: provide userspace flag indicating binfmt_elf_mmap changeJohn Johansen-0/+1