summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2009-04-18Smack: check for SMACK xattr validity in smack_inode_setxattrEtienne Basset-5/+6
2009-04-14tomoyo: version bump to 2.2.0.Tetsuo Handa-10/+10
2009-04-09keys: Handle there being no fallback destination keyring for request_key()David Howells-3/+6
2009-04-09cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn-1/+0
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa-100/+5
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells-0/+2
2009-04-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds-0/+1
2009-04-02devcgroup: avoid using cgroup_lockLi Zefan-8/+13
2009-03-31Get rid of indirect include of fs_struct.hAl Viro-0/+1
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset-10/+45
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore-118/+143
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore-10/+0
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore-214/+7
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore-187/+82
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa-1/+1
2009-03-26smack: convert smack to standard linux listsEtienne Basset-122/+168
2009-03-24Merge branch 'master' into nextJames Morris-38/+14
2009-03-10SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris-3/+9
2009-03-06SELinux: new permission between tty audit and audit socketEric Paris-1/+3
2009-03-06SELinux: open perm for sock filesEric Paris-0/+4
2009-03-05smack: fixes for unlabeled host supportetienne-50/+57
2009-03-05smack: fixes for unlabeled host supportetienne-15/+49
2009-03-02selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore-2/+3
2009-02-27keys: make procfiles per-user-namespaceSerge E. Hallyn-6/+49
2009-02-27keys: skip keys from another user namespaceSerge E. Hallyn-0/+3
2009-02-27keys: consider user namespace in key_permissionSerge E. Hallyn-0/+5
2009-02-27keys: distinguish per-uid keys in different namespacesSerge E. Hallyn-5/+16
2009-02-23selinux: Fix the NetLabel glue code for setsockopt()Paul Moore-1/+3
2009-02-23integrity: ima iint radix_tree_lookup locking fixMimi Zohar-0/+2
2009-02-23TOMOYO: Do not call tomoyo_realpath_init unless registered.Tetsuo Handa-6/+5
2009-02-21integrity: ima scatterlist bug fixMimi Zohar-2/+2
2009-02-19smack: fix lots of kernel-doc notationRandy Dunlap-37/+34
2009-02-16TOMOYO: Don't create securityfs entries unless registered.Tetsuo Handa-0/+4
2009-02-14TOMOYO: Fix exception policy read failure.Tetsuo Handa-1/+1
2009-02-14SELinux: convert the avc cache hash list to an hlistEric Paris-20/+27
2009-02-14SELinux: code readability with avc_cacheEric Paris-19/+44
2009-02-14SELinux: remove unused av.decided fieldEric Paris-14/+6
2009-02-14SELinux: more careful use of avd in avc_has_perm_noauditEric Paris-19/+24
2009-02-14SELinux: remove the unused ae.usedEric Paris-21/+7
2009-02-14SELinux: check seqno when updating an avc_nodeEric Paris-3/+6
2009-02-14SELinux: NULL terminate al contexts from diskEric Paris-2/+4
2009-02-14SELinux: better printk when file with invalid label foundEric Paris-4/+13
2009-02-14SELinux: call capabilities code directoryEric Paris-17/+13
2009-02-13ima: fix build errorRandy Dunlap-2/+2
2009-02-12tomoyo: fix sparse warningTetsuo Handa-4/+4
2009-02-12security: change link order of LSMs so security=tomoyo worksJames Morris-1/+1
2009-02-12Kconfig and MakefileKentaro Takeda-0/+15
2009-02-12LSM adapter functions.Kentaro Takeda-0/+399
2009-02-12Domain transition handler.Kentaro Takeda-0/+878
2009-02-12File operation restriction part.Kentaro Takeda-0/+1241