summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen-7/+7
2017-01-16apparmor: constify policy name and hnameJohn Johansen-4/+4
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen-4/+4
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen-8/+8
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen-4/+43
2017-01-16apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen-0/+11
2017-01-16apparmor: allow ns visibility question to consider subnsesJohn Johansen-8/+14
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen-7/+38
2017-01-16apparmor: add lib fn to find the "split" for fqnamesJohn Johansen-0/+55
2017-01-16apparmor: add strn version of aa_find_nsJohn Johansen-6/+29
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen-11/+27
2017-01-16apparmor: rename replacedby to proxyJohn Johansen-65/+65
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen-5/+5
2017-01-16apparmor: rename sid to secidJohn Johansen-65/+65
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen-128/+122
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen-391/+454
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen-132/+137
2017-01-16apparmor: move lib definitions into separate lib includeJohn Johansen-82/+99
2017-01-15apparmor: use designated initializersKees Cook-5/+7
2017-01-15AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa-1/+2
2017-01-14locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra-8/+2
2017-01-12security,selinux,smack: kill security_task_wait hookStephen Smalley-33/+0
2017-01-12selinux: drop unused socket security classesStephen Smalley-12/+0
2017-01-10Smack: ignore private inode for file functionsSeung-Woo Kim-0/+12
2017-01-10Smack: fix d_instantiate logic for sockfs and pipefsRafal Krypa-7/+7
2017-01-10SMACK: Use smk_tskacc() instead of smk_access() for proper loggingHimanshu Shukla-4/+1
2017-01-10Smack: Traverse the smack_known_list using list_for_each_entry_rcu macroVishal Goel-1/+1
2017-01-10SMACK: Free the i_security blob in inode using RCUHimanshu Shukla-4/+29
2017-01-10SMACK: Delete list_head repeated initializationHimanshu Shukla-4/+0
2017-01-10SMACK: Add new lock for adding entry in smack master listVishal Goel-0/+5
2017-01-10Smack: Fix the issue of wrong SMACK label update in socket bind fail caseVishal Goel-0/+21
2017-01-10Smack: Fix the issue of permission denied error in ipv6 hookVishal Goel-2/+4
2017-01-10SMACK: Add the rcu synchronization mechanism in ipv6 hooksVishal Goel-5/+15
2017-01-09selinux: default to security isid in sel_make_bools() if no sid is foundGary Tierney-3/+3
2017-01-09selinux: log errors when loading new policyGary Tierney-5/+16
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley-29/+6
2017-01-09selinux: clean up cred usage and simplifyStephen Smalley-211/+166
2017-01-09selinux: allow context mounts on tmpfs, ramfs, devpts within user namespacesStephen Smalley-3/+7
2017-01-09selinux: handle ICMPv6 consistently with ICMPStephen Smalley-1/+2
2017-01-09selinux: add security in-core xattr support for tracefsYongqin Liu-0/+1
2017-01-09selinux: support distinctions among all network address familiesStephen Smalley-2/+147
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds-4/+4
2016-12-22Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-0/+2
2016-12-21selinux: use the kernel headers when building scripts/selinuxPaul Moore-0/+2
2016-12-20ima: platform-independent hash valueAndreas Steffen-2/+4
2016-12-20ima: define a canonical binary_runtime_measurements list formatMimi Zohar-13/+62
2016-12-20ima: support restoring multiple template formatsMimi Zohar-3/+49
2016-12-20ima: store the builtin/custom template definitions in a listMimi Zohar-11/+43
2016-12-20ima: on soft reboot, save the measurement listMimi Zohar-1/+119
2016-12-20ima: maintain memory size needed for serializing the measurement listMimi Zohar-2/+64