summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2019-07-07security/commoncap: Use xattr security prefix lenCarmeli Tamir-2/+2
2019-07-04vfs: Convert smackfs to use the new mount APIDavid Howells-12/+22
2019-07-04vfs: Convert selinuxfs to use the new mount APIDavid Howells-5/+15
2019-07-04vfs: Convert securityfs to use the new mount APIDavid Howells-6/+15
2019-07-04vfs: Convert apparmorfs to use the new mount APIDavid Howells-5/+15
2019-07-03keys: Provide KEYCTL_GRANT_PERMISSIONDavid Howells-1/+133
2019-07-01selinux: format all invalid context as untrustedRichard Guy Briggs-10/+19
2019-06-30integrity: Introduce struct evm_xattrThiago Jung Bauermann-7/+14
2019-06-30ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definitionThiago Jung Bauermann-1/+7
2019-06-30IMA: Define a new template field bufPrakhar Srivastava-1/+33
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells-186/+496
2019-06-27keys: Pass the network namespace into request_key mechanismDavid Howells-17/+36
2019-06-26keys: Network namespace domain tagDavid Howells-1/+6
2019-06-26keys: Garbage collect keys for which the domain has been removedDavid Howells-1/+17
2019-06-26keys: Include target namespace in match criteriaDavid Howells-4/+39
2019-06-26keys: Move the user and user-session keyrings to the user_namespaceDavid Howells-104/+187
2019-06-26keys: Namespace keyring namesDavid Howells-57/+45
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells-9/+22
2019-06-26keys: Cache the hash value to avoid lots of recalculationDavid Howells-16/+22
2019-06-26keys: Simplify key description managementDavid Howells-49/+30
2019-06-26keys: Kill off request_key_async{,_with_auxdata}David Howells-50/+0
2019-06-24IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava-0/+81
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-71/+65
2019-06-21Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds-61/+15
2019-06-20apparmor: increase left match history buffer sizeJohn Johansen-5/+4
2019-06-20apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior-12/+12
2019-06-20apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior-111/+164
2019-06-20apparmor: Force type-casting of current->real_credBharath Vedartham-1/+1
2019-06-19IMA: support for per policy rule template formatsMatthew Garrett-27/+76
2019-06-19keys: Cache result of request_key*() temporarily in task_structDavid Howells-0/+55
2019-06-19keys: Provide request_key_rcu()David Howells-0/+44
2019-06-19keys: Move the RCU locks outwards from the keyring search functionsDavid Howells-60/+75
2019-06-19keys: Invalidate used request_key authentication keysDavid Howells-3/+3
2019-06-19keys: Fix request_key() lack of Link perm check on found keyDavid Howells-0/+10
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner-61/+15
2019-06-19keys: Add capability-checking keyctl functionDavid Howells-0/+40
2019-06-18apparmor: reset pos on failure to unpack for various functionsMike Salvatore-8/+39
2019-06-18apparmor: enforce nullbyte at end of tag stringJann Horn-1/+1
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen-1/+10
2019-06-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-484/+133
2019-06-17integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven-2/+3
2019-06-17locking/lockdep: Rename lockdep_assert_held_exclusive() -> lockdep_assert_hel...Nikolay Borisov-4/+4
2019-06-14Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler-5/+7
2019-06-14docs: cgroup-v1: convert docs to ReST and rename to *.rstMauro Carvalho Chehab-1/+1
2019-06-14Merge tag 'v5.2-rc4' into mauroJonathan Corbet-616/+157
2019-06-14ima: Use designated initializers for struct ima_event_dataThiago Jung Bauermann-6/+11
2019-06-14ima: use the lsm policy update notifierJanne Karhunen-20/+106
2019-06-14LSM: switch to blocking policy update notifiersJanne Karhunen-12/+15
2019-06-14x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICYNayna Jain-1/+2
2019-06-14ima: Make arch_policy_entry staticYueHaibing-1/+1