summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2019-01-18LSM: Make some functions staticWei Yongjun-3/+3
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa-22/+11
2019-01-17Merge branch 'fixes-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+10
2019-01-16LSM: Check for NULL cred-security on freeJames Morris-0/+7
2019-01-16Yama: Check for pid death before checking ancestryKees Cook-1/+3
2019-01-16Merge tag 'selinux-pr-20190115' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-1/+2
2019-01-10selinux: do not override context on context mountsOndrej Mosnacek-1/+8
2019-01-10selinux: never allow relabeling on context mountsOndrej Mosnacek-9/+31
2019-01-10selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_linkStephen Smalley-30/+4
2019-01-10selinux: avoid silent denials in permissive mode under RCU walkStephen Smalley-3/+25
2019-01-10selinux: fix GPF on invalid policyStephen Smalley-1/+2
2019-01-10LSM: generalize flag passing to security_capableMicah Morton-39/+37
2019-01-08TOMOYO: Update LSM flags to no longer be exclusiveKees Cook-1/+1
2019-01-08LSM: Infrastructure management of the ipc security blobCasey Schaufler-121/+108
2019-01-08Smack: Abstract use of ipc security blobsCasey Schaufler-5/+20
2019-01-08SELinux: Abstract use of ipc security blobsCasey Schaufler-9/+22
2019-01-08LSM: Infrastructure management of the task securityCasey Schaufler-27/+60
2019-01-08LSM: Infrastructure management of the inode securityCasey Schaufler-98/+90
2019-01-08Smack: Abstract use of inode security blobCasey Schaufler-18/+23
2019-01-08SELinux: Abstract use of inode security blobCasey Schaufler-15/+21
2019-01-08LSM: Infrastructure management of the file securityCasey Schaufler-51/+71
2019-01-08Smack: Abstract use of file security blobCasey Schaufler-4/+13
2019-01-08SELinux: Abstract use of file security blobCasey Schaufler-9/+14
2019-01-08Infrastructure management of the cred security blobCasey Schaufler-102/+150
2019-01-08TOMOYO: Abstract use of cred security blobCasey Schaufler-16/+64
2019-01-08AppArmor: Abstract use of cred security blobCasey Schaufler-10/+24
2019-01-08SELinux: Remove unused selinux_is_enabledCasey Schaufler-29/+1
2019-01-08SELinux: Remove cred security blob poisoningCasey Schaufler-6/+0
2019-01-08SELinux: Abstract use of cred security blobCasey Schaufler-29/+34
2019-01-08Smack: Abstract use of cred security blobCasey Schaufler-43/+53
2019-01-08procfs: add smack subdir to attrsCasey Schaufler-4/+20
2019-01-08capability: Initialize as LSM_ORDER_FIRSTKees Cook-6/+8
2019-01-08LSM: Introduce enum lsm_orderKees Cook-1/+8
2019-01-08Yama: Initialize as ordered LSMKees Cook-3/+8
2019-01-08LoadPin: Initialize as ordered LSMKees Cook-40/+8
2019-01-08LSM: Split LSM preparation from initializationKees Cook-6/+15
2019-01-08LSM: Add all exclusive LSMs to ordered initializationCasey Schaufler-25/+20
2019-01-08selinux: Remove SECURITY_SELINUX_BOOTPARAM_VALUEKees Cook-19/+1
2019-01-08apparmor: Remove SECURITY_APPARMOR_BOOTPARAM_VALUEKees Cook-17/+1
2019-01-08LSM: Separate idea of "major" LSM from "exclusive" LSMKees Cook-4/+16
2019-01-08LSM: Refactor "security=" in terms of enable/disableKees Cook-8/+20
2019-01-08LSM: Prepare for reorganizing "security=" logicKees Cook-9/+8
2019-01-08LSM: Tie enabling logic to presence in ordered listKees Cook-3/+11
2019-01-08LSM: Introduce "lsm=" for boottime LSM selectionKees Cook-2/+15
2019-01-08LSM: Introduce CONFIG_LSMKees Cook-5/+31
2019-01-08LSM: Build ordered list of LSMs to initializeKees Cook-5/+53
2019-01-08LSM: Lift LSM selection out of individual LSMsKees Cook-52/+71
2019-01-08LSM: Plumb visibility into optional "enabled" stateKees Cook-2/+4
2019-01-08LSM: Provide separate ordered initializationKees Cook-0/+21
2019-01-08LSM: Introduce LSM_FLAG_LEGACY_MAJORKees Cook-0/+4