summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies-8/+10
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies-0/+15
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies-1/+1
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies-1/+16
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies-1/+1
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee-0/+23
2016-06-24Smack: Handle labels consistently in untrusted mountsSeth Forshee-10/+19
2016-06-24Smack: Add support for unprivileged mounts from user namespacesSeth Forshee-12/+37
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski-2/+8
2016-06-24fs: Limit file caps to the user namespace of the super blockSeth Forshee-0/+2
2016-06-24KEYS: Use skcipher for big keysHerbert Xu-12/+18
2016-06-16KEYS: potential uninitialized variableDan Carpenter-1/+1
2016-06-15selinux: fix type mismatchHeinrich Schuchardt-1/+1
2016-06-14KEYS: Strip trailing spacesDavid Howells-2/+2
2016-06-10vfs: make the string hashes salt the hashLinus Torvalds-4/+4
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore-1/+1
2016-06-08Smack: ignore null signal in smack_task_killRafal Krypa-0/+3
2016-06-06security: tomoyo: simplify the gc kthread creationMike Danese-7/+2
2016-06-06LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler-4/+25
2016-06-03KEYS: Add placeholder for KDF usage with DHStephan Mueller-6/+13
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley-48/+22
2016-05-29securityfs: ->d_parent is never NULL or negativeAl Viro-5/+6
2016-05-29drbd: ->d_parent is never NULL or negativeAl Viro-4/+0
2016-05-27Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds-1/+1
2016-05-27switch ->setxattr() to passing dentry and inode separatelyAl Viro-1/+1
2016-05-26Yama: fix double-spinlock and user access in atomic contextJann Horn-6/+63
2016-05-20security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko-12/+2
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds-185/+909
2016-05-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds-1/+3
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds-106/+83
2016-05-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds-14/+15
2016-05-17Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds-2/+2
2016-05-17LSM: LoadPin: provide enablement CONFIGKees Cook-6/+15
2016-05-17Merge branch 'ovl-fixes' into for-linusAl Viro-2/+2
2016-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-2/+2
2016-05-06Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris-60/+127
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris-112/+516
2016-05-04Yama: use atomic allocations when reportingSasha Levin-2/+2
2016-05-04Merge branch 'keys-trust' into keys-nextDavid Howells-62/+128
2016-05-04ima: fix the string representation of the LSM/IMA hook enumeration orderingMimi Zohar-2/+2
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar-1/+29
2016-05-01ima: fix ima_inode_post_setattrMimi Zohar-1/+2
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley-2/+3
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley-17/+25
2016-04-22security: Introduce security_settime64()Baolin Wang-2/+2
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook-0/+205
2016-04-21Yama: consolidate error reportingKees Cook-10/+21
2016-04-20rtnetlink: add new RTM_GETSTATS message to dump link statsRoopa Prabhu-1/+3
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore-1/+1
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore-8/+13