summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2009-05-22Merge branch 'master' into nextJames Morris-11/+11
2009-05-22smack: do not beyond ARRAY_SIZE of dataRoel Kluin-1/+1
2009-05-22integrity: path_check updateMimi Zohar-19/+29
2009-05-22IMA: Add __init notation to ima functionsEric Paris-7/+7
2009-05-22IMA: Minimal IMA policy and boot param for TCB IMA policyEric Paris-3/+27
2009-05-19selinux: remove obsolete read buffer limit from sel_read_boolStephen Smalley-4/+0
2009-05-19SELinux: move SELINUX_MAGIC into magic.hEric Paris-7/+4
2009-05-15IMA: do not measure everything opened by root by defaultEric Paris-2/+0
2009-05-15IMA: remove read permissions on the ima policy fileEric Paris-1/+5
2009-05-12securityfs: securityfs_remove should handle IS_ERR pointersEric Paris-1/+1
2009-05-12IMA: open all files O_LARGEFILEEric Paris-1/+2
2009-05-12IMA: Handle dentry_open failuresEric Paris-4/+6
2009-05-12IMA: use current_cred() instead of current->credEric Paris-2/+2
2009-05-09Reduce path_lookup() abusesAl Viro-11/+11
2009-05-08Merge branch 'master' into nextJames Morris-28/+39
2009-05-06integrity: remove __setup auditing msgsMimi Zohar-25/+4
2009-05-06integrity: use audit_log_stringMimi Zohar-13/+4
2009-05-06integrity: lsm audit rule matching fixMimi Zohar-4/+4
2009-05-05selinux: Fix send_sigiotask hookStephen Smalley-1/+1
2009-04-30selinux: selinux_bprm_committed_creds() should wake up ->real_parent, not ->p...Oleg Nesterov-8/+3
2009-04-30SELinux: Don't flush inherited SIGKILL during execve()David Howells-4/+5
2009-04-30SELinux: drop secondary_ops->sysctlEric Paris-4/+0
2009-04-18Smack: check for SMACK xattr validity in smack_inode_setxattrEtienne Basset-5/+6
2009-04-15rculist: use list_entry_rcu in places where it's appropriateJiri Pirko-6/+6
2009-04-14tomoyo: version bump to 2.2.0.Tetsuo Handa-10/+10
2009-04-14smack: implement logging V3Etienne Basset-110/+600
2009-04-14smack: implement logging V3Etienne Basset-0/+386
2009-04-09keys: Handle there being no fallback destination keyring for request_key()David Howells-3/+6
2009-04-09cap_prctl: don't set error to 0 at 'no_change'Serge E. Hallyn-1/+0
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa-100/+5
2009-04-07tomoyo: remove "undelete domain" command.Tetsuo Handa-100/+5
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells-0/+2
2009-04-02Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds-0/+1
2009-04-02devcgroup: avoid using cgroup_lockLi Zefan-8/+13
2009-04-03don't raise all privs on setuid-root file with fE set (v2)Serge E. Hallyn-0/+32
2009-04-02Permissive domain in userspace object managerKaiGai Kohei-29/+11
2009-03-31Get rid of indirect include of fs_struct.hAl Viro-0/+1
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset-10/+45
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore-118/+143
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore-10/+0
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore-214/+7
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore-187/+82
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa-1/+1
2009-03-26smack: convert smack to standard linux listsEtienne Basset-122/+168
2009-03-24Merge branch 'master' into nextJames Morris-38/+14
2009-03-10SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris-3/+9
2009-03-06SELinux: new permission between tty audit and audit socketEric Paris-1/+3
2009-03-06SELinux: open perm for sock filesEric Paris-0/+4
2009-03-05smack: fixes for unlabeled host supportetienne-50/+57
2009-03-05smack: fixes for unlabeled host supportetienne-15/+49