summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2009-01-01cpumask: prepare for iterators to only go to nr_cpu_ids/nr_cpumask_bits.: coreRusty Russell-1/+1
2009-01-01keys: fix sparse warning by adding __user annotation to castJames Morris-1/+1
2008-12-31introduce new LSM hooks where vfsmount is available.Kentaro Takeda-0/+132
2008-12-31smack: Add support for unlabeled network hosts and networksCasey Schaufler-195/+538
2008-12-31selinux: Deprecate and schedule the removal of the the compat_net functionalityPaul Moore-38/+11
2008-12-31netlabel: Update kernel configuration APIPaul Moore-5/+16
2008-12-29KEYS: Fix variable uninitialisation warningsDavid Howells-3/+3
2008-12-29Merge branch 'next' into for-linusJames Morris-4/+16
2008-12-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds-4/+4
2008-12-25smackfs: check for allocation failures in smk_set_access()Sergio Luis-4/+16
2008-12-20SELinux: don't check permissions for kernel mountsJames Morris-0/+4
2008-12-20security: pass mount flags to security_sb_kern_mount()James Morris-5/+6
2008-12-20SELinux: correctly detect proc filesystems of the form "proc/foo"Stephen Smalley-1/+1
2008-11-25CRED: fix sparse warningsHannes Eder-3/+3
2008-11-15capabilities: define get_vfs_caps_from_disk when file caps are not enabledEric Paris-0/+6
2008-11-14CRED: Allow kernel services to override LSM settings for task actionsDavid Howells-0/+105
2008-11-14CRED: Add a kernel_service object class to SELinuxDavid Howells-0/+10
2008-11-14CRED: Differentiate objective and effective subjective credentials on a taskDavid Howells-24/+41
2008-11-14CRED: Prettify commoncap.cDavid Howells-52/+248
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells-335/+214
2008-11-14CRED: Inaugurate COW credentialsDavid Howells-630/+668
2008-11-14CRED: Pass credentials through dentry_open()David Howells-9/+12
2008-11-14CRED: Make inode_has_perm() and file_has_perm() take a cred pointerDavid Howells-48/+92
2008-11-14CRED: Separate per-task-group keyrings from signal_structDavid Howells-80/+54
2008-11-14CRED: Wrap access to SELinux's task SIDDavid Howells-194/+218
2008-11-14CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells-57/+86
2008-11-14CRED: Wrap current->cred and a few other accessorsDavid Howells-29/+32
2008-11-14CRED: Detach the credentials from task_structDavid Howells-35/+33
2008-11-14CRED: Separate task security context from task_structDavid Howells-258/+280
2008-11-14CRED: Constify the kernel_cap_t arguments to the capset LSM hooksDavid Howells-14/+18
2008-11-14CRED: Neuter sys_capset()David Howells-36/+21
2008-11-14KEYS: Alter use of key instantiation link-to-keyring argumentDavid Howells-111/+187
2008-11-14KEYS: Disperse linux/key_ui.hDavid Howells-1/+33
2008-11-14CRED: Wrap task credential accesses in the capabilities codeDavid Howells-12/+18
2008-11-14CRED: Wrap task credential accesses in the key management codeDavid Howells-8/+8
2008-11-11Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller-1/+6
2008-11-11Currently SELinux jumps through some ugly hoops to not audit a capbilityEric Paris-17/+2
2008-11-11Add a new capable interface that will be used by systems that use audit toEric Paris-12/+23
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris-1/+22
2008-11-11This patch add a generic cpu endian caps structure and externally availableEric Paris-58/+71
2008-11-10KEYS: Make request key instantiate the per-user keyringsDavid Howells-1/+6
2008-11-09SELinux: Use unknown perm handling to handle unknown netlink msg typesEric Paris-1/+1
2008-11-06Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller-6/+8
2008-11-06file capabilities: add no_file_caps switch (v4)Serge E. Hallyn-0/+3
2008-11-06Merge branch 'master' into nextJames Morris-56/+30
2008-11-06selinux: recognize netlink messages for 'ip addrlabel'Michal Schmidt-0/+3
2008-11-05SELinux: hold tasklist_lock and siglock while waking wait_chldexitEric Paris-0/+7
2008-11-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-3/+5
2008-11-01file caps: always start with clear bprm->caps_*Serge Hallyn-3/+3
2008-11-01SELinux: properly handle empty tty_files listEric Paris-3/+5