summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2008-01-30SELinux: Allow NetLabel to directly cache SIDsPaul Moore-134/+55
2008-01-30SELinux: Enable dynamic enable/disable of the network access checksPaul Moore-13/+83
2008-01-30SELinux: Better integration between peer labeling subsystemsPaul Moore-100/+208
2008-01-30SELinux: Add a new peer class and permissions to the Flask definitionsPaul Moore-0/+26
2008-01-30SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore-8/+185
2008-01-30SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu...Paul Moore-17/+416
2008-01-30SELinux: Only store the network interface's ifindexPaul Moore-6/+15
2008-01-30SELinux: Convert the netif code to use ifindex valuesPaul Moore-125/+155
2008-01-30NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu...Paul Moore-15/+38
2008-01-30NetLabel: Add secid token support to the NetLabel secattr structPaul Moore-6/+9
2008-01-28[NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy-2/+2
2008-01-26selinux: fix labeling of /proc/net inodesStephen Smalley-0/+3
2008-01-25Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-277/+564
2008-01-24Kobject: convert remaining kobject_unregister() to kobject_put()Greg Kroah-Hartman-1/+1
2008-01-24kobject: convert kernel_kset to be a kobjectGreg Kroah-Hartman-1/+1
2008-01-24kset: convert kernel_subsys to use kset_createGreg Kroah-Hartman-1/+1
2008-01-24kobject: convert securityfs to use kobject_createGreg Kroah-Hartman-6/+5
2008-01-24kobject: remove struct kobj_type from struct ksetGreg Kroah-Hartman-2/+2
2008-01-25selinux: make mls_compute_sid always polyinstantiateEamon Walsh-9/+2
2008-01-25security/selinux: constify function pointer tables and fieldsJan Engelhardt-3/+3
2008-01-25security: add a secctx_to_secid() hookDavid Howells-0/+18
2008-01-25security: remove security_sb_post_mountroot hookH. Peter Anvin-11/+0
2008-01-25Security: add get, set, and cloning of superblock security informationEric Paris-254/+541
2008-01-25security/selinux: Add missing "space"Joe Perches-1/+1
2008-01-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-4/+5
2008-01-21Fix filesystem capability supportAndrew G. Morgan-3/+10
2008-01-22selinux: fix memory leak in netlabel codePaul Moore-4/+5
2007-12-06Security: allow capable check to permit mmap or low vm spaceEric Paris-1/+1
2007-12-06SELinux: detect dead booleansStephen Smalley-13/+30
2007-12-06SELinux: do not clear f_op when removing entriesStephen Smalley-27/+1
2007-11-29file capabilities: don't prevent signaling setuid root programsSerge E. Hallyn-0/+9
2007-11-14file capabilities: allow sigcont within sessionSerge E. Hallyn-0/+4
2007-11-08SELinux: add more validity checks on policy loadStephen Smalley-38/+118
2007-11-08SELinux: fix bug in new ebitmap code.KaiGai Kohei-1/+1
2007-11-08SELinux: suppress a warning for 64k pages.Stephen Rothwell-6/+7
2007-10-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-5/+1
2007-10-23SELinux: always check SIGCHLD in selinux_task_waitEric Paris-5/+1
2007-10-22capabilities: clean up file capability readingSerge E. Hallyn-8/+15
2007-10-19pid namespaces: define is_global_init() and is_container_init()Serge E. Hallyn-1/+2
2007-10-18sparse pointer use of zero as nullStephen Hemminger-1/+1
2007-10-18V3 file capabilities: alter behavior of cap_setpcapAndrew Morgan-14/+61
2007-10-17security/ cleanupsAdrian Bunk-118/+1
2007-10-17Implement file posix capabilitiesSerge E. Hallyn-43/+313
2007-10-17security: Convert LSM into a static interfaceJames Morris-71/+961
2007-10-17KEYS: Make request_key() and co fundamentally asynchronousDavid Howells-317/+335
2007-10-17SELinux: kills warnings in Improve SELinux performance when AVC missesKaiGai Kohei-6/+7
2007-10-17SELinux: improve performance when AVC misses.KaiGai Kohei-237/+303
2007-10-17SELinux: policy selectable handling of unknown classes and permsEric Paris-9/+106
2007-10-17SELinux: Improve read/write performanceYuichi Nakamura-1/+67
2007-10-17SELinux: tune avtab to reduce memory usageYuichi Nakamura-36/+82