summaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
* Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-092-2/+2
|\
| * KEYS: Strip trailing spacesDavid Howells2016-06-142-2/+2
* | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-081-0/+3
|\ \
| * | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| |/
* | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-077-64/+73
|\ \
| * | calipso: Add a label cache.Huw Davies2016-06-271-3/+6
| * | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-274-8/+10
| * | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-271-0/+15
| * | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-271-1/+1
| * | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| * | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-271-1/+1
| * | selinux: fix type mismatchHeinrich Schuchardt2016-06-151-1/+1
| * | selinux: import NetLabel category bitmaps correctlyPaul Moore2016-06-091-1/+1
| * | selinux: Only apply bounds checking to source typesStephen Smalley2016-05-311-48/+22
* | | ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
* | | ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
* | | ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
* | | ima: change ima_measurements_show() to display the entry specific pcrEric Richter2016-06-301-5/+4
* | | ima: include pcr for each measurement log entryEric Richter2016-06-304-8/+13
* | | ima: extend ima_get_action() to return the policy pcrEric Richter2016-06-305-7/+14
* | | ima: add policy support for extending different pcrsEric Richter2016-06-301-1/+28
* | | integrity: add measured_pcrs field to integrity cacheEric Richter2016-06-302-0/+3
| |/ |/|
* | security: tomoyo: simplify the gc kthread creationMike Danese2016-06-061-7/+2
* | LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler2016-06-061-4/+25
* | KEYS: Add placeholder for KDF usage with DHStephan Mueller2016-06-034-6/+13
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2016-05-271-1/+1
|\ \
| * | switch ->setxattr() to passing dentry and inode separatelyAl Viro2016-05-271-1/+1
* | | Yama: fix double-spinlock and user access in atomic contextJann Horn2016-05-261-6/+63
|/ /
* | security/integrity/ima/ima_policy.c: use %pU to output UUID in printable formatAndy Shevchenko2016-05-201-12/+2
* | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-05-1934-185/+909
|\ \ | |/
| * LSM: LoadPin: provide enablement CONFIGKees Cook2016-05-172-6/+15
| * Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-05-065-60/+127
| |\
| | * selinux: apply execstack check on thread stacksStephen Smalley2016-04-261-2/+3
| | * selinux: distinguish non-init user namespace capability checksStephen Smalley2016-04-262-17/+25
| | * selinux: check ss_initialized before revalidating an inode labelPaul Moore2016-04-191-1/+1
| | * selinux: delay inode label lookup as long as possiblePaul Moore2016-04-191-8/+13
| | * selinux: don't revalidate an inode's label when explicitly setting itPaul Moore2016-04-191-2/+11
| | * selinux: Change bool variable name to index.Prarit Bhargava2016-04-142-4/+4
| | * selinux: restrict kernel module loadingJeff Vander Stoep2016-04-052-1/+48
| | * selinux: consolidate the ptrace parent lookup codePaul Moore2016-04-051-21/+17
| | * selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore2016-04-052-4/+3
| | * selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()Paul Moore2016-04-051-3/+5
| * | Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-05-0619-112/+516
| |\ \
| | * \ Merge branch 'keys-trust' into keys-nextDavid Howells2016-05-0410-62/+128
| | |\ \
| | | * | IMA: Use the the system trusted keyrings instead of .ima_mokDavid Howells2016-04-114-53/+32
| | | * | KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTEDDavid Howells2016-04-113-39/+4
| | | * | KEYS: Move the point of trust determination to __key_link()David Howells2016-04-112-4/+35
| | | * | KEYS: Add a facility to restrict new links into a keyringDavid Howells2016-04-118-33/+124
| | | |/
| | * | KEYS: Add KEYCTL_DH_COMPUTE commandMat Martineau2016-04-126-0/+193