| Commit message (Expand) | Author | Age | Files | Lines |
* | KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings | Eric Biggers | 2017-04-30 | 2 | -24/+31 |
* | KEYS: Change the name of the dead type to ".dead" to prevent user access | David Howells | 2017-04-30 | 1 | -1/+1 |
* | KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings | David Howells | 2017-04-30 | 1 | -2/+7 |
* | selinux: fix off-by-one in setprocattr | Stephen Smalley | 2017-04-18 | 1 | -1/+1 |
* | KEYS: Fix short sprintf buffer in /proc/keys show function | David Howells | 2016-11-23 | 1 | -1/+1 |
* | KEYS: potential uninitialized variable | Dan Carpenter | 2016-07-12 | 1 | -1/+1 |
* | KEYS: Fix handling of stored error in a negatively instantiated user key | David Howells | 2016-04-13 | 3 | -2/+10 |
* | security: let security modules use PTRACE_MODE_* with bitmasks | Jann Horn | 2016-04-13 | 2 | -7/+5 |
* | ptrace: use fsuid, fsgid, effective creds for fs access checks | Jann Horn | 2016-04-12 | 1 | -1/+6 |
* | EVM: Use crypto_memneq() for digest comparisons | Ryan Ware | 2016-03-04 | 1 | -1/+2 |
* | KEYS: Fix keyring ref leak in join_session_keyring() | Yevgeny Pats | 2016-01-25 | 1 | -0/+1 |
* | KEYS: Fix race between read and revoke | David Howells | 2016-01-22 | 1 | -9/+9 |
* | KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring | David Howells | 2015-11-18 | 1 | -2/+4 |
* | KEYS: Fix race between key destruction and finding a keyring by name | David Howells | 2015-11-18 | 1 | -4/+4 |
* | ima: extend "mask" policy matching support | Mimi Zohar | 2015-08-27 | 1 | -5/+15 |
* | ima: add support for new "euid" policy condition | Mimi Zohar | 2015-08-27 | 1 | -4/+23 |
* | evm: labeling pseudo filesystems exception | Mimi Zohar | 2015-08-04 | 1 | -0/+12 |
* | KEYS: ensure we free the assoc array edit if edit is valid | Colin Ian King | 2015-08-04 | 1 | -3/+5 |
* | selinux: fix setting of security labels on NFS | J. Bruce Fields | 2015-07-20 | 1 | -1/+2 |
* | ima: fix ima_show_template_data_ascii() | Mimi Zohar | 2015-07-03 | 3 | -4/+5 |
* | selinux/nlmsg: add XFRM_MSG_MAPPING | Nicolas Dichtel | 2015-06-28 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_MIGRATE | Nicolas Dichtel | 2015-06-28 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_REPORT | Nicolas Dichtel | 2015-06-28 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFO | Nicolas Dichtel | 2015-06-28 | 1 | -0/+2 |
* | selinux/nlmsg: add XFRM_MSG_GETSPDINFO | Nicolas Dichtel | 2015-06-28 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_NEWSPDINFO | Nicolas Dichtel | 2015-06-28 | 1 | -0/+1 |
* | selinux: fix sel_write_enforce broken return value | Joe Perches | 2015-04-22 | 1 | -1/+1 |
* | smack: fix possible use after frees in task_security() callers | Andrey Ryabinin | 2015-03-06 | 2 | -11/+23 |
* | KEYS: close race between key lookup and freeing | Sasha Levin | 2015-01-29 | 1 | -2/+2 |
* | KEYS: Fix stale key registration at error path | Takashi Iwai | 2015-01-08 | 1 | -1/+4 |
* | move d_rcu from overlapping d_child to overlapping d_alias | Al Viro | 2014-12-16 | 1 | -3/+3 |
* | KEYS: request_key() should reget expired keys rather than give EKEYEXPIRED | David Howells | 2014-12-01 | 3 | -2/+5 |
* | KEYS: Simplify KEYRING_SEARCH_{NO,DO}_STATE_CHECK flags | David Howells | 2014-12-01 | 3 | -3/+6 |
* | KEYS: Fix the size of the key description passed to/from userspace | David Howells | 2014-12-01 | 1 | -30/+26 |
* | Merge branch 'stable-3.18' of git://git.infradead.org/users/pcmoore/selinux i... | James Morris | 2014-11-13 | 1 | -3/+4 |
|\ |
|
| * | selinux: convert WARN_ONCE() to printk() in selinux_nlmsg_perm() | Richard Guy Briggs | 2014-11-12 | 1 | -3/+4 |
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/zoh... | James Morris | 2014-10-29 | 3 | -3/+9 |
|\ \ |
|
| * | | evm: check xattr value length and type in evm_inode_setxattr() | Dmitry Kasatkin | 2014-10-28 | 1 | -3/+6 |
| * | | ima: check xattr value length and type in the ima_inode_setxattr() | Dmitry Kasatkin | 2014-10-28 | 2 | -0/+3 |
* | | | Merge branch 'stable-3.18' of git://git.infradead.org/users/pcmoore/selinux i... | James Morris | 2014-10-16 | 1 | -1/+1 |
|\ \ \
| | |/
| |/| |
|
| * | | selinux: fix inode security list corruption | Stephen Smalley | 2014-10-15 | 1 | -1/+1 |
* | | | security, crypto: LLVMLinux: Remove VLAIS from ima_crypto.c | Behan Webster | 2014-10-14 | 1 | -28/+19 |
* | | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/... | Linus Torvalds | 2014-10-12 | 37 | -593/+912 |
|\ \ \
| | |/
| |/| |
|
| * | | integrity: do zero padding of the key id | Dmitry Kasatkin | 2014-10-06 | 1 | -1/+1 |
| * | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li... | James Morris | 2014-10-02 | 6 | -47/+94 |
| |\ \ |
|
| | * | | ima: detect violations for mmaped files | Roberto Sassu | 2014-09-18 | 2 | -9/+5 |
| | * | | ima: fix race condition on ima_rdwr_violation_check and process_measurement | Roberto Sassu | 2014-09-18 | 1 | -21/+33 |
| | * | | ima: added ima_policy_flag variable | Roberto Sassu | 2014-09-17 | 4 | -5/+34 |
| | * | | ima: return an error code from ima_add_boot_aggregate() | Roberto Sassu | 2014-09-17 | 1 | -6/+15 |
| | * | | ima: provide 'ima_appraise=log' kernel option | Dmitry Kasatkin | 2014-09-17 | 2 | -2/+5 |