summaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyringsEric Biggers2017-04-302-24/+31
* KEYS: Change the name of the dead type to ".dead" to prevent user accessDavid Howells2017-04-301-1/+1
* KEYS: Disallow keyrings beginning with '.' to be joined as session keyringsDavid Howells2017-04-301-2/+7
* selinux: fix off-by-one in setprocattrStephen Smalley2017-04-181-1/+1
* KEYS: Fix short sprintf buffer in /proc/keys show functionDavid Howells2016-11-231-1/+1
* KEYS: potential uninitialized variableDan Carpenter2016-07-121-1/+1
* KEYS: Fix handling of stored error in a negatively instantiated user keyDavid Howells2016-04-133-2/+10
* security: let security modules use PTRACE_MODE_* with bitmasksJann Horn2016-04-132-7/+5
* ptrace: use fsuid, fsgid, effective creds for fs access checksJann Horn2016-04-121-1/+6
* EVM: Use crypto_memneq() for digest comparisonsRyan Ware2016-03-041-1/+2
* KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats2016-01-251-0/+1
* KEYS: Fix race between read and revokeDavid Howells2016-01-221-9/+9
* KEYS: Fix crash when attempt to garbage collect an uninstantiated keyringDavid Howells2015-11-181-2/+4
* KEYS: Fix race between key destruction and finding a keyring by nameDavid Howells2015-11-181-4/+4
* ima: extend "mask" policy matching supportMimi Zohar2015-08-271-5/+15
* ima: add support for new "euid" policy conditionMimi Zohar2015-08-271-4/+23
* evm: labeling pseudo filesystems exceptionMimi Zohar2015-08-041-0/+12
* KEYS: ensure we free the assoc array edit if edit is validColin Ian King2015-08-041-3/+5
* selinux: fix setting of security labels on NFSJ. Bruce Fields2015-07-201-1/+2
* ima: fix ima_show_template_data_ascii()Mimi Zohar2015-07-033-4/+5
* selinux/nlmsg: add XFRM_MSG_MAPPINGNicolas Dichtel2015-06-281-0/+1
* selinux/nlmsg: add XFRM_MSG_MIGRATENicolas Dichtel2015-06-281-0/+1
* selinux/nlmsg: add XFRM_MSG_REPORTNicolas Dichtel2015-06-281-0/+1
* selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFONicolas Dichtel2015-06-281-0/+2
* selinux/nlmsg: add XFRM_MSG_GETSPDINFONicolas Dichtel2015-06-281-0/+1
* selinux/nlmsg: add XFRM_MSG_NEWSPDINFONicolas Dichtel2015-06-281-0/+1
* selinux: fix sel_write_enforce broken return valueJoe Perches2015-04-221-1/+1
* smack: fix possible use after frees in task_security() callersAndrey Ryabinin2015-03-062-11/+23
* KEYS: close race between key lookup and freeingSasha Levin2015-01-291-2/+2
* KEYS: Fix stale key registration at error pathTakashi Iwai2015-01-081-1/+4
* move d_rcu from overlapping d_child to overlapping d_aliasAl Viro2014-12-161-3/+3
* KEYS: request_key() should reget expired keys rather than give EKEYEXPIREDDavid Howells2014-12-013-2/+5
* KEYS: Simplify KEYRING_SEARCH_{NO,DO}_STATE_CHECK flagsDavid Howells2014-12-013-3/+6
* KEYS: Fix the size of the key description passed to/from userspaceDavid Howells2014-12-011-30/+26
* Merge branch 'stable-3.18' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-11-131-3/+4
|\
| * selinux: convert WARN_ONCE() to printk() in selinux_nlmsg_perm()Richard Guy Briggs2014-11-121-3/+4
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/zoh...James Morris2014-10-293-3/+9
|\ \
| * | evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin2014-10-281-3/+6
| * | ima: check xattr value length and type in the ima_inode_setxattr()Dmitry Kasatkin2014-10-282-0/+3
* | | Merge branch 'stable-3.18' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-10-161-1/+1
|\ \ \ | | |/ | |/|
| * | selinux: fix inode security list corruptionStephen Smalley2014-10-151-1/+1
* | | security, crypto: LLVMLinux: Remove VLAIS from ima_crypto.cBehan Webster2014-10-141-28/+19
* | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2014-10-1237-593/+912
|\ \ \ | | |/ | |/|
| * | integrity: do zero padding of the key idDmitry Kasatkin2014-10-061-1/+1
| * | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris2014-10-026-47/+94
| |\ \
| | * | ima: detect violations for mmaped filesRoberto Sassu2014-09-182-9/+5
| | * | ima: fix race condition on ima_rdwr_violation_check and process_measurementRoberto Sassu2014-09-181-21/+33
| | * | ima: added ima_policy_flag variableRoberto Sassu2014-09-174-5/+34
| | * | ima: return an error code from ima_add_boot_aggregate()Roberto Sassu2014-09-171-6/+15
| | * | ima: provide 'ima_appraise=log' kernel optionDmitry Kasatkin2014-09-172-2/+5