| Commit message (Expand) | Author | Age | Files | Lines |
* | KEYS: Fix race between read and revoke | David Howells | 2016-01-22 | 1 | -9/+9 |
* | KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring | David Howells | 2015-11-17 | 1 | -2/+4 |
* | KEYS: Fix race between key destruction and finding a keyring by name | David Howells | 2015-11-17 | 1 | -4/+4 |
* | fs: create and use seq_show_option for escaping | Kees Cook | 2015-10-13 | 1 | -1/+1 |
* | selinux/nlmsg: add XFRM_MSG_MAPPING | Nicolas Dichtel | 2015-08-07 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_MIGRATE | Nicolas Dichtel | 2015-08-07 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_REPORT | Nicolas Dichtel | 2015-08-07 | 1 | -0/+1 |
* | selinux/nlmsg: add XFRM_MSG_[NEW|GET]SADINFO | Nicolas Dichtel | 2015-08-07 | 1 | -0/+2 |
* | selinux/nlmsg: add XFRM_MSG_GETSPDINFO | Nicolas Dichtel | 2015-08-07 | 1 | -0/+1 |
* | selinux: fix sel_write_enforce broken return value | Joe Perches | 2015-05-09 | 1 | -1/+1 |
* | smack: fix possible use after frees in task_security() callers | Andrey Ryabinin | 2015-05-09 | 2 | -11/+23 |
* | KEYS: close race between key lookup and freeing | Sasha Levin | 2015-02-20 | 1 | -2/+2 |
* | KEYS: Fix stale key registration at error path | Takashi Iwai | 2015-02-20 | 1 | -1/+4 |
* | move d_rcu from overlapping d_child to overlapping d_alias | Al Viro | 2015-01-01 | 1 | -3/+3 |
* | evm: check xattr value length and type in evm_inode_setxattr() | Dmitry Kasatkin | 2014-12-14 | 1 | -3/+6 |
* | selinux: fix inode security list corruption | Stephen Smalley | 2014-12-14 | 1 | -1/+1 |
* | netlabel: fix a problem when setting bits below the previously lowest bit | Paul Moore | 2014-09-13 | 1 | -1/+1 |
* | evm: prohibit userspace writing 'security.evm' HMAC value | Mimi Zohar | 2014-07-11 | 1 | -2/+10 |
* | selinux: correctly label /proc inodes in use before the policy is loaded | Paul Moore | 2014-04-30 | 1 | -9/+27 |
* | SELinux: bigendian problems with filename trans rules | Eric Paris | 2014-04-02 | 1 | -4/+4 |
* | SELinux: Fix kernel BUG on empty security contexts. | Stephen Smalley | 2014-04-02 | 1 | -0/+4 |
* | SELinux: Fix memory leak upon loading policy | Tetsuo Handa | 2014-04-02 | 1 | -1/+13 |
* | selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos... | Paul Moore | 2014-04-02 | 1 | -7/+35 |
* | SELinux: Fix possible NULL pointer dereference in selinux_inode_permission() | Steven Rostedt | 2014-02-15 | 2 | -3/+22 |
* | selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock() | Oleg Nesterov | 2014-02-15 | 1 | -2/+2 |
* | selinux: fix broken peer recv check | Chad Hanson | 2014-02-15 | 1 | -1/+3 |
* | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() | Paul Moore | 2014-01-03 | 1 | -15/+53 |
* | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() | Paul Moore | 2014-01-03 | 1 | -2/+23 |
* | selinux: correct locking in selinux_netlbl_socket_connect) | Paul Moore | 2014-01-03 | 1 | -4/+2 |
* | key: Fix resource leak | Alan Cox | 2013-04-10 | 1 | -2/+2 |
* | selinux: use GFP_ATOMIC under spin_lock | Dan Carpenter | 2013-03-27 | 1 | -1/+1 |
* | Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and securit... | Mathieu Desnoyers | 2013-03-20 | 1 | -2/+2 |
* | keys: fix race with concurrent install_user_keyrings() | David Howells | 2013-03-20 | 1 | -1/+1 |
* | evm: checking if removexattr is not a NULL | Dmitry Kasatkin | 2013-02-06 | 1 | -2/+2 |
* | Revert "device_cgroup: fix RCU usage" | Ben Hutchings | 2013-01-03 | 1 | -3/+3 |
* | selinux: fix sel_netnode_insert() suspicious rcu dereference | Dave Jones | 2012-12-06 | 1 | -1/+2 |
* | device_cgroup: fix RCU usage | Tejun Heo | 2012-12-06 | 1 | -3/+3 |
* | SELinux: if sel_make_bools errors don't leave inconsistent state | Eric Paris | 2012-05-31 | 1 | -0/+1 |
* | security: fix compile error in commoncap.c | Jonghwan Choi | 2012-04-22 | 1 | -0/+1 |
* | fcaps: clear the same personality flags as suid when fcaps are used | Eric Paris | 2012-04-22 | 1 | -0/+5 |
* | TOMOYO: Fix mount flags checking order. | Tetsuo Handa | 2012-04-13 | 1 | -18/+20 |
* | ima: fix Kconfig dependencies | Fabio Estevam | 2012-04-02 | 1 | -1/+1 |
* | Security: tomoyo: add .gitignore file | Greg Kroah-Hartman | 2012-02-29 | 1 | -0/+2 |
* | TOMOYO: Accept \000 as a valid character. | Tetsuo Handa | 2012-01-25 | 1 | -3/+3 |
* | ima: fix invalid memory reference | Roberto Sassu | 2012-01-25 | 1 | -5/+11 |
* | ima: free duplicate measurement memory | Roberto Sassu | 2012-01-25 | 2 | -2/+3 |
* | security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not set | Jan Kara | 2012-01-03 | 1 | -1/+1 |
* | SELinux: Fix RCU deref check warning in sel_netport_insert() | David Howells | 2011-12-21 | 1 | -1/+3 |
* | evm: prevent racing during tfm allocation | Dmitry Kasatkin | 2011-12-20 | 1 | -0/+9 |
* | evm: key must be set once during initialization | Dmitry Kasatkin | 2011-12-20 | 1 | -4/+6 |