summaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* KEYS: Increase root_maxkeys and root_maxbytes sizesSteve Dickson2014-09-031-2/+2
* tomoyo: Fix pathname calculation breakage.Tetsuo Handa2014-08-261-2/+3
* Merge branch 'stable-3.17' of git://git.infradead.org/users/pcmoore/selinuxLinus Torvalds2014-08-093-6/+4
|\
| * selinux: remove unused variabled in the netport, netnode, and netif cachesPaul Moore2014-08-073-6/+4
* | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2014-08-0634-377/+781
|\ \
| * \ Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-08-025-102/+70
| |\ \ | | |/
| | * netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore2014-08-015-26/+26
| | * netlabel: fix the horribly broken catmap functionsPaul Moore2014-08-012-82/+50
| | * netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore2014-08-011-1/+1
| * | Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-07-301-11/+2
| |\ \
| | * | Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore2014-07-281-11/+2
| * | | KEYS: revert encrypted key changeMimi Zohar2014-07-281-1/+1
| * | | ima: add support for measuring and appraising firmwareMimi Zohar2014-07-256-4/+41
| * | | security: introduce kernel_fw_from_file hookKees Cook2014-07-252-0/+12
| * | | CAPABILITIES: remove undefined caps from all processesEric Paris2014-07-241-0/+3
| * | | Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2014-07-2412-57/+209
| |\ \ \
| | * \ \ Merge branch 'keys-fixes' into keys-nextDavid Howells2014-07-221-1/+14
| | |\ \ \
| | | * | | KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells2014-07-171-1/+14
| | * | | | Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells2014-07-226-4/+67
| | |\ \ \ \
| | | * | | | ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar2014-07-175-2/+63
| | | * | | | KEYS: special dot prefixed keyring name bug fixMimi Zohar2014-07-171-2/+4
| | * | | | | KEYS: request_key_auth: Provide key preparsingDavid Howells2014-07-221-0/+13
| | * | | | | KEYS: keyring: Provide key preparsingDavid Howells2014-07-221-11/+23
| | * | | | | KEYS: big_key: Use key preparsingDavid Howells2014-07-221-16/+25
| | * | | | | KEYS: user: Use key preparsingDavid Howells2014-07-221-19/+22
| | * | | | | KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells2014-07-221-5/+4
| | * | | | | KEYS: Allow expiry time to be set when preparsing a keyDavid Howells2014-07-221-0/+8
| | * | | | | KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells2014-07-222-3/+5
| | * | | | | KEYS: Provide a generic instantiation functionDavid Howells2014-07-181-0/+30
| | |/ / / /
| * | | | | commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa2014-07-241-42/+30
| * | | | | Merge tag 'seccomp-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris2014-07-191-2/+2
| |\ \ \ \ \
| | * | | | | sched: move no_new_privs into new atomic flagsKees Cook2014-07-181-2/+2
| | |/ / / /
| * | | | | Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-07-1911-160/+101
| |\ \ \ \ \ | | |/ / / / | |/| | | / | | | |_|/ | | |/| |
| | * | | selinux: reduce the number of calls to synchronize_net() when flushing cachesPaul Moore2014-06-267-42/+23
| | * | | selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long2014-06-231-9/+32
| | * | | selinux: fix a possible memory leak in cond_read_node()Namhyung Kim2014-06-191-1/+1
| | * | | selinux: simple cleanup for cond_read_node()Namhyung Kim2014-06-191-7/+2
| | * | | security: Used macros from compiler.h instead of __attribute__((...))Gideon Israel Dsouza2014-06-181-1/+2
| | * | | selinux: introduce str_read() helperNamhyung Kim2014-06-181-96/+37
| | * | | SELinux: use ARRAY_SIZEHimangi Saraogi2014-06-171-4/+4
| * | | | ima: provide double buffering for hash calculationDmitry Kasatkin2014-07-171-16/+49
| * | | | ima: introduce multi-page collect buffersDmitry Kasatkin2014-07-171-2/+96
| * | | | ima: use ahash API for file hash calculationDmitry Kasatkin2014-07-171-4/+183
| * | | | audit: fix dangling keywords in integrity ima message outputRichard Guy Briggs2014-07-172-4/+4
| * | | | ima: delay template descriptor lookup until useDmitry Kasatkin2014-07-171-1/+2
| * | | | ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin2014-07-171-4/+0
| | |/ / | |/| |
| * | | Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-07-171-2/+11
| |\ \ \ | | | |/ | | |/|
| | * | selinux: fix the default socket labeling in sock_graft()Paul Moore2014-07-101-2/+11
| | |/
| | * Merge tag 'v3.15' into nextPaul Moore2014-06-1734-235/+376
| | |\
| | * | selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones2014-05-151-0/+3