summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2015-08-11evm: labeling pseudo filesystems exceptionMimi Zohar
2015-08-11KEYS: ensure we free the assoc array edit if edit is validColin Ian King
2015-07-15ima: fix ima_show_template_data_ascii()Mimi Zohar
2015-07-15selinux: fix setting of security labels on NFSJ. Bruce Fields
2015-04-10selinux: fix sel_write_enforce broken return valueJoe Perches
2015-02-24smack: fix possible use after frees in task_security() callersAndrey Ryabinin
2015-01-15KEYS: close race between key lookup and freeingSasha Levin
2015-01-15move d_rcu from overlapping d_child to overlapping d_aliasAl Viro
2015-01-15KEYS: Fix stale key registration at error pathTakashi Iwai
2014-11-17selinux: fix inode security list corruptionStephen Smalley
2014-11-14evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin
2014-11-13evm: check xattr value length and type in evm_inode_setxattr()Dmitry Kasatkin
2014-11-13ima: check xattr value length and type in the ima_inode_setxattr()Dmitry Kasatkin
2014-10-30ima: provide flag to identify new empty filesDmitry Kasatkin
2014-10-30ima: fix fallback to use new_sync_read()Dmitry Kasatkin
2014-09-17CAPABILITIES: remove undefined caps from all processesEric Paris
2014-06-13Merge branch 'serge-next-2' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2014-06-12ima: introduce ima_kernel_read()Dmitry Kasatkin
2014-06-12evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar
2014-06-12ima: check inode integrity cache in violation checkDmitry Kasatkin
2014-06-12ima: prevent unnecessary policy checkingDmitry Kasatkin
2014-06-12evm: provide option to protect additional SMACK xattrsDmitry Kasatkin
2014-06-12evm: replace HMAC version with attribute maskDmitry Kasatkin
2014-06-12ima: prevent new digsig xattr from being replacedMimi Zohar
2014-06-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2014-06-10Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2014-06-09Merge branch 'for-3.16' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds
2014-06-03ima: audit log files opened with O_DIRECT flagMimi Zohar
2014-06-03selinux: conditionally reschedule in hashtab_insert while loading selinux policyDave Jones
2014-06-03selinux: conditionally reschedule in mls_convert_context while loading selinu...Dave Jones
2014-06-03selinux: reject setexeccon() on MNT_NOSUID applications with -EACCESPaul Moore
2014-06-03selinux: Report permissive mode in avc: denied messages.Stephen Smalley
2014-05-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2014-05-20Merge branch 'smack-for-3.16' of git://git.gitorious.org/smack-next/kernel in...James Morris
2014-05-16device_cgroup: use css_has_online_children() instead of has_children()Tejun Heo
2014-05-16device_cgroup: remove direct access to cgroup->childrenTejun Heo
2014-05-16cgroup: remove css_parent()Tejun Heo
2014-05-13cgroup: replace cftype->write_string() with cftype->write()Tejun Heo
2014-05-13Merge branch 'for-3.15-fixes' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2014-05-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2014-05-06Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2014-05-06Warning in scanf string typingToralf Förster
2014-05-06nick kvfree() from apparmorAl Viro
2014-05-05device_cgroup: check if exception removal is allowedAristeu Rozanski
2014-05-04device_cgroup: fix the comment format for recently added functionsAristeu Rozanski
2014-04-30Smack: Label cgroup files for systemdCasey Schaufler
2014-04-23Smack: Verify read access on file open - v3Casey Schaufler
2014-04-22audit: add netlink audit protocol bind to check capabilities on multicast joinRichard Guy Briggs
2014-04-22locks: rename file-private locks to "open file description locks"Jeff Layton
2014-04-21device_cgroup: rework device access check and exception checkingAristeu Rozanski