summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley4-16/+42
2017-08-01selinux: Refactor to remove bprm_secureexec hookKees Cook1-19/+5
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal1-1/+1
2017-07-25selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel1-0/+1
2017-07-18xfrm: remove flow cacheFlorian Westphal1-3/+1
2017-07-05Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-7/+5
2017-07-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+2
2017-07-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds14-106/+743
2017-06-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+2
2017-06-21rtnetlink: add NEWCACHEREPORT message typeJulien Gomes1-1/+2
2017-06-20selinux: enable genfscon labeling for tracefsJeff Vander Stoep1-0/+1
2017-06-13selinux: fix double free in selinux_parse_opts_str()Paul Moore1-3/+2
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew1-2/+33
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee3-6/+27
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal1-4/+20
2017-05-25sel_write_validatetrans(): don't open-code memdup_user_nul()Al Viro1-7/+5
2017-05-23selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens5-3/+288
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens4-0/+70
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens4-0/+66
2017-05-23selinux: Allocate and free infiniband security hooksDaniel Jurgens2-1/+29
2017-05-23selinux: Create policydb version for Infiniband supportDaniel Jurgens3-24/+118
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens2-0/+13
2017-05-23selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley3-11/+27
2017-05-23selinux: do not check open permission on socketsStephen Smalley1-3/+7
2017-05-23selinux: add a map permission check for mmapStephen Smalley2-1/+13
2017-05-23selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley1-8/+15
2017-05-23selinux: Return an error code only as a constant in sidtab_insert()Markus Elfring1-17/+10
2017-05-23selinux: Return directly after a failed memory allocation in policydb_index()Markus Elfring1-10/+5
2017-05-23selinux: Use task_alloc hook rather than task_create hookTetsuo Handa1-2/+3
2017-05-09Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds1-2/+2
2017-05-03Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds10-62/+81
2017-04-26fs: constify tree_descr arrays passed to simple_fill_super()Eric Biggers1-2/+2
2017-03-31selinux: Fix an uninitialized variable bugDan Carpenter1-1/+1
2017-03-29selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke1-1/+1
2017-03-29selinuxfs: Use seq_puts() in sel_avc_stats_seq_show()Markus Elfring1-4/+4
2017-03-29selinux: Adjust two checks for null pointersMarkus Elfring1-2/+2
2017-03-29selinux: Use kmalloc_array() in sidtab_init()Markus Elfring1-1/+1
2017-03-29selinux: Return directly after a failed kzalloc() in roles_init()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in perm_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in common_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in class_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in role_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in type_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in user_read()Markus Elfring1-2/+1
2017-03-29selinux: Improve another size determination in sens_read()Markus Elfring1-1/+1
2017-03-29selinux: Return directly after a failed kzalloc() in sens_read()Markus Elfring1-2/+1
2017-03-29selinux: Return directly after a failed kzalloc() in cat_read()Markus Elfring1-2/+1
2017-03-28rtnetlink: Add RTM_DELNETCONFDavid Ahern1-0/+1