summaryrefslogtreecommitdiff
path: root/kernel/capability.c
AgeCommit message (Expand)AuthorFilesLines
2023-01-19fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner1-4/+2
2023-01-19fs: port privilege checking helpers to mnt_idmapChristian Brauner1-3/+5
2022-10-26caps: use type safe idmapping helpersChristian Brauner1-2/+2
2022-03-09xfs: don't generate selinux audit messages for capability testingDarrick J. Wong1-0/+1
2021-01-24capability: handle idmapped mountsChristian Brauner1-5/+9
2020-10-13LSM: Signal to SafeSetID when setting group IDsThomas Cedeno1-1/+1
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2019-01-25LSM: add SafeSetID module that gates setid callsMicah Morton1-0/+19
2019-01-22capabilities:: annotate implicit fall throughMathieu Malaterre1-3/+1
2019-01-10LSM: generalize flag passing to security_capableMicah Morton1-9/+13
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-01-12capability: export has_capabilityJike Song1-0/+1
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-11-22exec: Ensure mm->user_ns contains the execed filesEric W. Biederman1-2/+14
2016-11-22ptrace: Capture the ptracer's creds not PT_PTRACE_CAPEric W. Biederman1-0/+20
2016-06-06kernel: Add noaudit variant of ns_capable()Tyler Hicks1-10/+36
2015-04-15kernel: conditionally support non-root users, groups and capabilitiesIulia Manda1-16/+19
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris1-0/+4
2014-06-10fs,userns: Change inode_capable to capable_wrt_inode_uidgidAndy Lutomirski1-12/+8
2014-06-04kernel/capability.c: code clean-upFabian Frederick1-3/+3
2014-04-03Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-19/+10
2014-02-24capability: Use current logging stylesJoe Perches1-19/+10
2014-01-13audit: Simplify and correct audit_log_capsetEric W. Biederman1-1/+1
2013-09-09Merge tag 'xfs-for-linus-v3.12-rc1' of git://oss.sgi.com/xfs/xfsLinus Torvalds1-0/+1
2013-08-30userns: Kill nsown_capable it makes the wrong thing easyEric W. Biederman1-12/+0
2013-08-15xfs: ioctl check for capabilities in the current user namespaceDwight Engen1-0/+1
2013-04-14Add file_ns_capable() helper function for open-time capability checkingLinus Torvalds1-0/+24
2012-05-15userns: Teach inode_capable to understand inodes whose uids map to other name...Eric W. Biederman1-2/+4
2012-04-07userns: Replace the hard to write inode_userns with inode_capable.Eric W. Biederman1-0/+19
2012-01-17Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call"Linus Torvalds1-1/+1
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-34/+46
2012-01-05capabilities: remove task_ns_* functionsEric Paris1-14/+0
2012-01-05capabitlies: ns_capable can use the cap helpers rather than lsm callEric Paris1-1/+1
2012-01-05capabilities: style only - move capable below ns_capableEric Paris1-16/+16
2012-01-05capabilites: introduce new has_ns_capabilities_noauditEric Paris1-5/+25
2012-01-05capabilities: call has_ns_capability from has_capabilityEric Paris1-16/+10
2012-01-05capabilities: remove all _real_ interfacesEric Paris1-3/+15
2012-01-05capabilities: reverse arguments to security_capableEric Paris1-1/+1
2011-10-31kernel: Map most files to use export.h instead of module.hPaul Gortmaker1-1/+1
2011-05-19Merge branch 'master' into nextJames Morris1-0/+12
2011-05-13Cache user_ns in struct credSerge E. Hallyn1-0/+12
2011-04-04capabilities: delete unused cap_set_fullEric Paris1-2/+0
2011-04-04capabilities: do not drop CAP_SETPCAP from the initial taskEric Paris1-2/+0
2011-03-23userns: make has_capability* into real functionsSerge E. Hallyn1-0/+54
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn1-5/+37
2011-02-11security: add cred argument to security_capable()Chris Wright1-1/+1
2010-04-02sched: Remove remaining USER_SCHED codeLi Zefan1-1/+0
2009-12-10capabilities: Use RCU to protect task lookup in sys_capgetThomas Gleixner1-2/+2
2009-11-24remove CONFIG_SECURITY_FILE_CAPABILITIES compile optionSerge E. Hallyn1-2/+0
2009-11-24Silence the existing API for capability version compatibility check.Andrew G. Morgan1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-25 02:01:43 +0000