summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2017-08-01commoncap: Move cap_elevated calculation into bprm_set_credsKees Cook1-42/+10
2017-08-01commoncap: Refactor to remove bprm_secureexec hookKees Cook1-4/+8
2017-08-01smack: Refactor to remove bprm_secureexec hookKees Cook1-17/+4
2017-08-01selinux: Refactor to remove bprm_secureexec hookKees Cook1-19/+5
2017-08-01apparmor: Refactor to remove bprm_secureexec hookKees Cook4-23/+1
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook4-4/+4
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal2-2/+2
2017-07-25selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel1-0/+1
2017-07-25sync to Linus v4.13-rc2 for subsystem developers to work againstJames Morris24-334/+365
2017-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller4-1/+15
2017-07-20security: Use user_namespace::level to avoid redundant iterations in cap_capa...Kirill Tkhai1-2/+5
2017-07-19Merge tag 'gcc-plugins-v4.13-rc2' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds1-1/+1
2017-07-18xfrm: remove flow cacheFlorian Westphal1-3/+1
2017-07-18LSM: Remove security_task_create() hook.Tetsuo Handa1-5/+0
2017-07-14KEYS: DH: validate __spare fieldEric Biggers2-0/+7
2017-07-12include/linux/string.h: add the option of fortified string.h functionsDaniel Micay1-0/+7
2017-07-05Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-7/+5
2017-07-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+2
2017-07-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds68-2111/+8342
2017-07-03Merge tag 'docs-4.13' of git://git.lwn.net/linuxLinus Torvalds8-8/+9
2017-07-03Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds1-0/+1
2017-07-03Merge tag 'uuid-for-4.13' of git://git.infradead.org/users/hch/uuidLinus Torvalds2-8/+6
2017-06-30randstruct: Mark various structs for randomizationKees Cook1-1/+1
2017-06-30ima_write_policy(): don't open-code memdup_user_nul()Al Viro1-9/+4
2017-06-28apparmor: put back designators in struct initialisersStephen Rothwell1-2/+2
2017-06-23Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/selinux i...James Morris17-108/+821
2017-06-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-3/+2
2017-06-21ima: Log the same audit cause whenever a file has no signatureThiago Jung Bauermann1-1/+2
2017-06-21ima: Simplify policy_func_show.Thiago Jung Bauermann2-62/+21
2017-06-21integrity: Small code improvementsThiago Jung Bauermann6-9/+11
2017-06-21ima: fix get_binary_runtime_size()Roberto Sassu1-1/+1
2017-06-21ima: use ima_parse_buf() to parse template dataRoberto Sassu1-31/+13
2017-06-21ima: use ima_parse_buf() to parse measurements headersRoberto Sassu1-52/+28
2017-06-21ima: introduce ima_parse_buf()Roberto Sassu2-0/+67
2017-06-21ima: Add cgroups2 to the defaults listLaura Abbott1-0/+3
2017-06-21ima: use memdup_user_nulGeliang Tang1-9/+4
2017-06-21ima: fix up #endif commentsTycho Andersen1-2/+2
2017-06-21IMA: Correct Kconfig dependencies for hash selectionBen Hutchings1-4/+4
2017-06-21ima: define is_ima_appraise_enabled()Mimi Zohar1-0/+10
2017-06-21ima: define Kconfig IMA_APPRAISE_BOOTPARAM optionMimi Zohar2-0/+10
2017-06-21ima: define a set of appraisal rules requiring file signaturesMimi Zohar1-1/+25
2017-06-21ima: extend the "ima_policy" boot command line to support multiple policiesMimi Zohar1-5/+10
2017-06-21rtnetlink: add NEWCACHEREPORT message typeJulien Gomes1-1/+2
2017-06-21Merge branch 'smack-for-4.13' of git://github.com/cschaufler/smack-next into ...James Morris4-18/+31
2017-06-20selinux: enable genfscon labeling for tracefsJeff Vander Stoep1-0/+1
2017-06-20sched/wait: Split out the wait_bit*() APIs from <linux/wait.h> into <linux/wa...Ingo Molnar1-0/+1
2017-06-13selinux: fix double free in selinux_parse_opts_str()Paul Moore1-3/+2
2017-06-10apparmor: export that basic profile namespaces are supportedJohn Johansen1-0/+7
2017-06-10apparmor: add stacked domain labels interfaceJohn Johansen2-0/+8
2017-06-10apparmor: add domain label stacking info to apparmorfsJohn Johansen3-0/+39