summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2014-09-16Merge tag 'keys-fixes-20140916' into keys-nextDavid Howells1-0/+2
2014-09-16KEYS: Reinstate EPERM for a key type name beginning with a '.'David Howells1-0/+2
2014-09-09integrity: make integrity files as 'integrity' moduleDmitry Kasatkin1-3/+3
2014-09-09integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin3-14/+18
2014-09-09integrity: move asymmetric keys config optionDmitry Kasatkin1-12/+12
2014-09-09ima: initialize only required templateDmitry Kasatkin1-24/+4
2014-09-09ima: remove usage of filename parameterDmitry Kasatkin2-14/+10
2014-09-09ima: remove unnecessary appraisal testDmitry Kasatkin1-2/+0
2014-09-09ima: add missing '__init' keywordsDmitry Kasatkin3-5/+3
2014-09-09ima: remove unnecessary extra variableDmitry Kasatkin1-4/+5
2014-09-09ima: simplify conditional statement to improve performanceDmitry Kasatkin1-4/+2
2014-09-09integrity: remove declaration of non-existing functionsDmitry Kasatkin2-10/+0
2014-09-09integrity: prevent flooding with 'Request for unknown key'Dmitry Kasatkin1-2/+3
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin3-12/+12
2014-09-09evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin1-0/+7
2014-09-08ima: provide flag to identify new empty filesDmitry Kasatkin3-7/+13
2014-09-08evm: prevent passing integrity check if xattr read failsDmitry Kasatkin1-3/+4
2014-09-02evm: fix checkpatch warningsDmitry Kasatkin1-3/+0
2014-09-02ima: fix fallback to use new_sync_read()Dmitry Kasatkin1-4/+4
2014-09-02ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin1-1/+4
2014-09-02ima: fix ima_alloc_atfm()Mimi Zohar1-1/+4
2014-08-02Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris5-102/+70
2014-08-01netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore5-26/+26
2014-08-01netlabel: fix the horribly broken catmap functionsPaul Moore2-82/+50
2014-08-01netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore1-1/+1
2014-07-30Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-11/+2
2014-07-28Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore1-11/+2
2014-07-28KEYS: revert encrypted key changeMimi Zohar1-1/+1
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar6-4/+41
2014-07-25security: introduce kernel_fw_from_file hookKees Cook2-0/+12
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris1-0/+3
2014-07-24Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris12-57/+209
2014-07-24commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa1-42/+30
2014-07-22Merge branch 'keys-fixes' into keys-nextDavid Howells1-1/+14
2014-07-22Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells6-4/+67
2014-07-22KEYS: request_key_auth: Provide key preparsingDavid Howells1-0/+13
2014-07-22KEYS: keyring: Provide key preparsingDavid Howells1-11/+23
2014-07-22KEYS: big_key: Use key preparsingDavid Howells1-16/+25
2014-07-22KEYS: user: Use key preparsingDavid Howells1-19/+22
2014-07-22KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells1-5/+4
2014-07-22KEYS: Allow expiry time to be set when preparsing a keyDavid Howells1-0/+8
2014-07-22KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells2-3/+5
2014-07-19Merge tag 'seccomp-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris1-2/+2
2014-07-19Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris11-160/+101
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook1-2/+2
2014-07-18KEYS: Provide a generic instantiation functionDavid Howells1-0/+30
2014-07-17KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells1-1/+14
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar5-2/+63
2014-07-17KEYS: special dot prefixed keyring name bug fixMimi Zohar1-2/+4
2014-07-17ima: provide double buffering for hash calculationDmitry Kasatkin1-16/+49