Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.19
/
47f6e5cc7355e4ff2fd7ace919aa9e291077c26b
/
security
47f6e5c
apparmor: change op from int to const char *
by John Johansen
· 8 years ago
55a26eb
apparmor: rename context abreviation cxt to the more standard ctx
by John Johansen
· 8 years ago
a20aa95
apparmor: fail task profile update if current_cred isn't real_cred
by John Johansen
· 8 years ago
b7fd2c0
apparmor: add per policy ns .load, .replace, .remove interface files
by John Johansen
· 8 years ago
12dd717
apparmor: pass the subject profile into profile replace/remove
by John Johansen
· 8 years ago
04dc715
apparmor: audit policy ns specified in policy load
by John Johansen
· 8 years ago
5ac8c35
apparmor: allow introspecting the loaded policy pre internal transform
by John Johansen
· 8 years ago
fc1c9fd
apparmor: add ns name to the audit data for policy loads
by John Johansen
· 8 years ago
078c73c6
apparmor: add profile and ns params to aa_may_manage_policy()
by John Johansen
· 8 years ago
fd2a804
apparmor: add ns being viewed as a param to policy_admin_capable()
by John Johansen
· 8 years ago
2bd8dbb
apparmor: add ns being viewed as a param to policy_view_capable()
by John Johansen
· 8 years ago
a6f2330
apparmor: allow specifying the profile doing the management
by John Johansen
· 8 years ago
3e3e569
apparmor: allow introspecting the policy namespace name
by John Johansen
· 8 years ago
b79473f
apparmor: Make aa_remove_profile() callable from a different view
by John Johansen
· 8 years ago
ee2351e
apparmor: track ns level so it can be used to help in view checks
by John Johansen
· 8 years ago
a71ada3
apparmor: add special .null file used to "close" fds at exec
by John Johansen
· 8 years ago
34c426a
apparmor: provide userspace flag indicating binfmt_elf_mmap change
by John Johansen
· 8 years ago
11c236b
apparmor: add a default null dfa
by John Johansen
· 8 years ago
6604d4c
apparmor: allow policydb to be used as the file dfa
by John Johansen
· 8 years ago
293a488
apparmor: add get_dfa() fn
by John Johansen
· 8 years ago
474d6b75
apparmor: prepare to support newer versions of policy
by John Johansen
· 8 years ago
5ebfb12
apparmor: add support for force complain flag to support learning mode
by John Johansen
· 8 years ago
abbf873
apparmor: remove paranoid load switch
by John Johansen
· 8 years ago
181f7c9
apparmor: name null-XXX profiles after the executable
by John Johansen
· 8 years ago
30b026a
apparmor: pass gfp_t parameter into profile allocation
by John Johansen
· 8 years ago
73688d1
apparmor: refactor prepare_ns() and make usable from different views
by John Johansen
· 8 years ago
5fd1b95
apparmor: update policy_destroy to use new debug asserts
by John Johansen
· 8 years ago
d102d89
apparmor: pass gfp param into aa_policy_init()
by John Johansen
· 8 years ago
bbe4a7c
apparmor: constify policy name and hname
by John Johansen
· 8 years ago
6e474e3
apparmor: rename hname_tail to basename
by John Johansen
· 8 years ago
efeee83
apparmor: rename mediated_filesystem() to path_mediated_fs()
by John Johansen
· 8 years ago
680cd62
apparmor: add debug assert AA_BUG and Kconfig to control debug info
by John Johansen
· 8 years ago
57e36bb
apparmor: add macro for bug asserts to check that a lock is held
by John Johansen
· 8 years ago
92b6d8e
apparmor: allow ns visibility question to consider subnses
by John Johansen
· 8 years ago
31617dd
apparmor: add fn to lookup profiles by fqname
by John Johansen
· 8 years ago
3b0aaf5
apparmor: add lib fn to find the "split" for fqnames
by John Johansen
· 8 years ago
9a2d40c
apparmor: add strn version of aa_find_ns
by John Johansen
· 8 years ago
1741e9e
apparmor: add strn version of lookup_profile fn
by John Johansen
· 8 years ago
8399588
apparmor: rename replacedby to proxy
by John Johansen
· 8 years ago
d97d51d
apparmor: rename PFLAG_INVALID to PFLAG_STALE
by John Johansen
· 8 years ago
121d4a9
apparmor: rename sid to secid
by John Johansen
· 8 years ago
98849df
apparmor: rename namespace to ns to improve code line lengths
by John Johansen
· 8 years ago
cff281f
apparmor: split apparmor policy namespaces code into its own file
by John Johansen
· 8 years ago
fe6bb31
apparmor: split out shared policy_XXX fns to lib
by John Johansen
· 8 years ago
12557dc
apparmor: move lib definitions into separate lib include
by John Johansen
· 8 years ago
8486adf
apparmor: use designated initializers
by Kees Cook
· 8 years ago
a7f6c1b
AppArmor: Use GFP_KERNEL for __aa_kvmalloc().
by Tetsuo Handa
· 8 years ago
7c0f6ba
Replace <asm/uaccess.h> with <linux/uaccess.h> globally
by Linus Torvalds
· 8 years ago
6732714
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
bfc5e3a
selinux: use the kernel headers when building scripts/selinux
by Paul Moore
· 8 years ago
98e1d55d
ima: platform-independent hash value
by Andreas Steffen
· 8 years ago
d68a6fe
ima: define a canonical binary_runtime_measurements list format
by Mimi Zohar
· 8 years ago
c7d0936
ima: support restoring multiple template formats
by Mimi Zohar
· 8 years ago
3f23d62
ima: store the builtin/custom template definitions in a list
by Mimi Zohar
· 8 years ago
7b8589c
ima: on soft reboot, save the measurement list
by Mimi Zohar
· 8 years ago
d158847
ima: maintain memory size needed for serializing the measurement list
by Mimi Zohar
· 8 years ago
dcfc569
ima: permit duplicate measurement list entries
by Mimi Zohar
· 8 years ago
94c3aac
ima: on soft reboot, restore the measurement list
by Mimi Zohar
· 8 years ago
9a19a6d
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
c4364f8
Merge branches 'work.namei', 'work.dcache' and 'work.iov_iter' into for-linus
by Al Viro
· 8 years ago
a57cb1c
Merge branch 'akpm' (patches from Andrew)
by Linus Torvalds
· 8 years ago
5b56d49
mm: add locked parameter to get_user_pages_remote()
by Lorenzo Stoakes
· 8 years ago
412ac77a
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 8 years ago
683b96f
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
9465d9c
Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
by Linus Torvalds
· 8 years ago
cbbd26b
[iov_iter] new primitives - copy_from_iter_full() and friends
by Al Viro
· 8 years ago
50523a2
Yama: allow access for the current ptrace parent
by Josh Stone
· 8 years ago
4506309
don't open-code file_inode()
by Al Viro
· 8 years ago
19339c2
Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"
by Eric W. Biederman
· 8 years ago
0821e30
Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
b075361
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next
by James Morris
· 8 years ago
9287aed
selinux: Convert isec->lock into a spinlock
by Andreas Gruenbacher
· 8 years ago
636e462
Merge remote branch 'smack/smack-for-4.10' into next
by James Morris
· 8 years ago
3322d0d
selinux: keep SELinux in sync with new capability definitions
by Stephen Smalley
· 8 years ago
3d40658
apparmor: fix change_hat not finding hat after policy replacement
by John Johansen
· 8 years ago
ea49d10
selinux: normalize input to /sys/fs/selinux/enforce
by Stephen Smalley
· 8 years ago
baa73d9
posix-timers: Make them configurable
by Nicolas Pitre
· 8 years ago
152f91d
Smack: Remove unnecessary smack_known_invalid
by Casey Schaufler
· 8 years ago
8c15d66
Smack: Use GFP_KERNEL for smack_parse_opts_str().
by Tetsuo Handa
· 8 years ago
13457d0
selinux: Clean up initialization of isec->sclass
by Andreas Gruenbacher
· 8 years ago
db978da
proc: Pass file mode to proc_pid_make_inode
by Andreas Gruenbacher
· 8 years ago
4205911
selinux: Minor cleanups
by Andreas Gruenbacher
· 8 years ago
8931c3b
SELinux: Use GFP_KERNEL for selinux_parse_opts_str().
by Tetsuo Handa
· 8 years ago
b4bfec7
security/integrity: Harden against malformed xattrs
by Seth Forshee
· 8 years ago
064be15
ima: include the reason for TPM-bypass mode
by Mimi Zohar
· 8 years ago
f5acb3d
Revert "ima: limit file hash setting by user to fix and log modes"
by Mimi Zohar
· 8 years ago
9a11a18
ima: fix memory leak in ima_release_policy
by Eric Richter
· 8 years ago
2e4939f
Smack: ipv6 label match fix
by Casey Schaufler
· 8 years ago
b437aba
SMACK: Fix the memory leak in smack_cred_prepare() hook
by Himanshu Shukla
· 8 years ago
7128ea1
SMACK: Do not apply star label in smack_setprocattr hook
by Himanshu Shukla
· 8 years ago
2097f59
smack: parse mnt opts after privileges check
by Himanshu Shukla
· 8 years ago
08382c9
Smack: Assign smack_known_web label for kernel thread's
by jooseong lee
· 8 years ago
31e6ec4
security/keys: make BIG_KEYS dependent on stdrng.
by Artem Savkov
· 8 years ago
7df3e59
KEYS: Sort out big_key initialisation
by David Howells
· 8 years ago
03dab86
KEYS: Fix short sprintf buffer in /proc/keys show function
by David Howells
· 8 years ago
86c5bf7
Merge branch 'mm-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
by Linus Torvalds
· 8 years ago
d17af50
mm: Change vm_is_stack_for_task() to vm_is_stack_for_current()
by Andy Lutomirski
· 8 years ago
9beae1e
mm: replace get_user_pages_remote() write/force parameters with gup_flags
by Lorenzo Stoakes
· 8 years ago
101105b
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
3873691
Merge remote-tracking branch 'ovl/rename2' into for-linus
by Al Viro
· 8 years ago
Next »