1. bcbc9b0 ima: extend the measurement list to include the file signature by Mimi Zohar · 11 years ago
  2. 42a20ba Merge branch 'keys-devel' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into ra-next by James Morris · 11 years ago
  3. d2b8697 KEYS: fix error return code in big_key_instantiate() by Wei Yongjun · 11 years ago
  4. 034faeb KEYS: Fix keyring quota misaccounting on key replacement and unlink by David Howells · 11 years ago
  5. 74792b0 KEYS: Fix a race between negating a key and reading the error set by David Howells · 11 years ago
  6. 2eaf6b5 KEYS: Make BIG_KEYS boolean by Josh Boyer · 11 years ago
  7. 51775fe apparmor: remove the "task" arg from may_change_ptraced_domain() by Oleg Nesterov · 11 years ago
  8. 4a7fc30 apparmor: remove parent task info from audit logging by John Johansen · 11 years ago
  9. 61e3fb8 apparmor: remove tsk field from the apparmor_audit_struct by John Johansen · 11 years ago
  10. dd0c6e8 apparmor: fix capability to not use the current task, during reporting by John Johansen · 11 years ago
  11. 50b719f Merge branch 'smack-for-3.13' of git://git.gitorious.org/smack-next/kernel into ra-next by James Morris · 11 years ago
  12. b5dfd80 Smack: Ptrace access check mode by Casey Schaufler · 11 years ago
  13. 3ea7a56 ima: provide hash algo info in the xattr by Dmitry Kasatkin · 11 years ago
  14. e7a2ad7 ima: enable support for larger default filedata hash algorithms by Mimi Zohar · 12 years ago
  15. 9b9d4ce ima: define kernel parameter 'ima_template=' to change configured default by Roberto Sassu · 12 years ago
  16. 4286587 ima: add Kconfig default measurement list template by Mimi Zohar · 12 years ago
  17. add1c05 ima: defer determining the appraisal hash algorithm for 'ima' template by Roberto Sassu · 12 years ago
  18. 5278aa5 ima: add audit log support for larger hashes by Mimi Zohar · 12 years ago
  19. a71dc65 ima: switch to new template management mechanism by Roberto Sassu · 12 years ago
  20. 4d7aeee ima: define new template ima-ng and template fields d-ng and n-ng by Roberto Sassu · 12 years ago
  21. 3ce1217d ima: define template fields library and new helpers by Roberto Sassu · 12 years ago
  22. adf53a7 ima: new templates management mechanism by Roberto Sassu · 12 years ago
  23. 7bc5f44 ima: define new function ima_alloc_init_template() to API by Roberto Sassu · 12 years ago
  24. 9803d41 ima: pass the filename argument up to ima_add_template_entry() by Roberto Sassu · 12 years ago
  25. 7d802a2 ima: pass the file descriptor to ima_add_violation() by Roberto Sassu · 12 years ago
  26. 09ef543 ima: ima_calc_boot_agregate must use SHA1 by Dmitry Kasatkin · 12 years ago
  27. ea59399 ima: support arbitrary hash algorithms in ima_calc_buffer_hash by Dmitry Kasatkin · 12 years ago
  28. 723326b ima: provide dedicated hash algo allocation function by Dmitry Kasatkin · 11 years ago
  29. 140d802 ima: differentiate between template hash and file data hash sizes by Mimi Zohar · 12 years ago
  30. a35c3fb ima: use dynamically allocated hash storage by Dmitry Kasatkin · 12 years ago
  31. b1aaab2 ima: pass full xattr with the signature by Dmitry Kasatkin · 11 years ago
  32. d3634d0 ima: read and use signature hash algorithm by Dmitry Kasatkin · 12 years ago
  33. c7c8bb2 ima: provide support for arbitrary hash algorithms by Dmitry Kasatkin · 12 years ago
  34. 08de59e Revert "ima: policy for RAMFS" by Mimi Zohar · 11 years ago
  35. 089bc8e ima: fix script messages by Dmitry Kasatkin · 11 years ago
  36. 6f799c9 Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next by James Morris · 11 years ago
  37. c0ab6e5 Smack: Implement lock security mode by Casey Schaufler · 11 years ago
  38. 42d64e1 selinux: correct locking in selinux_netlbl_socket_connect) by Paul Moore · 11 years ago
  39. 7d1db4b selinux: Use kmemdup instead of kmalloc + memcpy by Duan Jiong · 11 years ago
  40. c124bde KEYS: initialize root uid and session keyrings early by Mimi Zohar · 11 years ago
  41. 008643b KEYS: Add a 'trusted' flag and a 'trusted only' flag by David Howells · 11 years ago
  42. f36f8c7 KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches by David Howells · 11 years ago
  43. ab3c358 KEYS: Implement a big key type that can save to tmpfs by David Howells · 11 years ago
  44. b2a4df2 KEYS: Expand the capacity of a keyring by David Howells · 11 years ago
  45. e57e866 KEYS: Drop the permissions argument from __keyring_search_one() by David Howells · 11 years ago
  46. ccc3e6d KEYS: Define a __key_get() wrapper to use rather than atomic_inc() by David Howells · 11 years ago
  47. d0a059c KEYS: Search for auth-key by name rather than target key ID by David Howells · 11 years ago
  48. 4bdf0bc KEYS: Introduce a search context structure by David Howells · 11 years ago
  49. 16feef4 KEYS: Consolidate the concept of an 'index key' for key access by David Howells · 11 years ago
  50. 7e55ca6 KEYS: key_is_dead() should take a const key pointer argument by David Howells · 11 years ago
  51. a5b4bd2 KEYS: Use bool in make_key_ref() and is_key_possessed() by David Howells · 11 years ago
  52. 61ea0c0 KEYS: Skip key state checks when checking for possession by David Howells · 11 years ago
  53. a3c9e45 security: remove erroneous comment about capabilities.o link ordering by Eric Paris · 11 years ago
  54. 98f700f Merge git://git.infradead.org/users/eparis/selinux by Paul Moore · 11 years ago
  55. c7c4591 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 11 years ago
  56. 11c7b03 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 11 years ago
  57. cc998ff Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 11 years ago
  58. 3398d25 Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux by Linus Torvalds · 11 years ago
  59. 32dad03 Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup by Linus Torvalds · 11 years ago
  60. f54fb86 capabilities: allow nice if we are privileged by Serge Hallyn · 11 years ago
  61. 160da84 userns: Allow PR_CAPBSET_DROP in a user namespace. by Eric W. Biederman · 11 years ago
  62. 0b4bdb3 Revert "SELinux: do not handle seclabel as a special flag" by Eric Paris · 11 years ago
  63. 102aefd selinux: consider filesystem subtype in policies by Anand Avati · 12 years ago
  64. 7320336 Merge branch 'smack-for-3.12' of git://git.gitorious.org/smack-next/kernel into ra-next by James Morris · 11 years ago
  65. 5265fc6 module/lsm: Have apparmor module parameters work with no args by Steven Rostedt · 11 years ago
  66. 2ff1cf1 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 11 years ago
  67. f8eb8a1 apparmor: add the ability to report a sha1 hash of loaded policy by John Johansen · 11 years ago
  68. 84f1f78 apparmor: export set of capabilities supported by the apparmor module by John Johansen · 11 years ago
  69. 29b3822 apparmor: add the profile introspection file to interface by John Johansen · 11 years ago
  70. 556d0be apparmor: add an optional profile attachment string for profiles by John Johansen · 11 years ago
  71. 0d259f0 apparmor: add interface files for profiles and namespaces by John Johansen · 11 years ago
  72. 0381650 apparmor: allow setting any profile into the unconfined state by John Johansen · 11 years ago
  73. 8651e1d6 apparmor: make free_profile available outside of policy.c by John Johansen · 11 years ago
  74. 742058b apparmor: rework namespace free path by John Johansen · 11 years ago
  75. fa2ac46 apparmor: update how unconfined is handled by John Johansen · 11 years ago
  76. 77b071b apparmor: change how profile replacement update is done by John Johansen · 11 years ago
  77. 01e2b67 apparmor: convert profile lists to RCU based locking by John Johansen · 11 years ago
  78. dd51c848 apparmor: provide base for multiple profiles to be replaced at once by John Johansen · 11 years ago
  79. 9d910a3 apparmor: add a features/policy dir to interface by John Johansen · 11 years ago
  80. c611616 apparmor: enable users to query whether apparmor is enabled by John Johansen · 11 years ago
  81. dfe4ac2 apparmor: remove minimum size check for vmalloc() by Tetsuo Handa · 12 years ago
  82. 10289b0 Smack: parse multiple rules per write to load2, up to PAGE_SIZE-1 bytes by Rafal Krypa · 11 years ago
  83. bd8815a cgroup: make css_for_each_descendant() and friends include the origin css in the iteration by Tejun Heo · 11 years ago
  84. 492eb21 cgroup: make hierarchy iterators deal with cgroup_subsys_state instead of cgroup by Tejun Heo · 11 years ago
  85. 182446d cgroup: pass around cgroup_subsys_state instead of cgroup in file methods by Tejun Heo · 11 years ago
  86. eb95419 cgroup: pass around cgroup_subsys_state instead of cgroup in subsystem methods by Tejun Heo · 11 years ago
  87. 6387698 cgroup: add css_parent() by Tejun Heo · 11 years ago
  88. a7c6d55 cgroup: add/update accessors which obtain subsys specific data from css by Tejun Heo · 11 years ago
  89. 8af01f5 cgroup: s/cgroup_subsys_state/cgroup_css/ s/task_subsys_state/task_css/ by Tejun Heo · 11 years ago
  90. 6ea0624 Smack: IPv6 casting error fix for 3.11 by Casey Schaufler · 11 years ago
  91. 677264e Smack: network label match fix by Casey Schaufler · 11 years ago
  92. 4d7cf4a security: smack: add a hash table to quicken smk_find_entry() by Tomasz Stanislawski · 12 years ago
  93. 470043b security: smack: fix memleak in smk_write_rules_list() by Tomasz Stanislawski · 12 years ago
  94. ca4c3fc net: split rt_genid for ipv4 and ipv6 by fan.du · 11 years ago
  95. 2be4d74 Add SELinux policy capability for always checking packet and peer classes. by Chris PeBenito · 12 years ago
  96. b04eea8 selinux: fix problems in netnode when BUG() is compiled out by Paul Moore · 11 years ago
  97. b43e725 SELinux: use a helper function to determine seclabel by Eric Paris · 12 years ago
  98. a64c54c SELinux: pass a superblock to security_fs_use by Eric Paris · 12 years ago
  99. 308ab70c SELinux: do not handle seclabel as a special flag by Eric Paris · 12 years ago
  100. f936c6e SELinux: change sbsec->behavior to short by Eric Paris · 12 years ago