Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.19
/
bcbc9b0cf6d8f340a1d166e414f4612b353f7a9b
/
security
bcbc9b0
ima: extend the measurement list to include the file signature
by Mimi Zohar
· 11 years ago
42a20ba
Merge branch 'keys-devel' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into ra-next
by James Morris
· 11 years ago
d2b8697
KEYS: fix error return code in big_key_instantiate()
by Wei Yongjun
· 11 years ago
034faeb
KEYS: Fix keyring quota misaccounting on key replacement and unlink
by David Howells
· 11 years ago
74792b0
KEYS: Fix a race between negating a key and reading the error set
by David Howells
· 11 years ago
2eaf6b5
KEYS: Make BIG_KEYS boolean
by Josh Boyer
· 11 years ago
51775fe
apparmor: remove the "task" arg from may_change_ptraced_domain()
by Oleg Nesterov
· 11 years ago
4a7fc30
apparmor: remove parent task info from audit logging
by John Johansen
· 11 years ago
61e3fb8
apparmor: remove tsk field from the apparmor_audit_struct
by John Johansen
· 11 years ago
dd0c6e8
apparmor: fix capability to not use the current task, during reporting
by John Johansen
· 11 years ago
50b719f
Merge branch 'smack-for-3.13' of git://git.gitorious.org/smack-next/kernel into ra-next
by James Morris
· 11 years ago
b5dfd80
Smack: Ptrace access check mode
by Casey Schaufler
· 11 years ago
3ea7a56
ima: provide hash algo info in the xattr
by Dmitry Kasatkin
· 11 years ago
e7a2ad7
ima: enable support for larger default filedata hash algorithms
by Mimi Zohar
· 12 years ago
9b9d4ce
ima: define kernel parameter 'ima_template=' to change configured default
by Roberto Sassu
· 12 years ago
4286587
ima: add Kconfig default measurement list template
by Mimi Zohar
· 12 years ago
add1c05
ima: defer determining the appraisal hash algorithm for 'ima' template
by Roberto Sassu
· 12 years ago
5278aa5
ima: add audit log support for larger hashes
by Mimi Zohar
· 12 years ago
a71dc65
ima: switch to new template management mechanism
by Roberto Sassu
· 12 years ago
4d7aeee
ima: define new template ima-ng and template fields d-ng and n-ng
by Roberto Sassu
· 12 years ago
3ce1217d
ima: define template fields library and new helpers
by Roberto Sassu
· 12 years ago
adf53a7
ima: new templates management mechanism
by Roberto Sassu
· 12 years ago
7bc5f44
ima: define new function ima_alloc_init_template() to API
by Roberto Sassu
· 12 years ago
9803d41
ima: pass the filename argument up to ima_add_template_entry()
by Roberto Sassu
· 12 years ago
7d802a2
ima: pass the file descriptor to ima_add_violation()
by Roberto Sassu
· 12 years ago
09ef543
ima: ima_calc_boot_agregate must use SHA1
by Dmitry Kasatkin
· 12 years ago
ea59399
ima: support arbitrary hash algorithms in ima_calc_buffer_hash
by Dmitry Kasatkin
· 12 years ago
723326b
ima: provide dedicated hash algo allocation function
by Dmitry Kasatkin
· 11 years ago
140d802
ima: differentiate between template hash and file data hash sizes
by Mimi Zohar
· 12 years ago
a35c3fb
ima: use dynamically allocated hash storage
by Dmitry Kasatkin
· 12 years ago
b1aaab2
ima: pass full xattr with the signature
by Dmitry Kasatkin
· 11 years ago
d3634d0
ima: read and use signature hash algorithm
by Dmitry Kasatkin
· 12 years ago
c7c8bb2
ima: provide support for arbitrary hash algorithms
by Dmitry Kasatkin
· 12 years ago
08de59e
Revert "ima: policy for RAMFS"
by Mimi Zohar
· 11 years ago
089bc8e
ima: fix script messages
by Dmitry Kasatkin
· 11 years ago
6f799c9
Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next
by James Morris
· 11 years ago
c0ab6e5
Smack: Implement lock security mode
by Casey Schaufler
· 11 years ago
42d64e1
selinux: correct locking in selinux_netlbl_socket_connect)
by Paul Moore
· 11 years ago
7d1db4b
selinux: Use kmemdup instead of kmalloc + memcpy
by Duan Jiong
· 11 years ago
c124bde
KEYS: initialize root uid and session keyrings early
by Mimi Zohar
· 11 years ago
008643b
KEYS: Add a 'trusted' flag and a 'trusted only' flag
by David Howells
· 11 years ago
f36f8c7
KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches
by David Howells
· 11 years ago
ab3c358
KEYS: Implement a big key type that can save to tmpfs
by David Howells
· 11 years ago
b2a4df2
KEYS: Expand the capacity of a keyring
by David Howells
· 11 years ago
e57e866
KEYS: Drop the permissions argument from __keyring_search_one()
by David Howells
· 11 years ago
ccc3e6d
KEYS: Define a __key_get() wrapper to use rather than atomic_inc()
by David Howells
· 11 years ago
d0a059c
KEYS: Search for auth-key by name rather than target key ID
by David Howells
· 11 years ago
4bdf0bc
KEYS: Introduce a search context structure
by David Howells
· 11 years ago
16feef4
KEYS: Consolidate the concept of an 'index key' for key access
by David Howells
· 11 years ago
7e55ca6
KEYS: key_is_dead() should take a const key pointer argument
by David Howells
· 11 years ago
a5b4bd2
KEYS: Use bool in make_key_ref() and is_key_possessed()
by David Howells
· 11 years ago
61ea0c0
KEYS: Skip key state checks when checking for possession
by David Howells
· 11 years ago
a3c9e45
security: remove erroneous comment about capabilities.o link ordering
by Eric Paris
· 11 years ago
98f700f
Merge git://git.infradead.org/users/eparis/selinux
by Paul Moore
· 11 years ago
c7c4591
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 11 years ago
11c7b03
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
cc998ff
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
by Linus Torvalds
· 11 years ago
3398d25
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 11 years ago
32dad03
Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
by Linus Torvalds
· 11 years ago
f54fb86
capabilities: allow nice if we are privileged
by Serge Hallyn
· 11 years ago
160da84
userns: Allow PR_CAPBSET_DROP in a user namespace.
by Eric W. Biederman
· 11 years ago
0b4bdb3
Revert "SELinux: do not handle seclabel as a special flag"
by Eric Paris
· 11 years ago
102aefd
selinux: consider filesystem subtype in policies
by Anand Avati
· 12 years ago
7320336
Merge branch 'smack-for-3.12' of git://git.gitorious.org/smack-next/kernel into ra-next
by James Morris
· 11 years ago
5265fc6
module/lsm: Have apparmor module parameters work with no args
by Steven Rostedt
· 11 years ago
2ff1cf1
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
by David S. Miller
· 11 years ago
f8eb8a1
apparmor: add the ability to report a sha1 hash of loaded policy
by John Johansen
· 11 years ago
84f1f78
apparmor: export set of capabilities supported by the apparmor module
by John Johansen
· 11 years ago
29b3822
apparmor: add the profile introspection file to interface
by John Johansen
· 11 years ago
556d0be
apparmor: add an optional profile attachment string for profiles
by John Johansen
· 11 years ago
0d259f0
apparmor: add interface files for profiles and namespaces
by John Johansen
· 11 years ago
0381650
apparmor: allow setting any profile into the unconfined state
by John Johansen
· 11 years ago
8651e1d6
apparmor: make free_profile available outside of policy.c
by John Johansen
· 11 years ago
742058b
apparmor: rework namespace free path
by John Johansen
· 11 years ago
fa2ac46
apparmor: update how unconfined is handled
by John Johansen
· 11 years ago
77b071b
apparmor: change how profile replacement update is done
by John Johansen
· 11 years ago
01e2b67
apparmor: convert profile lists to RCU based locking
by John Johansen
· 11 years ago
dd51c848
apparmor: provide base for multiple profiles to be replaced at once
by John Johansen
· 11 years ago
9d910a3
apparmor: add a features/policy dir to interface
by John Johansen
· 11 years ago
c611616
apparmor: enable users to query whether apparmor is enabled
by John Johansen
· 11 years ago
dfe4ac2
apparmor: remove minimum size check for vmalloc()
by Tetsuo Handa
· 12 years ago
10289b0
Smack: parse multiple rules per write to load2, up to PAGE_SIZE-1 bytes
by Rafal Krypa
· 11 years ago
bd8815a
cgroup: make css_for_each_descendant() and friends include the origin css in the iteration
by Tejun Heo
· 11 years ago
492eb21
cgroup: make hierarchy iterators deal with cgroup_subsys_state instead of cgroup
by Tejun Heo
· 11 years ago
182446d
cgroup: pass around cgroup_subsys_state instead of cgroup in file methods
by Tejun Heo
· 11 years ago
eb95419
cgroup: pass around cgroup_subsys_state instead of cgroup in subsystem methods
by Tejun Heo
· 11 years ago
6387698
cgroup: add css_parent()
by Tejun Heo
· 11 years ago
a7c6d55
cgroup: add/update accessors which obtain subsys specific data from css
by Tejun Heo
· 11 years ago
8af01f5
cgroup: s/cgroup_subsys_state/cgroup_css/ s/task_subsys_state/task_css/
by Tejun Heo
· 11 years ago
6ea0624
Smack: IPv6 casting error fix for 3.11
by Casey Schaufler
· 11 years ago
677264e
Smack: network label match fix
by Casey Schaufler
· 11 years ago
4d7cf4a
security: smack: add a hash table to quicken smk_find_entry()
by Tomasz Stanislawski
· 12 years ago
470043b
security: smack: fix memleak in smk_write_rules_list()
by Tomasz Stanislawski
· 12 years ago
ca4c3fc
net: split rt_genid for ipv4 and ipv6
by fan.du
· 11 years ago
2be4d74
Add SELinux policy capability for always checking packet and peer classes.
by Chris PeBenito
· 12 years ago
b04eea8
selinux: fix problems in netnode when BUG() is compiled out
by Paul Moore
· 11 years ago
b43e725
SELinux: use a helper function to determine seclabel
by Eric Paris
· 12 years ago
a64c54c
SELinux: pass a superblock to security_fs_use
by Eric Paris
· 12 years ago
308ab70c
SELinux: do not handle seclabel as a special flag
by Eric Paris
· 12 years ago
f936c6e
SELinux: change sbsec->behavior to short
by Eric Paris
· 12 years ago
Next »