Log - 07d6f72eef68741e02b1a12d9207ed2a5e92e66f - kernel/msm-4.9

869d1e4 selinux: never allow relabeling on context mounts by Ondrej Mosnacek · 6 years ago
992baf5 selinux: do not override context on context mounts by Ondrej Mosnacek · 6 years ago
62044cb selinux: always allow mounting submounts by Ondrej Mosnacek · 6 years ago
aedbb45 selinux: fix GPF on invalid policy by Stephen Smalley · 6 years ago
47ff762 selinux: Add __GFP_NOWARN to allocation at str_read() by Tetsuo Handa · 6 years ago
d1f534f selinux: use GFP_NOWAIT in the AVC kmem_caches by Michal Hocko · 7 years ago
c738c80 selinux: KASAN: slab-out-of-bounds in xattr_getsecurity by Sachin Grover · 7 years ago
b983b2a selinux: do not check open permission on sockets by Stephen Smalley · 8 years ago
1978d82 selinux: Remove redundant check for unknown labeling behavior by Matthias Kaehlcke · 8 years ago
00972ac selinux: Remove unnecessary check of array base in selinux_set_mapping() by Matthias Kaehlcke · 8 years ago
b243aa8 selinux: check for address length in selinux_socket_bind() by Alexander Potapenko · 8 years ago
5e6f51a selinux: skip bounded transition processing if the policy isn't loaded by Paul Moore · 7 years ago
fe1cb58 selinux: ensure the context is NUL terminated in security_context_to_sid_core() by Paul Moore · 7 years ago
6cbaf7b selinux: fix off-by-one in setprocattr by Stephen Smalley · 8 years ago
d17af50 mm: Change vm_is_stack_for_task() to vm_is_stack_for_current() by Andy Lutomirski · 8 years ago
101105b Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
5638733 Merge branch 'printk-cleanups' by Linus Torvalds · 8 years ago
4bcc595 printk: reinstate KERN_CONT for printing continuation lines by Linus Torvalds · 8 years ago
5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
078cd82 fs: Replace CURRENT_TIME with current_time() for inode timestamps by Deepa Dinamani · 8 years ago
43af5de lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE by Vivek Goyal · 8 years ago
9b6a9ec selinux: fix error return code in policydb_read() by Wei Yongjun · 8 years ago
7c686af selinux: fix overflow and 0 length allocations by William Roberts · 8 years ago
3bc7bcf selinux: initialize structures by William Roberts · 8 years ago
74d977b selinux: detect invalid ebitmap by William Roberts · 8 years ago
348a0db selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX by William Roberts · 8 years ago
a518b0a selinux: Implement dentry_create_files_as() hook by Vivek Goyal · 8 years ago
c957f6d selinux: Pass security pointer to determine_inode_label() by Vivek Goyal · 8 years ago
19472b6 selinux: Implementation for inode_copy_up_xattr() hook by Vivek Goyal · 8 years ago
56909eb selinux: Implementation for inode_copy_up() hook by Vivek Goyal · 8 years ago
1a93a6e security: Use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 8 years ago
835c92d Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
4f3ccd7 qstr: constify dentry_init_security by Al Viro · 8 years ago
d011a4d Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
4fee524 calipso: Add a label cache. by Huw Davies · 9 years ago
a04e71f netlabel: Pass a family parameter to netlbl_skbuff_err(). by Huw Davies · 9 years ago
2917f57 calipso: Allow the lsm to label the skbuff directly. by Huw Davies · 9 years ago
e1adea9 calipso: Allow request sockets to be relabelled by the lsm. by Huw Davies · 9 years ago
1f440c9 netlabel: Prevent setsockopt() from changing the hop-by-hop option. by Huw Davies · 9 years ago
ceba183 calipso: Set the calipso socket label to match the secattr. by Huw Davies · 9 years ago
aad8289 selinux: Add support for unprivileged mounts from user namespaces by Seth Forshee · 9 years ago
380cf5b fs: Treat foreign mounts as nosuid by Andy Lutomirski · 9 years ago
309c5fa selinux: fix type mismatch by Heinrich Schuchardt · 9 years ago
8bebe88 selinux: import NetLabel category bitmaps correctly by Paul Moore · 9 years ago
7ea5920 selinux: Only apply bounds checking to source types by Stephen Smalley · 9 years ago
f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
a7fd20d Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 9 years ago
c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
c2316dbf selinux: apply execstack check on thread stacks by Stephen Smalley · 9 years ago
8e4ff6f selinux: distinguish non-init user namespace capability checks by Stephen Smalley · 9 years ago
10c9ead rtnetlink: add new RTM_GETSTATS message to dump link stats by Roopa Prabhu · 9 years ago
1ac42476 selinux: check ss_initialized before revalidating an inode label by Paul Moore · 9 years ago
20cdef8 selinux: delay inode label lookup as long as possible by Paul Moore · 9 years ago
2c97165 selinux: don't revalidate an inode's label when explicitly setting it by Paul Moore · 9 years ago
0fd71a6 selinux: Change bool variable name to index. by Prarit Bhargava · 9 years ago
ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 9 years ago
fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 9 years ago
61d612e selinux: restrict kernel module loading by Jeff Vander Stoep · 9 years ago
0c6181c selinux: consolidate the ptrace parent lookup code by Paul Moore · 9 years ago
4b57d6b selinux: simply inode label states to INVALID and INITIALIZED by Paul Moore · 9 years ago
899134f selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram() by Paul Moore · 9 years ago
8a04c43 constify security_sb_mount() by Al Viro · 9 years ago
96b9b1c Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty by Linus Torvalds · 9 years ago
bb7aeae Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
5804602 Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 9 years ago
34d47a7 Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux into for-linus by James Morris · 9 years ago
e817c2f selinux: Don't sleep inside inode_getsecid hook by Andreas Gruenbacher · 9 years ago
249f3c4 Merge 4.5-rc4 into tty-next by Greg Kroah-Hartman · 9 years ago
08ff924 selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables by Lorenzo Colitti · 9 years ago
9090a2d selinux: use absolute path to include directory by Andy Shevchenko · 9 years ago
4a51096 tty: Make tty_files_lock per-tty by Peter Hurley · 9 years ago
5955102 wrappers for ->i_mutex access by Al Viro · 9 years ago
5807fca Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
b197367 selinux: Inode label revalidation performance fix by Andreas Gruenbacher · 9 years ago
8365a71 selinuxfs: switch to memdup_user_nul() by Al Viro · 9 years ago
7631994 selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() by Vladis Dronov · 9 years ago
f9df645 selinux: export validatetrans decisions by Andrew Perepechko · 9 years ago
5d226df selinux: Revalidate invalid inode security labels by Andreas Gruenbacher · 9 years ago
6f3be9f security: Add hook to invalidate inode security labels by Andreas Gruenbacher · 9 years ago
83da53c5 selinux: Add accessor functions for inode->i_security by Andreas Gruenbacher · 9 years ago
d6335d7 security: Make inode argument of inode_getsecid non-const by Andreas Gruenbacher · 9 years ago
ea861df security: Make inode argument of inode_getsecurity non-const by Andreas Gruenbacher · 9 years ago
a44ca52 selinux: Remove unused variable in selinux_inode_init_security by Andreas Gruenbacher · 9 years ago
6e37592 Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into for-linus2 by James Morris · 9 years ago
f3bef67 selinux: fix bug in conditional rules handling by Stephen Smalley · 9 years ago
2df4ee7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by Linus Torvalds · 9 years ago
54abc68 net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid() by Eric Dumazet · 9 years ago
1873499 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
212cd08 selinux: fix random read in selinux_ip_postroute_compat() by Eric Dumazet · 9 years ago
6320565 selinux: Use a kmem_cache for allocation struct file_security_struct by Sangwoo · 9 years ago
1d2a168 selinux: ioctl_has_perm should be static by Geliang Tang · 9 years ago
9529c78 selinux: use sprintf return value by Rasmus Villemoes · 9 years ago
21b76f1 selinux: use kstrdup() in security_get_bools() by Rasmus Villemoes · 9 years ago
aa736c3 selinux: use kmemdup in security_sid_to_context_core() by Rasmus Villemoes · 9 years ago
20ba96a selinux: remove pointless cast in selinux_inode_setsecurity() by Rasmus Villemoes · 9 years ago
44be2f6 selinux: introduce security_context_str_to_sid by Rasmus Villemoes · 9 years ago
44d37ad selinux: do not check open perm on ftruncate call by Jeff Vander Stoep · 9 years ago
2a35d19 selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default by Paul Moore · 9 years ago