- 089be43 Revert "SELinux: allow fstype unknown to policy to use xattrs if present" by James Morris · 16 years ago
- 811f379 SELinux: allow fstype unknown to policy to use xattrs if present by Eric Paris · 16 years ago
- feb2a5b SELinux: remove inherit field from inode_security_struct by James Morris · 16 years ago
- fdeb051 SELinux: reorder inode_security_struct to increase objs/slab on 64bit by Richard Kennedy · 16 years ago
- f526971 SELinux: keep the code clean formating and syntax by Eric Paris · 16 years ago
- 12b29f3 selinux: support deferred mapping of contexts by Stephen Smalley · 16 years ago
- 7bf570d Security: Make secctx_to_secid() take const secdata by David Howells · 16 years ago
- 8f0cfa5 xattr: add missing consts to function arguments by David Howells · 16 years ago
- b19d8ea SELinux: selinux/include/security.h whitespace, syntax, and other cleanups by Eric Paris · 16 years ago
- a936b79 SELinux: objsec.h whitespace, syntax, and other cleanups by Eric Paris · 16 years ago
- cc03766 SELinux: netlabel.h whitespace, syntax, and other cleanups by Eric Paris · 16 years ago
- e392feb SELinux: avc_ss.h whitespace, syntax, and other cleanups by Eric Paris · 16 years ago
- 3925e6f Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6 by Linus Torvalds · 16 years ago
- 334d094 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6.26 by Linus Torvalds · 16 years ago
- 04305e4 Audit: Final renamings and cleanup by Ahmed S. Darwish · 16 years ago
- 27cc2a6 SELinux: add netport.[ch] by James Morris · 16 years ago
- 3e11217 SELinux: Add network port SID cache by Paul Moore · 16 years ago
- 832cbd9 SELinux: turn mount options strings into defines by Eric Paris · 16 years ago
- 64dbf07 selinux: introduce permissive types by Eric Paris · 16 years ago
- 0356357 selinux: remove ptrace_sid by Roland McGrath · 16 years ago
- b0c636b SELinux: create new open permission by Eric Paris · 16 years ago
- 98e9894 SELinux: remove unused backpointers from security objects by James Morris · 16 years ago
- f74af6e SELinux: Correct the NetLabel locking for the sk_security_struct by Paul Moore · 16 years ago
- 1e42198 Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/torvalds/linux-2.6 by David S. Miller · 16 years ago
- 03e1ad7 LSM: Make the Labeled IPsec hooks more stack friendly by Paul Moore · 16 years ago
- 869ab51 SELinux: more GFP_NOFS fixups to prevent selinux from re-entering the fs code by Stephen Smalley · 16 years ago
- e000752 LSM/SELinux: Interfaces to allow FS to control mount options by Eric Paris · 16 years ago
- 44707fd d_path: Use struct path in struct avc_audit_data by Jan Blunck · 17 years ago
- b68e418 selinux: support 64-bit capabilities by Stephen Smalley · 17 years ago
- 394c675 SELinux: Remove security_get_policycaps() by Paul Moore · 17 years ago
- 5dbe1eb SELinux: Allow NetLabel to directly cache SIDs by Paul Moore · 17 years ago
- d621d35 SELinux: Enable dynamic enable/disable of the network access checks by Paul Moore · 17 years ago
- 220deb9 SELinux: Better integration between peer labeling subsystems by Paul Moore · 17 years ago
- f67f4f3 SELinux: Add a new peer class and permissions to the Flask definitions by Paul Moore · 17 years ago
- 3bb56b2 SELinux: Add a capabilities bitmap to SELinux policy version 22 by Paul Moore · 17 years ago
- 224dfbd SELinux: Add a network node caching mechanism similar to the sel_netif_*() functions by Paul Moore · 17 years ago
- da5645a SELinux: Only store the network interface's ifindex by Paul Moore · 17 years ago
- e8bfdb9 SELinux: Convert the netif code to use ifindex values by Paul Moore · 17 years ago
- 75e2291 NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function by Paul Moore · 17 years ago
- c9180a5 Security: add get, set, and cloning of superblock security information by Eric Paris · 17 years ago
- 3f12070 SELinux: policy selectable handling of unknown classes and perms by Eric Paris · 17 years ago
- 788e7dd SELinux: Improve read/write performance by Yuichi Nakamura · 17 years ago
- ed03218 security: Protection for exploiting null dereference using mmap by Eric Paris · 17 years ago
- 2c3c05d SELinux: allow preemption between transition permission checks by Stephen Smalley · 17 years ago
- e47c8fc selinux: add selinuxfs structure for object class discovery by Christopher J. PeBenito · 17 years ago
- 55fcf09 selinux: add support for querying object classes and permissions from the running policy by Christopher J. PeBenito · 17 years ago
- f0ee2e4 selinux: export initial SID contexts via selinuxfs by James Carter · 17 years ago
- a764ae4 selinux: remove userland security class and permission definitions by Stephen Smalley · 17 years ago
- 4f6a993 SELinux: move security_skb_extlbl_sid() out of the security server by Paul Moore · 17 years ago
- c60475b SELinux: rename selinux_netlabel.h to netlabel.h by Paul Moore · 17 years ago
- 5778eab SELinux: extract the NetLabel SELinux support from the security server by Paul Moore · 17 years ago
- 342a0cf [SELINUX]: Fix 2.6.20-rc6 build when no xfrm by Venkat Yekkirala · 18 years ago
- 87fcd70 [PATCH] selinux endianness annotations by Al Viro · 18 years ago
- bb22f58 Compile fix for "peer secid consolidation for external network labeling" by James Morris · 18 years ago
- 3de4bab SELinux: peer secid consolidation for external network labeling by Paul Moore · 18 years ago
- 9f2ad66 NetLabel: SELinux cleanups by Paul Moore · 18 years ago
- 2ee92d4 [SELinux]: Add support for DCCP by James Morris · 18 years ago
- 67f83cb SELinux: Fix SA selection semantics by Venkat Yekkirala · 18 years ago
- 6b87769 SELinux: Return correct context for SO_PEERSEC by Venkat Yekkirala · 18 years ago
- c1a856c SELinux: Various xfrm labeling fixes by Venkat Yekkirala · 18 years ago
- 5c45899 SELinux: export object class and permission definitions by Chad Sellers · 18 years ago
- f8687af [NetLabel]: protect the CIPSOv4 socket option from setsockopt() by Paul Moore · 18 years ago
- 5b368e6 IPsec: correct semantics for SELinux policy matching by Venkat Yekkirala · 18 years ago
- bc7e982 [PATCH] SELinux: convert sbsec semaphore to a mutex by Eric Paris · 18 years ago
- 2397074 [PATCH] SELinux: change isec semaphore to a mutex by Eric Paris · 18 years ago
- f3f8771 [PATCH] selinux: add support for range transitions on object classes by Darrel Goeddel · 18 years ago
- 016b9bd [PATCH] selinux: enable configuration of max policy version by Stephen Smalley · 18 years ago
- 7a0e1d6 [NetLabel]: add some missing #includes to various header files by Paul Moore · 18 years ago
- e448e93 [NetLabel]: uninline selinux_netlbl_inode_permission() by Paul Moore · 18 years ago
- 99f59ed [NetLabel]: Correctly initialize the NetLabel fields. by Paul Moore · 18 years ago
- 7420ed2 [NetLabel]: SELinux support by Venkat Yekkirala · 18 years ago
- a51c64f [MLSXFRM]: Fix build with SECURITY_NETWORK_XFRM disabled. by Venkat Yekkirala · 18 years ago
- cb969f0 [MLSXFRM]: Default labeling of socket specific IPSec policies by Venkat Yekkirala · 18 years ago
- beb8d13 [MLSXFRM]: Add flow labeling by Venkat Yekkirala · 18 years ago
- e0d1caa [MLSXFRM]: Flow based matching of xfrm policy and state by Venkat Yekkirala · 18 years ago
- 892c141 [MLSXFRM]: Add security sid to sock by Venkat Yekkirala · 18 years ago
- 08554d6 [MLSXFRM]: Define new SELinux service routine by Venkat Yekkirala · 18 years ago
- 51bd398 [MLSXFRM]: Granular IPSec associations for use in MLS environments by Venkat Yekkirala · 18 years ago
- c312feb [PATCH] SELinux: decouple fscontext/context mount options by Eric Paris · 18 years ago
- 42c3e03 [PATCH] SELinux: Add sockcreate node to procattr API by Eric Paris · 18 years ago
- 4eb582c [PATCH] keys: add a way to store the appropriate context for newly-created keys by Michael LeMay · 18 years ago
- d720024 [PATCH] selinux: add hooks for key subsystem by Michael LeMay · 18 years ago
- 4e5ab4c [SECMARK]: Add new packet controls to SELinux by James Morris · 18 years ago
- 29a395e [SECMARK]: Add new flask definitions to SELinux by James Morris · 18 years ago
- 3e3ff15 [SELINUX]: add security class for appletalk sockets by Christopher J. PeBenito · 18 years ago
- c8c05a8 [LSM-IPsec]: SELinux Authorize by Catherine Zhang · 18 years ago
- 30d5528 [PATCH] selinux: Clear selinux_enabled flag upon runtime disable. by Stephen Smalley · 18 years ago
- e6f5071 [SELINUX]: selinux_socket_getpeer_{stream,dgram} fixup by Catherine Zhang · 18 years ago
- 2c7946a [SECURITY]: TCP/UDP getpeersec by Catherine Zhang · 18 years ago
- 9ac49d2 [PATCH] selinux: remove security struct magic number fields and tests by Stephen Smalley · 19 years ago
- 5f8ac64 [LSM-IPSec]: Corrections to LSM-IPSec Nethooks by Trent Jaeger · 19 years ago
- d28d1e0 [LSM-IPSec]: Per-packet access control. by Trent Jaeger · 19 years ago
- a74574a [PATCH] Remove security_inode_post_create/mkdir/symlink/mknod hooks by Stephen Smalley · 19 years ago
- 5e41ff9 [PATCH] security: enable atomic inode security labeling by Stephen Smalley · 19 years ago
- 782ebb9 [PATCH] selinux: Reduce memory use by avtab by Stephen Smalley · 19 years ago
- f5c1d5b [PATCH] SELinux: default labeling of MLS field by James Morris · 19 years ago
- 09ffd94f [PATCH] selinux: add executable heap check by Lorenzo Hernández García-Hierro · 19 years ago
- 6b99219 [PATCH] selinux: add executable stack check by Lorenzo Hernandez García-Hierro · 19 years ago
- b207a29 [PATCH] SELinux: add finer grained permissions to Netlink audit processing by James Morris · 19 years ago
- 0c9b794 [PATCH] SELinux: add support for NETLINK_KOBJECT_UEVENT by James Morris · 19 years ago