Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.9
/
50b8629a606b876e2df000699d68904f239dcfeb
/
security
8bebe88
selinux: import NetLabel category bitmaps correctly
by Paul Moore
· 9 years ago
7ea5920
selinux: Only apply bounds checking to source types
by Stephen Smalley
· 9 years ago
b937190
LSM: LoadPin: provide enablement CONFIG
by Kees Cook
· 9 years ago
a6926cc
Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 9 years ago
0250abc
Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next
by James Morris
· 9 years ago
74f430c
Yama: use atomic allocations when reporting
by Sasha Levin
· 9 years ago
d55201c
Merge branch 'keys-trust' into keys-next
by David Howells
· 9 years ago
05d1a71
ima: add support for creating files using the mknodat syscall
by Mimi Zohar
· 9 years ago
42a4c60
ima: fix ima_inode_post_setattr
by Mimi Zohar
· 9 years ago
c2316dbf
selinux: apply execstack check on thread stacks
by Stephen Smalley
· 9 years ago
8e4ff6f
selinux: distinguish non-init user namespace capability checks
by Stephen Smalley
· 9 years ago
9b09155
LSM: LoadPin for kernel file loading restrictions
by Kees Cook
· 9 years ago
8a56038
Yama: consolidate error reporting
by Kees Cook
· 9 years ago
1ac42476
selinux: check ss_initialized before revalidating an inode label
by Paul Moore
· 9 years ago
20cdef8
selinux: delay inode label lookup as long as possible
by Paul Moore
· 9 years ago
2c97165
selinux: don't revalidate an inode's label when explicitly setting it
by Paul Moore
· 9 years ago
0fd71a6
selinux: Change bool variable name to index.
by Prarit Bhargava
· 9 years ago
ddbb411
KEYS: Add KEYCTL_DH_COMPUTE command
by Mat Martineau
· 9 years ago
13100a7
Security: Keys: Big keys stored encrypted
by Kirill Marinushkin
· 9 years ago
898de7d
KEYS: user_update should use copy of payload made during preparsing
by David Howells
· 9 years ago
93da17b
security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA
by Andreas Ziegler
· 9 years ago
56104cf
IMA: Use the the system trusted keyrings instead of .ima_mok
by David Howells
· 9 years ago
77f68ba
KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED
by David Howells
· 9 years ago
a511e1a
KEYS: Move the point of trust determination to __key_link()
by David Howells
· 9 years ago
5ac7eac
KEYS: Add a facility to restrict new links into a keyring
by David Howells
· 9 years ago
3c9d629
security: drop the unused hook skb_owned_by
by Paolo Abeni
· 9 years ago
61d612e
selinux: restrict kernel module loading
by Jeff Vander Stoep
· 9 years ago
0c6181c
selinux: consolidate the ptrace parent lookup code
by Paul Moore
· 9 years ago
4b57d6b
selinux: simply inode label states to INVALID and INITIALIZED
by Paul Moore
· 9 years ago
899134f
selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()
by Paul Moore
· 9 years ago
643ad15
Merge branch 'mm-pkeys-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
by Linus Torvalds
· 9 years ago
96b9b1c
Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
by Linus Torvalds
· 9 years ago
bb7aeae
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 9 years ago
7047737
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
by Linus Torvalds
· 9 years ago
88a1b56
Merge tag 'keys-next-20160303' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next
by James Morris
· 9 years ago
5804602
Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 9 years ago
4e8ae72
X.509: Make algo identifiers text instead of enum
by David Howells
· 9 years ago
d43de6c
akcipher: Move the RSA DER encoding check to the crypto layer
by David Howells
· 9 years ago
34d47a7
Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux into for-linus
by James Morris
· 9 years ago
481873d
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next
by James Morris
· 9 years ago
6020944
Merge branch 'smack-for-4.6' of https://github.com/cschaufler/smack-next into next
by James Morris
· 9 years ago
95ee08f
ima: require signed IMA policy
by Mimi Zohar
· 9 years ago
19f8a84
ima: measure and appraise the IMA policy itself
by Mimi Zohar
· 9 years ago
7429b09
ima: load policy using path
by Dmitry Kasatkin
· 11 years ago
d9ddf07
ima: support for kexec image and initramfs
by Mimi Zohar
· 9 years ago
c6af8ef
ima: remove firmware and module specific cached status info
by Mimi Zohar
· 9 years ago
a1db742
module: replace copy_module_from_fd with kernel version
by Mimi Zohar
· 9 years ago
39eeb4f
security: define kernel_read_file hook
by Mimi Zohar
· 9 years ago
e40ba6d
firmware: replace call to fw_read_file_contents() with kernel version
by Mimi Zohar
· 9 years ago
cf22221
ima: define a new hook to measure and appraise a file already in memory
by Mimi Zohar
· 9 years ago
e817c2f
selinux: Don't sleep inside inode_getsecid hook
by Andreas Gruenbacher
· 9 years ago
98304bc
ima: calculate the hash of a buffer using aynchronous hash(ahash)
by Mimi Zohar
· 9 years ago
11d7646
ima: provide buffer hash calculation function
by Dmitry Kasatkin
· 11 years ago
bc8ca5b
vfs: define kernel_read_file_id enumeration
by Mimi Zohar
· 9 years ago
b44a7df
vfs: define a generic function to read a file from the kernel
by Mimi Zohar
· 9 years ago
4ad87a3
ima: use "ima_hooks" enum as function argument
by Mimi Zohar
· 9 years ago
b5269ab
ima: refactor ima_policy_show() to display "ima_hooks" rules
by Mimi Zohar
· 9 years ago
1525b06
ima: separate 'security.ima' reading functionality from collect
by Dmitry Kasatkin
· 10 years ago
a1f2bdf
security/keys: make big_key.c explicitly non-modular
by Paul Gortmaker
· 9 years ago
eb5798f
integrity: convert digsig to akcipher api
by Tadeusz Struk
· 9 years ago
8012495
smack: fix cache of access labels
by José Bollo
· 9 years ago
1e98779
mm/gup: Introduce get_user_pages_remote()
by Dave Hansen
· 9 years ago
249f3c4
Merge 4.5-rc4 into tty-next
by Greg Kroah-Hartman
· 9 years ago
613317b
EVM: Use crypto_memneq() for digest comparisons
by Ryan Ware
· 9 years ago
491a0b0
Smack: Remove pointless hooks
by Casey Schaufler
· 9 years ago
50d3501
KEYS: CONFIG_KEYS_DEBUG_PROC_KEYS is no longer an option
by David Howells
· 9 years ago
f3c82ad
tpm: fix checks for policy digest existence in tpm2_seal_trusted()
by Jarkko Sakkinen
· 9 years ago
5d2787c
KEYS: Add an alloc flag to convey the builtinness of a key
by David Howells
· 9 years ago
08ff924
selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tables
by Lorenzo Colitti
· 9 years ago
f75516a
crypto: keys - Revert "convert public key to akcipher api"
by Herbert Xu
· 9 years ago
c75d8e9
IMA: fix non-ANSI declaration of ima_check_policy()
by Colin Ian King
· 9 years ago
42bbaab
integrity: convert digsig to akcipher api
by Tadeusz Struk
· 9 years ago
6e9131c
Merge 4.5-rc2 into tty-next
by Greg Kroah-Hartman
· 9 years ago
9090a2d
selinux: use absolute path to include directory
by Andy Shevchenko
· 9 years ago
eee0450
KEYS: Only apply KEY_FLAG_KEEP to a key if a parent keyring has it set
by David Howells
· 9 years ago
4a51096
tty: Make tty_files_lock per-tty
by Peter Hurley
· 9 years ago
c3917fd
KEYS: Use skcipher
by Herbert Xu
· 9 years ago
5955102
wrappers for ->i_mutex access
by Al Viro
· 9 years ago
caaee62
ptrace: use fsuid, fsgid, effective creds for fs access checks
by Jann Horn
· 9 years ago
3dfb7d8
security: let security modules use PTRACE_MODE_* with bitmasks
by Jann Horn
· 9 years ago
23567fd
KEYS: Fix keyring ref leak in join_session_keyring()
by Yevgeny Pats
· 9 years ago
5807fca
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 9 years ago
acb2cfd
Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 9 years ago
33caf82
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 9 years ago
ddf1d62
Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 9 years ago
607259e
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into ra-next
by James Morris
· 9 years ago
6108209
Merge branch 'for-linus' into work.misc
by Al Viro
· 9 years ago
b197367
selinux: Inode label revalidation performance fix
by Andreas Gruenbacher
· 9 years ago
1d6d167
KEYS: refcount bug fix
by Mimi Zohar
· 9 years ago
cc4e719
fix the leak in integrity_read_file()
by Al Viro
· 9 years ago
8365a71
selinuxfs: switch to memdup_user_nul()
by Al Viro
· 9 years ago
16e5c1f
convert a bunch of open-coded instances of memdup_user_nul()
by Al Viro
· 9 years ago
6427e6c
ima: ima_write_policy() limit locking
by Petko Manolov
· 9 years ago
aa98b94
Merge branch 'smack-for-4.5' of https://github.com/cschaufler/smack-next into next
by James Morris
· 9 years ago
37babe4
Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 9 years ago
3cb92fe
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next
by James Morris
· 9 years ago
0112721
IMA: policy can be updated zero times
by Sasha Levin
· 9 years ago
7631994
selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()
by Vladis Dronov
· 9 years ago
f9df645
selinux: export validatetrans decisions
by Andrew Perepechko
· 9 years ago
5d226df
selinux: Revalidate invalid inode security labels
by Andreas Gruenbacher
· 9 years ago
Next »