Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.9
/
ab47deb6bb03ddf1c1e253bfbbdbf5f867975ca5
/
security
101105b
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
3873691
Merge remote-tracking branch 'ovl/rename2' into for-linus
by Al Viro
· 8 years ago
97d2116
Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
abb5a14
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
5638733
Merge branch 'printk-cleanups'
by Linus Torvalds
· 8 years ago
4bcc595
printk: reinstate KERN_CONT for printing continuation lines
by Linus Torvalds
· 8 years ago
f334bcd
Merge remote-tracking branch 'ovl/misc' into work.misc
by Al Viro
· 8 years ago
5d6c319
xattr: Add __vfs_{get,set,remove}xattr helpers
by Andreas Gruenbacher
· 8 years ago
2ab704a
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial
by Linus Torvalds
· 8 years ago
a3443cd
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
3cd013a
Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/audit
by Linus Torvalds
· 8 years ago
1b46065
securityfs: fix securityfs_create_dir comment
by Laurent Georget
· 8 years ago
078cd82
fs: Replace CURRENT_TIME with current_time() for inode timestamps
by Deepa Dinamani
· 8 years ago
2773bf0
fs: rename "rename2" i_op to "rename"
by Miklos Szeredi
· 8 years ago
18fc84d
vfs: remove unused i_op->rename
by Miklos Szeredi
· 8 years ago
2ddfdd4
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
by Linus Torvalds
· 8 years ago
456bee9
KEYS: Fix skcipher IV clobbering
by Herbert Xu
· 8 years ago
8a17ef9d
Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
43af5de
lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE
by Vivek Goyal
· 8 years ago
de2f4b3
Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
e71b9df
ima: use file_dentry()
by Miklos Szeredi
· 8 years ago
9b6a9ec
selinux: fix error return code in policydb_read()
by Wei Yongjun
· 8 years ago
c60b906
Smack: Signal delivery as an append operation
by Casey Schaufler
· 8 years ago
80a7704
Merge tag 'usercopy-v4.8-rc6-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
by Linus Torvalds
· 8 years ago
8e1f74e
usercopy: remove page-spanning test for now
by Kees Cook
· 8 years ago
fa2bea2
audit: consistently record PIDs with task_tgid_nr()
by Paul Moore
· 8 years ago
7c686af
selinux: fix overflow and 0 length allocations
by William Roberts
· 8 years ago
3bc7bcf
selinux: initialize structures
by William Roberts
· 8 years ago
74d977b
selinux: detect invalid ebitmap
by William Roberts
· 8 years ago
63e24c4
Smack: Use memdup_user() rather than duplicating its implementation
by Markus Elfring
· 8 years ago
6040e57
Make the hardened user-copy code depend on having a hardened allocator
by Linus Torvalds
· 8 years ago
348a0db
selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX
by William Roberts
· 8 years ago
a518b0a
selinux: Implement dentry_create_files_as() hook
by Vivek Goyal
· 8 years ago
2602625
security, overlayfs: Provide hook to correctly label newly created files
by Vivek Goyal
· 8 years ago
c957f6d
selinux: Pass security pointer to determine_inode_label()
by Vivek Goyal
· 8 years ago
19472b6
selinux: Implementation for inode_copy_up_xattr() hook
by Vivek Goyal
· 8 years ago
121ab82
security,overlayfs: Provide security hook for copy up of xattrs for overlay file
by Vivek Goyal
· 8 years ago
56909eb
selinux: Implementation for inode_copy_up() hook
by Vivek Goyal
· 8 years ago
d8ad8b4
security, overlayfs: provide copy up security hook for unioned files
by Vivek Goyal
· 8 years ago
1eccfa0
Merge tag 'usercopy-v4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux
by Linus Torvalds
· 8 years ago
8b31f45
selinux: print leading 0x on ioctlcmd audits
by William Roberts
· 8 years ago
1a93a6e
security: Use IS_ENABLED() instead of checking for built-in or module
by Javier Martinez Canillas
· 8 years ago
835c92d
Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
7a1e8b8
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 8 years ago
a867d73
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 8 years ago
6784725
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 8 years ago
554828e
Merge branch 'salted-string-hash'
by Linus Torvalds
· 8 years ago
7616ac7
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
by Arnd Bergmann
· 8 years ago
f5509cc
mm: Hardened usercopy
by Kees Cook
· 9 years ago
bbce2ad
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
by Linus Torvalds
· 8 years ago
4f3ccd7
qstr: constify dentry_init_security
by Al Viro
· 8 years ago
d4d03f7
apparmor: fix arg_size computation for when setprocattr is null terminated
by John Johansen
· 8 years ago
e89b808
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 8 years ago
f4ee2de
apparmor: do not expose kernel stack
by Heinrich Schuchardt
· 9 years ago
58acf9d
apparmor: fix module parameters can be changed after policy is locked
by John Johansen
· 9 years ago
5f20fdf
apparmor: fix oops in profile_unpack() when policy_db is not present
by John Johansen
· 9 years ago
3197f5a
apparmor: don't check for vmalloc_addr if kvzalloc() failed
by John Johansen
· 9 years ago
1575617
apparmor: add missing id bounds check on dfa verification
by John Johansen
· 9 years ago
ff11847
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
by Jeff Mahoney
· 9 years ago
38dbd7d
apparmor: use list_next_entry instead of list_entry_next
by Geliang Tang
· 9 years ago
de7c4cc
apparmor: fix refcount race when finding a child profile
by John Johansen
· 9 years ago
0b938a2
apparmor: fix ref count leak when profile sha1 hash is read
by John Johansen
· 9 years ago
23ca7b6
apparmor: check that xindex is in trans_table bounds
by John Johansen
· 9 years ago
f7da2de
apparmor: ensure the target profile name is always audited
by John Johansen
· 9 years ago
7ee6da2
apparmor: fix audit full profile hname on successful load
by John Johansen
· 9 years ago
bf15cf0
apparmor: fix log failures for all profiles in a set
by John Johansen
· 9 years ago
f351841
apparmor: fix put() parent ref after updating the active ref
by John Johansen
· 9 years ago
6059f71
apparmor: add parameter to control whether policy hashing is used
by John Johansen
· 10 years ago
bd35db8
apparmor: internal paths should be treated as disconnected
by John Johansen
· 10 years ago
f2e561d
apparmor: fix disconnected bind mnts reconnection
by John Johansen
· 10 years ago
d671e890
apparmor: fix update the mtime of the profile file on replacement
by John Johansen
· 10 years ago
9049a79
apparmor: exec should not be returning ENOENT when it denies
by John Johansen
· 10 years ago
b6b1b81
apparmor: fix uninitialized lsm_audit member
by John Johansen
· 11 years ago
ec34fa2
apparmor: fix replacement bug that adds new child to old parent
by John Johansen
· 9 years ago
dcda617
apparmor: fix refcount bug in profile replacement
by John Johansen
· 9 years ago
e1e5fa9
Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next
by James Morris
· 8 years ago
c632809
Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into next
by James Morris
· 8 years ago
30a46a4
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
by Vegard Nossum
· 8 years ago
d011a4d
Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next
by James Morris
· 8 years ago
0b3c976
evm: Translate user/group ids relative to s_user_ns when computing HMAC
by Seth Forshee
· 10 years ago
b223f4e2
Merge branch 'd_real' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs into work.misc
by Al Viro
· 8 years ago
544e1ce
ima: extend the measurement entry specific pcr
by Eric Richter
· 9 years ago
a422638
ima: change integrity cache to store measured pcr
by Eric Richter
· 9 years ago
67696f6
ima: redefine duplicate template entries
by Eric Richter
· 9 years ago
5f6f027
ima: change ima_measurements_show() to display the entry specific pcr
by Eric Richter
· 9 years ago
14b1da8
ima: include pcr for each measurement log entry
by Eric Richter
· 9 years ago
725de7f
ima: extend ima_get_action() to return the policy pcr
by Eric Richter
· 9 years ago
0260643
ima: add policy support for extending different pcrs
by Eric Richter
· 9 years ago
96d450b
integrity: add measured_pcrs field to integrity cache
by Eric Richter
· 9 years ago
4fee524
calipso: Add a label cache.
by Huw Davies
· 9 years ago
a04e71f
netlabel: Pass a family parameter to netlbl_skbuff_err().
by Huw Davies
· 9 years ago
2917f57
calipso: Allow the lsm to label the skbuff directly.
by Huw Davies
· 9 years ago
e1adea9
calipso: Allow request sockets to be relabelled by the lsm.
by Huw Davies
· 9 years ago
1f440c9
netlabel: Prevent setsockopt() from changing the hop-by-hop option.
by Huw Davies
· 9 years ago
ceba183
calipso: Set the calipso socket label to match the secattr.
by Huw Davies
· 9 years ago
aad8289
selinux: Add support for unprivileged mounts from user namespaces
by Seth Forshee
· 9 years ago
809c02e
Smack: Handle labels consistently in untrusted mounts
by Seth Forshee
· 9 years ago
9f50eda
Smack: Add support for unprivileged mounts from user namespaces
by Seth Forshee
· 9 years ago
380cf5b
fs: Treat foreign mounts as nosuid
by Andy Lutomirski
· 9 years ago
d07b846
fs: Limit file caps to the user namespace of the super block
by Seth Forshee
· 9 years ago
Next »