Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-4.9
/
ee08997fee16f10be23c9748d609dbdf3baab8e4
/
security
08de59e
Revert "ima: policy for RAMFS"
by Mimi Zohar
· 11 years ago
089bc8e
ima: fix script messages
by Dmitry Kasatkin
· 11 years ago
6f799c9
Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next
by James Morris
· 11 years ago
42d64e1
selinux: correct locking in selinux_netlbl_socket_connect)
by Paul Moore
· 11 years ago
7d1db4b
selinux: Use kmemdup instead of kmalloc + memcpy
by Duan Jiong
· 11 years ago
c124bde
KEYS: initialize root uid and session keyrings early
by Mimi Zohar
· 11 years ago
008643b
KEYS: Add a 'trusted' flag and a 'trusted only' flag
by David Howells
· 11 years ago
f36f8c7
KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches
by David Howells
· 11 years ago
ab3c358
KEYS: Implement a big key type that can save to tmpfs
by David Howells
· 11 years ago
b2a4df2
KEYS: Expand the capacity of a keyring
by David Howells
· 11 years ago
e57e866
KEYS: Drop the permissions argument from __keyring_search_one()
by David Howells
· 11 years ago
ccc3e6d
KEYS: Define a __key_get() wrapper to use rather than atomic_inc()
by David Howells
· 11 years ago
d0a059c
KEYS: Search for auth-key by name rather than target key ID
by David Howells
· 11 years ago
4bdf0bc
KEYS: Introduce a search context structure
by David Howells
· 11 years ago
16feef4
KEYS: Consolidate the concept of an 'index key' for key access
by David Howells
· 11 years ago
7e55ca6
KEYS: key_is_dead() should take a const key pointer argument
by David Howells
· 11 years ago
a5b4bd2
KEYS: Use bool in make_key_ref() and is_key_possessed()
by David Howells
· 11 years ago
61ea0c0
KEYS: Skip key state checks when checking for possession
by David Howells
· 11 years ago
a3c9e45
security: remove erroneous comment about capabilities.o link ordering
by Eric Paris
· 11 years ago
98f700f
Merge git://git.infradead.org/users/eparis/selinux
by Paul Moore
· 11 years ago
c7c4591
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 11 years ago
11c7b03
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
cc998ff
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
by Linus Torvalds
· 11 years ago
3398d25
Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux
by Linus Torvalds
· 11 years ago
32dad03
Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
by Linus Torvalds
· 11 years ago
f54fb86
capabilities: allow nice if we are privileged
by Serge Hallyn
· 11 years ago
160da84
userns: Allow PR_CAPBSET_DROP in a user namespace.
by Eric W. Biederman
· 11 years ago
0b4bdb3
Revert "SELinux: do not handle seclabel as a special flag"
by Eric Paris
· 11 years ago
102aefd
selinux: consider filesystem subtype in policies
by Anand Avati
· 11 years ago
7320336
Merge branch 'smack-for-3.12' of git://git.gitorious.org/smack-next/kernel into ra-next
by James Morris
· 11 years ago
5265fc6
module/lsm: Have apparmor module parameters work with no args
by Steven Rostedt
· 11 years ago
2ff1cf1
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
by David S. Miller
· 11 years ago
f8eb8a1
apparmor: add the ability to report a sha1 hash of loaded policy
by John Johansen
· 11 years ago
84f1f78
apparmor: export set of capabilities supported by the apparmor module
by John Johansen
· 11 years ago
29b3822
apparmor: add the profile introspection file to interface
by John Johansen
· 11 years ago
556d0be
apparmor: add an optional profile attachment string for profiles
by John Johansen
· 11 years ago
0d259f0
apparmor: add interface files for profiles and namespaces
by John Johansen
· 11 years ago
0381650
apparmor: allow setting any profile into the unconfined state
by John Johansen
· 11 years ago
8651e1d6
apparmor: make free_profile available outside of policy.c
by John Johansen
· 11 years ago
742058b
apparmor: rework namespace free path
by John Johansen
· 11 years ago
fa2ac46
apparmor: update how unconfined is handled
by John Johansen
· 11 years ago
77b071b
apparmor: change how profile replacement update is done
by John Johansen
· 11 years ago
01e2b67
apparmor: convert profile lists to RCU based locking
by John Johansen
· 11 years ago
dd51c848
apparmor: provide base for multiple profiles to be replaced at once
by John Johansen
· 11 years ago
9d910a3
apparmor: add a features/policy dir to interface
by John Johansen
· 11 years ago
c611616
apparmor: enable users to query whether apparmor is enabled
by John Johansen
· 11 years ago
dfe4ac2
apparmor: remove minimum size check for vmalloc()
by Tetsuo Handa
· 11 years ago
10289b0
Smack: parse multiple rules per write to load2, up to PAGE_SIZE-1 bytes
by Rafal Krypa
· 11 years ago
bd8815a
cgroup: make css_for_each_descendant() and friends include the origin css in the iteration
by Tejun Heo
· 11 years ago
492eb21
cgroup: make hierarchy iterators deal with cgroup_subsys_state instead of cgroup
by Tejun Heo
· 11 years ago
182446d
cgroup: pass around cgroup_subsys_state instead of cgroup in file methods
by Tejun Heo
· 11 years ago
eb95419
cgroup: pass around cgroup_subsys_state instead of cgroup in subsystem methods
by Tejun Heo
· 11 years ago
6387698
cgroup: add css_parent()
by Tejun Heo
· 11 years ago
a7c6d55
cgroup: add/update accessors which obtain subsys specific data from css
by Tejun Heo
· 11 years ago
8af01f5
cgroup: s/cgroup_subsys_state/cgroup_css/ s/task_subsys_state/task_css/
by Tejun Heo
· 11 years ago
6ea0624
Smack: IPv6 casting error fix for 3.11
by Casey Schaufler
· 11 years ago
677264e
Smack: network label match fix
by Casey Schaufler
· 11 years ago
4d7cf4a
security: smack: add a hash table to quicken smk_find_entry()
by Tomasz Stanislawski
· 11 years ago
470043b
security: smack: fix memleak in smk_write_rules_list()
by Tomasz Stanislawski
· 11 years ago
ca4c3fc
net: split rt_genid for ipv4 and ipv6
by fan.du
· 11 years ago
2be4d74
Add SELinux policy capability for always checking packet and peer classes.
by Chris PeBenito
· 11 years ago
b04eea8
selinux: fix problems in netnode when BUG() is compiled out
by Paul Moore
· 11 years ago
b43e725
SELinux: use a helper function to determine seclabel
by Eric Paris
· 12 years ago
a64c54c
SELinux: pass a superblock to security_fs_use
by Eric Paris
· 12 years ago
308ab70c
SELinux: do not handle seclabel as a special flag
by Eric Paris
· 12 years ago
f936c6e
SELinux: change sbsec->behavior to short
by Eric Paris
· 12 years ago
cfca030
SELinux: renumber the superblock options
by Eric Paris
· 12 years ago
eadcabc
SELinux: do all flags twiddling in one place
by Eric Paris
· 12 years ago
12f348b
SELinux: rename SE_SBLABELSUPP to SBLABEL_MNT
by Eric Paris
· 12 years ago
af8e50c
SELinux: use define for number of bits in the mnt flags mask
by Eric Paris
· 12 years ago
d355987f
SELinux: make it harder to get the number of mnt opts wrong
by Eric Paris
· 12 years ago
40d3d0b
SELinux: remove crazy contortions around proc
by Eric Paris
· 12 years ago
b138004
SELinux: fix selinuxfs policy file on big endian systems
by Eric Paris
· 11 years ago
5c73fce
SELinux: Enable setting security contexts on rootfs inodes.
by Stephen Smalley
· 11 years ago
a767f68
SELinux: Increase ebitmap_node size for 64-bit configuration
by Waiman Long
· 11 years ago
fee7114
SELinux: Reduce overhead of mls_level_isvalid() function call
by Waiman Long
· 11 years ago
bed4d7e
selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()
by Paul Moore
· 11 years ago
d1b17b0
selinux: cleanup the XFRM header
by Paul Moore
· 11 years ago
e219369
selinux: cleanup selinux_xfrm_decode_session()
by Paul Moore
· 11 years ago
4baabee
selinux: cleanup some comment and whitespace issues in the XFRM code
by Paul Moore
· 11 years ago
eef9b41
selinux: cleanup selinux_xfrm_sock_rcv_skb() and selinux_xfrm_postroute_last()
by Paul Moore
· 11 years ago
9648434
selinux: cleanup selinux_xfrm_policy_lookup() and selinux_xfrm_state_pol_flow_match()
by Paul Moore
· 11 years ago
ccf17cc
selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code
by Paul Moore
· 11 years ago
2e5aa86
lsm: split the xfrm_state_alloc_security() hook implementation
by Paul Moore
· 11 years ago
9548906
xattr: Constify ->name member of "struct xattr".
by Tetsuo Handa
· 11 years ago
0ff08ba
Merge branch 'for-3.11' of git://linux-nfs.org/~bfields/linux
by Linus Torvalds
· 11 years ago
496322b
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
by Linus Torvalds
· 11 years ago
be0c5d8
Merge tag 'nfs-for-3.11-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs
by Linus Torvalds
· 11 years ago
f39d420
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 11 years ago
790eac5
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 11 years ago
b028161
Merge branch 'for-3.11' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
by Linus Torvalds
· 11 years ago
13f8e98
SELinux: Institute file_path_has_perm()
by David Howells
· 11 years ago
c77cece
Replace a bunch of file->dentry->d_inode refs with file_inode()
by David Howells
· 11 years ago
9b97b6c
evm: audit integrity metadata failures
by Mimi Zohar
· 12 years ago
d726d8d
integrity: move integrity_audit_msg()
by Mimi Zohar
· 11 years ago
c9bccef
NFS: Extend NFS xattr handlers to accept the security namespace
by David Quigley
· 11 years ago
aa9c266
NFS: Client implementation of Labeled-NFS
by David Quigley
· 11 years ago
eb9ae68
SELinux: Add new labeling type native labels
by David Quigley
· 11 years ago
649f6e7
LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data.
by David Quigley
· 11 years ago
746df9b
Security: Add Hook to test if the particular xattr is part of a MAC model.
by David Quigley
· 11 years ago
Next »