Log - fa7539b27f4a9d0bfaede2f7547c2322ac68f1f2 - kernel/msm-4.9

d4d03f7 apparmor: fix arg_size computation for when setprocattr is null terminated by John Johansen · 8 years ago
e89b808 apparmor: fix oops, validate buffer size in apparmor_setprocattr() by Vegard Nossum · 8 years ago
f4ee2de apparmor: do not expose kernel stack by Heinrich Schuchardt · 9 years ago
58acf9d apparmor: fix module parameters can be changed after policy is locked by John Johansen · 8 years ago
5f20fdf apparmor: fix oops in profile_unpack() when policy_db is not present by John Johansen · 8 years ago
3197f5a apparmor: don't check for vmalloc_addr if kvzalloc() failed by John Johansen · 8 years ago
1575617 apparmor: add missing id bounds check on dfa verification by John Johansen · 9 years ago
ff11847 apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task by Jeff Mahoney · 9 years ago
38dbd7d apparmor: use list_next_entry instead of list_entry_next by Geliang Tang · 9 years ago
de7c4cc apparmor: fix refcount race when finding a child profile by John Johansen · 9 years ago
0b938a2 apparmor: fix ref count leak when profile sha1 hash is read by John Johansen · 9 years ago
23ca7b6 apparmor: check that xindex is in trans_table bounds by John Johansen · 9 years ago
f7da2de apparmor: ensure the target profile name is always audited by John Johansen · 9 years ago
7ee6da2 apparmor: fix audit full profile hname on successful load by John Johansen · 9 years ago
bf15cf0 apparmor: fix log failures for all profiles in a set by John Johansen · 9 years ago
f351841 apparmor: fix put() parent ref after updating the active ref by John Johansen · 9 years ago
6059f71 apparmor: add parameter to control whether policy hashing is used by John Johansen · 10 years ago
bd35db8 apparmor: internal paths should be treated as disconnected by John Johansen · 10 years ago
f2e561d apparmor: fix disconnected bind mnts reconnection by John Johansen · 10 years ago
d671e890 apparmor: fix update the mtime of the profile file on replacement by John Johansen · 10 years ago
9049a79 apparmor: exec should not be returning ENOENT when it denies by John Johansen · 10 years ago
b6b1b81 apparmor: fix uninitialized lsm_audit member by John Johansen · 11 years ago
ec34fa2 apparmor: fix replacement bug that adds new child to old parent by John Johansen · 9 years ago
dcda617 apparmor: fix refcount bug in profile replacement by John Johansen · 9 years ago
e1e5fa9 Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next by James Morris · 8 years ago
c632809 Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into next by James Morris · 8 years ago
d011a4d Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
544e1ce ima: extend the measurement entry specific pcr by Eric Richter · 9 years ago
a422638 ima: change integrity cache to store measured pcr by Eric Richter · 9 years ago
67696f6 ima: redefine duplicate template entries by Eric Richter · 9 years ago
5f6f027 ima: change ima_measurements_show() to display the entry specific pcr by Eric Richter · 9 years ago
14b1da8 ima: include pcr for each measurement log entry by Eric Richter · 9 years ago
725de7f ima: extend ima_get_action() to return the policy pcr by Eric Richter · 9 years ago
0260643 ima: add policy support for extending different pcrs by Eric Richter · 9 years ago
96d450b integrity: add measured_pcrs field to integrity cache by Eric Richter · 9 years ago
4fee524 calipso: Add a label cache. by Huw Davies · 8 years ago
a04e71f netlabel: Pass a family parameter to netlbl_skbuff_err(). by Huw Davies · 8 years ago
2917f57 calipso: Allow the lsm to label the skbuff directly. by Huw Davies · 8 years ago
e1adea9 calipso: Allow request sockets to be relabelled by the lsm. by Huw Davies · 8 years ago
1f440c9 netlabel: Prevent setsockopt() from changing the hop-by-hop option. by Huw Davies · 8 years ago
ceba183 calipso: Set the calipso socket label to match the secattr. by Huw Davies · 8 years ago
309c5fa selinux: fix type mismatch by Heinrich Schuchardt · 9 years ago
965475a KEYS: Strip trailing spaces by David Howells · 8 years ago
8bebe88 selinux: import NetLabel category bitmaps correctly by Paul Moore · 9 years ago
18d872f Smack: ignore null signal in smack_task_kill by Rafal Krypa · 9 years ago
40d2737 security: tomoyo: simplify the gc kthread creation by Mike Danese · 9 years ago
2885c1e LSM: Fix for security_inode_getsecurity and -EOPNOTSUPP by Casey Schaufler · 9 years ago
4693fc7 KEYS: Add placeholder for KDF usage with DH by Stephan Mueller · 9 years ago
7ea5920 selinux: Only apply bounds checking to source types by Stephen Smalley · 9 years ago
d102a56 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
3767e25 switch ->setxattr() to passing dentry and inode separately by Al Viro · 9 years ago
dca6b41 Yama: fix double-spinlock and user access in atomic context by Jann Horn · 9 years ago
b8b5727 security/integrity/ima/ima_policy.c: use %pU to output UUID in printable format by Andy Shevchenko · 9 years ago
f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
a7fd20d Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 9 years ago
c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
7f427d3 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
91e8d0cb Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 9 years ago
b937190 LSM: LoadPin: provide enablement CONFIG by Kees Cook · 9 years ago
0e0162b Merge branch 'ovl-fixes' into for-linus by Al Viro · 9 years ago
e800072 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 9 years ago
a6926cc Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 9 years ago
0250abc Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next by James Morris · 9 years ago
74f430c Yama: use atomic allocations when reporting by Sasha Levin · 9 years ago
d55201c Merge branch 'keys-trust' into keys-next by David Howells · 9 years ago
cf90ea9 ima: fix the string representation of the LSM/IMA hook enumeration ordering by Mimi Zohar · 9 years ago
05d1a71 ima: add support for creating files using the mknodat syscall by Mimi Zohar · 9 years ago
42a4c60 ima: fix ima_inode_post_setattr by Mimi Zohar · 9 years ago
c2316dbf selinux: apply execstack check on thread stacks by Stephen Smalley · 9 years ago
8e4ff6f selinux: distinguish non-init user namespace capability checks by Stephen Smalley · 9 years ago
457db29 security: Introduce security_settime64() by Baolin Wang · 9 years ago
9b09155 LSM: LoadPin for kernel file loading restrictions by Kees Cook · 9 years ago
8a56038 Yama: consolidate error reporting by Kees Cook · 9 years ago
10c9ead rtnetlink: add new RTM_GETSTATS message to dump link stats by Roopa Prabhu · 9 years ago
1ac42476 selinux: check ss_initialized before revalidating an inode label by Paul Moore · 9 years ago
20cdef8 selinux: delay inode label lookup as long as possible by Paul Moore · 9 years ago
2c97165 selinux: don't revalidate an inode's label when explicitly setting it by Paul Moore · 9 years ago
0fd71a6 selinux: Change bool variable name to index. by Prarit Bhargava · 9 years ago
ddbb411 KEYS: Add KEYCTL_DH_COMPUTE command by Mat Martineau · 9 years ago
13100a7 Security: Keys: Big keys stored encrypted by Kirill Marinushkin · 9 years ago
898de7d KEYS: user_update should use copy of payload made during preparsing by David Howells · 9 years ago
93da17b security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA by Andreas Ziegler · 9 years ago
56104cf IMA: Use the the system trusted keyrings instead of .ima_mok by David Howells · 9 years ago
77f68ba KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED by David Howells · 9 years ago
a511e1a KEYS: Move the point of trust determination to __key_link() by David Howells · 9 years ago
5ac7eac KEYS: Add a facility to restrict new links into a keyring by David Howells · 9 years ago
ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 9 years ago
3c9d629 security: drop the unused hook skb_owned_by by Paolo Abeni · 9 years ago
fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 9 years ago
61d612e selinux: restrict kernel module loading by Jeff Vander Stoep · 9 years ago
0c6181c selinux: consolidate the ptrace parent lookup code by Paul Moore · 9 years ago
4b57d6b selinux: simply inode label states to INVALID and INITIALIZED by Paul Moore · 9 years ago
899134f selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram() by Paul Moore · 9 years ago
81cd889 constify ima_d_path() by Al Viro · 9 years ago
3b73b68 constify security_sb_pivotroot() by Al Viro · 9 years ago
77b286c constify security_path_chroot() by Al Viro · 9 years ago
3ccee46 constify security_path_{link,rename} by Al Viro · 9 years ago
8db0185 apparmor: remove useless checks for NULL ->mnt by Al Viro · 9 years ago
d360775 constify security_path_{mkdir,mknod,symlink} by Al Viro · 9 years ago
989f74e constify security_path_{unlink,rmdir} by Al Viro · 9 years ago