1. c2df86a selinux: properly handle multiple messages in selinux_netlink_send() by Paul Moore · 4 years, 1 month ago
  2. cabdf6b Merge android-4.9-174 (d47e38b) into msm-4.9 by Tengfei Fan · 5 years ago
  3. 685434d Merge android-4.9.168 (286f971) into msm-4.9 by jianzhou · 5 years ago
  4. d47e38b Merge 4.9.174 into android-4.9 by Greg Kroah-Hartman · 5 years ago
  5. 869d1e4 selinux: never allow relabeling on context mounts by Ondrej Mosnacek · 5 years ago
  6. 286f971 Merge 4.9.168 into android-4.9 by Greg Kroah-Hartman · 5 years ago
  7. 992baf5 selinux: do not override context on context mounts by Ondrej Mosnacek · 5 years ago
  8. 2f8eb1c Merge android-4.9.155 (32e6695) into msm-4.9 by jianzhou · 5 years ago
  9. fe0eb27 Merge 4.9.153 into android-4.9 by Greg Kroah-Hartman · 5 years ago
  10. 62044cb selinux: always allow mounting submounts by Ondrej Mosnacek · 5 years ago
  11. 708f181 selinux: fix double free in selinux_parse_opts_str() by Paul Moore · 6 years ago
  12. 2e229cb02 Merge android-4.9.94 (8683408) into msm-4.9 by Blagovest Kolenichev · 6 years ago
  13. f4b8243 Merge android-4.9.93 (05baf14) into msm-4.9 by Blagovest Kolenichev · 6 years ago
  14. 39b8bb4 Merge android-4.9.89 (960923f) into msm-4.9 by Blagovest Kolenichev · 6 years ago
  15. 8683408 Merge 4.9.94 into android-4.9 by Greg Kroah-Hartman · 6 years ago
  16. b983b2a selinux: do not check open permission on sockets by Stephen Smalley · 7 years ago
  17. 05baf14 Merge tag 'v4.9.93' into android-4.9 by Greg Hackmann · 6 years ago
  18. 1978d82 selinux: Remove redundant check for unknown labeling behavior by Matthias Kaehlcke · 7 years ago
  19. 960923f Merge 4.9.89 into android-4.9 by Greg Kroah-Hartman · 6 years ago
  20. b243aa8 selinux: check for address length in selinux_socket_bind() by Alexander Potapenko · 7 years ago
  21. e06a105 Merge android-4.9.84 (a9d0273) into msm-4.9 by Blagovest Kolenichev · 6 years ago
  22. c58c561 selinux: Relocate selinux_enforcing to a separate 4k page by Zhen Kong · 6 years ago
  23. 0521e0b UPSTREAM: selinux: bpf: Add addtional check for bpf object file receive by Chenbo Feng · 7 years ago
  24. 9b62913 UPSTREAM: selinux: bpf: Add selinux check for eBPF syscall operations by Chenbo Feng · 7 years ago
  25. caefc01 security: mark LSM hooks as __ro_after_init by James Morris · 7 years ago
  26. 8bdee678 UPSTREAM: selinux: enable genfscon labeling for tracefs by Jeff Vander Stoep · 7 years ago
  27. cb05734 Merge tag 'v4.9.10' into android-4.9-aosp by Dmitry Shmidt · 7 years ago
  28. 6cbaf7b selinux: fix off-by-one in setprocattr by Stephen Smalley · 7 years ago
  29. 93f1d0b ANDROID: quick selinux support for tracefs by Yongqin Liu · 8 years ago
  30. d17af50 mm: Change vm_is_stack_for_task() to vm_is_stack_for_current() by Andy Lutomirski · 8 years ago
  31. 97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  32. 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
  33. 43af5de lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE by Vivek Goyal · 8 years ago
  34. a518b0a selinux: Implement dentry_create_files_as() hook by Vivek Goyal · 8 years ago
  35. c957f6d selinux: Pass security pointer to determine_inode_label() by Vivek Goyal · 8 years ago
  36. 19472b6 selinux: Implementation for inode_copy_up_xattr() hook by Vivek Goyal · 8 years ago
  37. 56909eb selinux: Implementation for inode_copy_up() hook by Vivek Goyal · 8 years ago
  38. 1a93a6e security: Use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 8 years ago
  39. 835c92d Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  40. 7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  41. 4f3ccd7 qstr: constify dentry_init_security by Al Viro · 8 years ago
  42. d011a4d Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  43. a04e71f netlabel: Pass a family parameter to netlbl_skbuff_err(). by Huw Davies · 8 years ago
  44. 2917f57 calipso: Allow the lsm to label the skbuff directly. by Huw Davies · 8 years ago
  45. aad8289 selinux: Add support for unprivileged mounts from user namespaces by Seth Forshee · 8 years ago
  46. 380cf5b fs: Treat foreign mounts as nosuid by Andy Lutomirski · 8 years ago
  47. f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  48. c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  49. c2316dbf selinux: apply execstack check on thread stacks by Stephen Smalley · 8 years ago
  50. 8e4ff6f selinux: distinguish non-init user namespace capability checks by Stephen Smalley · 8 years ago
  51. 1ac42476 selinux: check ss_initialized before revalidating an inode label by Paul Moore · 8 years ago
  52. 20cdef8 selinux: delay inode label lookup as long as possible by Paul Moore · 8 years ago
  53. 2c97165 selinux: don't revalidate an inode's label when explicitly setting it by Paul Moore · 8 years ago
  54. ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 8 years ago
  55. fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 8 years ago
  56. 61d612e selinux: restrict kernel module loading by Jeff Vander Stoep · 8 years ago
  57. 0c6181c selinux: consolidate the ptrace parent lookup code by Paul Moore · 8 years ago
  58. 4b57d6b selinux: simply inode label states to INVALID and INITIALIZED by Paul Moore · 8 years ago
  59. 899134f selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram() by Paul Moore · 8 years ago
  60. 8a04c43 constify security_sb_mount() by Al Viro · 8 years ago
  61. 96b9b1c Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty by Linus Torvalds · 8 years ago
  62. e817c2f selinux: Don't sleep inside inode_getsecid hook by Andreas Gruenbacher · 8 years ago
  63. 4a51096 tty: Make tty_files_lock per-tty by Peter Hurley · 8 years ago
  64. b197367 selinux: Inode label revalidation performance fix by Andreas Gruenbacher · 8 years ago
  65. 7631994 selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() by Vladis Dronov · 8 years ago
  66. 5d226df selinux: Revalidate invalid inode security labels by Andreas Gruenbacher · 8 years ago
  67. 6f3be9f security: Add hook to invalidate inode security labels by Andreas Gruenbacher · 8 years ago
  68. 83da53c5 selinux: Add accessor functions for inode->i_security by Andreas Gruenbacher · 8 years ago
  69. d6335d7 security: Make inode argument of inode_getsecid non-const by Andreas Gruenbacher · 8 years ago
  70. ea861df security: Make inode argument of inode_getsecurity non-const by Andreas Gruenbacher · 8 years ago
  71. a44ca52 selinux: Remove unused variable in selinux_inode_init_security by Andreas Gruenbacher · 8 years ago
  72. 2df4ee7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by Linus Torvalds · 9 years ago
  73. 54abc68 net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid() by Eric Dumazet · 9 years ago
  74. 1873499 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
  75. 212cd08 selinux: fix random read in selinux_ip_postroute_compat() by Eric Dumazet · 9 years ago
  76. 6320565 selinux: Use a kmem_cache for allocation struct file_security_struct by Sangwoo · 9 years ago
  77. 1d2a168 selinux: ioctl_has_perm should be static by Geliang Tang · 9 years ago
  78. 20ba96a selinux: remove pointless cast in selinux_inode_setsecurity() by Rasmus Villemoes · 9 years ago
  79. 44be2f6 selinux: introduce security_context_str_to_sid by Rasmus Villemoes · 9 years ago
  80. 44d37ad selinux: do not check open perm on ftruncate call by Jeff Vander Stoep · 9 years ago
  81. f0a0a97 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Pablo Neira Ayuso · 9 years ago
  82. 2ffbceb netfilter: remove hook owner refcounting by Florian Westphal · 9 years ago
  83. e446f9d net: synack packets can be attached to request sockets by Eric Dumazet · 9 years ago
  84. 06198b3 netfilter: Pass priv instead of nf_hook_ops to netfilter hooks by Eric W. Biederman · 9 years ago
  85. b793c00 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
  86. a068acf fs: create and use seq_show_option for escaping by Kees Cook · 9 years ago
  87. 3e5f206 Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 9 years ago
  88. c3c188b selinux: Create a common helper to determine an inode label [ver #3] by David Howells · 9 years ago
  89. 5dee25d selinux: initialize sock security class to default value by Stephen Smalley · 9 years ago
  90. 9629d04 selinux: reduce locking overhead in inode_free_security() by Waiman Long · 9 years ago
  91. fa1aa14 selinux: extended permissions for ioctls by Jeff Vander Stoep · 9 years ago
  92. 3dbbbe0 Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into for-linus2 by James Morris · 9 years ago
  93. 892e8ca selinux: fix mprotect PROT_EXEC regression caused by mm change by Stephen Smalley · 9 years ago
  94. e22619a Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
  95. 9fc2b4b selinux: fix setting of security labels on NFS by J. Bruce Fields · 9 years ago
  96. 8e01472 selinux: enable genfscon labeling for sysfs and pstore files by Stephen Smalley · 9 years ago
  97. 134509d selinux: enable per-file labeling for debugfs files. by Stephen Smalley · 9 years ago
  98. 6c6d2e9 selinux: update netlink socket classes by Stephen Smalley · 9 years ago
  99. 9e7c8f8 signals: don't abuse __flush_signals() in selinux_bprm_committed_creds() by Oleg Nesterov · 9 years ago
  100. cded3ff selinux: Print 'sclass' as string when unrecognized netlink message occurs by Marek Milkovic · 9 years ago