- f66e448 selinux: bpf: Add addtional check for bpf object file receive by Chenbo Feng · 7 years ago
- ec27c35 selinux: bpf: Add selinux check for eBPF syscall operations by Chenbo Feng · 7 years ago
- 7f85565 Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
- 828f425 Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 7 years ago
- 0c3014f selinux: constify nf_hook_ops by Arvind Yadav · 7 years ago
- 901ef84 selinux: allow per-file labeling for cgroupfs by Antonio Murdaca · 8 years ago
- 7efbb60 selinux: update my email address by Stephen Smalley · 7 years ago
- af63f41 selinux: Generalize support for NNP/nosuid SELinux domain transitions by Stephen Smalley · 7 years ago
- 62874c3 selinux: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
- ddb4a14 exec: Rename bprm->cred_prepared to called_set_creds by Kees Cook · 7 years ago
- 591bb27 netfilter: nf_hook_ops structs can be const by Florian Westphal · 7 years ago
- 2a764b5 selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets by Luis Ressel · 7 years ago
- e24dd9e Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- 6a39118 selinux: enable genfscon labeling for tracefs by Jeff Vander Stoep · 7 years ago
- 023f108 selinux: fix double free in selinux_parse_opts_str() by Paul Moore · 7 years ago
- 0b4d345 security/selinux: allow security_sb_clone_mnt_opts to enable/disable native labeling behavior by Scott Mayhew · 7 years ago
- 8e71bf7 selinux: use pernet operations for hook registration by Florian Westphal · 8 years ago
- 409dcf3 selinux: Add a cache for quicker retreival of PKey SIDs by Daniel Jurgens · 7 years ago
- ab861df selinux: Add IB Port SMP access vector by Daniel Jurgens · 7 years ago
- cfc4d88 selinux: Implement Infiniband PKey "Access" access vector by Daniel Jurgens · 7 years ago
- 3a976fa selinux: Allocate and free infiniband security hooks by Daniel Jurgens · 7 years ago
- 8f408ab selinux lsm IB/core: Implement LSM notification system by Daniel Jurgens · 7 years ago
- 270e857 selinux: Remove redundant check for unknown labeling behavior by Matthias Kaehlcke · 7 years ago
- ccb5447 selinux: do not check open permission on sockets by Stephen Smalley · 8 years ago
- 3ba4bf5 selinux: add a map permission check for mmap by Stephen Smalley · 8 years ago
- db59000 selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checks by Stephen Smalley · 8 years ago
- a79be23 selinux: Use task_alloc hook rather than task_create hook by Tetsuo Handa · 8 years ago
- e2f586b selinux: check for address length in selinux_socket_bind() by Alexander Potapenko · 8 years ago
- ca97d93 security: mark LSM hooks as __ro_after_init by James Morris · 8 years ago
- 84e6885 selinux: fix kernel BUG on prlimit(..., NULL, NULL) by Stephen Smalley · 8 years ago
- 791ec49 prlimit,security,selinux: add a security hook for prlimit by Stephen Smalley · 8 years ago
- 1827adb Merge branch 'WIP.sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 8 years ago
- 2993002 sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task.h> by Ingo Molnar · 8 years ago
- 3f07c01 sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h> by Ingo Molnar · 8 years ago
- 2651225b selinux: wrap cgroup seclabel support with its own policy capability by Stephen Smalley · 8 years ago
- f1ef09f Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
- 3051bf3 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 8 years ago
- 35eeacf Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
- a2a1547 Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- 0c461cb selinux: fix off-by-one in setprocattr by Stephen Smalley · 8 years ago
- e2241be Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- 1ea0ce4 selinux: allow changing labels for cgroupfs by Antonio Murdaca · 8 years ago
- a050a57 selinux: fix off-by-one in setprocattr by Stephen Smalley · 8 years ago
- 4548b68 Introduce a sysctl that modifies the value of PROT_SOCK. by Krister Johansen · 8 years ago
- 9227dd2 exec: Remove LSM_UNSAFE_PTRACE_CAP by Eric W. Biederman · 8 years ago
- d69dece LSM: Add /sys/kernel/security/lsm by Casey Schaufler · 8 years ago
- 3a2f5a5 security,selinux,smack: kill security_task_wait hook by Stephen Smalley · 8 years ago
- b4ba35c selinux: drop unused socket security classes by Stephen Smalley · 8 years ago
- b21507e proc,security: move restriction on writing /proc/pid/attr nodes to proc by Stephen Smalley · 8 years ago
- be0554c selinux: clean up cred usage and simplify by Stephen Smalley · 8 years ago
- 01593d3 selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces by Stephen Smalley · 8 years ago
- ef37979 selinux: handle ICMPv6 consistently with ICMP by Stephen Smalley · 8 years ago
- a2c7c6f selinux: add security in-core xattr support for tracefs by Yongqin Liu · 8 years ago
- da69a53 selinux: support distinctions among all network address families by Stephen Smalley · 8 years ago
- 683b96f Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
- 9287aed selinux: Convert isec->lock into a spinlock by Andreas Gruenbacher · 8 years ago
- baa73d9 posix-timers: Make them configurable by Nicolas Pitre · 8 years ago
- 13457d0 selinux: Clean up initialization of isec->sclass by Andreas Gruenbacher · 8 years ago
- db978da proc: Pass file mode to proc_pid_make_inode by Andreas Gruenbacher · 8 years ago
- 4205911 selinux: Minor cleanups by Andreas Gruenbacher · 8 years ago
- 8931c3b SELinux: Use GFP_KERNEL for selinux_parse_opts_str(). by Tetsuo Handa · 8 years ago
- d17af50 mm: Change vm_is_stack_for_task() to vm_is_stack_for_current() by Andy Lutomirski · 8 years ago
- 97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
- 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
- 43af5de lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE by Vivek Goyal · 8 years ago
- a518b0a selinux: Implement dentry_create_files_as() hook by Vivek Goyal · 8 years ago
- c957f6d selinux: Pass security pointer to determine_inode_label() by Vivek Goyal · 8 years ago
- 19472b6 selinux: Implementation for inode_copy_up_xattr() hook by Vivek Goyal · 8 years ago
- 56909eb selinux: Implementation for inode_copy_up() hook by Vivek Goyal · 8 years ago
- 1a93a6e security: Use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 8 years ago
- 835c92d Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
- 7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
- 4f3ccd7 qstr: constify dentry_init_security by Al Viro · 8 years ago
- d011a4d Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- a04e71f netlabel: Pass a family parameter to netlbl_skbuff_err(). by Huw Davies · 8 years ago
- 2917f57 calipso: Allow the lsm to label the skbuff directly. by Huw Davies · 8 years ago
- aad8289 selinux: Add support for unprivileged mounts from user namespaces by Seth Forshee · 9 years ago
- 380cf5b fs: Treat foreign mounts as nosuid by Andy Lutomirski · 8 years ago
- f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
- c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
- c2316db selinux: apply execstack check on thread stacks by Stephen Smalley · 9 years ago
- 8e4ff6f selinux: distinguish non-init user namespace capability checks by Stephen Smalley · 9 years ago
- 1ac42476 selinux: check ss_initialized before revalidating an inode label by Paul Moore · 9 years ago
- 20cdef8 selinux: delay inode label lookup as long as possible by Paul Moore · 9 years ago
- 2c97165 selinux: don't revalidate an inode's label when explicitly setting it by Paul Moore · 9 years ago
- ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 9 years ago
- fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 9 years ago
- 61d612e selinux: restrict kernel module loading by Jeff Vander Stoep · 9 years ago
- 0c6181c selinux: consolidate the ptrace parent lookup code by Paul Moore · 9 years ago
- 4b57d6b selinux: simply inode label states to INVALID and INITIALIZED by Paul Moore · 9 years ago
- 899134f selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram() by Paul Moore · 9 years ago
- 8a04c43 constify security_sb_mount() by Al Viro · 9 years ago
- 96b9b1c Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty by Linus Torvalds · 9 years ago
- e817c2f selinux: Don't sleep inside inode_getsecid hook by Andreas Gruenbacher · 9 years ago
- 4a51096 tty: Make tty_files_lock per-tty by Peter Hurley · 9 years ago
- b197367 selinux: Inode label revalidation performance fix by Andreas Gruenbacher · 9 years ago
- 7631994 selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() by Vladis Dronov · 9 years ago
- 5d226df selinux: Revalidate invalid inode security labels by Andreas Gruenbacher · 9 years ago
- 6f3be9f security: Add hook to invalidate inode security labels by Andreas Gruenbacher · 9 years ago
- 83da53c5 selinux: Add accessor functions for inode->i_security by Andreas Gruenbacher · 9 years ago