Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-5.4
/
1383cb8103bb166e50cbab1543bb3b5118fccf82
/
security
305bb55
Merge tag 'selinux-pr-20180516' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 6 years ago
4152dc9
selinux: correctly handle sa_family cases in selinux_sctp_bind_connect()
by Alexey Kodanev
· 6 years ago
88b7d37
selinux: fix address family in bind() and connect() to match address/port
by Alexey Kodanev
· 6 years ago
0f8db8c
selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind()
by Alexey Kodanev
· 6 years ago
3be4aaf
Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 7 years ago
80a17a5
Merge tag 'apparmor-pr-2018-04-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 7 years ago
23c8cec
ipc/msg: introduce msgctl(MSG_STAT_ANY)
by Davidlohr Bueso
· 7 years ago
a280d6d
ipc/sem: introduce semctl(SEM_STAT_ANY)
by Davidlohr Bueso
· 7 years ago
c21a697
ipc/shm: introduce shmctl(SHM_STAT_ANY)
by Davidlohr Bueso
· 7 years ago
1f57817
commoncap: Handle memory allocation failure.
by Tetsuo Handa
· 7 years ago
2a56bb5
Merge tag 'trace-v4.17' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace
by Linus Torvalds
· 7 years ago
fd40ffc
selinux: fix missing dput() before selinuxfs unmount
by Stephen Smalley
· 7 years ago
f8cf2f1
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
706ffc8
Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
3612605
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 7 years ago
9eda2d2
Merge tag 'selinux-pr-20180403' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 7 years ago
3b54765
Merge branch 'akpm' (patches from Andrew)
by Linus Torvalds
· 7 years ago
9022ca6
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 7 years ago
58eacff
init, tracing: instrument security and console initcall trace events
by Abderrahmane Benbachir
· 7 years ago
514c603
headers: untangle kmemleak.h from mm.h
by Randy Dunlap
· 7 years ago
17dec0a
Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
by Linus Torvalds
· 7 years ago
d4069fe
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
by David S. Miller
· 7 years ago
588558e
apparmor: fix memory leak on buffer on error exit path
by Colin Ian King
· 7 years ago
df0ce17
security: convert security hooks to use hlist
by Sargun Dhillon
· 7 years ago
350311a
security: Remove rtnl_lock() in selinux_xfrm_notify_policyload()
by Kirill Tkhai
· 7 years ago
f0b07bb1
net: Introduce net_rwsem to protect net_namespace_list
by Kirill Tkhai
· 7 years ago
cf14f27
macro: introduce COUNT_ARGS() macro
by Alexei Starovoitov
· 7 years ago
0d79cbf
ipc/smack: Tidy up from the change in type of the ipc security hooks
by Eric W. Biederman
· 7 years ago
2f635ce
net: Drop pernet_operations::async
by Kirill Tkhai
· 7 years ago
d54d27c
Merge branch 'smack-for-4.17' of git://github.com/cschaufler/next-smack into next-smack
by James Morris
· 7 years ago
ab60368
ima: Fallback to the builtin hash algorithm
by Petr Vorel
· 7 years ago
1c070b1
ima: Add smackfs to the default appraise/measure list
by Martin Townsend
· 7 years ago
70946c4a
evm: check for remount ro in progress before writing
by Sascha Hauer
· 7 years ago
f5e51fa
ima: Improvements in ima_appraise_measurement()
by Thiago Jung Bauermann
· 7 years ago
1775cb8
ima: Simplify ima_eventsig_init()
by Thiago Jung Bauermann
· 7 years ago
11c60f2
integrity: Remove unused macro IMA_ACTION_RULE_FLAGS
by Thiago Jung Bauermann
· 7 years ago
e456ef8
ima: drop vla in ima_audit_measurement()
by Tycho Andersen
· 7 years ago
fac37c62
ima: Fix Kconfig to select TPM 2.0 CRB interface
by Jiandi An
· 7 years ago
1180b4c
apparmor: fix dangling symlinks to policy rawdata after replacement
by John Johansen
· 7 years ago
d53c9f4
apparmor: Fix an error code in verify_table_headers()
by Dan Carpenter
· 7 years ago
a61ecd3
apparmor: fix error returns checks by making size a ssize_t
by Colin Ian King
· 7 years ago
17d7b0a
evm: Constify *integrity_status_msg[]
by Hernán Gonzalez
· 7 years ago
1a82cee
evm: Move evm_hmac and evm_hash from evm_main.c to evm_crypto.c
by Hernán Gonzalez
· 7 years ago
9e67028
ima: fail signature verification based on policy
by Mimi Zohar
· 7 years ago
a9a4935
ima: clear IMA_HASH
by Mimi Zohar
· 7 years ago
d77ccdc
ima: re-evaluate files on privileged mounted filesystems
by Mimi Zohar
· 7 years ago
57b56ac
ima: fail file signature verification on non-init mounted filesystems
by Mimi Zohar
· 7 years ago
d906c10
IMA: Support using new creds in appraisal policy
by Matthew Garrett
· 7 years ago
3ec3011
security: Add a cred_getsecid hook
by Matthew Garrett
· 7 years ago
d8c6e85
msg/security: Pass kern_ipc_perm not msg_queue into the msg_queue security hooks
by Eric W. Biederman
· 7 years ago
7191adf
shm/security: Pass kern_ipc_perm not shmid_kernel into the shm security hooks
by Eric W. Biederman
· 7 years ago
aefad95
sem/security: Pass kern_ipc_perm not sem_array into the sem security hooks
by Eric W. Biederman
· 7 years ago
5893ed1
Merge tag 'v4.16-rc6' into next-general
by James Morris
· 7 years ago
6b6bc62
selinux: wrap AVC state
by Stephen Smalley
· 7 years ago
0619f0f
selinux: wrap selinuxfs state
by Stephen Smalley
· 7 years ago
274f62e
selinux: fix handling of uninitialized selinux state in get_bools/classes
by Stephen Smalley
· 7 years ago
b9590ad
apparmor: remove POLICY_MEDIATES_SAFE
by John Johansen
· 7 years ago
56974a6
apparmor: add base infastructure for socket mediation
by John Johansen
· 7 years ago
6b4f3d0
usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as_cred and security_task_kill
by Stephen Smalley
· 7 years ago
68741a8
selinux: Fix ltp test connect-syscall failure
by Richard Haines
· 7 years ago
e5a5ca9
selinux: rename the {is,set}_enforcing() functions
by Paul Moore
· 7 years ago
aa8e712
selinux: wrap global selinux state
by Stephen Smalley
· 7 years ago
58c442f
Smack: Handle CGROUP2 in the same way that CGROUP
by José Bollo
· 7 years ago
3edbccf
net: Convert smack_net_ops
by Kirill Tkhai
· 7 years ago
79a4fb0
net: Convert selinux_net_ops
by Kirill Tkhai
· 7 years ago
2572f5b
selinux: fix typo in selinux_netlbl_sctp_sk_clone declaration
by Arnd Bergmann
· 7 years ago
d452930
selinux: Add SCTP support
by Richard Haines
· 7 years ago
f74290f
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
by David S. Miller
· 7 years ago
120f3b1
integrity/security: fix digsig.c build error with header file
by Randy Dunlap
· 7 years ago
72e89f5
security: Add support for SCTP security hooks
by Richard Haines
· 7 years ago
304ec48
get rid of pointless includes of fs_struct.h
by Al Viro
· 7 years ago
d9f4bb1
KEYS: Use individual pages in big_key for crypto buffers
by David Howells
· 7 years ago
9b2c45d
net: make getname() functions return length rather than use int* parameter
by Denys Vlasenko
· 7 years ago
a9a0884
vfs: do bulk POLL* -> EPOLL* replacement
by Linus Torvalds
· 7 years ago
21f6066
apparmor: improve overlapping domain attachment resolution
by John Johansen
· 7 years ago
73f488c
apparmor: convert attaching profiles via xattrs to use dfa matching
by John Johansen
· 7 years ago
8e51f90
apparmor: Add support for attaching profiles via xattr, presence and value
by Matthew Garrett
· 7 years ago
a078120
apparmor: cleanup: simplify code to get ns symlink name
by John Johansen
· 7 years ago
cf91600
apparmor: cleanup create_aafs() error path
by John Johansen
· 7 years ago
d901d6a
apparmor: dfa split verification of table headers
by John Johansen
· 7 years ago
031dcc8
apparmor: dfa add support for state differential encoding
by John Johansen
· 7 years ago
074c1cd
apparmor: dfa move character match into a macro
by John Johansen
· 7 years ago
9fcf78c
apparmor: update domain transitions that are subsets of confinement at nnp
by John Johansen
· 7 years ago
d8889d4
apparmor: move context.h to cred.h
by John Johansen
· 7 years ago
de62de5
apparmor: move task related defines and fns to task.X files
by John Johansen
· 7 years ago
d065f2f
apparmor: cleanup, drop unused fn __aa_task_is_confined()
by John Johansen
· 7 years ago
e1a03f6
apparmor: cleanup fixup description of aa_replace_profiles
by John Johansen
· 8 years ago
f175221
apparmor: rename tctx to ctx
by John Johansen
· 8 years ago
d9087c4
apparmor: drop cred_ctx and reference the label directly
by John Johansen
· 8 years ago
3b529a7
apparmor: move task domain change info to task security
by John Johansen
· 8 years ago
4d2f8ba
apparmor: rename task_ctx to the more accurate cred_ctx
by John Johansen
· 8 years ago
3acfd5f
apparmor: audit unknown signal numbers
by John Johansen
· 7 years ago
3dc6b1c
apparmor: make signal label match work when matching stacked labels
by John Johansen
· 7 years ago
1d6583d
security: apparmor: remove duplicate includes
by Pravin Shedge
· 7 years ago
475bdda
apparmor: root view labels should not be under user control
by John Johansen
· 7 years ago
71fa373
apparmor: cleanup add proper line wrapping to nulldfa.in
by John Johansen
· 7 years ago
95652ca
apparmor: provide a bounded version of label_parse
by John Johansen
· 7 years ago
6e0654d
apparmor: use the dfa to do label parse string splitting
by John Johansen
· 7 years ago
cf65fab
apparmor: add first substr match to dfa
by John Johansen
· 7 years ago
a6a5257
apparmor: split load data into management struct and data blob
by John Johansen
· 7 years ago
Next »