summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2019-01-28LSM: Add 'name' field for SafeSetID in DEFINE_LSMMicah Morton
2019-01-25selinux: log invalid contexts in AVCsOndrej Mosnacek
2019-01-25selinux: replace some BUG_ON()s with a WARN_ON()Ondrej Mosnacek
2019-01-25selinux: inline some AVC functions used only onceOndrej Mosnacek
2019-01-25LSM: add SafeSetID module that gates setid callsMicah Morton
2019-01-25audit: add support for fcaps v3Richard Guy Briggs
2019-01-24tomoyo: Allow multiple use_group lines.Tetsuo Handa
2019-01-24tomoyo: Coding style fix.Tetsuo Handa
2019-01-23tomoyo: Swicth from cred->security to task_struct->security.Tetsuo Handa
2019-01-22security: keys: annotate implicit fall throughsMathieu Malaterre
2019-01-22security: keys: annotate implicit fall throughsMathieu Malaterre
2019-01-22security: keys: annotate implicit fall throughMathieu Malaterre
2019-01-22apparmor: Adjust offset when accessing task blob.Tetsuo Handa
2019-01-22Merge tag 'v5.0-rc3' into next-generalJames Morris
2019-01-18LSM: Make some functions staticWei Yongjun
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa
2019-01-17Merge branch 'fixes-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2019-01-16LSM: Check for NULL cred-security on freeJames Morris
2019-01-16Yama: Check for pid death before checking ancestryKees Cook
2019-01-16Merge tag 'selinux-pr-20190115' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2019-01-10selinux: do not override context on context mountsOndrej Mosnacek
2019-01-10selinux: never allow relabeling on context mountsOndrej Mosnacek
2019-01-10selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_linkStephen Smalley
2019-01-10selinux: avoid silent denials in permissive mode under RCU walkStephen Smalley
2019-01-10selinux: fix GPF on invalid policyStephen Smalley
2019-01-10LSM: generalize flag passing to security_capableMicah Morton
2019-01-08TOMOYO: Update LSM flags to no longer be exclusiveKees Cook
2019-01-08LSM: Infrastructure management of the ipc security blobCasey Schaufler
2019-01-08Smack: Abstract use of ipc security blobsCasey Schaufler
2019-01-08SELinux: Abstract use of ipc security blobsCasey Schaufler
2019-01-08LSM: Infrastructure management of the task securityCasey Schaufler
2019-01-08LSM: Infrastructure management of the inode securityCasey Schaufler
2019-01-08Smack: Abstract use of inode security blobCasey Schaufler
2019-01-08SELinux: Abstract use of inode security blobCasey Schaufler
2019-01-08LSM: Infrastructure management of the file securityCasey Schaufler
2019-01-08Smack: Abstract use of file security blobCasey Schaufler
2019-01-08SELinux: Abstract use of file security blobCasey Schaufler
2019-01-08Infrastructure management of the cred security blobCasey Schaufler
2019-01-08TOMOYO: Abstract use of cred security blobCasey Schaufler
2019-01-08AppArmor: Abstract use of cred security blobCasey Schaufler
2019-01-08SELinux: Remove unused selinux_is_enabledCasey Schaufler
2019-01-08SELinux: Remove cred security blob poisoningCasey Schaufler
2019-01-08SELinux: Abstract use of cred security blobCasey Schaufler
2019-01-08Smack: Abstract use of cred security blobCasey Schaufler
2019-01-08procfs: add smack subdir to attrsCasey Schaufler
2019-01-08capability: Initialize as LSM_ORDER_FIRSTKees Cook
2019-01-08LSM: Introduce enum lsm_orderKees Cook
2019-01-08Yama: Initialize as ordered LSMKees Cook
2019-01-08LoadPin: Initialize as ordered LSMKees Cook
2019-01-08LSM: Split LSM preparation from initializationKees Cook