summaryrefslogtreecommitdiff
path: root/security/commoncap.c
AgeCommit message (Expand)Author
2017-08-01commoncap: Move cap_elevated calculation into bprm_set_credsKees Cook
2017-08-01commoncap: Refactor to remove bprm_secureexec hookKees Cook
2017-07-20security: Use user_namespace::level to avoid redundant iterations in cap_capa...Kirill Tkhai
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris
2017-02-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2017-01-24exec: Remove LSM_UNSAFE_PTRACE_CAPEric W. Biederman
2017-01-24exec: Test the ptracer's saved cred to see if the tracee can gain capsEric W. Biederman
2017-01-24exec: Don't reset euid and egid when the tracee has CAP_SETUIDEric W. Biederman
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski
2016-06-24fs: Limit file caps to the user namespace of the super blockSeth Forshee
2016-05-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2016-04-22security: Introduce security_settime64()Baolin Wang
2016-04-11->getxattr(): pass dentry and inode as separate argumentsAl Viro
2016-01-20ptrace: use fsuid, fsgid, effective creds for fs access checksJann Horn
2015-09-04capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISEAndy Lutomirski
2015-09-04capabilities: ambient capabilitiesAndy Lutomirski
2015-05-12LSM: Switch to lists of hooksCasey Schaufler
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells
2015-01-25file->f_path.dentry is pinned down for as long as the file is open...Al Viro
2014-11-19kill f_dentry usesAl Viro
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris
2014-07-24commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa
2013-08-30capabilities: allow nice if we are privilegedSerge Hallyn
2013-08-30userns: Allow PR_CAPBSET_DROP in a user namespace.Eric W. Biederman
2013-02-26kill f_vfsmntAl Viro
2012-12-14Fix cap_capable to only allow owners in the parent user namespace to have caps.Eric W. Biederman
2012-05-31split ->file_mmap() into ->mmap_addr()/->mmap_file()Al Viro
2012-05-31split cap_mmap_addr() out of cap_file_mmap()Al Viro
2012-05-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2012-05-04Merge tag 'v3.4-rc5' into nextJames Morris
2012-05-03userns: Convert capabilities related permsion checksEric W. Biederman
2012-05-03userns: Store uid and gid values in struct cred with kuid_t and kgid_t typesEric W. Biederman
2012-04-26userns: Simplify the user_namespace by making userns->creator a kuid.Eric W. Biederman
2012-04-19security: fix compile error in commoncap.cJonghwan Choi
2012-04-18fcaps: clear the same personality flags as suid when fcaps are usedEric Paris
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski
2012-04-07userns: Add an explicit reference to the parent user namespaceEric W. Biederman
2012-04-07userns: Use cred->user_ns instead of cred->user->user_nsEric W. Biederman
2012-02-14security: trim security.hAl Viro
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Eric Paris
2012-01-05capabilities: remove the task from capable LSM hook entirelyEric Paris
2011-08-16capabilities: initialize has_capSerge Hallyn
2011-08-12capabilities: do not grant full privs for setuid w/ file caps + no effective ...Zhi Li
2011-04-04capabilities: do not special case exec of initEric Paris
2011-03-23userns: allow ptrace from non-init user namespacesSerge E. Hallyn
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds
generated by cgit v1.2.3-58-ga151 (git 2.39.0) at 2024-11-28 08:47:45 +0000