summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2017-09-25KEYS: restrict /proc/keys by credentials at open timeEric Biggers
2017-09-25KEYS: reset parent each time before searching key_user_treeEric Biggers
2017-09-25KEYS: prevent KEYCTL_READ on negative keyEric Biggers
2017-09-25KEYS: prevent creating a different user's keyringsEric Biggers
2017-09-25KEYS: fix writing past end of user-supplied buffer in keyring_read()Eric Biggers
2017-09-25KEYS: fix key refcount leak in keyctl_read_key()Eric Biggers
2017-09-25KEYS: fix key refcount leak in keyctl_assume_authority()Eric Biggers
2017-09-25KEYS: don't revoke uninstantiated key in request_key_auth_new()Eric Biggers
2017-09-25KEYS: fix cred refcount leak in request_key_auth_new()Eric Biggers
2017-09-24Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2017-09-23security: fix description of values returned by cap_inode_need_killprivStefan Berger
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2017-09-22apparmor: fix apparmorfs DAC access permissionsJohn Johansen
2017-09-22apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen
2017-09-22apparmor: fix incorrect type assignment when freeing proxiesJohn Johansen
2017-09-22apparmor: ensure unconfined profiles have dfas initializedJohn Johansen
2017-09-22apparmor: fix race condition in null profile creationJohn Johansen
2017-09-22apparmor: move new_null_profile to after profile lookup fns()John Johansen
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen
2017-09-22apparmor: add more debug asserts to apparmorfsJohn Johansen
2017-09-22apparmor: make policy_unpack able to audit different info messagesJohn Johansen
2017-09-22apparmor: add support for absolute root view based labelsJohn Johansen
2017-09-22apparmor: cleanup conditional check for label in label_printJohn Johansen
2017-09-22apparmor: add mount mediationJohn Johansen
2017-09-22apparmor: add the ability to mediate signalsJohn Johansen
2017-09-22apparmor: Redundant condition: prev_ns. in [label.c:1498]John Johansen
2017-09-22apparmor: Fix an error code in aafs_create()Dan Carpenter
2017-09-22apparmor: Fix logical error in verify_header()Christos Gkekas
2017-09-22apparmor: Fix shadowed local variable in unpack_trans_table()Geert Uytterhoeven
2017-09-14Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds
2017-09-12Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2017-09-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2017-09-07Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2017-09-07Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds
2017-09-05selinux: remove AVC init audit log messageRichard Guy Briggs
2017-09-04fs: fix kernel_write prototypeChristoph Hellwig
2017-09-04fs: fix kernel_read prototypeChristoph Hellwig
2017-09-01Introduce v3 namespaced file capabilitiesSerge E. Hallyn
2017-08-28selinux: constify nf_hook_opsArvind Yadav
2017-08-22selinux: allow per-file labeling for cgroupfsAntonio Murdaca
2017-08-17lsm_audit: update my email addressStephen Smalley
2017-08-17selinux: update my email addressStephen Smalley
2017-08-08selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley
2017-08-01smack: Remove redundant pdeath_signal clearingKees Cook
2017-08-01LSM: drop bprm_secureexec hookKees Cook
2017-08-01commoncap: Move cap_elevated calculation into bprm_set_credsKees Cook
2017-08-01commoncap: Refactor to remove bprm_secureexec hookKees Cook
2017-08-01smack: Refactor to remove bprm_secureexec hookKees Cook
2017-08-01selinux: Refactor to remove bprm_secureexec hookKees Cook