aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2010-06-27KEYS: Propagate error code instead of returning -EINVALDan Carpenter1-2/+2
2010-05-27keyctl_session_to_parent(): use thread_group_empty() to check singlethreadnessOleg Nesterov1-1/+1
2010-05-27umh: creds: convert call_usermodehelper_keys() to use subprocess_info->init()Oleg Nesterov3-2/+34
2010-05-25kernel-wide: replace USHORT_MAX, SHORT_MAX and SHORT_MIN with USHRT_MAX, SHRT...Alexey Dobriyan1-3/+3
2010-05-21switch selinux delayed superblock handling to iterate_supers()Al Viro2-48/+8
2010-05-21kref: remove kref_setNeilBrown1-2/+2
2010-05-18KEYS: Return more accurate error codesDan Carpenter1-3/+3
2010-05-17LSM: Add __init to fixup function.Tetsuo Handa2-3/+3
2010-05-17TOMOYO: Add pathname grouping support.Tetsuo Handa6-54/+433
2010-05-17ima: remove ACPI dependencyMimi Zohar1-3/+2
2010-05-17security/selinux/ss: Use kstrdupJulia Lawall1-2/+1
2010-05-10TOMOYO: Use stack memory for pending entry.Tetsuo Handa5-192/+190
2010-05-07Revert "ima: remove ACPI dependency"James Morris1-2/+3
2010-05-06KEYS: Do preallocation for __key_link()David Howells4-130/+215
2010-05-06Merge branch 'master' into nextJames Morris2-20/+23
2010-05-06TOMOYO: Use mutex_lock_interruptible.Tetsuo Handa6-24/+37
2010-05-06KEYS: Better handling of errors from construct_alloc_key()David Howells1-2/+22
2010-05-06KEYS: keyring_serialise_link_sem is only needed for keyring->keyring linksDavid Howells1-7/+9
2010-05-06Merge branch 'master' into nextJames Morris32-15/+52
2010-05-06TOMOYO: Use GFP_NOFS rather than GFP_KERNEL.Tetsuo Handa4-18/+18
2010-05-05KEYS: call_sbin_request_key() must write lock keyrings before modifying themDavid Howells1-1/+1
2010-05-05KEYS: Use RCU dereference wrappers in keyring key type codeDavid Howells1-10/+13
2010-05-05KEYS: find_keyring_by_name() can gain access to a freed keyringToshiyuki Okajima1-9/+9
2010-05-05KEYS: Fix RCU handling in key_gc_keyring()David Howells1-3/+6
2010-05-05KEYS: Fix an RCU warning in the reading of user keysDavid Howells1-1/+2
2010-05-05ima: remove ACPI dependencyMimi Zohar1-3/+2
2010-04-29selinux: generalize disabling of execmem for plt-in-heap archsStephen Smalley1-6/+8
2010-04-27Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-1/+1
2010-04-27keys: the request_key() syscall should link an existing key to the dest keyringDavid Howells1-1/+8
2010-04-28LSM Audit: rename LSM_AUDIT_NO_AUDIT to LSM_AUDIT_DATA_NONEEric Paris2-3/+2
2010-04-28keys: don't need to use RCU in keyring_read() as semaphore is heldDavid Howells1-1/+1
2010-04-27SMACK: Don't #include Ext2 headersDavid Howells1-1/+0
2010-04-24keys: fix an RCU warningDavid Howells1-5/+8
2010-04-23security: whitespace coding style fixesJustin P. Mattock7-45/+45
2010-04-23mmap_min_addr check CAP_SYS_RAWIO only for writeKees Cook1-1/+1
2010-04-23IMA: include the word IMA in printk messagesEric Paris3-5/+5
2010-04-22security: testing the wrong variable in create_by_name()Dan Carpenter1-2/+2
2010-04-21IMA: drop the word integrity in the audit messageEric Paris1-1/+1
2010-04-21IMA: use audit_log_untrusted_string rather than %sEric Paris1-13/+20
2010-04-21IMA: handle comments in policyEric Paris1-7/+14
2010-04-21IMA: handle whitespace betterEric Paris1-3/+3
2010-04-21IMA: reject policies with unknown entriesEric Paris1-0/+1
2010-04-21IMA: set entry->action to UNKNOWN rather than hard codingEric Paris1-1/+1
2010-04-21IMA: do not allow the same rule to specify the same thing twiceEric Paris1-1/+33
2010-04-21ima: handle multiple rules per writeEric Paris3-26/+32
2010-04-21SELinux: return error codes on policy load failureEric Paris1-15/+22
2010-04-20Security: Fix the comment of cap_file_mmap()wzt.wzt@gmail.com1-1/+1
2010-04-15SELinux: Reduce max avtab size to avoid page allocation failuresStephen Smalley1-1/+1
2010-04-12security: remove dead hook acctEric Paris2-11/+0
2010-04-12security: remove dead hook key_session_to_parentEric Paris3-22/+0
2010-04-12security: remove dead hook task_setgroupsEric Paris2-11/+0
2010-04-12security: remove dead hook task_setgidEric Paris2-11/+0
2010-04-12security: remove dead hook task_setuidEric Paris2-11/+0
2010-04-12security: remove dead hook cred_commitEric Paris2-10/+0
2010-04-12security: remove dead hook inode_deleteEric Paris2-12/+0
2010-04-12security: remove dead hook sb_post_pivotrootEric Paris2-10/+0
2010-04-12security: remove dead hook sb_post_addmountEric Paris2-10/+0
2010-04-12security: remove dead hook sb_post_remountEric Paris2-11/+0
2010-04-12security: remove dead hook sb_umount_busyEric Paris2-10/+0
2010-04-12security: remove dead hook sb_umount_closeEric Paris2-10/+0
2010-04-12security: remove sb_check_sb hooksEric Paris2-11/+0
2010-04-09Security: Fix coding style in security/wzt.wzt@gmail.com4-31/+31
2010-04-08SMACK: remove dead cred_commit hookEric Paris1-10/+0
2010-04-08selinux: always call sk_security_struct sksecEric Paris3-36/+36
2010-03-31Merge branch 'master' into nextJames Morris4-23/+9
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo28-3/+25
2010-03-16SELinux: Reduce max avtab size to avoid page allocation failuresStephen Smalley1-1/+1
2010-03-15tomoyo: fix potential use after freeDan Carpenter1-0/+1
2010-03-10security/ima: replace gcc specific __FUNCTION__ with __func__H Hartley Sweeten2-4/+4
2010-03-10Security: key: keyring: fix some code style issuesChihau Chau1-4/+3
2010-03-09Merge branch 'next-queue' into nextJames Morris9-18/+9
2010-03-08Merge branch 'for-next' into for-linusJiri Kosina1-3/+3
2010-03-08selinux: const strings in tablesStephen Hemminger3-3/+3
2010-03-05Security: Fix some coding styles in security/keys/keyring.cwzt.wzt@gmail.com1-4/+2
2010-03-04Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2-20/+5
2010-03-04Selinux: Remove unused headers skbuff.h in selinux/nlmsgtab.cwzt.wzt@gmail.com1-1/+0
2010-03-03get rid of ->mnt_parent in tomoyo/realpathAl Viro1-1/+1
2010-03-03get rid of insanity with namespace roots in tomoyoAl Viro1-19/+4
2010-03-03fix mnt_mountpoint abuse in smackAl Viro1-1/+1
2010-03-03Selinux: Remove unused headers slab.h in selinux/ss/symtab.cwzt.wzt@gmail.com1-1/+0
2010-03-03Selinux: Remove unused headers list.h in selinux/netlink.cwzt.wzt@gmail.com1-1/+0
2010-03-03TOMOYO: Remove unused variables.Tetsuo Handa1-7/+3
2010-03-03Security: Add __init to register_security to disable load a security module o...wzt.wzt@gmail.com1-1/+1
2010-03-01Merge branch 'next' into for-linusJames Morris25-1665/+1937
2010-02-28Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-2/+5
2010-02-26SELinux: Make selinux_kernel_create_files_as() shouldn't just always return 0David Howells1-1/+1
2010-02-26TOMOYO: Protect find_task_by_vpid() with RCU.Tetsuo Handa1-0/+4
2010-02-25security: Apply lockdep-based checking to rcu_dereference() usesPaul E. McKenney2-2/+5
2010-02-25netlabel: fix export of SELinux categories > 127Joshua Roys1-1/+1
2010-02-25security: fix error return path in ima_inode_allocXiaotian Feng1-2/+1
2010-02-24Security: add static to security_ops and default_security_ops variablewzt.wzt@gmail.com3-18/+10
2010-02-22selinux: libsepol: remove dead code in check_avtab_hierarchy_callback()KaiGai Kohei1-4/+39
2010-02-17TOMOYO: Remove __func__ from tomoyo_is_correct_path/domainTetsuo Handa4-32/+20
2010-02-16security: fix a couple of sparse warningsJames Morris1-2/+3
2010-02-16TOMOYO: Remove unneeded parameter.Tetsuo Handa3-38/+27
2010-02-16TOMOYO: Use shorter names.Tetsuo Handa5-299/+250
2010-02-16TOMOYO: Use enum for index numbers.Tetsuo Handa1-45/+54
2010-02-15TOMOYO: Add garbage collector.Tetsuo Handa7-54/+436
2010-02-15TOMOYO: Add refcounter on domain structure.Tetsuo Handa3-16/+28
2010-02-15TOMOYO: Merge headers.Tetsuo Handa8-397/+351
2010-02-15TOMOYO: Add refcounter on string data.Tetsuo Handa5-40/+77
2010-02-11TOMOYO: Reduce lines by using common path for addition and deletion.Tetsuo Handa3-226/+183
2010-02-09selinux: fix memory leak in sel_make_boolsXiaotian Feng1-0/+2
2010-02-08TOMOYO: Extract bitfieldTetsuo Handa4-96/+25
2010-02-07Take ima_file_free() to proper place.Al Viro1-2/+0
2010-02-07ima: rename PATH_CHECK to FILE_CHECKMimi Zohar4-8/+11
2010-02-07ima: rename ima_path_check to ima_file_checkMimi Zohar1-3/+3
2010-02-07ima: initialize ima before inodes can be allocatedEric Paris3-8/+3
2010-02-07fix ima breakageMimi Zohar1-144/+92
2010-02-05fix comment typos in avc.cJustin P. Mattock1-3/+3
2010-02-05syslog: clean up needless commentKees Cook1-1/+0
2010-02-04syslog: use defined constants instead of raw numbersKees Cook2-12/+14
2010-02-04syslog: distinguish between /proc/kmsg and syscallsKees Cook4-7/+13
2010-02-04selinux: allow MLS->non-MLS and vice versa upon policy reloadGuido Trentalancia9-59/+84
2010-02-04selinux: load the initial SIDs upon every policy loadGuido Trentalancia1-4/+12
2010-02-03selinux: Only audit permissions specified in policyStephen Smalley1-10/+7
2010-01-26get rid of pointless checks after simple_pin_fs()Al Viro1-9/+2
2010-01-27TOMOYO: Remove usage counter for temporary memory.Tetsuo Handa6-71/+29
2010-01-25selinux: remove dead code in type_attribute_bounds_av()KaiGai Kohei1-39/+4
2010-01-25selinux: convert range transition list to a hashtabStephen Smalley3-41/+86
2010-01-18Merge branch 'master' into nextJames Morris10-158/+132
2010-01-18selinux: change the handling of unknown classesStephen Smalley4-120/+88
2010-01-15security: correct error returns for get/set security with private inodesJames Morris1-2/+2
2010-01-14Fix ACC_MODE() for realAl Viro1-6/+1
2010-01-11TOMOYO: Remove memory pool for list elements.Tetsuo Handa6-134/+73
2010-01-11TOMOYO: Remove memory pool for string data.Tetsuo Handa1-50/+10
2010-01-11TOMOYO: Replace rw_semaphore by mutex.Tetsuo Handa4-36/+27
2010-01-04SECURITY: selinux, fix update_rlimit_cpu parameterJiri Slaby1-1/+1
2009-12-22Sanitize f_flags helpersAl Viro1-1/+0
2009-12-17Keys: KEYCTL_SESSION_TO_PARENT needs TIF_NOTIFY_RESUME architecture supportGeert Uytterhoeven1-0/+10
2009-12-17NOMMU: Optimise away the {dac_,}mmap_min_addr testsDavid Howells1-1/+2
2009-12-17security/min_addr.c: make init_mmap_min_addr() staticH Hartley Sweeten1-1/+1
2009-12-17keys: PTR_ERR return of wrong pointer in keyctl_get_security()Roel Kluin1-1/+1
2009-12-16ima: limit imbalance msgMimi Zohar1-9/+53
2009-12-16Untangling ima mess, part 3: kill dead code in imaAl Viro1-48/+4
2009-12-16ima: call ima_inode_free ima_inode_freeEric Paris2-5/+2
2009-12-16IMA: clean up the IMA counts updating codeEric Paris2-49/+70
2009-12-16ima: only insert at inode creation timeEric Paris3-66/+14
2009-12-16ima: valid return code from ima_inode_allocEric Paris1-3/+1
2009-12-15TOMOYO: Use RCU primitives for list operationTetsuo Handa6-112/+207
2009-12-09Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds2-2/+2
2009-12-09TOMOYO: Compare filesystem by magic number rather than by name.Tetsuo Handa1-1/+2
2009-12-09Merge branch 'master' into nextJames Morris8-125/+26
2009-12-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds3-11/+11
2009-12-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/sysctl-2.6Linus Torvalds5-114/+15
2009-12-08selinux: remove a useless returnAmerigo Wang1-2/+2
2009-12-08TOMOYO: Add rest of file operation restrictions.Tetsuo Handa5-61/+132
2009-12-08LSM: Rename security_path_ functions argument names.Tetsuo Handa1-15/+15
2009-12-08security/selinux/ss: correct size computationJulia Lawall1-2/+2
2009-12-07Merge branch 'for-next' into for-linusJiri Kosina2-2/+2
2009-12-05Merge branch 'master' of /home/davem/src/GIT/linux-2.6/David S. Miller31-1974/+791
2009-12-04tree-wide: fix assorted typos all over the placeAndré Goddard Rosa2-2/+2
2009-12-03Merge branch 'master' into nextJames Morris3-8/+8
2009-11-25TOMOYO: Add recursive directory matching operator support.Tetsuo Handa2-83/+121
2009-11-24remove CONFIG_SECURITY_FILE_CAPABILITIES compile optionSerge E. Hallyn2-79/+2
2009-11-24SELinux: print denials for buggy kernel with unknown permsEric Paris2-1/+8
2009-11-20net: rename skb->iif to skb->skb_iifEric Dumazet2-5/+5
2009-11-20security/tomoyo: Remove now unnecessary handling of security_sysctl.Eric W. Biederman3-95/+0
2009-11-20security/tomoyo: Add a special case to handle accesses through the internal p...Eric W. Biederman1-0/+9
2009-11-18Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller2-3/+3
2009-11-19ima: replace GFP_KERNEL with GFP_NOFSMimi Zohar1-2/+2
2009-11-18sysctl: Drop & in front of every proc_handler.Eric W. Biederman1-5/+5
2009-11-12sysctl security/tomoyo: Don't look at ctl_nameTetsuo Handa1-9/+1
2009-11-12sysctl security/keys: Remove dead binary sysctl supportEric W. Biederman1-6/+1
2009-11-10security: report the module name to security_module_requestEric Paris4-5/+18
2009-11-09Config option to set a default LSMJohn Johansen2-3/+38
2009-11-09sysctl: require CAP_SYS_RAWIO to set mmap_min_addrKees Cook1-0/+3
2009-10-29tomoyo: improve hash bucket dispersionStephen Hemminger1-4/+9
2009-10-25LSM: imbed ima calls in the security hooksMimi Zohar2-3/+26
2009-10-24SELinux: add .gitignore files for dynamic classesEric Paris1-0/+2
2009-10-20security: remove root_plugJames Morris4-105/+1
2009-10-20SELinux: fix locking issue introduced with c6d3aaa4e35c71a3Stephen Smalley1-3/+7
2009-10-18inet: rename some inet_sock fieldsEric Dumazet1-6/+6
2009-10-15KEYS: get_instantiation_keyring() should inc the keyring refcount in all casesDavid Howells1-1/+1
2009-10-12LSM: Add security_path_chroot().Tetsuo Handa2-0/+11
2009-10-12LSM: Add security_path_chmod() and security_path_chown().Tetsuo Handa2-0/+28
2009-10-07selinux: drop remapping of netlink classesStephen Smalley2-30/+1
2009-10-07selinux: generate flask headers during kernel buildStephen Smalley4-963/+10
2009-10-07selinux: dynamic class/perm discoveryStephen Smalley15-744/+555
2009-10-01const: constify remaining file_operationsAlexey Dobriyan1-5/+5
2009-09-30SELinux: reset the security_ops before flushing the avc cacheEric Paris1-3/+3
2009-09-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/viro/audit-currentLinus Torvalds1-1/+1
2009-09-24sysctl: remove "struct file *" argument of ->proc_handlerAlexey Dobriyan1-2/+2
2009-09-24do_wait() wakeup optimization: change __wake_up_parent() to use filtered wakeupOleg Nesterov1-1/+1
2009-09-24cgroups: let ss->can_attach and ss->attach do whole threadgroups at a timeBen Blum1-1/+2
2009-09-24lsm: Use a compressed IPv6 string format in audit eventsPaul Moore1-1/+1
2009-09-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2-6/+17
2009-09-23SELinux: do not destroy the avc_cache_nodepEric Paris1-4/+15
2009-09-23KEYS: Have the garbage collector set its timer for live expired keysDavid Howells1-2/+2
2009-09-23seq_file: constify seq_operationsJames Morris2-5/+5
2009-09-23Move magic numbers into magic.hNick Black1-7/+1
2009-09-15Merge branch 'x86-txt-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-0/+30
2009-09-15KEYS: Fix garbage collectorDavid Howells4-35/+73
2009-09-15KEYS: Unlock tasklist when exiting early from keyctl_session_to_parentMarc Dionne1-0/+1
2009-09-14SELinux: flush the avc before disabling SELinuxEric Paris1-0/+2
2009-09-14SELinux: seperate avc_cache flushingEric Paris1-7/+17
2009-09-14Creds: creds->security can be NULL is selinux is disabledEric Paris1-0/+6
2009-09-11Merge branch 'next' into for-linusJames Morris36-460/+1290
2009-09-10sysfs: Add labeling support for sysfsDavid P. Quigley2-0/+6
2009-09-10LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security contex...David P. Quigley4-0/+88