aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2005-03-31[SELINUX]: Fix for removal of i_sockStephen D. Smalley1-18/+3
2005-03-28[PATCH] SELinux: add name_connect permission checkStephen D. Smalley3-1/+49
2005-03-28[PATCH] SELinux: audit unrecognized netlink messagesStephen D. Smalley1-0/+10
2005-03-28[PATCH] SELinux: allow mounting of filesystems with invalid root inode contextStephen D. Smalley1-1/+3
2005-03-28[PATCH] SELinux: make code static and remove unused codeStephen D. Smalley18-503/+42
2005-03-13[PATCH] selinux needs inetAndrew Morton1-1/+1
2005-03-11[PATCH] Make lots of things staticAdrian Bunk1-3/+3
2005-03-09[PATCH] Properly share process and session keyrings with CLONE_THREAD [try #2]David Howells2-87/+134
2005-03-09[PATCH] Race against parent deletion in key_user_lookup()Alexander Nyberg1-1/+2
2005-03-09[PATCH] SELinux: fix selinux_setprocattrStephen D. Smalley1-2/+6
2005-03-09[PATCH] SELinux: pass requested protection to security_file_mmap/mprotect hooksStephen D. Smalley7-5/+103
2005-03-09[PATCH] SELinux: enhanced MLS supportdgoeddel@trustedcs.com12-835/+1011
2005-03-07[PATCH] make RLIMIT_CPU/SIGXCPU per-processRoland McGrath1-0/+7
2005-03-07[PATCH] selinux: internal inode loop needs IS_PRIVATE testJeff Mahoney1-1/+2
2005-02-28[PATCH] SELinux: null dereference in error pathAlexander Nyberg1-1/+1
2005-02-28[PATCH] SELinux: Leak in error pathAlexander Nyberg1-1/+3
2005-02-24[PATCH] Make keyctl(KEYCTL_JOIN_SESSION_KEYRING) use the correct argDavid Howells2-2/+2
2005-02-04[PATCH] SELinux: fix selinux_inode_setattr hookStephen D. Smalley1-0/+3
2005-02-03[PATCH] SELinux: audit any unmapped permissionsStephen D. Smalley1-2/+9
2005-02-03[PATCH] SELinux: define execmod permission for character devicesStephen D. Smalley2-0/+7
2005-01-20[PATCH] Lock initializer cleanup: SecurityThomas Gleixner6-8/+8
2005-01-20[PATCH] SELinux: add Netlink message types for the TC action code.James Morris1-0/+3
2005-01-20[PATCH] Fix audit control message checksSerge Hallyn2-9/+14
2005-01-14[PATCH] various Kconfig fixesGabor Egry2-2/+2
2005-01-14[PATCH] SELinux: fix setting of loaded policy versionStephen D. Smalley4-13/+13
2005-01-14[PATCH] SELinux: fix error handling code for policy loadStephen D. Smalley3-5/+14
2005-01-11[PATCH] seclvl: add missing dependencyAkinobu Mita1-0/+1
2005-01-10[PATCH] merge *_vm_enough_memory()s into a common helperSerge Hallyn3-192/+23
2005-01-10[PATCH] split bprm_apply_creds into two functionsSerge Hallyn3-70/+90
2005-01-04[PATCH] SELinux: eliminate unaligned accesses by policy loading codeStephen D. Smalley6-250/+201
2005-01-04[PATCH] SELinux: add member node to selinuxfsStephen D. Smalley1-0/+65
2005-01-04[PATCH] SELinux: enhance SELinux control of executable mappingsStephen D. Smalley3-0/+27
2005-01-04[PATCH] SELinux: add dynamic context transition support to SELinuxStephen D. Smalley4-5/+56
2005-01-04[PATCH] SELinux: audit task comm if exe cannot be determinedStephen D. Smalley1-0/+2
2005-01-04[PATCH] SELinux: update selinux_task_setschedulerStephen D. Smalley1-10/+1
2005-01-04[PATCH] SELinux: regenerate SELinux module headersStephen D. Smalley7-391/+409
2005-01-04[PATCH] SELinux scalability: AVC statistics and tuningJames Morris6-61/+287
2005-01-04[PATCH] SELinux: atomic_dec_and_test() bugJames Morris1-1/+1
2005-01-04[PATCH] SELinux scalability: convert AVC to RCUJames Morris5-355/+323
2005-01-04[PATCH] move waitchld_exit from task_struct to signal_structRoland McGrath1-1/+1
2005-01-04[PATCH] GP-REL data supportDavid Howells1-2/+2
2005-01-04[PATCH] properly split capset_check+capset_setSerge Hallyn1-6/+0
2005-01-03[PATCH] fix up dummy security module code mergeChris Wright1-1/+2
2005-01-03[PATCH] remove duplicated patch fragmentAndries E. Brouwer1-4/+0
2005-01-03[PATCH] track capabilities in default dummy security module codeChris Wright1-4/+3
2005-01-03[PATCH] mm: overcommit updatesAndries E. Brouwer2-0/+16
2005-01-03[PATCH] Fix of quota deadlock on pagelock: quota coreJan Kara2-3/+3
2004-12-27[INET] move inet_sock into inet_opt and rename it to inet_sockArnaldo Carvalho de Melo1-2/+2
2004-11-21[PATCH] SELinux: map Unix seqpacket sockets to appropriate security classStephen D. Smalley1-0/+3
2004-11-18[PATCH] selinux: cache not freed if load_policy fails; reload BUG'sJeff Mahoney3-0/+8
2004-11-01[PATCH] key management: fix locking problem and move __key_check() out of lineDavid Howells2-10/+11
2004-10-28[PATCH] key_init ordering fixAndrew Morton1-9/+2
2004-10-27[PATCH] SELinux: fix sidtab locking bugJames Morris1-8/+13
2004-10-27[PATCH] SELinux: fix netif bugs and simplify.James Morris4-86/+89
2004-10-27[PATCH] move key_init to security_initcallDavid Howells1-1/+1
2004-10-27Fix up "compat_sys_keyctl()" system call.Linus Torvalds1-2/+2
2004-10-26[PATCH] ppc/ppc64: hook up key management syscallsDavid Howells4-29/+124
2004-10-25[PATCH] Add DAC check for setxattr(security.selinux)Stephen D. Smalley1-0/+3
2004-10-25[PATCH] Add d_alloc_name() to libfsJames Morris1-14/+3
2004-10-25[PATCH] lsm: remove net related includes from security.hChris Wright1-0/+17
2004-10-25[PATCH] lsm: fix send_sigurg mediationChris Wright2-6/+4
2004-10-21[PATCH] lsm: Lindent security/security.cChris Wright1-29/+29
2004-10-21[PATCH] lsm: reduce noise during security_registerChris Wright1-10/+4
2004-10-21[PATCH] lsm: rename security_scaffolding_startup to security_initChris Wright1-4/+4
2004-10-19[PATCH] BSD Secure Levels LSM: coreMichael A. Halcrow3-0/+759
2004-10-19[PATCH] BSD Secure Levels LSM: add time hooksMichael A. Halcrow3-5/+20
2004-10-18[PATCH] SELinux: allow all filesystems to specify fscreate mount optionJames Morris1-7/+0
2004-10-18[PATCH] xattr consolidation v3 - LSMJames Morris2-9/+7
2004-10-18[PATCH] don't include <linux/sysctl.h> in <linux/security.h>Christoph Hellwig1-0/+1
2004-10-18[PATCH] implement in-kernel keys & keyring managementDavid Howells11-0/+4496
2004-10-18[PATCH] make rlimit settings per-process instead of per-threadRoland McGrath1-3/+3
2004-10-13[PATCH] SELinux: fix bugs in mprotect hookJames Morris1-11/+16
2004-10-13[PATCH] SELinux: retain ptracer SID across forkStephen D. Smalley1-0/+5
2004-09-29[PATCH] overcommit symbolic constantsAndries E. Brouwer3-6/+6
2004-09-02[PATCH] Root reservations for strict overcommitAlan Cox1-0/+5
2004-08-23Merge bk://kernel.bkbits.net/davem/net-2.6Linus Torvalds1-2/+4
2004-08-23[PATCH] Reduce SELinux kernel memory use on 64-bit systemsJames Morris3-2/+13
2004-08-23[PATCH] SELinux: fix name_bind auditStephen D. Smalley1-0/+1
2004-08-23[PATCH] SElinux; defer inode security initializationStephen D. Smalley1-0/+6
2004-08-23[PATCH] SELinux: revalidate access to controlling ttyStephen D. Smalley1-0/+25
2004-08-23[PATCH] SELinux: add null device node to selinuxfs, remove open_devnullStephen D. Smalley2-62/+45
2004-08-23[SELINUX]: Fix bugs introduced by skb_header_pointer() changes.Stephen D. Smalley1-2/+4
2004-08-23[PATCH] use simple_read_from_buffer in selinuxfsChris Wright1-102/+17
2004-08-23[PATCH] Fix typos in security/security.cChris Wright1-2/+2
2004-08-23[PATCH] configurable SELinux bootparam valueChris Wright2-1/+16
2004-08-23[PATCH] small simplification for two SECURITY dependenciesChris Wright1-2/+2
2004-08-23[PATCH] libfs: move transaction file ops into libfsJames Morris1-87/+16
2004-08-23Merge bk://kernel.bkbits.net/davem/net-2.6Linus Torvalds1-34/+38
2004-08-22[PATCH] remove dead prototypesCarl Spalletta2-2/+0
2004-08-18[NET]: Add skb_header_pointer, and use it where possible.David S. Miller1-34/+38
2004-07-28[PATCH] selinux: fix clearing of new personality bit on security transitionsStephen D. Smalley1-3/+3
2004-07-26[PATCH] security/selinux/hooks.c compile fixAlexander Viro1-0/+1
2004-07-17[PATCH] NX: clean up legacy binary supportIngo Molnar1-0/+3
2004-07-14Merge kroah.com:/home/greg/linux/BK/bleed-2.6Greg Kroah-Hartman1-3/+3
2004-07-14[PATCH] Upgrade security/root_plug.c to new module parameter syntaxMika Kukkonen1-3/+3
2004-07-13[PATCH] Fix 'unsigned' < 0 checksMika Kukkonen1-1/+2
2004-07-10[PATCH] Use NULL instead of integer 0 in security/selinux/Chris Wright6-35/+35
2004-07-04[PATCH] selinux space savingChris Wright1-11/+2
2004-07-04[PATCH] selinux build fixChris Wright2-19/+18
2004-06-26[PATCH] SELinux: fix build with CONFIG_SECURITY_NETWORK=nStephen D. Smalley1-22/+29
2004-06-23[PATCH] SELinux: Extend and revise calls to secondary moduleAndrew Morton1-9/+85
2004-06-23[PATCH] rcu: avoid passing an argument to the callback functionAndrew Morton1-3/+3
2004-06-17Merge duplicate selinux network hooksLinus Torvalds1-0/+153
2004-06-17[PATCH] SELinux: Fine-grained Netlink support - SELinux changesJames Morris11-28/+522
2004-06-17[PATCH] SELinux: Fine-grained Netlink support - add sk to netlink_send hookJames Morris2-2/+2
2004-06-17[PATCH] SELinux: Fine-grained Netlink support - SELinux headers updateJames Morris4-253/+463
2004-06-17[PATCH] Fix sock_orphan race.James Morris1-16/+21
2004-06-15[SELINUX]: Fine-grained Netlink support - SELinux changesJames Morris10-28/+369
2004-06-15[SELINUX]: Fine-grained Netlink support - add sk to netlink_send hookJames Morris2-2/+2
2004-06-15[SELINUX]: Fine-grained Netlink support - SELinux headersJames Morris4-253/+463
2004-06-15[SELINUX]: Fix sock_orphan race.James Morris1-16/+21
2004-06-14[PATCH] __user annotation for selinux_shm_shmatChris Wright1-1/+1
2004-06-14[PATCH] __user annotation for dummy_shm_shmatChris Wright1-1/+1
2004-06-12[PATCH] sparse fix for void return in selinux/hooks.cAndrew Morton1-2/+2
2004-06-03[PATCH] sparse: selinux annotationAlexander Viro1-12/+13
2004-06-02[PATCH] selinux: check processed security context lengthAndrew Morton2-1/+6
2004-05-31[PATCH] SECURITY_SELINUX depends on NETAndrew Morton1-1/+1
2004-05-19[PATCH] SELinux: fix error handling in selinuxfsAndrew Morton1-4/+8
2004-05-19[PATCH] security: add disable param to capabilities moduleAndrew Morton1-0/+10
2004-05-14[PATCH] security: minor cleanups in capability.cAndrew Morton1-8/+3
2004-05-14[PATCH] security: remove empty build of capability.oAndrew Morton2-6/+1
2004-05-10[PATCH] SElinux interface for reporting size of printk bufferAndrew Morton3-2/+3
2004-05-09[PATCH] selinux: reopen descriptors closed on exec to /dev/nullAndrew Morton3-4/+85
2004-05-08[NET]: Add sock_create_kern()James Morris2-8/+18
2004-04-26[PATCH] SELinux ptrace race fixAndrew Morton2-6/+12
2004-04-26[PATCH] credentials locking fixAndrew Morton3-50/+29
2004-04-20[PATCH] selinux: remove hardcoded policy assumption from get_user_sids() logicAndrew Morton1-2/+0
2004-04-20[PATCH] selinux: add runtime disableAndrew Morton3-2/+128
2004-04-20[PATCH] selinux: change context_to_sid handling for no-policy caseAndrew Morton1-3/+1
2004-04-20[PATCH] compute_creds raceAndrew Morton5-24/+57
2004-04-12[PATCH] policydb printk warningsAndrew Morton1-1/+1
2004-04-11[PATCH] selinux: remove ratelimit from avcAndrew Morton1-55/+0
2004-04-11[PATCH] selinux: Audit compute_sid errorsAndrew Morton1-20/+23
2004-04-11[PATCH] selinux: make IPv6 code work with audit frameworkAndrew Morton1-8/+9
2004-04-11[PATCH] Light-weight Auditing FrameworkAndrew Morton3-98/+79
2004-04-11[PATCH] From: James Morris <jmorris@redhat.com>Andrew Morton1-1/+1
2004-04-11[PATCH] selinux: add IPv6 supportAndrew Morton8-104/+422
2004-04-11[PATCH] selinux: fix struct typeAndrew Morton1-1/+1
2004-04-11[PATCH] Fix URLs in Kconfig filesAndrew Morton1-1/+1
2004-03-31[PATCH] Fix hugetlb-vs-memory overcommitAndrew Morton3-3/+9
2004-03-30[PATCH] double semicolon cleanupAlexander Stohr1-1/+1
2004-03-26[PATCH] selinux: check return value for receive node permissionAndrew Morton1-0/+2
2004-03-18[PATCH] VM overcommit documentation fixesAndrew Morton3-2/+10
2004-03-15[PATCH] selinux: fix compute_av bugAndrew Morton1-1/+1
2004-03-15[PATCH] selinux: Conditional policy extension and MLS detection supportAndrew Morton14-95/+1480
2004-03-11[PATCH] selinux: clean up binary mount dataAndrew Morton2-18/+17
2004-02-24[PATCH] add syscalls.hAndrew Morton1-0/+1
2004-02-24[PATCH] Change ENOTSUPP to EOPNOTSUPPAndrew Morton1-2/+2
2004-02-18[PATCH] snprintf fixesAndrew Morton1-3/+3
2004-02-18[PATCH] NGROUPS 2.6.2rc2 + fixupsAndrew Morton2-2/+2
2004-02-18[SELINUX]: Forgot to add these in previous commit.David S. Miller1-0/+113
2004-02-18[SELINUX]: Event notifications via netlink.James Morris3-1/+7
2004-02-15[PATCH] SELinux: Fix error handling bug.Andrew Morton1-2/+3
2004-02-15[PATCH] selinux: mark avc_init with __initAndrew Morton2-2/+3
2004-02-15[PATCH] selinux: Allow non-root processes to read selinuxfs enforce nodeAndrew Morton1-1/+1
2004-02-15[PATCH] SELinux: context mount support - SELinux changes.Andrew Morton3-25/+303
2004-02-15[PATCH] SELinux: context mount support - LSM/FSAndrew Morton1-1/+7
2004-02-12[PATCH] selinux: Fix bugs in policy loading codeAndrew Morton2-7/+23
2004-02-03[PATCH] SElinux compile fixAndrew Morton2-0/+2
2004-02-03[PATCH] rate limit nr_free_pagesAndrew Morton1-1/+14
2004-01-20[PATCH] selinux build fixGerd Knorr1-0/+1
2004-01-20[PATCH] Default hooks protecting the XATTR_SECURITY_PREFIX namespaceAndrew Morton3-0/+34
2004-01-20[PATCH] Move XATTR_SECURITY_PREFIX macro to common locationAndrew Morton1-4/+3
2004-01-18[PATCH] Add SEND_MSG and RECV_MSG controlsAndrew Morton1-4/+43
2004-01-18[PATCH] selinux: improve skb audit loggingAndrew Morton3-47/+75
2004-01-18[PATCH] selinux: Makefile cleanupAndrew Morton3-11/+5
2004-01-18[PATCH] selinux: Add dname to audit output when a path cannot be generated.Andrew Morton1-2/+11
2004-01-18[PATCH] selinux: Add SO_PEERSEC socket option and getpeersec LSM hook.Andrew Morton3-0/+118
2004-01-18[PATCH] selinux: socket_has_perm cleanupAndrew Morton1-115/+8
2004-01-18[PATCH] selinux: Add node_bind controlAndrew Morton5-6/+45
2004-01-18[PATCH] selinux: Add node controlsAndrew Morton1-4/+32
2004-01-18[PATCH] selinux: add netif controlsAndrew Morton5-1/+444
2004-01-18[PATCH] selinux: Add resource limit controlAndrew Morton3-4/+34
2003-12-29[PATCH] Add signal state inheritance control to SELinuxAndrew Morton3-1/+24
2003-12-29[PATCH] Remove use of nameidata by selinux_inode_permissionAndrew Morton1-4/+0
2003-12-29[PATCH] Reduce SELinux check on KDSKBENT/SENT ioctlsAndrew Morton1-2/+1
2003-12-29[PATCH] Fix SELinux build for "make O=..."Andrew Morton10-20/+41
2003-10-15[PATCH] SELINUX: add policyvers to selinuxfsAndrew Morton3-2/+44
2003-10-01[PATCH] Pass nameidata to security_inode_permission hookAndrew Morton2-2/+7
2003-10-01[PATCH] Fix bug in SELinux convert_contextAndrew Morton1-1/+3
2003-09-23[PATCH] SELinux leak fixesAndrew Morton2-57/+68
2003-09-16[PATCH] root_plug fixupChris Wright3-331/+356
2003-09-16[PATCH] LSM comment fixupChris Wright1-3/+2
2003-09-09[PATCH] make selinux enable param config option, enabled byAndrew Morton4-7/+24
2003-09-03[PATCH] Enable SELinux via boot parameterAndrew Morton3-2/+21
2003-08-31[PATCH] Rework SELinux binprm hooksAndrew Morton2-35/+34
2003-08-31[PATCH] Fix SELinux format specifiersAndrew Morton2-6/+6
2003-08-31[PATCH] Fix SELinux avtabAndrew Morton2-2/+3
2003-08-31[PATCH] Fix selinux_file_fcntlAndrew Morton1-0/+2
2003-08-31[PATCH] vm_enough_memory microoptimisationAndrew Morton1-6/+7
2003-08-18[PATCH] SELinux check behavior valueAndrew Morton2-3/+11
2003-08-18[PATCH] Fix SELinux avc_log_lockAndrew Morton1-2/+3
2003-08-14[PATCH] SELinux inode security initAndrew Morton2-30/+34
2003-08-13[PATCH] Make SELinux security module compile on m68kGeert Uytterhoeven2-1/+2
2003-07-31[PATCH] selinux mergeAndrew Morton39-0/+12206
2003-07-02[PATCH] Security hook for vm_enough_memoryAndrew Morton2-0/+117
2003-06-25[PATCH] AT_SECURE auxv entryAndrew Morton2-0/+24
2003-06-13[PATCH] lsm: Remove inode_permission_lite hook (3/4)Chris Wright1-6/+0
2003-06-13[PATCH] lsm: Remove task_kmod_set_label hook (2/4)Chris Wright3-15/+0
2003-06-13[PATCH] lsm: Early init for security modules (1/4)Chris Wright3-3/+14