aboutsummaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAge
* LSM: Make the Labeled IPsec hooks more stack friendlyPaul Moore2008-04-12
* NetLabel: Allow passing the LSM domain as a shared pointerPaul Moore2008-04-12
* Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...David S. Miller2008-04-03
|\
| * selinux: handle files opened with flags 3 by checking ioctl permissionStephen Smalley2008-04-02
| * smackfs: remove redundant lock, fix open(,O_RDWR)Ahmed S. Darwish2008-03-24
| * file capabilities: remove cap_task_kill()Serge Hallyn2008-03-20
| * smack: do not dereference NULL ipc objectAhmed S. Darwish2008-03-19
| * make selinux_parse_opts_str() staticAdrian Bunk2008-03-17
* | [NET] NETNS: Omit net_device->nd_net without CONFIG_NET_NS.YOSHIFUJI Hideaki2008-03-25
|/
* smackfs: do not trust `count' in inodes write()sAhmed S. Darwish2008-03-13
* LSM/SELinux: Interfaces to allow FS to control mount optionsEric Paris2008-03-05
* Smack: update for file capabilitiesCasey Schaufler2008-02-23
* file capabilities: simplify signal checkSerge E. Hallyn2008-02-23
* Smack: unlabeled outgoing ambient packetsCasey Schaufler2008-02-19
* d_path: Use struct path in struct avc_audit_dataJan Blunck2008-02-15
* Embed a struct path into struct nameidata instead of nd->{dentry,mnt}Jan Blunck2008-02-15
* Smack: check for 'struct socket' with NULL skAhmed S. Darwish2008-02-13
* selinux: support 64-bit capabilitiesStephen Smalley2008-02-11
* Convert ERR_PTR(PTR_ERR(p)) instances to ERR_CAST(p)David Howells2008-02-07
* SELinux: Remove security_get_policycaps()Paul Moore2008-02-06
* security: allow Kconfig to set default mmap_min_addr protectionEric Paris2008-02-06
* Smack: Simplified Mandatory Access Control KernelCasey Schaufler2008-02-05
* capabilities: introduce per-process capability bounding setSerge E. Hallyn2008-02-05
* Add 64-bit capability support to the kernelAndrew Morgan2008-02-05
* revert "capabilities: clean up file capability reading"Andrew Morton2008-02-05
* VFS/Security: Rework inode_getsecurity and callers to return resulting bufferDavid P. Quigley2008-02-05
* [AUDIT] add session id to audit messagesEric Paris2008-02-01
* [PATCH] switch audit_get_loginuid() to task_struct *Al Viro2008-02-01
* [SELinux]: Fix double free in selinux_netlbl_sock_setsid()Paul Moore2008-01-31
* security: compile capabilities by defaultsergeh@us.ibm.com2008-01-29
* selinux: make selinux_set_mnt_opts() staticAdrian Bunk2008-01-29
* SELinux: Add warning messages on network denial due to errorPaul Moore2008-01-29
* SELinux: Add network ingress and egress control permission checksPaul Moore2008-01-29
* SELinux: Allow NetLabel to directly cache SIDsPaul Moore2008-01-29
* SELinux: Enable dynamic enable/disable of the network access checksPaul Moore2008-01-29
* SELinux: Better integration between peer labeling subsystemsPaul Moore2008-01-29
* SELinux: Add a new peer class and permissions to the Flask definitionsPaul Moore2008-01-29
* SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore2008-01-29
* SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu...Paul Moore2008-01-29
* SELinux: Only store the network interface's ifindexPaul Moore2008-01-29
* SELinux: Convert the netif code to use ifindex valuesPaul Moore2008-01-29
* NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu...Paul Moore2008-01-29
* NetLabel: Add secid token support to the NetLabel secattr structPaul Moore2008-01-29
* [NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy2008-01-28
* selinux: fix labeling of /proc/net inodesStephen Smalley2008-01-25
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-01-25
|\
| * selinux: make mls_compute_sid always polyinstantiateEamon Walsh2008-01-24
| * security/selinux: constify function pointer tables and fieldsJan Engelhardt2008-01-24
| * security: add a secctx_to_secid() hookDavid Howells2008-01-24
| * security: remove security_sb_post_mountroot hookH. Peter Anvin2008-01-24