aboutsummaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAge
* SELinux: Add network ingress and egress control permission checksPaul Moore2008-01-29
* SELinux: Allow NetLabel to directly cache SIDsPaul Moore2008-01-29
* SELinux: Enable dynamic enable/disable of the network access checksPaul Moore2008-01-29
* SELinux: Better integration between peer labeling subsystemsPaul Moore2008-01-29
* SELinux: Add a new peer class and permissions to the Flask definitionsPaul Moore2008-01-29
* SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore2008-01-29
* SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu...Paul Moore2008-01-29
* SELinux: Only store the network interface's ifindexPaul Moore2008-01-29
* SELinux: Convert the netif code to use ifindex valuesPaul Moore2008-01-29
* NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu...Paul Moore2008-01-29
* NetLabel: Add secid token support to the NetLabel secattr structPaul Moore2008-01-29
* [NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy2008-01-28
* selinux: fix labeling of /proc/net inodesStephen Smalley2008-01-25
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-01-25
|\
| * selinux: make mls_compute_sid always polyinstantiateEamon Walsh2008-01-24
| * security/selinux: constify function pointer tables and fieldsJan Engelhardt2008-01-24
| * security: add a secctx_to_secid() hookDavid Howells2008-01-24
| * security: remove security_sb_post_mountroot hookH. Peter Anvin2008-01-24
| * Security: add get, set, and cloning of superblock security informationEric Paris2008-01-24
| * security/selinux: Add missing "space"Joe Perches2008-01-24
* | Kobject: convert remaining kobject_unregister() to kobject_put()Greg Kroah-Hartman2008-01-24
* | kobject: convert kernel_kset to be a kobjectGreg Kroah-Hartman2008-01-24
* | kset: convert kernel_subsys to use kset_createGreg Kroah-Hartman2008-01-24
* | kobject: convert securityfs to use kobject_createGreg Kroah-Hartman2008-01-24
* | kobject: remove struct kobj_type from struct ksetGreg Kroah-Hartman2008-01-24
|/
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-01-21
|\
| * selinux: fix memory leak in netlabel codePaul Moore2008-01-21
* | Fix filesystem capability supportAndrew G. Morgan2008-01-21
|/
* Security: allow capable check to permit mmap or low vm spaceEric Paris2007-12-05
* SELinux: detect dead booleansStephen Smalley2007-12-05
* SELinux: do not clear f_op when removing entriesStephen Smalley2007-12-05
* file capabilities: don't prevent signaling setuid root programsSerge E. Hallyn2007-11-29
* file capabilities: allow sigcont within sessionSerge E. Hallyn2007-11-14
* SELinux: add more validity checks on policy loadStephen Smalley2007-11-07
* SELinux: fix bug in new ebitmap code.KaiGai Kohei2007-11-07
* SELinux: suppress a warning for 64k pages.Stephen Rothwell2007-11-07
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2007-10-23
|\
| * SELinux: always check SIGCHLD in selinux_task_waitEric Paris2007-10-22
* | capabilities: clean up file capability readingSerge E. Hallyn2007-10-22
|/
* pid namespaces: define is_global_init() and is_container_init()Serge E. Hallyn2007-10-19
* sparse pointer use of zero as nullStephen Hemminger2007-10-18
* V3 file capabilities: alter behavior of cap_setpcapAndrew Morgan2007-10-18
* security/ cleanupsAdrian Bunk2007-10-17
* Implement file posix capabilitiesSerge E. Hallyn2007-10-17
* security: Convert LSM into a static interfaceJames Morris2007-10-17
* KEYS: Make request_key() and co fundamentally asynchronousDavid Howells2007-10-17
* SELinux: kills warnings in Improve SELinux performance when AVC missesKaiGai Kohei2007-10-16
* SELinux: improve performance when AVC misses.KaiGai Kohei2007-10-16
* SELinux: policy selectable handling of unknown classes and permsEric Paris2007-10-16
* SELinux: Improve read/write performanceYuichi Nakamura2007-10-16