aboutsummaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAge
* integrity: make integrity files as 'integrity' moduleDmitry Kasatkin2014-09-09
* integrity: base integrity subsystem kconfig options on integrityDmitry Kasatkin2014-09-09
* integrity: move asymmetric keys config optionDmitry Kasatkin2014-09-09
* ima: initialize only required templateDmitry Kasatkin2014-09-09
* ima: remove usage of filename parameterDmitry Kasatkin2014-09-09
* ima: remove unnecessary appraisal testDmitry Kasatkin2014-09-09
* ima: add missing '__init' keywordsDmitry Kasatkin2014-09-09
* ima: remove unnecessary extra variableDmitry Kasatkin2014-09-09
* ima: simplify conditional statement to improve performanceDmitry Kasatkin2014-09-09
* integrity: remove declaration of non-existing functionsDmitry Kasatkin2014-09-09
* integrity: prevent flooding with 'Request for unknown key'Dmitry Kasatkin2014-09-09
* ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin2014-09-09
* evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin2014-09-09
* ima: provide flag to identify new empty filesDmitry Kasatkin2014-09-08
* evm: prevent passing integrity check if xattr read failsDmitry Kasatkin2014-09-08
* evm: fix checkpatch warningsDmitry Kasatkin2014-09-02
* ima: fix fallback to use new_sync_read()Dmitry Kasatkin2014-09-02
* ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin2014-09-02
* ima: fix ima_alloc_atfm()Mimi Zohar2014-09-02
* Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-08-02
|\
| * netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore2014-08-01
| * netlabel: fix the horribly broken catmap functionsPaul Moore2014-08-01
| * netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore2014-08-01
* | Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris2014-07-29
|\ \
| * | Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore2014-07-28
* | | KEYS: revert encrypted key changeMimi Zohar2014-07-28
* | | ima: add support for measuring and appraising firmwareMimi Zohar2014-07-25
* | | security: introduce kernel_fw_from_file hookKees Cook2014-07-25
* | | CAPABILITIES: remove undefined caps from all processesEric Paris2014-07-24
* | | Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2014-07-24
|\ \ \
| * \ \ Merge branch 'keys-fixes' into keys-nextDavid Howells2014-07-22
| |\ \ \
| | * | | KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells2014-07-17
| * | | | Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells2014-07-22
| |\ \ \ \
| | * | | | ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar2014-07-17
| | * | | | KEYS: special dot prefixed keyring name bug fixMimi Zohar2014-07-17
| * | | | | KEYS: request_key_auth: Provide key preparsingDavid Howells2014-07-22
| * | | | | KEYS: keyring: Provide key preparsingDavid Howells2014-07-22
| * | | | | KEYS: big_key: Use key preparsingDavid Howells2014-07-22
| * | | | | KEYS: user: Use key preparsingDavid Howells2014-07-22
| * | | | | KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells2014-07-22
| * | | | | KEYS: Allow expiry time to be set when preparsing a keyDavid Howells2014-07-22
| * | | | | KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells2014-07-22
| * | | | | KEYS: Provide a generic instantiation functionDavid Howells2014-07-18
| |/ / / /
* | | | | commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa2014-07-24
* | | | | Merge tag 'seccomp-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris2014-07-19
|\ \ \ \ \
| * | | | | sched: move no_new_privs into new atomic flagsKees Cook2014-07-18
| |/ / / /
* | | | | Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-07-19
|\ \ \ \ \ | |/ / / / |/| | | / | | |_|/ | |/| |
| * | | selinux: reduce the number of calls to synchronize_net() when flushing cachesPaul Moore2014-06-26
| * | | selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long2014-06-23
| * | | selinux: fix a possible memory leak in cond_read_node()Namhyung Kim2014-06-19