summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)Author
2008-02-05capabilities: introduce per-process capability bounding setSerge E. Hallyn
2008-02-05Add 64-bit capability support to the kernelAndrew Morgan
2008-02-05revert "capabilities: clean up file capability reading"Andrew Morton
2008-02-05VFS/Security: Rework inode_getsecurity and callers to return resulting bufferDavid P. Quigley
2008-02-01[AUDIT] add session id to audit messagesEric Paris
2008-02-01[PATCH] switch audit_get_loginuid() to task_struct *Al Viro
2008-01-31[SELinux]: Fix double free in selinux_netlbl_sock_setsid()Paul Moore
2008-01-30security: compile capabilities by defaultsergeh@us.ibm.com
2008-01-30selinux: make selinux_set_mnt_opts() staticAdrian Bunk
2008-01-30SELinux: Add warning messages on network denial due to errorPaul Moore
2008-01-30SELinux: Add network ingress and egress control permission checksPaul Moore
2008-01-30SELinux: Allow NetLabel to directly cache SIDsPaul Moore
2008-01-30SELinux: Enable dynamic enable/disable of the network access checksPaul Moore
2008-01-30SELinux: Better integration between peer labeling subsystemsPaul Moore
2008-01-30SELinux: Add a new peer class and permissions to the Flask definitionsPaul Moore
2008-01-30SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore
2008-01-30SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu...Paul Moore
2008-01-30SELinux: Only store the network interface's ifindexPaul Moore
2008-01-30SELinux: Convert the netif code to use ifindex valuesPaul Moore
2008-01-30NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu...Paul Moore
2008-01-30NetLabel: Add secid token support to the NetLabel secattr structPaul Moore
2008-01-28[NETFILTER]: Introduce NF_INET_ hook valuesPatrick McHardy
2008-01-26selinux: fix labeling of /proc/net inodesStephen Smalley
2008-01-25Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2008-01-24Kobject: convert remaining kobject_unregister() to kobject_put()Greg Kroah-Hartman
2008-01-24kobject: convert kernel_kset to be a kobjectGreg Kroah-Hartman
2008-01-24kset: convert kernel_subsys to use kset_createGreg Kroah-Hartman
2008-01-24kobject: convert securityfs to use kobject_createGreg Kroah-Hartman
2008-01-24kobject: remove struct kobj_type from struct ksetGreg Kroah-Hartman
2008-01-25selinux: make mls_compute_sid always polyinstantiateEamon Walsh
2008-01-25security/selinux: constify function pointer tables and fieldsJan Engelhardt
2008-01-25security: add a secctx_to_secid() hookDavid Howells
2008-01-25security: remove security_sb_post_mountroot hookH. Peter Anvin
2008-01-25Security: add get, set, and cloning of superblock security informationEric Paris
2008-01-25security/selinux: Add missing "space"Joe Perches
2008-01-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2008-01-21Fix filesystem capability supportAndrew G. Morgan
2008-01-22selinux: fix memory leak in netlabel codePaul Moore
2007-12-06Security: allow capable check to permit mmap or low vm spaceEric Paris
2007-12-06SELinux: detect dead booleansStephen Smalley
2007-12-06SELinux: do not clear f_op when removing entriesStephen Smalley
2007-11-29file capabilities: don't prevent signaling setuid root programsSerge E. Hallyn
2007-11-14file capabilities: allow sigcont within sessionSerge E. Hallyn
2007-11-08SELinux: add more validity checks on policy loadStephen Smalley
2007-11-08SELinux: fix bug in new ebitmap code.KaiGai Kohei
2007-11-08SELinux: suppress a warning for 64k pages.Stephen Rothwell
2007-10-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2007-10-23SELinux: always check SIGCHLD in selinux_task_waitEric Paris
2007-10-22capabilities: clean up file capability readingSerge E. Hallyn
2007-10-19pid namespaces: define is_global_init() and is_container_init()Serge E. Hallyn