summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)Author
2014-09-09ima: pass 'opened' flag to identify newly created filesDmitry Kasatkin
2014-09-09evm: properly handle INTEGRITY_NOXATTRS EVM statusDmitry Kasatkin
2014-09-08ima: provide flag to identify new empty filesDmitry Kasatkin
2014-09-08evm: prevent passing integrity check if xattr read failsDmitry Kasatkin
2014-09-02evm: fix checkpatch warningsDmitry Kasatkin
2014-09-02ima: fix fallback to use new_sync_read()Dmitry Kasatkin
2014-09-02ima: prevent buffer overflow in ima_alloc_tfm()Dmitry Kasatkin
2014-09-02ima: fix ima_alloc_atfm()Mimi Zohar
2014-08-02Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris
2014-08-01netlabel: shorter names for the NetLabel catmap funcs/structsPaul Moore
2014-08-01netlabel: fix the horribly broken catmap functionsPaul Moore
2014-08-01netlabel: fix a problem when setting bits below the previously lowest bitPaul Moore
2014-07-30Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris
2014-07-28Revert "selinux: fix the default socket labeling in sock_graft()"Paul Moore
2014-07-28KEYS: revert encrypted key changeMimi Zohar
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar
2014-07-25security: introduce kernel_fw_from_file hookKees Cook
2014-07-24CAPABILITIES: remove undefined caps from all processesEric Paris
2014-07-24Merge tag 'keys-next-20140722' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris
2014-07-24commoncap: don't alloc the credential unless needed in cap_task_prctlTetsuo Handa
2014-07-22Merge branch 'keys-fixes' into keys-nextDavid Howells
2014-07-22Merge remote-tracking branch 'integrity/next-with-keys' into keys-nextDavid Howells
2014-07-22KEYS: request_key_auth: Provide key preparsingDavid Howells
2014-07-22KEYS: keyring: Provide key preparsingDavid Howells
2014-07-22KEYS: big_key: Use key preparsingDavid Howells
2014-07-22KEYS: user: Use key preparsingDavid Howells
2014-07-22KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells
2014-07-22KEYS: Allow expiry time to be set when preparsing a keyDavid Howells
2014-07-22KEYS: struct key_preparsed_payload should have two payload pointersDavid Howells
2014-07-19Merge tag 'seccomp-3.17' of git://git.kernel.org/pub/scm/linux/kernel/git/kee...James Morris
2014-07-19Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris
2014-07-18sched: move no_new_privs into new atomic flagsKees Cook
2014-07-18KEYS: Provide a generic instantiation functionDavid Howells
2014-07-17KEYS: Allow special keys (eg. DNS results) to be invalidated by CAP_SYS_ADMINDavid Howells
2014-07-17ima: define '.ima' as a builtin 'trusted' keyringMimi Zohar
2014-07-17KEYS: special dot prefixed keyring name bug fixMimi Zohar
2014-07-17ima: provide double buffering for hash calculationDmitry Kasatkin
2014-07-17ima: introduce multi-page collect buffersDmitry Kasatkin
2014-07-17ima: use ahash API for file hash calculationDmitry Kasatkin
2014-07-17audit: fix dangling keywords in integrity ima message outputRichard Guy Briggs
2014-07-17ima: delay template descriptor lookup until useDmitry Kasatkin
2014-07-17ima: remove unnecessary i_mutex locking from ima_rdwr_violation_check()Dmitry Kasatkin
2014-07-17Merge branch 'stable-3.16' of git://git.infradead.org/users/pcmoore/selinux i...James Morris
2014-07-10selinux: fix the default socket labeling in sock_graft()Paul Moore
2014-06-26selinux: reduce the number of calls to synchronize_net() when flushing cachesPaul Moore
2014-06-23selinux: no recursive read_lock of policy_rwlock in security_genfs_sid()Waiman Long
2014-06-19selinux: fix a possible memory leak in cond_read_node()Namhyung Kim
2014-06-19selinux: simple cleanup for cond_read_node()Namhyung Kim
2014-06-18security: Used macros from compiler.h instead of __attribute__((...))Gideon Israel Dsouza
2014-06-18selinux: introduce str_read() helperNamhyung Kim