2192 Commits (master)

Author SHA1 Message Date
Steven Rostedt 3dc91d4338 SELinux: Fix possible NULL pointer dereference in selinux_inode_permission() 8 years ago
Oleg Nesterov c0c1439541 selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock() 8 years ago
Chad Hanson 46d01d6322 selinux: fix broken peer recv check 8 years ago
Linus Torvalds 29b1deb2a4 Revert "selinux: consider filesystem subtype in policies" 8 years ago
Paul Moore c0828e5048 selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() 8 years ago
Paul Moore 817eff718d selinux: look for IPsec labels on both inbound and outbound packets 8 years ago
Paul Moore 446b802437 selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() 8 years ago
Paul Moore 4718006827 selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() 8 years ago
Geyslan G. Bem 0af901643f selinux: fix possible memory leak 8 years ago
Roberto Sassu a7ed7c60e1 ima: properly free ima_template_entry structures 8 years ago
Christoph Paasch 09ae634572 ima: Do not free 'entry' before it is initialized 8 years ago
Eric Paris c727709092 security: shmem: implement kernel private shmem inodes 8 years ago
David Howells 9c5e45df21 KEYS: Fix searching of nested keyrings 8 years ago
David Howells 23fd78d764 KEYS: Fix multiple key add into associative array 8 years ago
David Howells d54e58b7f0 KEYS: Fix the keyring hash function 8 years ago
David Howells 2480f57fb3 KEYS: Pre-clear struct key on allocation 8 years ago
Roberto Sassu af91706d5d ima: store address of template_fmt_copy in a pointer before calling strsep 8 years ago
Roberto Sassu dbc335d2dc ima: make a copy of template_fmt in template_desc_init_fields() 8 years ago
Roberto Sassu 3e8e5503a3 ima: do not send field length to userspace for digest of ima template 8 years ago
Roberto Sassu b6f8f16f41 ima: do not include field length in template digest calc for ima template 8 years ago
Linus Torvalds 34ef7bd382 Revert "ima: define '_ima' as a builtin 'trusted' keyring" 8 years ago
David Howells 62fe318256 KEYS: Fix keyring content gc scanner 8 years ago
David Howells 97826c821e KEYS: Fix error handling in big_key instantiation 8 years ago
David Howells fbf8c53f1a KEYS: Fix UID check in keyctl_get_persistent() 8 years ago
Richard Guy Briggs a20b62bdf7 audit: suppress stock memalloc failure warnings since already managed 8 years ago
Eric Paris b805b198dc selinux: apply selinux checks on new audit message types 9 years ago
Mimi Zohar 217091dd7a ima: define '_ima' as a builtin 'trusted' keyring 9 years ago
Mimi Zohar bcbc9b0cf6 ima: extend the measurement list to include the file signature 9 years ago
Wei Yongjun d2b8697024 KEYS: fix error return code in big_key_instantiate() 8 years ago
David Howells 034faeb9ef KEYS: Fix keyring quota misaccounting on key replacement and unlink 8 years ago
David Howells 74792b0001 KEYS: Fix a race between negating a key and reading the error set 8 years ago
Josh Boyer 2eaf6b5dca KEYS: Make BIG_KEYS boolean 8 years ago
Oleg Nesterov 51775fe736 apparmor: remove the "task" arg from may_change_ptraced_domain() 8 years ago
John Johansen 4a7fc3018f apparmor: remove parent task info from audit logging 8 years ago
John Johansen 61e3fb8aca apparmor: remove tsk field from the apparmor_audit_struct 8 years ago
John Johansen dd0c6e86f6 apparmor: fix capability to not use the current task, during reporting 8 years ago
Casey Schaufler b5dfd8075b Smack: Ptrace access check mode 8 years ago
Dmitry Kasatkin 3ea7a56067 ima: provide hash algo info in the xattr 9 years ago
Mimi Zohar e7a2ad7eb6 ima: enable support for larger default filedata hash algorithms 9 years ago
Roberto Sassu 9b9d4ce592 ima: define kernel parameter 'ima_template=' to change configured default 9 years ago
Mimi Zohar 4286587dcc ima: add Kconfig default measurement list template 9 years ago
Roberto Sassu add1c05dce ima: defer determining the appraisal hash algorithm for 'ima' template 9 years ago
Mimi Zohar 5278aa52f3 ima: add audit log support for larger hashes 9 years ago
Roberto Sassu a71dc65d30 ima: switch to new template management mechanism 9 years ago
Roberto Sassu 4d7aeee73f ima: define new template ima-ng and template fields d-ng and n-ng 9 years ago
Roberto Sassu 3ce1217d6c ima: define template fields library and new helpers 9 years ago
Roberto Sassu adf53a778a ima: new templates management mechanism 9 years ago
Roberto Sassu 7bc5f447ce ima: define new function ima_alloc_init_template() to API 9 years ago
Roberto Sassu 9803d413f4 ima: pass the filename argument up to ima_add_template_entry() 9 years ago
Roberto Sassu 7d802a227b ima: pass the file descriptor to ima_add_violation() 9 years ago