| Commit message (Expand) | Author | Age | Files | Lines |
* | License cleanup: add SPDX GPL-2.0 license identifier to files with no license | Greg Kroah-Hartman | 2017-11-02 | 1 | -0/+1 |
* | capability: export has_capability | Jike Song | 2017-01-12 | 1 | -0/+1 |
* | Replace <asm/uaccess.h> with <linux/uaccess.h> globally | Linus Torvalds | 2016-12-24 | 1 | -1/+1 |
* | exec: Ensure mm->user_ns contains the execed files | Eric W. Biederman | 2016-11-22 | 1 | -2/+14 |
* | ptrace: Capture the ptracer's creds not PT_PTRACE_CAP | Eric W. Biederman | 2016-11-22 | 1 | -0/+20 |
* | kernel: Add noaudit variant of ns_capable() | Tyler Hicks | 2016-06-06 | 1 | -10/+36 |
* | kernel: conditionally support non-root users, groups and capabilities | Iulia Manda | 2015-04-16 | 1 | -16/+19 |
* | CAPABILITIES: remove undefined caps from all processes | Eric Paris | 2014-07-24 | 1 | -0/+4 |
* | fs,userns: Change inode_capable to capable_wrt_inode_uidgid | Andy Lutomirski | 2014-06-10 | 1 | -12/+8 |
* | kernel/capability.c: code clean-up | Fabian Frederick | 2014-06-05 | 1 | -3/+3 |
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 2014-04-03 | 1 | -19/+10 |
|\ |
|
| * | capability: Use current logging styles | Joe Perches | 2014-02-24 | 1 | -19/+10 |
* | | audit: Simplify and correct audit_log_capset | Eric W. Biederman | 2014-01-14 | 1 | -1/+1 |
|/ |
|
* | Merge tag 'xfs-for-linus-v3.12-rc1' of git://oss.sgi.com/xfs/xfs | Linus Torvalds | 2013-09-09 | 1 | -0/+1 |
|\ |
|
| * | xfs: ioctl check for capabilities in the current user namespace | Dwight Engen | 2013-08-15 | 1 | -0/+1 |
* | | userns: Kill nsown_capable it makes the wrong thing easy | Eric W. Biederman | 2013-08-31 | 1 | -12/+0 |
|/ |
|
* | Add file_ns_capable() helper function for open-time capability checking | Linus Torvalds | 2013-04-14 | 1 | -0/+24 |
* | userns: Teach inode_capable to understand inodes whose uids map to other name... | Eric W. Biederman | 2012-05-15 | 1 | -2/+4 |
* | userns: Replace the hard to write inode_userns with inode_capable. | Eric W. Biederman | 2012-04-08 | 1 | -0/+19 |
* | Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call" | Linus Torvalds | 2012-01-17 | 1 | -1/+1 |
* | Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security | Linus Torvalds | 2012-01-15 | 1 | -34/+46 |
|\ |
|
| * | capabilities: remove task_ns_* functions | Eric Paris | 2012-01-06 | 1 | -14/+0 |
| * | capabitlies: ns_capable can use the cap helpers rather than lsm call | Eric Paris | 2012-01-06 | 1 | -1/+1 |
| * | capabilities: style only - move capable below ns_capable | Eric Paris | 2012-01-06 | 1 | -16/+16 |
| * | capabilites: introduce new has_ns_capabilities_noaudit | Eric Paris | 2012-01-06 | 1 | -5/+25 |
| * | capabilities: call has_ns_capability from has_capability | Eric Paris | 2012-01-06 | 1 | -16/+10 |
| * | capabilities: remove all _real_ interfaces | Eric Paris | 2012-01-06 | 1 | -3/+15 |
| * | capabilities: reverse arguments to security_capable | Eric Paris | 2012-01-06 | 1 | -1/+1 |
* | | kernel: Map most files to use export.h instead of module.h | Paul Gortmaker | 2011-10-31 | 1 | -1/+1 |
|/ |
|
* | Merge branch 'master' into next | James Morris | 2011-05-19 | 1 | -0/+12 |
|\ |
|
| * | Cache user_ns in struct cred | Serge E. Hallyn | 2011-05-13 | 1 | -0/+12 |
* | | capabilities: delete unused cap_set_full | Eric Paris | 2011-04-04 | 1 | -2/+0 |
* | | capabilities: do not drop CAP_SETPCAP from the initial task | Eric Paris | 2011-04-04 | 1 | -2/+0 |
|/ |
|
* | userns: make has_capability* into real functions | Serge E. Hallyn | 2011-03-24 | 1 | -0/+54 |
* | userns: security: make capabilities relative to the user namespace | Serge E. Hallyn | 2011-03-24 | 1 | -5/+37 |
* | security: add cred argument to security_capable() | Chris Wright | 2011-02-11 | 1 | -1/+1 |
* | sched: Remove remaining USER_SCHED code | Li Zefan | 2010-04-02 | 1 | -1/+0 |
* | capabilities: Use RCU to protect task lookup in sys_capget | Thomas Gleixner | 2009-12-09 | 1 | -2/+2 |
* | remove CONFIG_SECURITY_FILE_CAPABILITIES compile option | Serge E. Hallyn | 2009-11-24 | 1 | -2/+0 |
* | Silence the existing API for capability version compatibility check. | Andrew G. Morgan | 2009-11-23 | 1 | -2/+2 |
* | capabilities: simplify bound checks for copy_from_user() | Arjan van de Ven | 2009-10-13 | 1 | -3/+6 |
* | [CVE-2009-0029] System call wrappers part 04 | Heiko Carstens | 2009-01-14 | 1 | -2/+2 |
* | Merge branch 'next' into for-linus | James Morris | 2009-01-06 | 1 | -1/+1 |
|\ |
|
| * | CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3] | David Howells | 2009-01-06 | 1 | -1/+1 |
| * | Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() ... | James Morris | 2009-01-06 | 1 | -1/+1 |
| * | CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2] | David Howells | 2009-01-05 | 1 | -1/+1 |
* | | sanitize audit_log_capset() | Al Viro | 2009-01-04 | 1 | -3/+1 |
|/ |
|
* | CRED: Inaugurate COW credentials | David Howells | 2008-11-14 | 1 | -54/+24 |
* | CRED: Separate task security context from task_struct | David Howells | 2008-11-14 | 1 | -2/+2 |
* | CRED: Neuter sys_capset() | David Howells | 2008-11-14 | 1 | -204/+23 |