summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* capabilities: define get_vfs_caps_from_disk when file caps are not enabledEric Paris2008-11-141-0/+6
* CRED: Allow kernel services to override LSM settings for task actionsDavid Howells2008-11-144-0/+105
* CRED: Add a kernel_service object class to SELinuxDavid Howells2008-11-144-0/+10
* CRED: Differentiate objective and effective subjective credentials on a taskDavid Howells2008-11-141-24/+41
* CRED: Prettify commoncap.cDavid Howells2008-11-141-52/+248
* CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells2008-11-148-335/+214
* CRED: Inaugurate COW credentialsDavid Howells2008-11-1414-630/+668
* CRED: Pass credentials through dentry_open()David Howells2008-11-143-9/+12
* CRED: Make inode_has_perm() and file_has_perm() take a cred pointerDavid Howells2008-11-141-48/+92
* CRED: Separate per-task-group keyrings from signal_structDavid Howells2008-11-142-80/+54
* CRED: Wrap access to SELinux's task SIDDavid Howells2008-11-141-194/+218
* CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells2008-11-145-57/+86
* CRED: Wrap current->cred and a few other accessorsDavid Howells2008-11-148-29/+32
* CRED: Detach the credentials from task_structDavid Howells2008-11-144-35/+33
* CRED: Separate task security context from task_structDavid Howells2008-11-1413-258/+280
* CRED: Constify the kernel_cap_t arguments to the capset LSM hooksDavid Howells2008-11-143-14/+18
* CRED: Neuter sys_capset()David Howells2008-11-143-36/+21
* KEYS: Alter use of key instantiation link-to-keyring argumentDavid Howells2008-11-145-111/+187
* KEYS: Disperse linux/key_ui.hDavid Howells2008-11-143-1/+33
* CRED: Wrap task credential accesses in the capabilities codeDavid Howells2008-11-141-12/+18
* CRED: Wrap task credential accesses in the key management codeDavid Howells2008-11-144-8/+8
* Currently SELinux jumps through some ugly hoops to not audit a capbilityEric Paris2008-11-111-17/+2
* Add a new capable interface that will be used by systems that use audit toEric Paris2008-11-113-12/+23
* Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris2008-11-111-1/+22
* This patch add a generic cpu endian caps structure and externally availableEric Paris2008-11-111-58/+71
* SELinux: Use unknown perm handling to handle unknown netlink msg typesEric Paris2008-11-091-1/+1
* file capabilities: add no_file_caps switch (v4)Serge E. Hallyn2008-11-061-0/+3
* Merge branch 'master' into nextJames Morris2008-11-065-56/+30
|\
| * Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-11-011-3/+5
| |\
| | * SELinux: properly handle empty tty_files listEric Paris2008-10-311-3/+5
| * | file caps: always start with clear bprm->caps_*Serge Hallyn2008-11-011-3/+3
| |/
| * nfsd: fix vm overcommit crashAlan Cox2008-10-301-0/+9
| * Merge branch 'v28-timers-for-linus' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2008-10-201-7/+2
| |\
| | *---. Merge branches 'timers/clocksource', 'timers/hrtimers', 'timers/nohz', 'timer...Thomas Gleixner2008-10-2028-257/+1096
| | |\ \ \
| | | | | * timers: fix itimer/many thread hangFrank Mayhar2008-09-141-7/+2
| | | | |/
| * | | | devcgroup: remove spin_lock()Lai Jiangshan2008-10-201-29/+5
| * | | | devcgroup: remove unused variableLi Zefan2008-10-201-2/+1
| * | | | devcgroup: use kmemdup()Li Zefan2008-10-201-7/+2
| | |/ / | |/| |
| * | | vfs: Use const for kernel parser tableSteven Whitehouse2008-10-131-1/+1
| * | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-10-138-114/+473
| |\ \ \
| | * | | integrity: special fs magicMimi Zohar2008-10-131-2/+1
| * | | | tty: Redo current tty lockingAlan Cox2008-10-131-2/+0
| * | | | tty: Make get_current_tty use a krefAlan Cox2008-10-131-1/+2
* | | | | selinux: recognize netlink messages for 'ip addrlabel'Michal Schmidt2008-11-061-0/+3
* | | | | SELinux: hold tasklist_lock and siglock while waking wait_chldexitEric Paris2008-11-041-0/+7
* | | | | SELinux: check open perms in dentry_open not inode_permissionEric Paris2008-10-301-29/+30
| |/ / / |/| | |
* | | | Merge branch 'master' of git://git.infradead.org/users/pcmoore/lblnet-2.6_nex...James Morris2008-10-117-112/+472
|\ \ \ \ | |/ / / |/| | |
| * | | netlabel: Changes to the NetLabel security attributes to allow LSMs to pass f...Paul Moore2008-10-101-1/+2
| * | | selinux: Cache NetLabel secattrs in the socket's security structPaul Moore2008-10-104-39/+91
| * | | selinux: Set socket NetLabel based on connection endpointPaul Moore2008-10-104-36/+142