| Commit message (Expand) | Author | Age | Files | Lines |
* | security: compile capabilities by default | sergeh@us.ibm.com | 2008-01-29 | 1 | -0/+1 |
* | selinux: make selinux_set_mnt_opts() static | Adrian Bunk | 2008-01-29 | 1 | -2/+2 |
* | SELinux: Add warning messages on network denial due to error | Paul Moore | 2008-01-29 | 3 | -8/+40 |
* | SELinux: Add network ingress and egress control permission checks | Paul Moore | 2008-01-29 | 1 | -122/+280 |
* | SELinux: Allow NetLabel to directly cache SIDs | Paul Moore | 2008-01-29 | 5 | -134/+55 |
* | SELinux: Enable dynamic enable/disable of the network access checks | Paul Moore | 2008-01-29 | 4 | -13/+83 |
* | SELinux: Better integration between peer labeling subsystems | Paul Moore | 2008-01-29 | 6 | -100/+208 |
* | SELinux: Add a new peer class and permissions to the Flask definitions | Paul Moore | 2008-01-29 | 4 | -0/+26 |
* | SELinux: Add a capabilities bitmap to SELinux policy version 22 | Paul Moore | 2008-01-29 | 6 | -8/+185 |
* | SELinux: Add a network node caching mechanism similar to the sel_netif_*() fu... | Paul Moore | 2008-01-29 | 5 | -17/+416 |
* | SELinux: Only store the network interface's ifindex | Paul Moore | 2008-01-29 | 3 | -6/+15 |
* | SELinux: Convert the netif code to use ifindex values | Paul Moore | 2008-01-29 | 6 | -125/+155 |
* | NetLabel: Add IP address family information to the netlbl_skbuff_getattr() fu... | Paul Moore | 2008-01-29 | 3 | -15/+38 |
* | NetLabel: Add secid token support to the NetLabel secattr struct | Paul Moore | 2008-01-29 | 2 | -6/+9 |
* | [NETFILTER]: Introduce NF_INET_ hook values | Patrick McHardy | 2008-01-28 | 1 | -2/+2 |
* | selinux: fix labeling of /proc/net inodes | Stephen Smalley | 2008-01-26 | 1 | -0/+3 |
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 2008-01-25 | 8 | -277/+564 |
|\ |
|
| * | selinux: make mls_compute_sid always polyinstantiate | Eamon Walsh | 2008-01-25 | 1 | -9/+2 |
| * | security/selinux: constify function pointer tables and fields | Jan Engelhardt | 2008-01-25 | 2 | -3/+3 |
| * | security: add a secctx_to_secid() hook | David Howells | 2008-01-25 | 3 | -0/+18 |
| * | security: remove security_sb_post_mountroot hook | H. Peter Anvin | 2008-01-25 | 2 | -11/+0 |
| * | Security: add get, set, and cloning of superblock security information | Eric Paris | 2008-01-25 | 4 | -254/+541 |
| * | security/selinux: Add missing "space" | Joe Perches | 2008-01-25 | 1 | -1/+1 |
* | | Kobject: convert remaining kobject_unregister() to kobject_put() | Greg Kroah-Hartman | 2008-01-25 | 1 | -1/+1 |
* | | kobject: convert kernel_kset to be a kobject | Greg Kroah-Hartman | 2008-01-25 | 1 | -1/+1 |
* | | kset: convert kernel_subsys to use kset_create | Greg Kroah-Hartman | 2008-01-25 | 1 | -1/+1 |
* | | kobject: convert securityfs to use kobject_create | Greg Kroah-Hartman | 2008-01-25 | 1 | -6/+5 |
* | | kobject: remove struct kobj_type from struct kset | Greg Kroah-Hartman | 2008-01-25 | 1 | -2/+2 |
|/ |
|
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 2008-01-22 | 2 | -4/+5 |
|\ |
|
| * | selinux: fix memory leak in netlabel code | Paul Moore | 2008-01-21 | 2 | -4/+5 |
* | | Fix filesystem capability support | Andrew G. Morgan | 2008-01-22 | 1 | -3/+10 |
|/ |
|
* | Security: allow capable check to permit mmap or low vm space | Eric Paris | 2007-12-05 | 1 | -1/+1 |
* | SELinux: detect dead booleans | Stephen Smalley | 2007-12-05 | 1 | -13/+30 |
* | SELinux: do not clear f_op when removing entries | Stephen Smalley | 2007-12-05 | 1 | -27/+1 |
* | file capabilities: don't prevent signaling setuid root programs | Serge E. Hallyn | 2007-11-29 | 1 | -0/+9 |
* | file capabilities: allow sigcont within session | Serge E. Hallyn | 2007-11-15 | 1 | -0/+4 |
* | SELinux: add more validity checks on policy load | Stephen Smalley | 2007-11-07 | 7 | -38/+118 |
* | SELinux: fix bug in new ebitmap code. | KaiGai Kohei | 2007-11-07 | 1 | -1/+1 |
* | SELinux: suppress a warning for 64k pages. | Stephen Rothwell | 2007-11-07 | 1 | -6/+7 |
* | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo... | Linus Torvalds | 2007-10-23 | 1 | -5/+1 |
|\ |
|
| * | SELinux: always check SIGCHLD in selinux_task_wait | Eric Paris | 2007-10-23 | 1 | -5/+1 |
* | | capabilities: clean up file capability reading | Serge E. Hallyn | 2007-10-22 | 1 | -8/+15 |
|/ |
|
* | pid namespaces: define is_global_init() and is_container_init() | Serge E. Hallyn | 2007-10-19 | 1 | -1/+2 |
* | sparse pointer use of zero as null | Stephen Hemminger | 2007-10-18 | 1 | -1/+1 |
* | V3 file capabilities: alter behavior of cap_setpcap | Andrew Morgan | 2007-10-18 | 2 | -14/+61 |
* | security/ cleanups | Adrian Bunk | 2007-10-17 | 5 | -118/+1 |
* | Implement file posix capabilities | Serge E. Hallyn | 2007-10-17 | 6 | -43/+313 |
* | security: Convert LSM into a static interface | James Morris | 2007-10-17 | 8 | -71/+961 |
* | KEYS: Make request_key() and co fundamentally asynchronous | David Howells | 2007-10-17 | 5 | -317/+335 |
* | SELinux: kills warnings in Improve SELinux performance when AVC misses | KaiGai Kohei | 2007-10-17 | 2 | -6/+7 |