summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* apparmor: remove no-op permission check in policy_unpackJohn Johansen2018-08-231-32/+0
* apparmor: fix an error code in __aa_create_ns()Dan Carpenter2018-08-221-1/+1
* apparmor: Fix failure to audit context info in build_change_hatJohn Johansen2018-07-201-1/+1
* apparmor: Fully initialize aa_perms struct when answering userspace queryTyler Hicks2018-07-201-4/+1
* apparmor: Check buffer bounds when mapping permissions maskTyler Hicks2018-07-203-6/+17
* Merge tag 'selinux-pr-20180629' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2018-06-301-45/+33
|\
| * selinux: move user accesses in selinuxfs out of locked regionsJann Horn2018-06-291-45/+33
* | dh key: fix rounding up KDF output lengthEric Biggers2018-06-261-2/+4
* | Smack: Mark inode instant in smack_task_to_inodeCasey Schaufler2018-06-231-0/+1
* | docs: Fix some broken referencesMauro Carvalho Chehab2018-06-151-1/+1
* | docs: fix broken references with multiple hintsMauro Carvalho Chehab2018-06-151-1/+1
* | Merge tag 'apparmor-pr-2018-06-13' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2018-06-1414-71/+310
|\ \
| * | apparmor: fix ptrace read checkJohn Johansen2018-06-071-1/+2
| * | apparmor: fix memory leak when deduping profile loadJohn Johansen2018-06-071-0/+3
| * | apparmor: fix mediation of prlimitJohn Johansen2018-06-071-1/+1
| * | apparmor: fixup secid map conversion to using IDRJohn Johansen2018-06-074-8/+29
| * | apparmor: Use an IDR to allocate apparmor secidsMatthew Wilcox2018-06-071-103/+11
| * | apparmor: Fix memory leak of rule on error exit pathTyler Hicks2018-06-071-2/+4
| * | apparmor: modify audit rule support to support profile stacksJohn Johansen2018-06-071-17/+10
| * | apparmor: Add support for audit rule filteringMatthew Garrett2018-06-073-1/+107
| * | apparmor: Convert to use match_string() helperAndy Shevchenko2018-06-071-14/+11
| * | apparmor: improve get_buffers macro by using get_cpu_ptrJohn Johansen2018-06-071-17/+16
| * | apparmor: fix '*seclen' is never less than zeroJohn Johansen2018-05-081-9/+11
| * | apparmor: fix typo "preconfinement"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: fix typo "independent"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: fix typo "traverse"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: fix typo "type"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: fix typo "replace"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: fix typo "comparison"Zygmunt Krynicki2018-05-031-3/+3
| * | apparmor: fix typo "loosen"Zygmunt Krynicki2018-05-031-1/+1
| * | apparmor: add the ability to get a task's secidJohn Johansen2018-05-021-0/+8
| * | apparmor: add support for mapping secids and using secctxesJohn Johansen2018-05-026-25/+224
* | | treewide: kzalloc() -> kcalloc()Kees Cook2018-06-132-2/+2
* | | treewide: kmalloc() -> kmalloc_array()Kees Cook2018-06-131-1/+1
* | | Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds2018-06-081-7/+5
|\ \ \
| * \ \ Merge branch 'smack-for-4.18' of https://github.com/cschaufler/next-smack int...James Morris2018-06-051-7/+5
| |\ \ \
| | * | | Smack: Fix memory leak in smack_inode_getsecctxCasey Schaufler2018-06-051-7/+5
| | |/ /
* | | | Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2018-06-0813-83/+362
|\ \ \ \
| * | | | EVM: unlock on error path in evm_read_xattrs()Dan Carpenter2018-06-011-1/+3
| * | | | EVM: prevent array underflow in evm_write_xattrs()Dan Carpenter2018-05-311-1/+1
| * | | | EVM: Fix null dereference on xattr when xattr fails to allocateColin Ian King2018-05-311-2/+4
| * | | | EVM: fix memory leak of temporary buffer 'temp'Colin Ian King2018-05-311-0/+2
| * | | | IMA: use list_splice_tail_init_rcu() instead of its open coded variantPetko Manolov2018-05-311-15/+2
| * | | | ima: use match_string() helperYisheng Xie2018-05-311-7/+4
| * | | | ima: fix updating the ima_appraise flagMimi Zohar2018-05-221-9/+19
| * | | | ima: based on policy verify firmware signatures (pre-allocated buffer)Mimi Zohar2018-05-221-0/+1
| * | | | ima: define a new policy condition based on the filesystem nameMimi Zohar2018-05-221-1/+24
| * | | | EVM: Allow runtime modification of the set of verified xattrsMatthew Garrett2018-05-184-4/+188
| * | | | EVM: turn evm_config_xattrnames into a listMatthew Garrett2018-05-183-39/+57
| * | | | integrity: Add an integrity directory in securityfsMatthew Garrett2018-05-174-4/+52