summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)Author
2018-06-06selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover
2018-04-13selinux: do not check open permission on socketsStephen Smalley
2018-04-08selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke
2018-04-08selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke
2018-03-22selinux: check for address length in selinux_socket_bind()Alexander Potapenko
2018-02-25selinux: skip bounded transition processing if the policy isn't loadedPaul Moore
2018-02-25selinux: ensure the context is NUL terminated in security_context_to_sid_core()Paul Moore
2017-02-14selinux: fix off-by-one in setprocattrStephen Smalley
2016-10-20mm: Change vm_is_stack_for_task() to vm_is_stack_for_current()Andy Lutomirski
2016-10-10Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2016-10-10Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds
2016-10-10Merge branch 'printk-cleanups'Linus Torvalds
2016-10-09printk: reinstate KERN_CONT for printing continuation linesLinus Torvalds
2016-10-07xattr: Add __vfs_{get,set,remove}xattr helpersAndreas Gruenbacher
2016-09-27fs: Replace CURRENT_TIME with current_time() for inode timestampsDeepa Dinamani
2016-09-19lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILEVivek Goyal
2016-09-13selinux: fix error return code in policydb_read()Wei Yongjun
2016-08-30selinux: fix overflow and 0 length allocationsWilliam Roberts
2016-08-29selinux: initialize structuresWilliam Roberts
2016-08-29selinux: detect invalid ebitmapWilliam Roberts
2016-08-18selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAXWilliam Roberts
2016-08-10selinux: Implement dentry_create_files_as() hookVivek Goyal
2016-08-08selinux: Pass security pointer to determine_inode_label()Vivek Goyal
2016-08-08selinux: Implementation for inode_copy_up_xattr() hookVivek Goyal
2016-08-08selinux: Implementation for inode_copy_up() hookVivek Goyal
2016-08-08security: Use IS_ENABLED() instead of checking for built-in or moduleJavier Martinez Canillas
2016-08-06Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2016-07-29Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2016-07-20qstr: constify dentry_init_securityAl Viro
2016-07-07Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris
2016-06-27calipso: Add a label cache.Huw Davies
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies
2016-06-24selinux: Add support for unprivileged mounts from user namespacesSeth Forshee
2016-06-24fs: Treat foreign mounts as nosuidAndy Lutomirski
2016-06-15selinux: fix type mismatchHeinrich Schuchardt
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2016-05-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley
2016-04-20rtnetlink: add new RTM_GETSTATS message to dump link statsRoopa Prabhu
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore