summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2012-04-14Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privsAndy Lutomirski
2012-04-10Smack: build when CONFIG_AUDIT not definedKees Cook
2012-04-09SELinux: remove unused common_audit_data in flush_unauthorized_filesEric Paris
2012-04-09SELinux: avc: remove the useless fields in avc_add_callbackWanlong Gao
2012-04-09SELinux: replace weak GFP_ATOMIC to GFP_KERNEL in avc_add_callbackWanlong Gao
2012-04-09SELinux: unify the selinux_audit_data and selinux_late_audit_dataEric Paris
2012-04-09SELinux: remove auditdeny from selinux_audit_dataEric Paris
2012-04-09LSM: do not initialize common_audit_data to 0Eric Paris
2012-04-09LSM: BUILD_BUG_ON if the common_audit_data union ever growsEric Paris
2012-04-09LSM: remove the task field from common_audit_dataEric Paris
2012-04-09apparmor: move task from common_audit_data to apparmor_audit_dataEric Paris
2012-04-09LSM: remove the COMMON_AUDIT_DATA_INIT type expansionEric Paris
2012-04-09SELinux: move common_audit_data to a noinline slow path functionEric Paris
2012-04-09SELinux: remove inode_has_perm_noadpEric Paris
2012-04-09SELinux: delay initialization of audit data in selinux_inode_permissionEric Paris
2012-04-09SELinux: if sel_make_bools errors don't leave inconsistent stateEric Paris
2012-04-09SELinux: remove needless sel_div functionEric Paris
2012-04-09SELinux: possible NULL deref in context_struct_to_stringEric Paris
2012-04-09SELinux: audit failed attempts to set invalid labelsEric Paris
2012-04-09SELinux: rename dentry_open to file_openEric Paris
2012-04-09SELinux: check OPEN on truncate callsEric Paris
2012-04-09SELinux: add default_type statementsEric Paris
2012-04-09SELinux: allow default source/target selectors for user/role/rangeEric Paris
2012-04-09SELinux: loosen DAC perms on reading policyEric Paris
2012-04-09SELinux: allow seek operations on the file exposing policyEric Paris
2012-04-07userns: Add an explicit reference to the parent user namespaceEric W. Biederman
2012-04-07cred: Refcount the user_ns pointed to by the cred.Eric W. Biederman
2012-04-07userns: Use cred->user_ns instead of cred->user->user_nsEric W. Biederman
2012-04-03lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit...Linus Torvalds
2012-04-03SELinux: do not allocate stack space for AVC data unless neededEric Paris
2012-04-03SELinux: remove avd from slow_avc_audit()Eric Paris
2012-04-03SELinux: remove avd from selinux_audit_dataEric Paris
2012-04-03LSM: shrink the common_audit_data data unionEric Paris
2012-04-03LSM: shrink sizeof LSM specific portion of common_audit_dataEric Paris
2012-04-01cgroup: convert all non-memcg controllers to the new cftype interfaceTejun Heo
2012-03-31Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2012-03-31get rid of pointless includes of ext2_fs.hAl Viro
2012-03-31selinuxfs: merge dentry allocation into sel_make_dir()Al Viro
2012-03-31selinux: inline avc_audit() and avc_has_perm_noaudit() into callerLinus Torvalds
2012-03-31selinux: don't inline slow-path code into avc_has_perm_noaudit()Linus Torvalds
2012-03-29Merge branch 'x86-x32-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds
2012-03-28Merge tag 'split-asm_system_h-for-linus-20120328' of git://git.kernel.org/pub...Linus Torvalds
2012-03-28Remove all #inclusions of asm/system.hDavid Howells
2012-03-28apparmor: Fix change_onexec when called from a confined taskJohn Johansen
2012-03-26SELinux: selinux/xfrm.h needs net/flow.hDavid Howells
2012-03-23usermodehelper: kill umh_wait, renumber UMH_* constantsOleg Nesterov
2012-03-23usermodehelper: use UMH_WAIT_PROC consistentlyOleg Nesterov
2012-03-23Merge tag 'nfs-for-3.4-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfsLinus Torvalds
2012-03-22security: optimize avc_audit() common pathLinus Torvalds
2012-03-21Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds