summaryrefslogtreecommitdiffstats
path: root/security/selinux/xfrm.c
Commit message (Expand)AuthorAgeFilesLines
* treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2019-06-191-4/+1Star
* SELinux: Abstract use of cred security blobCasey Schaufler2019-01-081-2/+2
* net: use skb_sec_path helper in more placesFlorian Westphal2018-12-191-2/+2
* selinux: wrap AVC stateStephen Smalley2018-03-201-6/+11
* selinux: wrap global selinux stateStephen Smalley2018-03-021-2/+4
* net: Create and use new helper xfrm_dst_child().David Miller2017-11-301-1/+1
* netfilter: Remove spurios included of netfilter.hEric W Biederman2015-06-181-3/+0Star
* selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov2014-03-101-6/+8
* selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-121-10/+41
* selinux: fix possible memory leakGeyslan G. Bem2013-12-041-4/+7
* selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong2013-09-261-2/+2
* selinux: cleanup selinux_xfrm_decode_session()Paul Moore2013-07-251-11/+12
* selinux: cleanup some comment and whitespace issues in the XFRM codePaul Moore2013-07-251-13/+10Star
* selinux: cleanup selinux_xfrm_sock_rcv_skb() and selinux_xfrm_postroute_last()Paul Moore2013-07-251-52/+33Star
* selinux: cleanup selinux_xfrm_policy_lookup() and selinux_xfrm_state_pol_flow...Paul Moore2013-07-251-36/+18Star
* selinux: cleanup and consolidate the XFRM alloc/clone/delete/free codePaul Moore2013-07-251-31/+40
* lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore2013-07-251-109/+90Star
* selinux: fix the labeled xfrm/IPsec reference count handlingPaul Moore2013-06-011-20/+14Star
* selinux: use GFP_ATOMIC under spin_lockDan Carpenter2013-03-181-1/+1
* atomic: use <linux/atomic.h>Arun Sharma2011-07-271-1/+1
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds2011-03-171-3/+3
|\
| * net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller2011-03-131-2/+2
| * xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller2011-02-231-1/+1
* | selinux: Fix check for xfrm selinux context algorithmSteffen Klassert2011-02-251-1/+1
|/
* include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo2010-03-301-0/+1
* SELinux: Convert avc_audit to use lsm_audit.hThomas Liu2009-08-171-2/+2
* Revert "SELinux: Convert avc_audit to use lsm_audit.h"James Morris2009-07-131-2/+2
* SELinux: Convert avc_audit to use lsm_audit.hThomas Liu2009-07-121-2/+2
* net: skb->dst accessorsEric Dumazet2009-06-031-1/+1
* CRED: Wrap current->cred and a few other accessorsDavid Howells2008-11-141-3/+3
* CRED: Separate task security context from task_structDavid Howells2008-11-141-3/+3
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2008-04-221-6/+3Star
|\
| * SELinux: xfrm.c whitespace, syntax, and static declaraction cleanupsEric Paris2008-04-211-6/+3Star
* | security: Remove unnecessary inclusions of asm/semaphore.hMatthew Wilcox2008-04-191-1/+0Star
|/
* LSM: Make the Labeled IPsec hooks more stack friendlyPaul Moore2008-04-131-23/+16Star
* SELinux: Enable dynamic enable/disable of the network access checksPaul Moore2008-01-291-2/+16
* SELinux: suppress a warning for 64k pages.Stephen Rothwell2007-11-071-6/+7
* sparse pointer use of zero as nullStephen Hemminger2007-10-181-1/+1
* security: Convert LSM into a static interfaceJames Morris2007-10-171-1/+0Star
* SELinux: null-terminate context string in selinux_xfrm_sec_ctx_allocVenkat Yekkirala2007-07-251-1/+2
* SELinux: peer secid consolidation for external network labelingPaul Moore2006-12-031-33/+0Star
* SELinux: Fix SA selection semanticsVenkat Yekkirala2006-12-031-52/+49Star
* SELinux: Return correct context for SO_PEERSECVenkat Yekkirala2006-12-031-37/+3Star
* SELinux: Various xfrm labeling fixesVenkat Yekkirala2006-12-031-26/+9Star
* IPsec: correct semantics for SELinux policy matchingVenkat Yekkirala2006-10-121-12/+41
* [MLSXFRM]: Auto-labeling of child socketsVenkat Yekkirala2006-09-221-1/+0Star
* [MLSXFRM]: Default labeling of socket specific IPSec policiesVenkat Yekkirala2006-09-221-11/+22
* [MLSXFRM]: Add flow labelingVenkat Yekkirala2006-09-221-4/+7
* [MLSXFRM]: Flow based matching of xfrm policy and stateVenkat Yekkirala2006-09-221-33/+166
* Remove obsolete #include <linux/config.h>Jörn Engel2006-06-301-1/+0Star