summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris2016-02-2613-163/+418
|\
| * ima: require signed IMA policyMimi Zohar2016-02-211-0/+7
| * ima: measure and appraise the IMA policy itselfMimi Zohar2016-02-214-3/+24
| * ima: load policy using pathDmitry Kasatkin2016-02-211-2/+43
| * ima: support for kexec image and initramfsMimi Zohar2016-02-213-7/+27
| * ima: remove firmware and module specific cached status infoMimi Zohar2016-02-215-39/+28Star
| * module: replace copy_module_from_fd with kernel versionMimi Zohar2016-02-212-34/+13Star
| * security: define kernel_read_file hookMimi Zohar2016-02-212-0/+29
| * firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar2016-02-212-24/+10Star
| * ima: define a new hook to measure and appraise a file already in memoryMimi Zohar2016-02-217-15/+57
| * ima: calculate the hash of a buffer using aynchronous hash(ahash)Mimi Zohar2016-02-181-2/+73
| * ima: provide buffer hash calculation functionDmitry Kasatkin2016-02-182-0/+49
| * vfs: define kernel_read_file_id enumerationMimi Zohar2016-02-181-2/+3
| * vfs: define a generic function to read a file from the kernelMimi Zohar2016-02-181-0/+8
| * ima: use "ima_hooks" enum as function argumentMimi Zohar2016-02-185-27/+37
| * ima: refactor ima_policy_show() to display "ima_hooks" rulesMimi Zohar2016-02-181-27/+36
| * ima: separate 'security.ima' reading functionality from collectDmitry Kasatkin2016-02-188-40/+33Star
| * IMA: fix non-ANSI declaration of ima_check_policy()Colin Ian King2016-02-091-1/+1
* | Merge branch 'smack-for-4.6' of https://github.com/cschaufler/smack-next into...James Morris2016-02-221-32/+14Star
|\ \
| * | smack: fix cache of access labelsJosé Bollo2016-02-161-2/+6
| * | Smack: Remove pointless hooksCasey Schaufler2016-02-111-30/+8Star
| |/
* / tpm: fix checks for policy digest existence in tpm2_seal_trusted()Jarkko Sakkinen2016-02-101-6/+5Star
|/
* KEYS: Only apply KEY_FLAG_KEEP to a key if a parent keyring has it setDavid Howells2016-01-281-1/+2
* wrappers for ->i_mutex accessAl Viro2016-01-233-11/+11
* ptrace: use fsuid, fsgid, effective creds for fs access checksJann Horn2016-01-211-1/+6
* security: let security modules use PTRACE_MODE_* with bitmasksJann Horn2016-01-212-7/+5Star
* KEYS: Fix keyring ref leak in join_session_keyring()Yevgeny Pats2016-01-201-0/+1
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2016-01-1829-160/+967
|\
| * Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris2016-01-141-8/+2Star
| |\
| | * selinux: Inode label revalidation performance fixAndreas Gruenbacher2016-01-081-8/+2Star
| * | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris2016-01-103-21/+17Star
| |\ \
| | * | KEYS: refcount bug fixMimi Zohar2016-01-072-12/+8Star
| | * | ima: ima_write_policy() limit lockingPetko Manolov2016-01-031-9/+9
| * | | Merge branch 'smack-for-4.5' of https://github.com/cschaufler/smack-next into...James Morris2015-12-261-1/+23
| |\ \ \
| | * | | Smack: type confusion in smak sendmsg() handlerRoman Kubiak2015-12-171-1/+1
| | * | | Smack: File receive for socketsCasey Schaufler2015-12-101-0/+22
| * | | | Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris2015-12-268-73/+274
| |\ \ \ \ | | | |_|/ | | |/| |
| | * | | selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()Vladis Dronov2015-12-241-4/+5
| | * | | selinux: export validatetrans decisionsAndrew Perepechko2015-12-244-8/+111
| | * | | selinux: Revalidate invalid inode security labelsAndreas Gruenbacher2015-12-241-8/+68
| | * | | security: Add hook to invalidate inode security labelsAndreas Gruenbacher2015-12-243-10/+34
| | * | | selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher2015-12-241-41/+56
| | * | | security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher2015-12-243-3/+3
| | * | | security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher2015-12-243-3/+3
| | * | | selinux: Remove unused variable in selinux_inode_init_securityAndreas Gruenbacher2015-12-241-2/+0Star
| | |/ /
| * | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris2015-12-2619-84/+623
| |\ \ \ | | | |/ | | |/|
| | * | IMA: policy can be updated zero timesSasha Levin2015-12-253-0/+14
| | * | security/integrity: make ima/ima_mok.c explicitly non-modularPaul Gortmaker2015-12-151-3/+2Star
| | * | ima: update appraise flags after policy update completesMimi Zohar2015-12-151-2/+5
| | * | IMA: prevent keys on the .ima_blacklist from being removedMimi Zohar2015-12-151-0/+2