summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'selinux-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2017-11-155-36/+47
|\
| * selinux: remove extraneous initialization of slots_used and max_chain_lenColin Ian King2017-10-161-1/+1
| * selinux: remove redundant assignment to lenColin Ian King2017-10-161-1/+0
| * selinux: remove redundant assignment to strColin Ian King2017-10-161-3/+2
| * selinux: fix build warningCorentin LABBE2017-10-041-2/+2
| * selinux: fix build warning by removing the unused sid variableCorentin LABBE2017-10-041-2/+1
| * selinux: Perform both commoncap and selinux xattr checksEric W. Biederman2017-10-041-25/+18
| * selinux: Use kmem_cache for hashtab_nodeKyeongdon Kim2017-09-203-2/+23
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2017-11-0421-0/+21
|\ \
| * | License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman2017-11-0221-0/+21
| |/
* | selinux: bpf: Add addtional check for bpf object file receiveChenbo Feng2017-10-201-0/+49
* | selinux: bpf: Add selinux check for eBPF syscall operationsChenbo Feng2017-10-203-0/+117
|/
* Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2017-09-1226-50/+77
|\
| * selinux: constify nf_hook_opsArvind Yadav2017-08-281-1/+1
| * selinux: allow per-file labeling for cgroupfsAntonio Murdaca2017-08-221-1/+3
| * selinux: update my email addressStephen Smalley2017-08-1725-25/+25
| * selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko2017-08-081-8/+6
| * selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley2017-08-024-16/+42
| * selinux: Assign proper class to PF_UNIX/SOCK_RAW socketsLuis Ressel2017-07-251-0/+1
* | Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2017-09-071-2/+0
|\ \
| * | selinux: remove AVC init audit log messageRichard Guy Briggs2017-09-051-2/+0
| |/
* | Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds2017-09-071-20/+6
|\ \
| * | selinux: Refactor to remove bprm_secureexec hookKees Cook2017-08-011-19/+5
| * | exec: Rename bprm->cred_prepared to called_set_credsKees Cook2017-08-011-1/+1
| |/
* | netfilter: nf_hook_ops structs can be constFlorian Westphal2017-07-311-1/+1
* | xfrm: remove flow cacheFlorian Westphal2017-07-181-3/+1
|/
* Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2017-07-051-7/+5
|\
| * sel_write_validatetrans(): don't open-code memdup_user_nul()Al Viro2017-05-251-7/+5
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2017-07-051-1/+2
|\ \
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2017-06-211-3/+2
| |\ \
| * | | rtnetlink: add NEWCACHEREPORT message typeJulien Gomes2017-06-211-1/+2
| | |/ | |/|
* | | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2017-07-0514-106/+743
|\ \ \ | |_|/ |/| |
| * | selinux: enable genfscon labeling for tracefsJeff Vander Stoep2017-06-201-0/+1
| * | security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew2017-06-091-2/+33
| * | selinux: use kmem_cache for ebitmapJunil Lee2017-06-093-6/+27
| * | selinux: use pernet operations for hook registrationFlorian Westphal2017-06-021-4/+20
| * | selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens2017-05-235-3/+288
| * | selinux: Add IB Port SMP access vectorDaniel Jurgens2017-05-234-0/+70
| * | selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens2017-05-234-0/+66
| * | selinux: Allocate and free infiniband security hooksDaniel Jurgens2017-05-232-1/+29
| * | selinux: Create policydb version for Infiniband supportDaniel Jurgens2017-05-233-24/+118
| * | selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens2017-05-232-0/+13
| * | selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke2017-05-231-16/+0
| * | selinux: log policy capability state when a policy is loadedStephen Smalley2017-05-233-11/+27
| * | selinux: do not check open permission on socketsStephen Smalley2017-05-231-3/+7
| * | selinux: add a map permission check for mmapStephen Smalley2017-05-232-1/+13
| * | selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley2017-05-231-8/+15
| * | selinux: Return an error code only as a constant in sidtab_insert()Markus Elfring2017-05-231-17/+10
| * | selinux: Return directly after a failed memory allocation in policydb_index()Markus Elfring2017-05-231-10/+5
| * | selinux: Use task_alloc hook rather than task_create hookTetsuo Handa2017-05-231-2/+3
| |/