summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2009-01-05CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]David Howells
2009-01-04Merge branch 'master' of git://git.infradead.org/users/pcmoore/lblnet-2.6_nex...James Morris
2009-01-04audit: validate comparison operations, store them in sane formAl Viro
2009-01-03Merge branch 'cpus4096-for-linus-3' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds
2008-12-31cpumask: prepare for iterators to only go to nr_cpu_ids/nr_cpumask_bits.: coreRusty Russell
2008-12-31keys: fix sparse warning by adding __user annotation to castJames Morris
2008-12-31introduce new LSM hooks where vfsmount is available.Kentaro Takeda
2008-12-31smack: Add support for unlabeled network hosts and networksCasey Schaufler
2008-12-31selinux: Deprecate and schedule the removal of the the compat_net functionalityPaul Moore
2008-12-31netlabel: Update kernel configuration APIPaul Moore
2008-12-29KEYS: Fix variable uninitialisation warningsDavid Howells
2008-12-28Merge branch 'next' into for-linusJames Morris
2008-12-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds
2008-12-25smackfs: check for allocation failures in smk_set_access()Sergio Luis
2008-12-19SELinux: don't check permissions for kernel mountsJames Morris
2008-12-19security: pass mount flags to security_sb_kern_mount()James Morris
2008-12-19SELinux: correctly detect proc filesystems of the form "proc/foo"Stephen Smalley
2008-11-25CRED: fix sparse warningsHannes Eder
2008-11-14capabilities: define get_vfs_caps_from_disk when file caps are not enabledEric Paris
2008-11-13CRED: Allow kernel services to override LSM settings for task actionsDavid Howells
2008-11-13CRED: Add a kernel_service object class to SELinuxDavid Howells
2008-11-13CRED: Differentiate objective and effective subjective credentials on a taskDavid Howells
2008-11-13CRED: Prettify commoncap.cDavid Howells
2008-11-13CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells
2008-11-13CRED: Inaugurate COW credentialsDavid Howells
2008-11-13CRED: Pass credentials through dentry_open()David Howells
2008-11-13CRED: Make inode_has_perm() and file_has_perm() take a cred pointerDavid Howells
2008-11-13CRED: Separate per-task-group keyrings from signal_structDavid Howells
2008-11-13CRED: Wrap access to SELinux's task SIDDavid Howells
2008-11-13CRED: Use RCU to access another task's creds and to release a task's own credsDavid Howells
2008-11-13CRED: Wrap current->cred and a few other accessorsDavid Howells
2008-11-13CRED: Detach the credentials from task_structDavid Howells
2008-11-13CRED: Separate task security context from task_structDavid Howells
2008-11-13CRED: Constify the kernel_cap_t arguments to the capset LSM hooksDavid Howells
2008-11-13CRED: Neuter sys_capset()David Howells
2008-11-13KEYS: Alter use of key instantiation link-to-keyring argumentDavid Howells
2008-11-13KEYS: Disperse linux/key_ui.hDavid Howells
2008-11-13CRED: Wrap task credential accesses in the capabilities codeDavid Howells
2008-11-13CRED: Wrap task credential accesses in the key management codeDavid Howells
2008-11-11Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller
2008-11-11Currently SELinux jumps through some ugly hoops to not audit a capbilityEric Paris
2008-11-11Add a new capable interface that will be used by systems that use audit toEric Paris
2008-11-11Any time fcaps or a setuid app under SECURE_NOROOT is used to result in aEric Paris
2008-11-11This patch add a generic cpu endian caps structure and externally availableEric Paris
2008-11-10KEYS: Make request key instantiate the per-user keyringsDavid Howells
2008-11-08SELinux: Use unknown perm handling to handle unknown netlink msg typesEric Paris
2008-11-07Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/ne...David S. Miller
2008-11-05file capabilities: add no_file_caps switch (v4)Serge E. Hallyn
2008-11-05Merge branch 'master' into nextJames Morris
2008-11-05selinux: recognize netlink messages for 'ip addrlabel'Michal Schmidt