summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2014-01-09selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore
2014-01-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore
2014-01-09selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov
2014-01-09selinux: fix broken peer recv checkChad Hanson
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore
2013-12-04selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore
2013-11-29Revert "ima: policy for RAMFS"Mimi Zohar
2013-10-16apparmor: fix bad lock balance when introspecting policyJohn Johansen
2013-10-16apparmor: fix memleak of the profile hashJohn Johansen
2013-10-04selinux: remove 'flags' parameter from avc_audit()Linus Torvalds
2013-10-04selinux: avc_has_perm_flags has no more usersLinus Torvalds
2013-10-04selinux: remove 'flags' parameter from inode_has_permLinus Torvalds
2013-09-29apparmor: fix suspicious RCU usage warning in policy.c/policy.hJohn Johansen
2013-09-29apparmor: Use shash crypto API interface for profile hashesTyler Hicks
2013-09-07Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds
2013-09-07Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2013-09-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2013-09-05Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2013-09-04Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/c...Linus Torvalds
2013-08-31capabilities: allow nice if we are privilegedSerge Hallyn
2013-08-31userns: Allow PR_CAPBSET_DROP in a user namespace.Eric W. Biederman
2013-08-22Merge branch 'smack-for-3.12' of git://git.gitorious.org/smack-next/kernel in...James Morris
2013-08-20module/lsm: Have apparmor module parameters work with no argsSteven Rostedt
2013-08-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-08-14apparmor: add the ability to report a sha1 hash of loaded policyJohn Johansen
2013-08-14apparmor: export set of capabilities supported by the apparmor moduleJohn Johansen
2013-08-14apparmor: add the profile introspection file to interfaceJohn Johansen
2013-08-14apparmor: add an optional profile attachment string for profilesJohn Johansen
2013-08-14apparmor: add interface files for profiles and namespacesJohn Johansen
2013-08-14apparmor: allow setting any profile into the unconfined stateJohn Johansen
2013-08-14apparmor: make free_profile available outside of policy.cJohn Johansen
2013-08-14apparmor: rework namespace free pathJohn Johansen
2013-08-14apparmor: update how unconfined is handledJohn Johansen
2013-08-14apparmor: change how profile replacement update is doneJohn Johansen
2013-08-14apparmor: convert profile lists to RCU based lockingJohn Johansen
2013-08-14apparmor: provide base for multiple profiles to be replaced at onceJohn Johansen
2013-08-14apparmor: add a features/policy dir to interfaceJohn Johansen
2013-08-14apparmor: enable users to query whether apparmor is enabledJohn Johansen
2013-08-14apparmor: remove minimum size check for vmalloc()Tetsuo Handa
2013-08-12Smack: parse multiple rules per write to load2, up to PAGE_SIZE-1 bytesRafal Krypa
2013-08-09cgroup: make css_for_each_descendant() and friends include the origin css in ...Tejun Heo
2013-08-09cgroup: make hierarchy iterators deal with cgroup_subsys_state instead of cgroupTejun Heo
2013-08-09cgroup: pass around cgroup_subsys_state instead of cgroup in file methodsTejun Heo
2013-08-09cgroup: pass around cgroup_subsys_state instead of cgroup in subsystem methodsTejun Heo
2013-08-09cgroup: add css_parent()Tejun Heo
2013-08-09cgroup: add/update accessors which obtain subsys specific data from cssTejun Heo
2013-08-09cgroup: s/cgroup_subsys_state/cgroup_css/ s/task_subsys_state/task_css/Tejun Heo
2013-08-06Smack: IPv6 casting error fix for 3.11Casey Schaufler
2013-08-02Smack: network label match fixCasey Schaufler