summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2009-04-03don't raise all privs on setuid-root file with fE set (v2)Serge E. Hallyn
2009-04-01Permissive domain in userspace object managerKaiGai Kohei
2009-04-01Get rid of indirect include of fs_struct.hAl Viro
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore
2009-03-28selinux: Remove the "compat_net" compatibility codePaul Moore
2009-03-28netlabel: Label incoming TCP connections correctly in SELinuxPaul Moore
2009-03-27TOMOYO: Fix a typo.Tetsuo Handa
2009-03-25smack: convert smack to standard linux listsEtienne Basset
2009-03-23Merge branch 'master' into nextJames Morris
2009-03-09SELinux: inode_doinit_with_dentry drop no dentry printkEric Paris
2009-03-05SELinux: new permission between tty audit and audit socketEric Paris
2009-03-05SELinux: open perm for sock filesEric Paris
2009-03-04smack: fixes for unlabeled host supportetienne
2009-03-04smack: fixes for unlabeled host supportetienne
2009-03-01selinux: Fix a panic in selinux_netlbl_inode_permission()Paul Moore
2009-02-27keys: make procfiles per-user-namespaceSerge E. Hallyn
2009-02-27keys: skip keys from another user namespaceSerge E. Hallyn
2009-02-27keys: consider user namespace in key_permissionSerge E. Hallyn
2009-02-27keys: distinguish per-uid keys in different namespacesSerge E. Hallyn
2009-02-22selinux: Fix the NetLabel glue code for setsockopt()Paul Moore
2009-02-22integrity: ima iint radix_tree_lookup locking fixMimi Zohar
2009-02-22TOMOYO: Do not call tomoyo_realpath_init unless registered.Tetsuo Handa
2009-02-20integrity: ima scatterlist bug fixMimi Zohar
2009-02-19smack: fix lots of kernel-doc notationRandy Dunlap
2009-02-15TOMOYO: Don't create securityfs entries unless registered.Tetsuo Handa
2009-02-14TOMOYO: Fix exception policy read failure.Tetsuo Handa
2009-02-13SELinux: convert the avc cache hash list to an hlistEric Paris
2009-02-13SELinux: code readability with avc_cacheEric Paris
2009-02-13SELinux: remove unused av.decided fieldEric Paris
2009-02-13SELinux: more careful use of avd in avc_has_perm_noauditEric Paris
2009-02-13SELinux: remove the unused ae.usedEric Paris
2009-02-13SELinux: check seqno when updating an avc_nodeEric Paris
2009-02-13SELinux: NULL terminate al contexts from diskEric Paris
2009-02-13SELinux: better printk when file with invalid label foundEric Paris
2009-02-13SELinux: call capabilities code directoryEric Paris
2009-02-12ima: fix build errorRandy Dunlap
2009-02-12tomoyo: fix sparse warningTetsuo Handa
2009-02-12security: change link order of LSMs so security=tomoyo worksJames Morris
2009-02-12Kconfig and MakefileKentaro Takeda
2009-02-12LSM adapter functions.Kentaro Takeda
2009-02-12Domain transition handler.Kentaro Takeda
2009-02-12File operation restriction part.Kentaro Takeda
2009-02-12Common functions for TOMOYO Linux.Kentaro Takeda
2009-02-12Memory and pathname management functions.Kentaro Takeda
2009-02-11integrity: audit updateMimi Zohar
2009-02-06Merge branch 'master' into nextJames Morris
2009-02-05IMA: fix ima_delete_rules() definitionJames Morris
2009-02-05Integrity: IMA file free imbalanceMimi Zohar