summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)Author
2017-06-10apparmor: fix policy load/remove semanticsJohn Johansen
2017-06-10apparmor: add namespace lookup fns()John Johansen
2017-06-10apparmor: cleanup __find_child()John Johansen
2017-06-10apparmor: provide information about path buffer size at bootJohn Johansen
2017-06-10apparmor: add profile permission query abilityJohn Johansen
2017-06-10apparmor: switch from file_perms to aa_permsJohn Johansen
2017-06-10apparmor: add gerneric permissions struct and support fnsJohn Johansen
2017-06-10apparmor: add fn to test if profile supports a given mediation classJohn Johansen
2017-06-10apparmor: speed up transactional queriesJohn Johansen
2017-06-10apparmor: add label data availability to the feature setJohn Johansen
2017-06-10apparmor: add mkdir/rmdir interface to manage policy namespacesJohn Johansen
2017-06-10apparmor: add policy revision file interfaceJohn Johansen
2017-06-10apparmor: provide finer control over policy managementJohn Johansen
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen
2017-06-08apparmor: convert from securityfs to apparmorfs for policy ns filesJohn Johansen
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen
2017-06-08securityfs: add the ability to support symlinksJohn Johansen
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen
2017-06-08apparmor: move file context into file.hJohn Johansen
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider
2017-06-08apparmor: Fix error cod in __aa_fs_profile_mkdir()Dan Carpenter
2017-06-08apparmorfs: Use seq_putc() in two functionsMarkus Elfring
2017-06-08apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()Markus Elfring
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal
2017-06-01Smack: Use cap_capable in privilege checkCasey Schaufler
2017-06-01Smack: Safer check for a socket in file_receiveCasey Schaufler
2017-06-01smack: use pernet operations for hook registrationFlorian Westphal
2017-05-23selinux: Add a cache for quicker retreival of PKey SIDsDaniel Jurgens
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens
2017-05-23selinux: Allocate and free infiniband security hooksDaniel Jurgens
2017-05-23selinux: Create policydb version for Infiniband supportDaniel Jurgens
2017-05-23IB/core: Enforce security on management datagramsDaniel Jurgens
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens
2017-05-23IB/core: Enforce PKey security on QPsDaniel Jurgens
2017-05-23selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley
2017-05-23selinux: do not check open permission on socketsStephen Smalley
2017-05-23selinux: add a map permission check for mmapStephen Smalley
2017-05-23selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checksStephen Smalley