aboutsummaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)Author
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore
2016-04-14selinux: Change bool variable name to index.Prarit Bhargava
2016-04-11->getxattr(): pass dentry and inode as separate argumentsAl Viro
2016-04-10don't bother with ->d_inode->i_sb - it's always equal to ->d_sbAl Viro
2016-04-05selinux: restrict kernel module loadingJeff Vander Stoep
2016-04-05selinux: consolidate the ptrace parent lookup codePaul Moore
2016-04-05selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore
2016-04-05selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()Paul Moore
2016-03-28constify security_sb_mount()Al Viro
2016-03-17Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/greg...Linus Torvalds
2016-03-17Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2016-03-04Merge branch 'stable-4.6' of git://git.infradead.org/users/pcmoore/selinux in...James Morris
2016-02-26Merge branch 'stable-4.5' of git://git.infradead.org/users/pcmoore/selinux in...James Morris
2016-02-19selinux: Don't sleep inside inode_getsecid hookAndreas Gruenbacher
2016-02-14Merge 4.5-rc4 into tty-nextGreg Kroah-Hartman
2016-02-09selinux: nlmsgtab: add SOCK_DESTROY to the netlink mapping tablesLorenzo Colitti
2016-01-28selinux: use absolute path to include directoryAndy Shevchenko
2016-01-27tty: Make tty_files_lock per-ttyPeter Hurley
2016-01-22wrappers for ->i_mutex accessAl Viro
2016-01-17Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds
2016-01-08selinux: Inode label revalidation performance fixAndreas Gruenbacher
2016-01-04selinuxfs: switch to memdup_user_nul()Al Viro
2015-12-24selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()Vladis Dronov
2015-12-24selinux: export validatetrans decisionsAndrew Perepechko
2015-12-24selinux: Revalidate invalid inode security labelsAndreas Gruenbacher
2015-12-24security: Add hook to invalidate inode security labelsAndreas Gruenbacher
2015-12-24selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher
2015-12-24security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher
2015-12-24selinux: Remove unused variable in selinux_inode_init_securityAndreas Gruenbacher
2015-11-26Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into...James Morris
2015-11-24selinux: fix bug in conditional rules handlingStephen Smalley
2015-11-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds
2015-11-08net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid()Eric Dumazet
2015-11-05Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds
2015-11-05selinux: fix random read in selinux_ip_postroute_compat()Eric Dumazet
2015-10-21selinux: Use a kmem_cache for allocation struct file_security_structSangwoo
2015-10-21selinux: ioctl_has_perm should be staticGeliang Tang
2015-10-21selinux: use sprintf return valueRasmus Villemoes
2015-10-21selinux: use kstrdup() in security_get_bools()Rasmus Villemoes
2015-10-21selinux: use kmemdup in security_sid_to_context_core()Rasmus Villemoes
2015-10-21selinux: remove pointless cast in selinux_inode_setsecurity()Rasmus Villemoes
2015-10-21selinux: introduce security_context_str_to_sidRasmus Villemoes
2015-10-21selinux: do not check open perm on ftruncate callJeff Vander Stoep
2015-10-21selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE defaultPaul Moore
2015-10-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso
2015-10-16netfilter: remove hook owner refcountingFlorian Westphal
2015-10-11net: synack packets can be attached to request socketsEric Dumazet