lwn.git/security/seclvl.c, branch docs-5.0-fix

[PATCH] LSM: remove BSD secure level security module

2006-09-29T16:18:10+00:00

This code has suffered from broken core design and lack of developer attention. Broken security modules are too dangerous to leave around. It is time to remove this one. Signed-off-by: Chris Wright Acked-by: Michael Halcrow Acked-by: Serge Hallyn Cc: Davi Arnaut Acked-by: Greg Kroah-Hartman Acked-by: James Morris Acked-by: Alan Cox Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

[CRYPTO] users: Use crypto_hash interface instead of crypto_digest

2006-09-21T01:46:21+00:00

This patch converts all remaining crypto_digest users to use the new crypto_hash interface. Signed-off-by: Herbert Xu

Remove obsolete #include

2006-06-30T17:25:36+00:00

Signed-off-by: Jörn Engel Signed-off-by: Adrian Bunk

[PATCH] Bug fixes and cleanup for the BSD Secure Levels LSM

2006-03-23T15:38:03+00:00

This patch address several issues in the current BSD Secure Levels code: o plaintext_to_sha1: Missing check for a NULL return from __get_free_page o passwd_write_file: A page is leaked if the password is wrong. o fix securityfs registration order o seclvl_init is a mess and can't properly tolerate failures, failure path is upside down (deldif and delf should be switched) Cleanups: o plaintext_to_sha1: Use buffers passed in o passwd_write_file: Use kmalloc() instead of get_zeroed_page() o passwd_write_file: hashedPassword comparison is just memcmp o s/ENOSYS/EINVAL/ o misc (akpm: after some discussion it appears that the BSD secure levels feature should be scheduled for removal. But for now, let's fix these problems up). Signed-off-by: Davi Arnaut Cc: Michael Halcrow Cc: Chris Wright Cc: Stephen Smalley Cc: James Morris Cc: Serge Hallyn Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

Don't try to "validate" a non-existing timeval.

2006-01-31T18:16:55+00:00

settime() with a NULL timeval is silly but legal. Noticed by Dave Jones Signed-off-by: Linus Torvalds

[PATCH] seclvl: use securityfs (fix)

2005-09-17T18:50:01+00:00

That should be -EINVAL for both. Signed-off-by: Serge Hallyn Cc: Greg KH Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

[PATCH] seclvl-use-securityfs tidy

2005-09-17T18:50:01+00:00

We don't put braces around single statements, thanks. Cc: Serge Hallyn Cc: James Morris Cc: Chris Wright Cc: Greg KH Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

Merge master.kernel.org:/pub/scm/linux/kernel/git/chrisw/lsm-2.6

2005-09-13T16:48:54+00:00

[CRYPTO]: Use CRYPTO_TFM_REQ_MAY_SLEEP where appropriate

2005-09-02T00:43:25+00:00

This patch goes through the current users of the crypto layer and sets CRYPTO_TFM_REQ_MAY_SLEEP at crypto_alloc_tfm() where all crypto operations are performed in process context. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller

[PATCH] seclvl securityfs

2005-07-09T01:49:05+00:00

Once again, the simple_attr in libfs was actually sufficient - I'd thought the __attribute__(format(printk(1,2))) was more mysterious than it really is. At last, here is the full patch to make seclvl use securityfs. Signed-off-by: Serge Hallyn Signed-off-by: Chris Wright -- seclvl.c | 228 +++++++++++++++++++-------------------------------------------- 1 files changed, 70 insertions(+), 158 deletions(-) Index: linux-2.6.13-rc1/security/seclvl.c ===================================================================