summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2017-01-16apparmor: add a default null dfaJohn Johansen
2017-01-16apparmor: allow policydb to be used as the file dfaJohn Johansen
2017-01-16apparmor: add get_dfa() fnJohn Johansen
2017-01-16apparmor: prepare to support newer versions of policyJohn Johansen
2017-01-16apparmor: add support for force complain flag to support learning modeJohn Johansen
2017-01-16apparmor: remove paranoid load switchJohn Johansen
2017-01-16apparmor: name null-XXX profiles after the executableJohn Johansen
2017-01-16apparmor: pass gfp_t parameter into profile allocationJohn Johansen
2017-01-16apparmor: refactor prepare_ns() and make usable from different viewsJohn Johansen
2017-01-16apparmor: update policy_destroy to use new debug assertsJohn Johansen
2017-01-16apparmor: pass gfp param into aa_policy_init()John Johansen
2017-01-16apparmor: constify policy name and hnameJohn Johansen
2017-01-16apparmor: rename hname_tail to basenameJohn Johansen
2017-01-16apparmor: rename mediated_filesystem() to path_mediated_fs()John Johansen
2017-01-16apparmor: add debug assert AA_BUG and Kconfig to control debug infoJohn Johansen
2017-01-16apparmor: add macro for bug asserts to check that a lock is heldJohn Johansen
2017-01-16apparmor: allow ns visibility question to consider subnsesJohn Johansen
2017-01-16apparmor: add fn to lookup profiles by fqnameJohn Johansen
2017-01-16apparmor: add lib fn to find the "split" for fqnamesJohn Johansen
2017-01-16apparmor: add strn version of aa_find_nsJohn Johansen
2017-01-16apparmor: add strn version of lookup_profile fnJohn Johansen
2017-01-16apparmor: rename replacedby to proxyJohn Johansen
2017-01-16apparmor: rename PFLAG_INVALID to PFLAG_STALEJohn Johansen
2017-01-16apparmor: rename sid to secidJohn Johansen
2017-01-16apparmor: rename namespace to ns to improve code line lengthsJohn Johansen
2017-01-16apparmor: split apparmor policy namespaces code into its own fileJohn Johansen
2017-01-16apparmor: split out shared policy_XXX fns to libJohn Johansen
2017-01-16apparmor: move lib definitions into separate lib includeJohn Johansen
2017-01-15apparmor: use designated initializersKees Cook
2017-01-15AppArmor: Use GFP_KERNEL for __aa_kvmalloc().Tetsuo Handa
2017-01-14locking/atomic, kref: Use kref_get_unless_zero() morePeter Zijlstra
2017-01-12security,selinux,smack: kill security_task_wait hookStephen Smalley
2017-01-12selinux: drop unused socket security classesStephen Smalley
2017-01-10Smack: ignore private inode for file functionsSeung-Woo Kim
2017-01-10Smack: fix d_instantiate logic for sockfs and pipefsRafal Krypa
2017-01-10SMACK: Use smk_tskacc() instead of smk_access() for proper loggingHimanshu Shukla
2017-01-10Smack: Traverse the smack_known_list using list_for_each_entry_rcu macroVishal Goel
2017-01-10SMACK: Free the i_security blob in inode using RCUHimanshu Shukla
2017-01-10SMACK: Delete list_head repeated initializationHimanshu Shukla
2017-01-10SMACK: Add new lock for adding entry in smack master listVishal Goel
2017-01-10Smack: Fix the issue of wrong SMACK label update in socket bind fail caseVishal Goel
2017-01-10Smack: Fix the issue of permission denied error in ipv6 hookVishal Goel
2017-01-10SMACK: Add the rcu synchronization mechanism in ipv6 hooksVishal Goel
2017-01-09selinux: default to security isid in sel_make_bools() if no sid is foundGary Tierney
2017-01-09selinux: log errors when loading new policyGary Tierney
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley
2017-01-09selinux: clean up cred usage and simplifyStephen Smalley
2017-01-09selinux: allow context mounts on tmpfs, ramfs, devpts within user namespacesStephen Smalley
2017-01-09selinux: handle ICMPv6 consistently with ICMPStephen Smalley
2017-01-09selinux: add security in-core xattr support for tracefsYongqin Liu