| Commit message (Expand) | Author | Age | Files | Lines |
* | Merge tag 'xfs-for-linus-v3.12-rc1' of git://oss.sgi.com/xfs/xfs | Linus Torvalds | 2013-09-09 | 1 | -0/+1 |
|\ |
|
| * | xfs: ioctl check for capabilities in the current user namespace | Dwight Engen | 2013-08-15 | 1 | -0/+1 |
* | | userns: Kill nsown_capable it makes the wrong thing easy | Eric W. Biederman | 2013-08-30 | 1 | -12/+0 |
|/ |
|
* | Add file_ns_capable() helper function for open-time capability checking | Linus Torvalds | 2013-04-14 | 1 | -0/+24 |
* | userns: Teach inode_capable to understand inodes whose uids map to other name... | Eric W. Biederman | 2012-05-15 | 1 | -2/+4 |
* | userns: Replace the hard to write inode_userns with inode_capable. | Eric W. Biederman | 2012-04-07 | 1 | -0/+19 |
* | Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call" | Linus Torvalds | 2012-01-17 | 1 | -1/+1 |
* | Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security | Linus Torvalds | 2012-01-14 | 1 | -34/+46 |
|\ |
|
| * | capabilities: remove task_ns_* functions | Eric Paris | 2012-01-05 | 1 | -14/+0 |
| * | capabitlies: ns_capable can use the cap helpers rather than lsm call | Eric Paris | 2012-01-05 | 1 | -1/+1 |
| * | capabilities: style only - move capable below ns_capable | Eric Paris | 2012-01-05 | 1 | -16/+16 |
| * | capabilites: introduce new has_ns_capabilities_noaudit | Eric Paris | 2012-01-05 | 1 | -5/+25 |
| * | capabilities: call has_ns_capability from has_capability | Eric Paris | 2012-01-05 | 1 | -16/+10 |
| * | capabilities: remove all _real_ interfaces | Eric Paris | 2012-01-05 | 1 | -3/+15 |
| * | capabilities: reverse arguments to security_capable | Eric Paris | 2012-01-05 | 1 | -1/+1 |
* | | kernel: Map most files to use export.h instead of module.h | Paul Gortmaker | 2011-10-31 | 1 | -1/+1 |
|/ |
|
* | Merge branch 'master' into next | James Morris | 2011-05-19 | 1 | -0/+12 |
|\ |
|
| * | Cache user_ns in struct cred | Serge E. Hallyn | 2011-05-13 | 1 | -0/+12 |
* | | capabilities: delete unused cap_set_full | Eric Paris | 2011-04-04 | 1 | -2/+0 |
* | | capabilities: do not drop CAP_SETPCAP from the initial task | Eric Paris | 2011-04-04 | 1 | -2/+0 |
|/ |
|
* | userns: make has_capability* into real functions | Serge E. Hallyn | 2011-03-23 | 1 | -0/+54 |
* | userns: security: make capabilities relative to the user namespace | Serge E. Hallyn | 2011-03-23 | 1 | -5/+37 |
* | security: add cred argument to security_capable() | Chris Wright | 2011-02-11 | 1 | -1/+1 |
* | sched: Remove remaining USER_SCHED code | Li Zefan | 2010-04-02 | 1 | -1/+0 |
* | capabilities: Use RCU to protect task lookup in sys_capget | Thomas Gleixner | 2009-12-10 | 1 | -2/+2 |
* | remove CONFIG_SECURITY_FILE_CAPABILITIES compile option | Serge E. Hallyn | 2009-11-24 | 1 | -2/+0 |
* | Silence the existing API for capability version compatibility check. | Andrew G. Morgan | 2009-11-24 | 1 | -2/+2 |
* | capabilities: simplify bound checks for copy_from_user() | Arjan van de Ven | 2009-10-14 | 1 | -3/+6 |
* | [CVE-2009-0029] System call wrappers part 04 | Heiko Carstens | 2009-01-14 | 1 | -2/+2 |
* | Merge branch 'next' into for-linus | James Morris | 2009-01-07 | 1 | -1/+1 |
|\ |
|
| * | CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3] | David Howells | 2009-01-07 | 1 | -1/+1 |
| * | Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() ... | James Morris | 2009-01-07 | 1 | -1/+1 |
| * | CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2] | David Howells | 2009-01-05 | 1 | -1/+1 |
* | | sanitize audit_log_capset() | Al Viro | 2009-01-04 | 1 | -3/+1 |
|/ |
|
* | CRED: Inaugurate COW credentials | David Howells | 2008-11-14 | 1 | -54/+24 |
* | CRED: Separate task security context from task_struct | David Howells | 2008-11-14 | 1 | -2/+2 |
* | CRED: Neuter sys_capset() | David Howells | 2008-11-14 | 1 | -204/+23 |
* | Capabilities: BUG when an invalid capability is requested | Eric Paris | 2008-11-11 | 1 | -0/+5 |
* | When the capset syscall is used it is not possible for audit to record the | Eric Paris | 2008-11-11 | 1 | -0/+5 |
* | file capabilities: add no_file_caps switch (v4) | Serge E. Hallyn | 2008-11-06 | 1 | -0/+11 |
* | security: Fix setting of PF_SUPERPRIV by __capable() | David Howells | 2008-08-14 | 1 | -8/+13 |
* | security: filesystem capabilities refactor kernel code | Andrew G. Morgan | 2008-07-24 | 1 | -117/+221 |
* | security: filesystem capabilities: fix fragile setuid fixup code | Andrew G. Morgan | 2008-07-04 | 1 | -0/+21 |
* | capabilities: remain source compatible with 32-bit raw legacy capability supp... | Andrew G. Morgan | 2008-05-31 | 1 | -38/+73 |
* | Add 64-bit capability support to the kernel | Andrew Morgan | 2008-02-05 | 1 | -9/+104 |
* | Uninline find_pid etc set of functions | Pavel Emelyanov | 2007-10-19 | 1 | -1/+1 |
* | Uninline find_task_by_xxx set of functions | Pavel Emelyanov | 2007-10-19 | 1 | -4/+2 |
* | pid namespaces: changes to show virtual ids to user | Pavel Emelyanov | 2007-10-19 | 1 | -6/+8 |
* | pid namespaces: define is_global_init() and is_container_init() | Serge E. Hallyn | 2007-10-19 | 1 | -1/+2 |
* | whitespace fixes: capability syscalls | Daniel Walker | 2007-10-18 | 1 | -95/+95 |