summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore2014-03-191-9/+27
* selinux: put the mmap() DAC controls before the MAC controlsPaul Moore2014-03-191-12/+8
* security: replace strict_strto*() with kstrto*()Jingoo Han2014-02-062-3/+3
* Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-01-081-1/+13
|\
| * SELinux: Fix memory leak upon loading policyTetsuo Handa2014-01-071-1/+13
* | Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into nextJames Morris2014-01-077-39/+164
|\ \ | |/
| * selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-161-2/+2
| * SELinux: remove duplicated include from hooks.cWei Yongjun2013-12-161-1/+0
| * selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260Paul Moore2013-12-132-60/+22
| * selinux: fix broken peer recv checkChad Hanson2013-12-111-1/+3
| * selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-101-7/+35
| * selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-093-14/+47
| * selinux: pull address family directly from the request_sock structPaul Moore2013-12-041-5/+1
| * selinux: ensure that the cached NetLabel secattr matches the desired SIDPaul Moore2013-12-041-1/+30
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-041-15/+53
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-041-2/+23
| * selinux: fix possible memory leakGeyslan G. Bem2013-11-251-4/+7
| * SELinux: security_load_policy: Silence frame-larger-than warningTim Gardner2013-11-191-22/+32
| * SELinux: Update policy version to support constraints infoRichard Haines2013-11-194-10/+101
| * Merge tag 'v3.12'Paul Moore2013-11-084-39/+27
| |\
* | | selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2013-12-231-2/+2
* | | selinux: fix broken peer recv checkChad Hanson2013-12-231-1/+3
* | | Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2013-12-153-42/+165
|\ \ \
| * \ \ Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes ...James Morris2013-12-133-42/+165
| |\ \ \
| | * | | selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2013-12-121-7/+35
| | * | | selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2013-12-123-14/+47
| | * | | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-121-15/+53
| | * | | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-121-2/+23
| | * | | selinux: fix possible memory leakGeyslan G. Bem2013-12-041-4/+7
| | * | | Merge tag 'v3.12'Paul Moore2013-11-264-39/+27
| | |\ \ \ | | | |/ / | | |/| / | | | |/
* | | | Revert "selinux: consider filesystem subtype in policies"Linus Torvalds2013-12-152-60/+22
|/ / /
* | | Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds2013-11-2114-379/+417
|\ \ \
| * \ \ Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris2013-10-2214-379/+417
| |\ \ \ | | |/ /
| | * | selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore2013-09-261-4/+2
| | * | selinux: Use kmemdup instead of kmalloc + memcpyDuan Jiong2013-09-261-2/+2
| | * | Merge git://git.infradead.org/users/eparis/selinuxPaul Moore2013-09-1813-375/+415
| | |\ \
| | | * | Revert "SELinux: do not handle seclabel as a special flag"Eric Paris2013-08-282-1/+4
| | | * | selinux: consider filesystem subtype in policiesAnand Avati2013-08-282-22/+60
| | | * | Add SELinux policy capability for always checking packet and peer classes.Chris PeBenito2013-07-254-6/+30
| | | * | selinux: fix problems in netnode when BUG() is compiled outPaul Moore2013-07-251-0/+2
| | | * | SELinux: use a helper function to determine seclabelEric Paris2013-07-251-14/+24
| | | * | SELinux: pass a superblock to security_fs_useEric Paris2013-07-253-15/+11
| | | * | SELinux: do not handle seclabel as a special flagEric Paris2013-07-252-4/+1
| | | * | SELinux: change sbsec->behavior to shortEric Paris2013-07-253-3/+3
| | | * | SELinux: renumber the superblock optionsEric Paris2013-07-252-4/+5
| | | * | SELinux: do all flags twiddling in one placeEric Paris2013-07-251-7/+5
| | | * | SELinux: rename SE_SBLABELSUPP to SBLABEL_MNTEric Paris2013-07-252-15/+15
| | | * | SELinux: use define for number of bits in the mnt flags maskEric Paris2013-07-251-1/+4
| | | * | SELinux: make it harder to get the number of mnt opts wrongEric Paris2013-07-251-2/+3
| | | * | SELinux: remove crazy contortions around procEric Paris2013-07-251-1/+1
OpenPOWER on IntegriCloud