summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'usercopy-v4.8-rc6-part2' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2016-09-071-0/+11
|\
| * usercopy: remove page-spanning test for nowKees Cook2016-09-071-0/+11
|/
* Make the hardened user-copy code depend on having a hardened allocatorLinus Torvalds2016-08-191-0/+1
* Merge tag 'usercopy-v4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/ke...Linus Torvalds2016-08-081-0/+28
|\
| * mm: Hardened usercopyKees Cook2016-07-261-0/+28
* | Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2016-08-062-2/+2
|\ \
| * | qstr: constify dentry_init_securityAl Viro2016-07-202-2/+2
| |/
* | Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2016-07-2936-195/+345
|\ \
| * | apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handlingArnd Bergmann2016-07-273-3/+7
| * | apparmor: fix arg_size computation for when setprocattr is null terminatedJohn Johansen2016-07-121-1/+1
| * | apparmor: fix oops, validate buffer size in apparmor_setprocattr()Vegard Nossum2016-07-121-17/+19
| * | apparmor: do not expose kernel stackHeinrich Schuchardt2016-07-121-1/+3
| * | apparmor: fix module parameters can be changed after policy is lockedJohn Johansen2016-07-123-13/+29
| * | apparmor: fix oops in profile_unpack() when policy_db is not presentJohn Johansen2016-07-121-0/+3
| * | apparmor: don't check for vmalloc_addr if kvzalloc() failedJohn Johansen2016-07-121-5/+5
| * | apparmor: add missing id bounds check on dfa verificationJohn Johansen2016-07-122-0/+3
| * | apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another taskJeff Mahoney2016-07-121-2/+4
| * | apparmor: use list_next_entry instead of list_entry_nextGeliang Tang2016-07-121-5/+3
| * | apparmor: fix refcount race when finding a child profileJohn Johansen2016-07-121-1/+3
| * | apparmor: fix ref count leak when profile sha1 hash is readJohn Johansen2016-07-121-0/+1
| * | apparmor: check that xindex is in trans_table boundsJohn Johansen2016-07-121-1/+1
| * | apparmor: ensure the target profile name is always auditedJohn Johansen2016-07-121-11/+9
| * | apparmor: fix audit full profile hname on successful loadJohn Johansen2016-07-121-1/+1
| * | apparmor: fix log failures for all profiles in a setJohn Johansen2016-07-121-10/+19
| * | apparmor: fix put() parent ref after updating the active refJohn Johansen2016-07-121-1/+1
| * | apparmor: add parameter to control whether policy hashing is usedJohn Johansen2016-07-124-6/+25
| * | apparmor: internal paths should be treated as disconnectedJohn Johansen2016-07-121-28/+36
| * | apparmor: fix disconnected bind mnts reconnectionJohn Johansen2016-07-121-1/+4
| * | apparmor: fix update the mtime of the profile file on replacementJohn Johansen2016-07-121-0/+2
| * | apparmor: exec should not be returning ENOENT when it deniesJohn Johansen2016-07-121-1/+1
| * | apparmor: fix uninitialized lsm_audit memberJohn Johansen2016-07-122-2/+4
| * | apparmor: fix replacement bug that adds new child to old parentJohn Johansen2016-07-121-1/+1
| * | apparmor: fix refcount bug in profile replacementJohn Johansen2016-07-121-2/+2
| * | Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris2016-07-092-2/+2
| |\ \
| | * | KEYS: Strip trailing spacesDavid Howells2016-06-142-2/+2
| * | | Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...James Morris2016-07-081-0/+3
| |\ \ \
| | * | | Smack: ignore null signal in smack_task_killRafal Krypa2016-06-081-0/+3
| | |/ /
| * | | Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...James Morris2016-07-077-64/+73
| |\ \ \
| | * | | calipso: Add a label cache.Huw Davies2016-06-271-3/+6
| | * | | netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies2016-06-274-8/+10
| | * | | calipso: Allow the lsm to label the skbuff directly.Huw Davies2016-06-271-0/+15
| | * | | calipso: Allow request sockets to be relabelled by the lsm.Huw Davies2016-06-271-1/+1
| | * | | netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies2016-06-271-1/+16
| | * | | calipso: Set the calipso socket label to match the secattr.Huw Davies2016-06-271-1/+1
| | * | | selinux: fix type mismatchHeinrich Schuchardt2016-06-151-1/+1
| | * | | selinux: import NetLabel category bitmaps correctlyPaul Moore2016-06-091-1/+1
| | * | | selinux: Only apply bounds checking to source typesStephen Smalley2016-05-311-48/+22
| * | | | ima: extend the measurement entry specific pcrEric Richter2016-06-301-3/+3
| * | | | ima: change integrity cache to store measured pcrEric Richter2016-06-303-3/+11
| * | | | ima: redefine duplicate template entriesEric Richter2016-06-301-3/+4
OpenPOWER on IntegriCloud