aboutsummaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* capabilities: clean up file capability readingSerge E. Hallyn2007-10-221-8/+15
* pid namespaces: define is_global_init() and is_container_init()Serge E. Hallyn2007-10-191-1/+2
* sparse pointer use of zero as nullStephen Hemminger2007-10-181-1/+1
* V3 file capabilities: alter behavior of cap_setpcapAndrew Morgan2007-10-182-14/+61
* security/ cleanupsAdrian Bunk2007-10-175-118/+1
* Implement file posix capabilitiesSerge E. Hallyn2007-10-176-43/+313
* security: Convert LSM into a static interfaceJames Morris2007-10-178-71/+961
* KEYS: Make request_key() and co fundamentally asynchronousDavid Howells2007-10-175-317/+335
* SELinux: kills warnings in Improve SELinux performance when AVC missesKaiGai Kohei2007-10-172-6/+7
* SELinux: improve performance when AVC misses.KaiGai Kohei2007-10-174-237/+303
* SELinux: policy selectable handling of unknown classes and permsEric Paris2007-10-175-9/+106
* SELinux: Improve read/write performanceYuichi Nakamura2007-10-175-1/+67
* SELinux: tune avtab to reduce memory usageYuichi Nakamura2007-10-174-36/+82
* [SELINUX]: Update for netfilter ->hook() arg changes.David S. Miller2007-10-151-6/+5
* [INET]: local port range robustnessStephen Hemminger2007-10-101-17/+22
* [NET]: Support multiple network namespaces with netlinkEric W. Biederman2007-10-101-2/+3
* [NET]: Make device event notification network namespace safeEric W. Biederman2007-10-101-0/+4
* SELinux: fix array out of bounds when mounting with selinux optionsEric Paris2007-09-201-0/+2
* SELinux: clear parent death signal on SID transitionsStephen Smalley2007-08-301-0/+3
* fix NULL pointer dereference in __vm_enough_memory()Alan Cox2007-08-223-6/+6
* SELinux: correct error code in selinux_audit_rule_initSteve G2007-08-161-1/+1
* SELinux: remove redundant pointer checks before calling kfree()Paul Moore2007-08-021-2/+1
* SELinux: restore proper NetLabel caching behaviorPaul Moore2007-08-021-4/+12
* Typo fixes errror -> errorGabriel Craciunescu2007-07-311-1/+1
* SELinux: null-terminate context string in selinux_xfrm_sec_ctx_allocVenkat Yekkirala2007-07-251-1/+2
* SELinux: fix memory leak in security_netlbl_cache_add()Jesper Juhl2007-07-231-1/+3
* [PATCH] get rid of AVC_PATH postponed treatmentAl Viro2007-07-221-7/+8
* mm: Remove slab destructors from kmem_cache_create().Paul Mundt2007-07-204-4/+4
* Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2007-07-192-31/+39
|\
| * SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabelPaul Moore2007-07-192-31/+31
| * SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcementPaul Moore2007-07-191-0/+8
* | coredump masking: reimplementation of dumpable using two flagsKawai, Hidehiro2007-07-192-2/+2
|/
* usermodehelper: Tidy up waitingJeremy Fitzhardinge2007-07-181-1/+2
* Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid checkSatyam Sharma2007-07-171-1/+1
* Audit: add TTY input auditingMiloslav Trmac2007-07-161-0/+2
* Revert "SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for Ne...Linus Torvalds2007-07-132-24/+31
* security: unexport mmap_min_addrAdrian Bunk2007-07-111-1/+0
* SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabelPaul Moore2007-07-112-31/+24
* security: Protection for exploiting null dereference using mmapEric Paris2007-07-117-5/+19
* SELinux: Use %lu for inode->i_no when printing avcTobias Oed2007-07-111-1/+1
* SELinux: allow preemption between transition permission checksStephen Smalley2007-07-114-29/+45
* selinux: introduce schedule points in policydb_destroy()Eric Paris2007-07-111-0/+7
* selinux: add selinuxfs structure for object class discoveryChristopher J. PeBenito2007-07-112-0/+250
* selinux: change sel_make_dir() to specify inode counter.Christopher J. PeBenito2007-07-111-5/+6
* selinux: rename sel_remove_bools() for more general usage.Christopher J. PeBenito2007-07-111-5/+4
* selinux: add support for querying object classes and permissions from the run...Christopher J. PeBenito2007-07-112-0/+98
* [NetLabel]: consolidate the struct socket/sock handling to just struct sockPaul Moore2007-06-081-15/+21
* Fix trivial typos in Kconfig* filesDavid Sterba2007-05-091-1/+1
* header cleaning: don't include smp_lock.h when not usedRandy Dunlap2007-05-083-3/+0
* tty: introduce no_tty and use it in selinuxEric W. Biederman2007-05-081-4/+3