projects / deliverable / linux.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
calipso: Add validation of CALIPSO option.
2016-06-27  Huw Daviescalipso: Add validation of CALIPSO option.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Pass a family parameter to netlbl_skbuff_err().
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviescalipso: Allow the lsm to label the skbuff directly.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesipv6: constify the skb pointer of ipv6_find_tlv().
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviescalipso: Allow request sockets to be relabelled by...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesipv6: Allow request socks to contain IPv6 options.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Prevent setsockopt() from changing the hop...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviescalipso: Set the calipso socket label to match the...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Move bitmap manipulation functions to the...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesipv6: Add ipv6_renew_options_kern() that accepts a...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Add support for removing a CALIPSO DOI.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Add support for creating a CALIPSO protocol...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Add support for enumerating the CALIPSO DOI...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Add support for querying a CALIPSO DOI.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Initial support for the CALIPSO netlink protocol.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Add an address family to domain hash entries.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-27  Huw Daviesnetlabel: Mark rcu pointers with __rcu.
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-15  Heinrich Schuchardtselinux: fix type mismatch
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-09  Paul Moorenetlabel: handle sparse category maps in netlbl_catmap_getlong()
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-09  Paul Mooreselinux: import NetLabel category bitmaps correctly
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-07  Paul Mooreiucv: properly clone LSM attributes to newly created...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-06-06  Paul Moorenetlabel: add address family checks to netlbl_{sock...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-05-31  Stephen Smalleyselinux: Only apply bounds checking to source types
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-26  Stephen Smalleyselinux: apply execstack check on thread stacks
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-26  Stephen Smalleyselinux: distinguish non-init user namespace capability...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-19  Paul Mooreselinux: check ss_initialized before revalidating an...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-19  Paul Mooreselinux: delay inode label lookup as long as possible
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-19  Paul Mooreselinux: don't revalidate an inode's label when explicitly...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-14  Prarit Bhargavaselinux: Change bool variable name to index.
Cc: Paul Moore <paul@paul-moore.com>
Cc: Paul Moore <pmoore@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-05  Jeff Vander Stoepselinux: restrict kernel module loading
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-05  Paul Mooreselinux: consolidate the ptrace parent lookup code
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-05  Paul Mooreselinux: simply inode label states to INVALID and INITIALIZED
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-05  Paul Mooreselinux: don't revalidate inodes in selinux_socket_getpeerse...
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-04-05  Janak Desainetlabel: fix a problem with netlbl_secattr_catmap_setrng()
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-02-19  Andreas Gruenbacherselinux: Don't sleep inside inode_getsecid hook
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-02-08  Wei Yuanaudit: Fix typo in comment
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-01-28  Andy Shevchenkoselinux: use absolute path to include directory
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2016-01-25  Richard Guy Briggsaudit: log failed attempts to change audit_pid configuration
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-25  Richard Guy Briggsaudit: stop an old auditd being starved out by a new...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Paul Mooreaudit: always enable syscall auditing when supported...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Paul Mooreaudit: force seccomp event logging to honor the audit_enable...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Markus Elfringaudit: Delete unnecessary checks before two function...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Richard Guy Briggsaudit: wake up threads if queue switched from limited...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Richard Guy Briggsaudit: include auditd's threads in audit_log_start...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Paul Mooreaudit: remove audit_backlog_wait_overflow
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-13  Richard Guy Briggsaudit: don't needlessly reset valid wait time
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2016-01-08  Andreas Gruenbacherselinux: Inode label revalidation performance fix
Signed-off-by: Paul Moore <paul@paul-moore.com>
 commit | commitdiff | tree
2015-12-24  Vladis Dronovselinux: rate-limit netlink message warnings in selinux_nlms...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andrew Perepechkoselinux: export validatetrans decisions
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbachergfs2: Invalid security labels of inodes when they go...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbacherselinux: Revalidate invalid inode security labels
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbachersecurity: Add hook to invalidate inode security labels
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbacherselinux: Add accessor functions for inode->i_security
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbachersecurity: Make inode argument of inode_getsecid non...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbachersecurity: Make inode argument of inode_getsecurity...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-12-24  Andreas Gruenbacherselinux: Remove unused variable in selinux_inode_init_security
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-24  Stephen Smalleyselinux: fix bug in conditional rules handling
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Paul Mooreaudit: make audit_log_common_recv_msg() a void function
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Saurabh Sengaraudit: removing unused variable
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Scott Matheinaaudit: fix comment block whitespace
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Yaowei Baiaudit: audit_tree_match can be boolean
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Yaowei Baiaudit: audit_string_contains_control can be boolean
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Yaowei Baiaudit: audit_dummy_context can be boolean
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-11-04  Richard Guy Briggsaudit: try harder to send to auditd upon netlink failure
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Sangwooselinux: Use a kmem_cache for allocation struct file_securit...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Geliang Tangselinux: ioctl_has_perm should be static
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Rasmus Villemoesselinux: use sprintf return value
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Rasmus Villemoesselinux: use kstrdup() in security_get_bools()
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Rasmus Villemoesselinux: use kmemdup in security_sid_to_context_core()
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Rasmus Villemoesselinux: remove pointless cast in selinux_inode_setsecurity()
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Rasmus Villemoesselinux: introduce security_context_str_to_sid
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Jeff Vander Stoepselinux: do not check open perm on ftruncate call
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-10-21  Paul Mooreselinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-13  Richard Guy Briggsfixup: audit: implement audit by executable
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-06  Richard Guy Briggsaudit: implement audit by executable
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-06  Richard Guy Briggsaudit: clean simple fsnotify implementation
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-06  Richard Guy Briggsaudit: use macros for unset inode and device values
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-05  Richard Guy Briggsaudit: make audit_del_rule() more robust
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-05  Paul Mooreaudit: fix uninitialized variable in audit_add_rule()
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-04  Richard Guy Briggsaudit: eliminate unnecessary extra layer of watch parent...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-08-04  Richard Guy Briggsaudit: eliminate unnecessary extra layer of watch references
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Laurent Bigonvilleselinux: explicitly declare the role "base_r"
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  David Howellsselinux: Create a common helper to determine an inode...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Stephen Smalleyselinux: Augment BUG_ON assertion for secclass_map.
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Stephen Smalleyselinux: initialize sock security class to default...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Waiman Longselinux: reduce locking overhead in inode_free_security()
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Jeff Vander Stoepselinux: extended permissions for ioctls
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-13  Jeff Vander Stoepsecurity: add ioctl specific auditing to lsm_audit
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-10  Stephen Smalleyselinux: fix mprotect PROT_EXEC regression caused by...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-07-09  Paul Mooreselinux: don't waste ebitmap space when importing NetLabel...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-11  Jan Karaaudit: Fix check of return value of strnlen_user()
CC: Paul Moore <pmoore@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-05  J. Bruce Fieldsselinux: fix setting of security labels on NFS
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Stephen Smalleyselinux: Remove unused permission definitions
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Stephen Smalleyselinux: enable genfscon labeling for sysfs and pstore...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Stephen Smalleyselinux: enable per-file labeling for debugfs files.
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Stephen Smalleyselinux: update netlink socket classes
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Oleg Nesterovsignals: don't abuse __flush_signals() in selinux_bprm_commi...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-06-04  Marek Milkovicselinux: Print 'sclass' as string when unrecognized...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-05-29  Mikhail Klementyevaudit: obsolete audit_context check is removed in audit_filt...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
2015-05-29  Shailendra Vermaaudit: fix for typo in comment to function audit_log_link_de...
Signed-off-by: Paul Moore <pmoore@redhat.com>
 commit | commitdiff | tree
next
Linux kernel - Deliverables
This page took 0.580144 seconds and 4 git commands to generate.