summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2016-06-27netlabel: Implement CALIPSO config functions for SMACK.Huw Davies
2016-06-27calipso: Add a label cache.Huw Davies
2016-06-27calipso: Add validation of CALIPSO option.Huw Davies
2016-06-27netlabel: Pass a family parameter to netlbl_skbuff_err().Huw Davies
2016-06-27calipso: Allow the lsm to label the skbuff directly.Huw Davies
2016-06-27ipv6: constify the skb pointer of ipv6_find_tlv().Huw Davies
2016-06-27calipso: Allow request sockets to be relabelled by the lsm.Huw Davies
2016-06-27ipv6: Allow request socks to contain IPv6 options.Huw Davies
2016-06-27netlabel: Prevent setsockopt() from changing the hop-by-hop option.Huw Davies
2016-06-27calipso: Set the calipso socket label to match the secattr.Huw Davies
2016-06-27netlabel: Move bitmap manipulation functions to the NetLabel core.Huw Davies
2016-06-27ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer.Huw Davies
2016-06-27netlabel: Add support for removing a CALIPSO DOI.Huw Davies
2016-06-27netlabel: Add support for creating a CALIPSO protocol domain mapping.Huw Davies
2016-06-27netlabel: Add support for enumerating the CALIPSO DOI list.Huw Davies
2016-06-27netlabel: Add support for querying a CALIPSO DOI.Huw Davies
2016-06-27netlabel: Initial support for the CALIPSO netlink protocol.Huw Davies
2016-06-27netlabel: Add an address family to domain hash entries.Huw Davies
2016-06-27netlabel: Mark rcu pointers with __rcu.Huw Davies
2016-06-15selinux: fix type mismatchHeinrich Schuchardt
2016-06-09netlabel: handle sparse category maps in netlbl_catmap_getlong()Paul Moore
2016-06-09selinux: import NetLabel category bitmaps correctlyPaul Moore
2016-06-07iucv: properly clone LSM attributes to newly created child socketsPaul Moore
2016-06-06netlabel: add address family checks to netlbl_{sock,req}_delattr()Paul Moore
2016-05-31selinux: Only apply bounds checking to source typesStephen Smalley
2016-05-17LSM: LoadPin: provide enablement CONFIGKees Cook
2016-05-06Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux in...James Morris
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris
2016-05-04Yama: use atomic allocations when reportingSasha Levin
2016-05-04seccomp: Fix comment typoMickaël Salaün
2016-05-04Merge branch 'keys-trust' into keys-nextDavid Howells
2016-05-01ima: add support for creating files using the mknodat syscallMimi Zohar
2016-05-01ima: fix ima_inode_post_setattrMimi Zohar
2016-05-01vfs: forbid write access when reading a file into memoryDmitry Kasatkin
2016-04-27fs: fix over-zealous use of "const"Kees Cook
2016-04-26selinux: apply execstack check on thread stacksStephen Smalley
2016-04-26selinux: distinguish non-init user namespace capability checksStephen Smalley
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook
2016-04-21fs: define a string representation of the kernel_read_file_id enumerationMimi Zohar
2016-04-21Yama: consolidate error reportingKees Cook
2016-04-21string_helpers: add kstrdup_quotable_fileKees Cook
2016-04-21string_helpers: add kstrdup_quotable_cmdlineKees Cook
2016-04-21string_helpers: add kstrdup_quotableKees Cook
2016-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore
2016-04-19selinux: delay inode label lookup as long as possiblePaul Moore
2016-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore
2016-04-14selinux: Change bool variable name to index.Prarit Bhargava
2016-04-12Merge branch 'keys-sig' into keys-nextDavid Howells
2016-04-12Merge branch 'keys-misc' into keys-nextDavid Howells
2016-04-12KEYS: Add KEYCTL_DH_COMPUTE commandMat Martineau