Commits · 4fee5242bf41d9ad641d4c1b821e36eb7ba37fbf · jan.koester / Linux · GitLab

Jun 27, 2016
- calipso: Add a label cache. · 4fee5242
  Huw Davies authored Jun 27, 2016
  4fee5242
- calipso: Add validation of CALIPSO option. · 2e532b70
  Huw Davies authored Jun 27, 2016
  2e532b70
- netlabel: Pass a family parameter to netlbl_skbuff_err(). · a04e71f6
  Huw Davies authored Jun 27, 2016
  a04e71f6
- calipso: Allow the lsm to label the skbuff directly. · 2917f57b
  Huw Davies authored Jun 27, 2016
  2917f57b
- ipv6: constify the skb pointer of ipv6_find_tlv(). · 0868383b
  Huw Davies authored Jun 27, 2016
  0868383b
- calipso: Allow request sockets to be relabelled by the lsm. · e1adea92
  Huw Davies authored Jun 27, 2016
  e1adea92
- ipv6: Allow request socks to contain IPv6 options. · 56ac42bc
  Huw Davies authored Jun 27, 2016
  56ac42bc
- netlabel: Prevent setsockopt() from changing the hop-by-hop option. · 1f440c99
  Huw Davies authored Jun 27, 2016
  1f440c99
- calipso: Set the calipso socket label to match the secattr. · ceba1832
  Huw Davies authored Jun 27, 2016
  ceba1832
- netlabel: Move bitmap manipulation functions to the NetLabel core. · 3faa8f98
  Huw Davies authored Jun 27, 2016
  3faa8f98
- ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer. · e67ae213
  Huw Davies authored Jun 27, 2016
  e67ae213
- netlabel: Add support for removing a CALIPSO DOI. · d7cce015
  Huw Davies authored Jun 27, 2016
  d7cce015
- netlabel: Add support for creating a CALIPSO protocol domain mapping. · dc7de73f
  Huw Davies authored Jun 27, 2016
  dc7de73f
- netlabel: Add support for enumerating the CALIPSO DOI list. · e1ce69df
  Huw Davies authored Jun 27, 2016
  e1ce69df
- netlabel: Add support for querying a CALIPSO DOI. · a5e34490
  Huw Davies authored Jun 27, 2016
  a5e34490
- netlabel: Initial support for the CALIPSO netlink protocol. · cb72d382
  Huw Davies authored Jun 27, 2016
  cb72d382
- netlabel: Add an address family to domain hash entries. · 8f18e675
  Huw Davies authored Jun 27, 2016
  8f18e675
- netlabel: Mark rcu pointers with __rcu. · 96a8f7f8
  Huw Davies authored Jun 27, 2016
  96a8f7f8
Jun 15, 2016
- selinux: fix type mismatch · 309c5fad
  Heinrich Schuchardt authored Jun 10, 2016
  309c5fad
Jun 09, 2016
- netlabel: handle sparse category maps in netlbl_catmap_getlong() · 50b8629a
  Paul Moore authored Jun 09, 2016
  50b8629a
- selinux: import NetLabel category bitmaps correctly · 8bebe88c
  Paul Moore authored Jun 09, 2016
  8bebe88c
Jun 07, 2016
- iucv: properly clone LSM attributes to newly created child sockets · 02f06918
  Paul Moore authored Jun 07, 2016
  02f06918
Jun 06, 2016
- netlabel: add address family checks to netlbl_{sock,req}_delattr() · 0e0e3677
  Paul Moore authored Jun 06, 2016
  0e0e3677
May 31, 2016
- selinux: Only apply bounds checking to source types · 7ea59202
  Stephen Smalley authored May 23, 2016
  7ea59202
May 17, 2016
- LSM: LoadPin: provide enablement CONFIG · b937190c
  Kees Cook authored May 17, 2016
  b937190c
May 05, 2016
- Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux into next · a6926cc9
  James Morris authored May 06, 2016
  
  a6926cc9
- Merge tag 'keys-next-20160505' of... · 0250abcd
  James Morris authored May 06, 2016
  0250abcd
May 04, 2016
- Yama: use atomic allocations when reporting · 74f430cd
  Sasha Levin authored May 04, 2016
  74f430cd
- seccomp: Fix comment typo · 470bf1f2
  Mickaël Salaün authored Mar 24, 2016
  470bf1f2
- Merge branch 'keys-trust' into keys-next · d55201ce
  David Howells authored May 04, 2016
  d55201ce
May 01, 2016
- ima: add support for creating files using the mknodat syscall · 05d1a717
  Mimi Zohar authored Feb 29, 2016
  05d1a717
- ima: fix ima_inode_post_setattr · 42a4c603
  Mimi Zohar authored Feb 29, 2016
  42a4c603
- vfs: forbid write access when reading a file into memory · 39d637af
  Dmitry Kasatkin authored Oct 26, 2014
  39d637af
Apr 27, 2016
- fs: fix over-zealous use of "const" · da20dfe6
  Kees Cook authored Apr 21, 2016
  da20dfe6
Apr 26, 2016
- selinux: apply execstack check on thread stacks · c2316dbf
  Stephen Smalley authored Apr 08, 2016
  c2316dbf
- selinux: distinguish non-init user namespace capability checks · 8e4ff6f2
  Stephen Smalley authored Apr 08, 2016
  8e4ff6f2
Apr 21, 2016
- LSM: LoadPin for kernel file loading restrictions · 9b091556
  Kees Cook authored Apr 20, 2016
  9b091556
- fs: define a string representation of the kernel_read_file_id enumeration · 1284ab5b
  Mimi Zohar authored Apr 20, 2016
  1284ab5b
- Yama: consolidate error reporting · 8a56038c
  Kees Cook authored Apr 20, 2016
  8a56038c
- string_helpers: add kstrdup_quotable_file · 21985319
  Kees Cook authored Apr 20, 2016
  21985319