Commits · 8bebe88c0995f331b0614f413285ce2b1d6fe09c · jan.koester / Linux · GitLab

Jun 09, 2016
- selinux: import NetLabel category bitmaps correctly · 8bebe88c
  Paul Moore authored Jun 09, 2016
  8bebe88c
Jun 07, 2016
- iucv: properly clone LSM attributes to newly created child sockets · 02f06918
  Paul Moore authored Jun 07, 2016
  02f06918
Jun 06, 2016
- netlabel: add address family checks to netlbl_{sock,req}_delattr() · 0e0e3677
  Paul Moore authored Jun 06, 2016
  0e0e3677
May 31, 2016
- selinux: Only apply bounds checking to source types · 7ea59202
  Stephen Smalley authored May 23, 2016
  7ea59202
May 17, 2016
- LSM: LoadPin: provide enablement CONFIG · b937190c
  Kees Cook authored May 17, 2016
  b937190c
May 05, 2016
- Merge branch 'stable-4.7' of git://git.infradead.org/users/pcmoore/selinux into next · a6926cc9
  James Morris authored May 06, 2016
  
  a6926cc9
- Merge tag 'keys-next-20160505' of... · 0250abcd
  James Morris authored May 06, 2016
  0250abcd
May 04, 2016
- Yama: use atomic allocations when reporting · 74f430cd
  Sasha Levin authored May 04, 2016
  74f430cd
- seccomp: Fix comment typo · 470bf1f2
  Mickaël Salaün authored Mar 24, 2016
  470bf1f2
- Merge branch 'keys-trust' into keys-next · d55201ce
  David Howells authored May 04, 2016
  d55201ce
May 01, 2016
- ima: add support for creating files using the mknodat syscall · 05d1a717
  Mimi Zohar authored Feb 29, 2016
  05d1a717
- ima: fix ima_inode_post_setattr · 42a4c603
  Mimi Zohar authored Feb 29, 2016
  42a4c603
- vfs: forbid write access when reading a file into memory · 39d637af
  Dmitry Kasatkin authored Oct 26, 2014
  39d637af
Apr 27, 2016
- fs: fix over-zealous use of "const" · da20dfe6
  Kees Cook authored Apr 21, 2016
  da20dfe6
Apr 26, 2016
- selinux: apply execstack check on thread stacks · c2316dbf
  Stephen Smalley authored Apr 08, 2016
  c2316dbf
- selinux: distinguish non-init user namespace capability checks · 8e4ff6f2
  Stephen Smalley authored Apr 08, 2016
  8e4ff6f2
Apr 21, 2016
- LSM: LoadPin for kernel file loading restrictions · 9b091556
  Kees Cook authored Apr 20, 2016
  9b091556
- fs: define a string representation of the kernel_read_file_id enumeration · 1284ab5b
  Mimi Zohar authored Apr 20, 2016
  1284ab5b
- Yama: consolidate error reporting · 8a56038c
  Kees Cook authored Apr 20, 2016
  8a56038c
- string_helpers: add kstrdup_quotable_file · 21985319
  Kees Cook authored Apr 20, 2016
  21985319
- string_helpers: add kstrdup_quotable_cmdline · 0d044328
  Kees Cook authored Apr 20, 2016
  0d044328
- string_helpers: add kstrdup_quotable · b53f27e4
  Kees Cook authored Apr 20, 2016
  b53f27e4
Apr 19, 2016
- selinux: check ss_initialized before revalidating an inode label · 1ac42476
  Paul Moore authored Apr 18, 2016
  1ac42476
- selinux: delay inode label lookup as long as possible · 20cdef8d
  Paul Moore authored Apr 04, 2016
  20cdef8d
- selinux: don't revalidate an inode's label when explicitly setting it · 2c97165b
  Paul Moore authored Apr 19, 2016
  2c97165b
Apr 14, 2016
- selinux: Change bool variable name to index. · 0fd71a62
  Prarit Bhargava authored Apr 14, 2016
  0fd71a62
Apr 12, 2016
- Merge branch 'keys-sig' into keys-next · b6e17c1b
  David Howells authored Apr 12, 2016
  b6e17c1b
- Merge branch 'keys-misc' into keys-next · 6e007f31
  David Howells authored Apr 12, 2016
  6e007f31
- KEYS: Add KEYCTL_DH_COMPUTE command · ddbb4114
  Mat Martineau authored Apr 12, 2016
  ddbb4114
- Security: Keys: Big keys stored encrypted · 13100a72
  Kirill Marinushkin authored Apr 12, 2016
  13100a72
- KEYS: user_update should use copy of payload made during preparsing · 898de7d0
  David Howells authored Apr 12, 2016
  898de7d0
- security: integrity: Remove select to deleted option PUBLIC_KEY_ALGO_RSA · 93da17b1
  Andreas Ziegler authored Apr 12, 2016
  93da17b1
Apr 11, 2016
- IMA: Use the the system trusted keyrings instead of .ima_mok · 56104cf2
  David Howells authored Apr 07, 2016
  56104cf2
- certs: Add a secondary system keyring that can be added to dynamically · d3bfe841
  David Howells authored Apr 06, 2016
  d3bfe841
- KEYS: Remove KEY_FLAG_TRUSTED and KEY_ALLOC_TRUSTED · 77f68bac
  David Howells authored Apr 06, 2016
  77f68bac
- KEYS: Move the point of trust determination to __key_link() · a511e1af
  David Howells authored Apr 06, 2016
  a511e1af
- KEYS: Make the system trusted keyring depend on the asymmetric key type · 99716b7c
  David Howells authored Apr 06, 2016
  99716b7c
- X.509: Move the trust validation code out to its own file · cfb664ff
  David Howells authored Apr 06, 2016
  cfb664ff
- X.509: Use verify_signature() if we have a struct key * to use · 5f7f5c81
  David Howells authored Apr 06, 2016
  5f7f5c81
- KEYS: Generalise x509_request_asymmetric_key() · 9eb02989
  David Howells authored Apr 06, 2016
  9eb02989