Commits · aa98b942cbf305cf2abe5dc3aff11f579c7d7fdc · jan.koester / Linux · GitLab

Dec 26, 2015
- Merge branch 'smack-for-4.5' of https://github.com/cschaufler/smack-next into next · aa98b942
  James Morris authored Dec 26, 2015
  
  aa98b942
- Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/selinux into next · 37babe4e
  James Morris authored Dec 26, 2015
  
  37babe4e
- Merge branch 'next' of... · 3cb92fe4
  James Morris authored Dec 26, 2015
  3cb92fe4
Dec 24, 2015
- IMA: policy can be updated zero times · 0112721d
  Sasha Levin authored Dec 22, 2015
  0112721d
- selinux: rate-limit netlink message warnings in selinux_nlmsg_perm() · 76319946
  Vladis Dronov authored Dec 24, 2015
  76319946
- selinux: export validatetrans decisions · f9df6458
  Andrew Perepechko authored Dec 24, 2015
  f9df6458
- gfs2: Invalid security labels of inodes when they go invalid · f39814f6
  Andreas Gruenbacher authored Dec 24, 2015
  f39814f6
- selinux: Revalidate invalid inode security labels · 5d226df4
  Andreas Gruenbacher authored Dec 24, 2015
  5d226df4
- security: Add hook to invalidate inode security labels · 6f3be9f5
  Andreas Gruenbacher authored Dec 24, 2015
  6f3be9f5
- selinux: Add accessor functions for inode->i_security · 83da53c5
  Andreas Gruenbacher authored Dec 24, 2015
  83da53c5
- security: Make inode argument of inode_getsecid non-const · d6335d77
  Andreas Gruenbacher authored Dec 24, 2015
  d6335d77
- security: Make inode argument of inode_getsecurity non-const · ea861dfd
  Andreas Gruenbacher authored Dec 24, 2015
  ea861dfd
- selinux: Remove unused variable in selinux_inode_init_security · a44ca52c
  Andreas Gruenbacher authored Dec 24, 2015
  a44ca52c
Dec 20, 2015
- keys, trusted: seal with a TPM2 authorization policy · 5beb0c43
  Jarkko Sakkinen authored Oct 31, 2015
  5beb0c43
- keys, trusted: select hash algorithm for TPM2 chips · 5ca4c20c
  Jarkko Sakkinen authored Nov 05, 2015
  5ca4c20c
- keys, trusted: fix: *do not* allow duplicate key options · 5208cc83
  Jarkko Sakkinen authored Dec 12, 2015
  5208cc83
- tpm_ibmvtpm: properly handle interrupted packet receptions · 6674ff14
  Stefan Berger authored Dec 09, 2015
  6674ff14
- tpm_tis: Tighten IRQ auto-probing · b8ba1e74
  Jason Gunthorpe authored Nov 25, 2015
  b8ba1e74
- tpm_tis: Refactor the interrupt setup · e3837e74
  Jason Gunthorpe authored Nov 25, 2015
  e3837e74
- tpm_tis: Get rid of the duplicate IRQ probing code · 7ab4032f
  Jason Gunthorpe authored Nov 25, 2015
  7ab4032f
- tpm: rework tpm_get_timeouts() · 25112048
  Jason Gunthorpe authored Nov 25, 2015
  25112048
- tpm_tis: Ensure interrupts are disabled when the driver starts · 036bb38f
  Jason Gunthorpe authored Nov 25, 2015
  036bb38f
- tpm_tis: Use devm_free_irq not free_irq · 727f28b8
  Jason Gunthorpe authored Nov 25, 2015
  727f28b8
Dec 17, 2015
- Smack: type confusion in smak sendmsg() handler · 81bd0d56
  Roman Kubiak authored Dec 17, 2015
  81bd0d56
Dec 15, 2015
- security/integrity: make ima/ima_mok.c explicitly non-modular · 92cc9166
  Paul Gortmaker authored Dec 09, 2015
  92cc9166
- ima: update appraise flags after policy update completes · 6ad6afa1
  Mimi Zohar authored Dec 07, 2015
  6ad6afa1
- IMA: prevent keys on the .ima_blacklist from being removed · 501f1bde
  Mimi Zohar authored Nov 10, 2015
  501f1bde
- KEYS: prevent keys from being removed from specified keyrings · d3600bcf
  Mimi Zohar authored Nov 10, 2015
  d3600bcf
- IMA: allow reading back the current IMA policy · 80eae209
  Petko Manolov authored Dec 02, 2015
  80eae209
- IMA: create machine owner and blacklist keyrings · 41c89b64
  Petko Manolov authored Dec 02, 2015
  41c89b64
- IMA: policy can now be updated multiple times · 38d859f9
  Petko Manolov authored Dec 02, 2015
  38d859f9
- evm: EVM_LOAD_X509 depends on EVM · 05d3884b
  Arnd Bergmann authored Nov 27, 2015
  05d3884b
- evm: reset EVM status when file attributes change · 523b74b1
  Dmitry Kasatkin authored Oct 22, 2015
  523b74b1
- evm: provide a function to set the EVM key from the kernel · 76266763
  Dmitry Kasatkin authored Oct 22, 2015
  76266763
- evm: enable EVM when X509 certificate is loaded · 26ddabfe
  Dmitry Kasatkin authored Oct 22, 2015
  26ddabfe
- evm: load an x509 certificate from the kernel · 2ce523eb
  Dmitry Kasatkin authored Oct 22, 2015
  2ce523eb
Dec 10, 2015
- Smack: File receive for sockets · 79be0935
  Casey Schaufler authored Dec 07, 2015
  79be0935
Dec 02, 2015
- tpm_tis: further simplify calculation of ordinal duration · f7286430
  Martin Wilck authored Nov 20, 2015
  f7286430
Nov 23, 2015
- integrity: define '.evm' as a builtin 'trusted' keyring · f4dc3778
  Dmitry Kasatkin authored Oct 22, 2015
  f4dc3778
- Sync to Linus v4.4-rc2 for LSM developers. · ebd68df3
  James Morris authored Nov 23, 2015
  
  ebd68df3