Commits · de7c4cc947f9f56f61520ee7edaf380434a98c8d · jan.koester / Linux · GitLab

Jul 12, 2016
- apparmor: fix refcount race when finding a child profile · de7c4cc9
  John Johansen authored Dec 16, 2015
  de7c4cc9
- apparmor: fix ref count leak when profile sha1 hash is read · 0b938a2e
  John Johansen authored Nov 18, 2015
  0b938a2e
- apparmor: check that xindex is in trans_table bounds · 23ca7b64
  John Johansen authored Mar 17, 2016
  23ca7b64
- apparmor: ensure the target profile name is always audited · f7da2de0
  John Johansen authored Apr 20, 2016
  f7da2de0
- apparmor: fix audit full profile hname on successful load · 7ee6da25
  John Johansen authored Apr 16, 2016
  7ee6da25
- apparmor: fix log failures for all profiles in a set · bf15cf0c
  John Johansen authored Apr 16, 2016
  bf15cf0c
- apparmor: fix put() parent ref after updating the active ref · f351841f
  John Johansen authored Apr 16, 2016
  f351841f
- apparmor: add parameter to control whether policy hashing is used · 6059f71f
  John Johansen authored Oct 24, 2014
  6059f71f
- apparmor: internal paths should be treated as disconnected · bd35db8b
  John Johansen authored Jul 25, 2014
  bd35db8b
- apparmor: fix disconnected bind mnts reconnection · f2e561d1
  John Johansen authored Jul 25, 2014
  f2e561d1
- apparmor: fix update the mtime of the profile file on replacement · d671e890
  John Johansen authored Jul 25, 2014
  d671e890
- apparmor: exec should not be returning ENOENT when it denies · 9049a792
  John Johansen authored Jul 25, 2014
  9049a792
- apparmor: fix uninitialized lsm_audit member · b6b1b81b
  John Johansen authored Jun 08, 2014
  b6b1b81b
- apparmor: fix replacement bug that adds new child to old parent · ec34fa24
  John Johansen authored Apr 11, 2016
  ec34fa24
- apparmor: fix refcount bug in profile replacement · dcda617a
  John Johansen authored Apr 11, 2016
  dcda617a
Jul 09, 2016
- Merge tag 'keys-misc-20160708' of... · e1e5fa96
  James Morris authored Jul 09, 2016
  e1e5fa96
Jul 08, 2016
- Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into next · c6328099
  James Morris authored Jul 08, 2016
  
  c6328099
Jul 07, 2016
- MAINTAINERS - Location of the Smack repository · ece38248
  Casey Schaufler authored Jul 07, 2016
  ece38248
- samples/seccomp: Add standalone config option · f6041c1d
  Olof Johansson authored Jul 05, 2016
  f6041c1d
- Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next · d011a4d8
  James Morris authored Jul 07, 2016
  
  d011a4d8
Jun 30, 2016
- ima: extend the measurement entry specific pcr · 544e1cea
  Eric Richter authored Jun 01, 2016
  544e1cea
- ima: change integrity cache to store measured pcr · a422638d
  Eric Richter authored Jun 01, 2016
  a422638d
- ima: redefine duplicate template entries · 67696f6d
  Eric Richter authored Jun 01, 2016
  67696f6d
- ima: change ima_measurements_show() to display the entry specific pcr · 5f6f027b
  Eric Richter authored Jun 01, 2016
  5f6f027b
- ima: include pcr for each measurement log entry · 14b1da85
  Eric Richter authored Jun 01, 2016
  14b1da85
- ima: extend ima_get_action() to return the policy pcr · 725de7fa
  Eric Richter authored Jun 01, 2016
  725de7fa
- ima: add policy support for extending different pcrs · 0260643c
  Eric Richter authored Jun 01, 2016
  0260643c
- integrity: add measured_pcrs field to integrity cache · 96d450bb
  Eric Richter authored Jun 01, 2016
  96d450bb
Jun 27, 2016
- netlabel: Implement CALIPSO config functions for SMACK. · 3f09354a
  Huw Davies authored Jun 27, 2016
  3f09354a
- calipso: Add a label cache. · 4fee5242
  Huw Davies authored Jun 27, 2016
  4fee5242
- calipso: Add validation of CALIPSO option. · 2e532b70
  Huw Davies authored Jun 27, 2016
  2e532b70
- netlabel: Pass a family parameter to netlbl_skbuff_err(). · a04e71f6
  Huw Davies authored Jun 27, 2016
  a04e71f6
- calipso: Allow the lsm to label the skbuff directly. · 2917f57b
  Huw Davies authored Jun 27, 2016
  2917f57b
- ipv6: constify the skb pointer of ipv6_find_tlv(). · 0868383b
  Huw Davies authored Jun 27, 2016
  0868383b
- calipso: Allow request sockets to be relabelled by the lsm. · e1adea92
  Huw Davies authored Jun 27, 2016
  e1adea92
- ipv6: Allow request socks to contain IPv6 options. · 56ac42bc
  Huw Davies authored Jun 27, 2016
  56ac42bc
- netlabel: Prevent setsockopt() from changing the hop-by-hop option. · 1f440c99
  Huw Davies authored Jun 27, 2016
  1f440c99
- calipso: Set the calipso socket label to match the secattr. · ceba1832
  Huw Davies authored Jun 27, 2016
  ceba1832
- netlabel: Move bitmap manipulation functions to the NetLabel core. · 3faa8f98
  Huw Davies authored Jun 27, 2016
  3faa8f98
- ipv6: Add ipv6_renew_options_kern() that accepts a kernel mem pointer. · e67ae213
  Huw Davies authored Jun 27, 2016
  e67ae213