 Jann Horn
|
caaee6234d
ptrace: use fsuid, fsgid, effective creds for fs access checks
|
9 年之前 |
 Andy Lutomirski
|
746bf6d642
capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE
|
10 年之前 |
|
Andy Lutomirski
|
58319057b7
capabilities: ambient capabilities
|
10 年之前 |
 Casey Schaufler
|
b1d9e6b064
LSM: Switch to lists of hooks
|
10 年之前 |
 David Howells
|
c6f493d631
VFS: security/: d_backing_inode() annotations
|
10 年之前 |
 Al Viro
|
f4a4a8b125
file->f_path.dentry is pinned down for as long as the file is open...
|
10 年之前 |
|
Al Viro
|
b583043e99
kill f_dentry uses
|
11 年之前 |
 Eric Paris
|
7d8b6c6375
CAPABILITIES: remove undefined caps from all processes
|
11 年之前 |
 Tetsuo Handa
|
6d6f332842
commoncap: don't alloc the credential unless needed in cap_task_prctl
|
11 年之前 |
 Serge Hallyn
|
f54fb863c6
capabilities: allow nice if we are privileged
|
12 年之前 |
 Eric W. Biederman
|
160da84dbb
userns: Allow PR_CAPBSET_DROP in a user namespace.
|
12 年之前 |
|
Al Viro
|
182be68478
kill f_vfsmnt
|
12 年之前 |
|
Eric W. Biederman
|
520d9eabce
Fix cap_capable to only allow owners in the parent user namespace to have caps.
|
12 年之前 |
|
Al Viro
|
e5467859f7
split ->file_mmap() into ->mmap_addr()/->mmap_file()
|
13 年之前 |
|
Al Viro
|
d007794a18
split cap_mmap_addr() out of cap_file_mmap()
|
13 年之前 |
 Linus Torvalds
|
644473e9c6
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
13 年之前 |
 James Morris
|
898bfc1d46
Merge tag 'v3.4-rc5' into next
|
13 年之前 |
|
Eric W. Biederman
|
18815a1808
userns: Convert capabilities related permsion checks
|
13 年之前 |
|
Eric W. Biederman
|
078de5f706
userns: Store uid and gid values in struct cred with kuid_t and kgid_t types
|
13 年之前 |
|
Eric W. Biederman
|
783291e690
userns: Simplify the user_namespace by making userns->creator a kuid.
|
14 年之前 |
 Jonghwan Choi
|
51b79bee62
security: fix compile error in commoncap.c
|
13 年之前 |
|
Eric Paris
|
d52fc5dde1
fcaps: clear the same personality flags as suid when fcaps are used
|
13 年之前 |
 Andy Lutomirski
|
259e5e6c75
Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs
|
13 年之前 |
|
Eric W. Biederman
|
aeb3ae9da9
userns: Add an explicit reference to the parent user namespace
|
14 年之前 |
|
Eric W. Biederman
|
c4a4d60379
userns: Use cred->user_ns instead of cred->user->user_ns
|
14 年之前 |
 Al Viro
|
4040153087
security: trim security.h
|
13 年之前 |
|
Linus Torvalds
|
c49c41a413
Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security
|
13 年之前 |
|
Eric Paris
|
fd77846152
security: remove the security_netlink_recv hook as it is equivalent to capable()
|
13 年之前 |
|
Eric Paris
|
6a9de49115
capabilities: remove the task from capable LSM hook entirely
|
13 年之前 |
 Serge Hallyn
|
7d8db1808a
capabilities: initialize has_cap
|
14 年之前 |
