 Eric Paris
|
7d8b6c6375
CAPABILITIES: remove undefined caps from all processes
|
%!s(int64=11) %!d(string=hai) anos |
 Andy Lutomirski
|
23adbe12ef
fs,userns: Change inode_capable to capable_wrt_inode_uidgid
|
%!s(int64=11) %!d(string=hai) anos |
 Fabian Frederick
|
a6c8c6902c
kernel/capability.c: code clean-up
|
%!s(int64=11) %!d(string=hai) anos |
 Linus Torvalds
|
bea803183e
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
%!s(int64=11) %!d(string=hai) anos |
 Joe Perches
|
f5645d3575
capability: Use current logging styles
|
%!s(int64=11) %!d(string=hai) anos |
 Eric W. Biederman
|
ca24a23ebc
audit: Simplify and correct audit_log_capset
|
%!s(int64=12) %!d(string=hai) anos |
|
Linus Torvalds
|
300893b08f
Merge tag 'xfs-for-linus-v3.12-rc1' of git://oss.sgi.com/xfs/xfs
|
%!s(int64=12) %!d(string=hai) anos |
|
Eric W. Biederman
|
c7b96acf14
userns: Kill nsown_capable it makes the wrong thing easy
|
%!s(int64=12) %!d(string=hai) anos |
 Dwight Engen
|
fd5e2aa865
xfs: ioctl check for capabilities in the current user namespace
|
%!s(int64=12) %!d(string=hai) anos |
|
Linus Torvalds
|
935d8aabd4
Add file_ns_capable() helper function for open-time capability checking
|
%!s(int64=12) %!d(string=hai) anos |
|
Eric W. Biederman
|
65cc5a17ad
userns: Teach inode_capable to understand inodes whose uids map to other namespaces.
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric W. Biederman
|
1a48e2ac03
userns: Replace the hard to write inode_userns with inode_capable.
|
%!s(int64=13) %!d(string=hai) anos |
|
Linus Torvalds
|
951880e634
Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call"
|
%!s(int64=13) %!d(string=hai) anos |
|
Linus Torvalds
|
c49c41a413
Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
f1c84dae0e
capabilities: remove task_ns_* functions
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
d2a7009f0b
capabitlies: ns_capable can use the cap helpers rather than lsm call
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
105ddf49cd
capabilities: style only - move capable below ns_capable
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
7b61d64849
capabilites: introduce new has_ns_capabilities_noaudit
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
25e7570341
capabilities: call has_ns_capability from has_capability
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
2920a8409d
capabilities: remove all _real_ interfaces
|
%!s(int64=13) %!d(string=hai) anos |
|
Eric Paris
|
b7e724d303
capabilities: reverse arguments to security_capable
|
%!s(int64=13) %!d(string=hai) anos |
 Paul Gortmaker
|
9984de1a5a
kernel: Map most files to use export.h instead of module.h
|
%!s(int64=14) %!d(string=hai) anos |
 James Morris
|
12a5a2621b
Merge branch 'master' into next
|
%!s(int64=14) %!d(string=hai) anos |
 Serge E. Hallyn
|
47a150edc2
Cache user_ns in struct cred
|
%!s(int64=14) %!d(string=hai) anos |
|
Eric Paris
|
5163b583a0
capabilities: delete unused cap_set_full
|
%!s(int64=14) %!d(string=hai) anos |
|
Eric Paris
|
ffa8e59df0
capabilities: do not drop CAP_SETPCAP from the initial task
|
%!s(int64=14) %!d(string=hai) anos |
|
Serge E. Hallyn
|
3263245de4
userns: make has_capability* into real functions
|
%!s(int64=14) %!d(string=hai) anos |
 Serge E. Hallyn
|
3486740a4f
userns: security: make capabilities relative to the user namespace
|
%!s(int64=14) %!d(string=hai) anos |
 Chris Wright
|
6037b715d6
security: add cred argument to security_capable()
|
%!s(int64=14) %!d(string=hai) anos |
 Li Zefan
|
32bd7eb5a7
sched: Remove remaining USER_SCHED code
|
%!s(int64=15) %!d(string=hai) anos |
