James Morris
|
d93aca6050
Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux_fixes into for-linus
|
11 years ago |
Paul Moore
|
c0828e5048
selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
|
11 years ago |
Paul Moore
|
817eff718d
selinux: look for IPsec labels on both inbound and outbound packets
|
11 years ago |
Paul Moore
|
446b802437
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
|
11 years ago |
Paul Moore
|
4718006827
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
|
11 years ago |
Chad Hanson
|
598cdbcf86
selinux: fix broken peer recv check
|
11 years ago |
Paul Moore
|
5c6c26813a
selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
|
11 years ago |
Paul Moore
|
5b67c49324
selinux: look for IPsec labels on both inbound and outbound packets
|
11 years ago |
Paul Moore
|
0b1f24e6db
selinux: pull address family directly from the request_sock struct
|
11 years ago |
Paul Moore
|
7f721643db
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
|
11 years ago |
Paul Moore
|
da2ea0d056
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
|
11 years ago |
Paul Moore
|
dd0a11815a
Merge tag 'v3.12'
|
11 years ago |
Linus Torvalds
|
78dc53c422
Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
11 years ago |
Paul Moore
|
94851b18d4
Merge tag 'v3.12'
|
11 years ago |
David S. Miller
|
c3fa32b976
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
|
12 years ago |
James Morris
|
6f799c97f3
Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into ra-next
|
12 years ago |
Patrick McHardy
|
795aa6ef6a
netfilter: pass hook ops to hookfn
|
12 years ago |
Linus Torvalds
|
ab35406264
selinux: remove 'flags' parameter from avc_audit()
|
12 years ago |
Linus Torvalds
|
19e49834d2
selinux: remove 'flags' parameter from inode_has_perm
|
12 years ago |
Eric W. Biederman
|
0bbf87d852
net ipv4: Convert ipv4.ip_local_port_range to be per netns v3
|
12 years ago |
Paul Moore
|
98f700f317
Merge git://git.infradead.org/users/eparis/selinux
|
12 years ago |
Eric Paris
|
0b4bdb3573
Revert "SELinux: do not handle seclabel as a special flag"
|
12 years ago |
Anand Avati
|
102aefdda4
selinux: consider filesystem subtype in policies
|
12 years ago |
Chris PeBenito
|
2be4d74f2f
Add SELinux policy capability for always checking packet and peer classes.
|
12 years ago |
Eric Paris
|
b43e725d8d
SELinux: use a helper function to determine seclabel
|
13 years ago |
Eric Paris
|
a64c54cf08
SELinux: pass a superblock to security_fs_use
|
13 years ago |
Eric Paris
|
308ab70c46
SELinux: do not handle seclabel as a special flag
|
13 years ago |
Eric Paris
|
eadcabc697
SELinux: do all flags twiddling in one place
|
13 years ago |
Eric Paris
|
12f348b9dc
SELinux: rename SE_SBLABELSUPP to SBLABEL_MNT
|
13 years ago |
Eric Paris
|
af8e50cc7d
SELinux: use define for number of bits in the mnt flags mask
|
13 years ago |