Linus Torvalds
|
835c92d43b
Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
9 vuotta sitten |
Linus Torvalds
|
7a1e8b80fb
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
9 vuotta sitten |
Al Viro
|
4f3ccd7657
qstr: constify dentry_init_security
|
9 vuotta sitten |
James Morris
|
d011a4d861
Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next
|
9 vuotta sitten |
Huw Davies
|
a04e71f631
netlabel: Pass a family parameter to netlbl_skbuff_err().
|
9 vuotta sitten |
Huw Davies
|
2917f57b6b
calipso: Allow the lsm to label the skbuff directly.
|
9 vuotta sitten |
Seth Forshee
|
aad82892af
selinux: Add support for unprivileged mounts from user namespaces
|
9 vuotta sitten |
Andy Lutomirski
|
380cf5ba6b
fs: Treat foreign mounts as nosuid
|
9 vuotta sitten |
Linus Torvalds
|
f4f27d0028
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
9 vuotta sitten |
Linus Torvalds
|
c52b76185b
Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
9 vuotta sitten |
Stephen Smalley
|
c2316dbf12
selinux: apply execstack check on thread stacks
|
9 vuotta sitten |
Stephen Smalley
|
8e4ff6f228
selinux: distinguish non-init user namespace capability checks
|
9 vuotta sitten |
Paul Moore
|
1ac4247626
selinux: check ss_initialized before revalidating an inode label
|
9 vuotta sitten |
Paul Moore
|
20cdef8d57
selinux: delay inode label lookup as long as possible
|
9 vuotta sitten |
Paul Moore
|
2c97165bef
selinux: don't revalidate an inode's label when explicitly setting it
|
9 vuotta sitten |
Al Viro
|
ce23e64013
->getxattr(): pass dentry and inode as separate arguments
|
9 vuotta sitten |
Al Viro
|
fc64005c93
don't bother with ->d_inode->i_sb - it's always equal to ->d_sb
|
9 vuotta sitten |
Jeff Vander Stoep
|
61d612ea73
selinux: restrict kernel module loading
|
9 vuotta sitten |
Paul Moore
|
0c6181cb30
selinux: consolidate the ptrace parent lookup code
|
9 vuotta sitten |
Paul Moore
|
4b57d6bcd9
selinux: simply inode label states to INVALID and INITIALIZED
|
9 vuotta sitten |
Paul Moore
|
899134f2f6
selinux: don't revalidate inodes in selinux_socket_getpeersec_dgram()
|
9 vuotta sitten |
Al Viro
|
8a04c43b87
constify security_sb_mount()
|
9 vuotta sitten |
Linus Torvalds
|
96b9b1c956
Merge tag 'tty-4.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
|
9 vuotta sitten |
Andreas Gruenbacher
|
e817c2f33e
selinux: Don't sleep inside inode_getsecid hook
|
9 vuotta sitten |
Peter Hurley
|
4a51096937
tty: Make tty_files_lock per-tty
|
9 vuotta sitten |
Andreas Gruenbacher
|
b197367ed1
selinux: Inode label revalidation performance fix
|
9 vuotta sitten |
Vladis Dronov
|
76319946f3
selinux: rate-limit netlink message warnings in selinux_nlmsg_perm()
|
9 vuotta sitten |
Andreas Gruenbacher
|
5d226df4ed
selinux: Revalidate invalid inode security labels
|
9 vuotta sitten |
Andreas Gruenbacher
|
6f3be9f562
security: Add hook to invalidate inode security labels
|
9 vuotta sitten |
Andreas Gruenbacher
|
83da53c5a3
selinux: Add accessor functions for inode->i_security
|
9 vuotta sitten |