Andreas Gruenbacher
|
5d6c31910b
xattr: Add __vfs_{get,set,remove}xattr helpers
|
8 gadi atpakaļ |
Andy Lutomirski
|
380cf5ba6b
fs: Treat foreign mounts as nosuid
|
9 gadi atpakaļ |
Seth Forshee
|
d07b846f62
fs: Limit file caps to the user namespace of the super block
|
10 gadi atpakaļ |
Linus Torvalds
|
7f427d3a60
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
9 gadi atpakaļ |
Baolin Wang
|
457db29bfc
security: Introduce security_settime64()
|
9 gadi atpakaļ |
Al Viro
|
ce23e64013
->getxattr(): pass dentry and inode as separate arguments
|
9 gadi atpakaļ |
Jann Horn
|
caaee6234d
ptrace: use fsuid, fsgid, effective creds for fs access checks
|
9 gadi atpakaļ |
Andy Lutomirski
|
746bf6d642
capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE
|
10 gadi atpakaļ |
Andy Lutomirski
|
58319057b7
capabilities: ambient capabilities
|
10 gadi atpakaļ |
Casey Schaufler
|
b1d9e6b064
LSM: Switch to lists of hooks
|
10 gadi atpakaļ |
David Howells
|
c6f493d631
VFS: security/: d_backing_inode() annotations
|
10 gadi atpakaļ |
Al Viro
|
f4a4a8b125
file->f_path.dentry is pinned down for as long as the file is open...
|
10 gadi atpakaļ |
Al Viro
|
b583043e99
kill f_dentry uses
|
10 gadi atpakaļ |
Eric Paris
|
7d8b6c6375
CAPABILITIES: remove undefined caps from all processes
|
11 gadi atpakaļ |
Tetsuo Handa
|
6d6f332842
commoncap: don't alloc the credential unless needed in cap_task_prctl
|
11 gadi atpakaļ |
Serge Hallyn
|
f54fb863c6
capabilities: allow nice if we are privileged
|
12 gadi atpakaļ |
Eric W. Biederman
|
160da84dbb
userns: Allow PR_CAPBSET_DROP in a user namespace.
|
12 gadi atpakaļ |
Al Viro
|
182be68478
kill f_vfsmnt
|
12 gadi atpakaļ |
Eric W. Biederman
|
520d9eabce
Fix cap_capable to only allow owners in the parent user namespace to have caps.
|
12 gadi atpakaļ |
Al Viro
|
e5467859f7
split ->file_mmap() into ->mmap_addr()/->mmap_file()
|
13 gadi atpakaļ |
Al Viro
|
d007794a18
split cap_mmap_addr() out of cap_file_mmap()
|
13 gadi atpakaļ |
Linus Torvalds
|
644473e9c6
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
13 gadi atpakaļ |
James Morris
|
898bfc1d46
Merge tag 'v3.4-rc5' into next
|
13 gadi atpakaļ |
Eric W. Biederman
|
18815a1808
userns: Convert capabilities related permsion checks
|
13 gadi atpakaļ |
Eric W. Biederman
|
078de5f706
userns: Store uid and gid values in struct cred with kuid_t and kgid_t types
|
13 gadi atpakaļ |
Eric W. Biederman
|
783291e690
userns: Simplify the user_namespace by making userns->creator a kuid.
|
13 gadi atpakaļ |
Jonghwan Choi
|
51b79bee62
security: fix compile error in commoncap.c
|
13 gadi atpakaļ |
Eric Paris
|
d52fc5dde1
fcaps: clear the same personality flags as suid when fcaps are used
|
13 gadi atpakaļ |
Andy Lutomirski
|
259e5e6c75
Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs
|
13 gadi atpakaļ |
Eric W. Biederman
|
aeb3ae9da9
userns: Add an explicit reference to the parent user namespace
|
13 gadi atpakaļ |