 Richard Guy Briggs
|
c0d1adefe0
capabilities: invert logic for clarity
|
8 years ago |
|
Richard Guy Briggs
|
02ebbaf48c
capabilities: remove a layer of conditional logic
|
8 years ago |
|
Richard Guy Briggs
|
9fbc2c7964
capabilities: move audit log decision to function
|
8 years ago |
|
Richard Guy Briggs
|
81a6a01299
capabilities: use intuitive names for id changes
|
8 years ago |
|
Richard Guy Briggs
|
9304b46c91
capabilities: use root_priveleged inline to clarify logic
|
8 years ago |
|
Richard Guy Briggs
|
fc7eadf768
capabilities: rename has_cap to has_fcap
|
8 years ago |
|
Richard Guy Briggs
|
4c7e715fc8
capabilities: intuitive names for cap gain status
|
8 years ago |
|
Richard Guy Briggs
|
db1a8922cf
capabilities: factor out cap_bprm_set_creds privileged root
|
8 years ago |
 Linus Torvalds
|
a302824782
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
8 years ago |
 Stefan Berger
|
ab5348c9c2
security: fix description of values returned by cap_inode_need_killpriv
|
8 years ago |
|
Linus Torvalds
|
dd198ce714
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
8 years ago |
 Serge E. Hallyn
|
8db6c34f1d
Introduce v3 namespaced file capabilities
|
8 years ago |
 Kees Cook
|
ee67ae7ef6
commoncap: Move cap_elevated calculation into bprm_set_creds
|
8 years ago |
|
Kees Cook
|
46d98eb4e1
commoncap: Refactor to remove bprm_secureexec hook
|
8 years ago |
 Kirill Tkhai
|
64db4c7f4c
security: Use user_namespace::level to avoid redundant iterations in cap_capable()
|
8 years ago |
 James Morris
|
ca97d939db
security: mark LSM hooks as __ro_after_init
|
8 years ago |
|
Linus Torvalds
|
f1ef09fde1
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
8 years ago |
 Eric W. Biederman
|
9227dd2a84
exec: Remove LSM_UNSAFE_PTRACE_CAP
|
9 years ago |
|
Eric W. Biederman
|
20523132ec
exec: Test the ptracer's saved cred to see if the tracee can gain caps
|
9 years ago |
|
Eric W. Biederman
|
70169420f5
exec: Don't reset euid and egid when the tracee has CAP_SETUID
|
9 years ago |
 Casey Schaufler
|
d69dece5f5
LSM: Add /sys/kernel/security/lsm
|
9 years ago |
 Andreas Gruenbacher
|
5d6c31910b
xattr: Add __vfs_{get,set,remove}xattr helpers
|
9 years ago |
 Andy Lutomirski
|
380cf5ba6b
fs: Treat foreign mounts as nosuid
|
9 years ago |
 Seth Forshee
|
d07b846f62
fs: Limit file caps to the user namespace of the super block
|
10 years ago |
|
Linus Torvalds
|
7f427d3a60
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
9 years ago |
 Baolin Wang
|
457db29bfc
security: Introduce security_settime64()
|
9 years ago |
 Al Viro
|
ce23e64013
->getxattr(): pass dentry and inode as separate arguments
|
9 years ago |
 Jann Horn
|
caaee6234d
ptrace: use fsuid, fsgid, effective creds for fs access checks
|
10 years ago |
 Andy Lutomirski
|
746bf6d642
capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE
|
10 years ago |
|
Andy Lutomirski
|
58319057b7
capabilities: ambient capabilities
|
10 years ago |
