summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorLines
2007-12-06Security: allow capable check to permit mmap or low vm spaceEric Paris-1/+1
2007-12-06SELinux: detect dead booleansStephen Smalley-13/+30
2007-12-06SELinux: do not clear f_op when removing entriesStephen Smalley-27/+1
2007-11-29file capabilities: don't prevent signaling setuid root programsSerge E. Hallyn-0/+9
2007-11-14file capabilities: allow sigcont within sessionSerge E. Hallyn-0/+4
2007-11-08SELinux: add more validity checks on policy loadStephen Smalley-38/+118
2007-11-08SELinux: fix bug in new ebitmap code.KaiGai Kohei-1/+1
2007-11-08SELinux: suppress a warning for 64k pages.Stephen Rothwell-6/+7
2007-10-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-5/+1
2007-10-23SELinux: always check SIGCHLD in selinux_task_waitEric Paris-5/+1
2007-10-22capabilities: clean up file capability readingSerge E. Hallyn-8/+15
2007-10-19pid namespaces: define is_global_init() and is_container_init()Serge E. Hallyn-1/+2
2007-10-18sparse pointer use of zero as nullStephen Hemminger-1/+1
2007-10-18V3 file capabilities: alter behavior of cap_setpcapAndrew Morgan-14/+61
2007-10-17security/ cleanupsAdrian Bunk-118/+1
2007-10-17Implement file posix capabilitiesSerge E. Hallyn-43/+313
2007-10-17security: Convert LSM into a static interfaceJames Morris-71/+961
2007-10-17KEYS: Make request_key() and co fundamentally asynchronousDavid Howells-317/+335
2007-10-17SELinux: kills warnings in Improve SELinux performance when AVC missesKaiGai Kohei-6/+7
2007-10-17SELinux: improve performance when AVC misses.KaiGai Kohei-237/+303
2007-10-17SELinux: policy selectable handling of unknown classes and permsEric Paris-9/+106
2007-10-17SELinux: Improve read/write performanceYuichi Nakamura-1/+67
2007-10-17SELinux: tune avtab to reduce memory usageYuichi Nakamura-36/+82
2007-10-15[SELINUX]: Update for netfilter ->hook() arg changes.David S. Miller-6/+5
2007-10-10[INET]: local port range robustnessStephen Hemminger-17/+22
2007-10-10[NET]: Support multiple network namespaces with netlinkEric W. Biederman-2/+3
2007-10-10[NET]: Make device event notification network namespace safeEric W. Biederman-0/+4
2007-09-20SELinux: fix array out of bounds when mounting with selinux optionsEric Paris-0/+2
2007-08-30SELinux: clear parent death signal on SID transitionsStephen Smalley-0/+3
2007-08-22fix NULL pointer dereference in __vm_enough_memory()Alan Cox-6/+6
2007-08-16SELinux: correct error code in selinux_audit_rule_initSteve G-1/+1
2007-08-02SELinux: remove redundant pointer checks before calling kfree()Paul Moore-2/+1
2007-08-02SELinux: restore proper NetLabel caching behaviorPaul Moore-4/+12
2007-07-31Typo fixes errror -> errorGabriel Craciunescu-1/+1
2007-07-25SELinux: null-terminate context string in selinux_xfrm_sec_ctx_allocVenkat Yekkirala-1/+2
2007-07-23SELinux: fix memory leak in security_netlbl_cache_add()Jesper Juhl-1/+3
2007-07-22[PATCH] get rid of AVC_PATH postponed treatmentAl Viro-7/+8
2007-07-20mm: Remove slab destructors from kmem_cache_create().Paul Mundt-4/+4
2007-07-19Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds-31/+39
2007-07-19coredump masking: reimplementation of dumpable using two flagsKawai, Hidehiro-2/+2
2007-07-19SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabelPaul Moore-31/+31
2007-07-19SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcementPaul Moore-0/+8
2007-07-18usermodehelper: Tidy up waitingJeremy Fitzhardinge-1/+2
2007-07-17Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid checkSatyam Sharma-1/+1
2007-07-16Audit: add TTY input auditingMiloslav Trmac-0/+2
2007-07-13Revert "SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for Ne...Linus Torvalds-24/+31
2007-07-11security: unexport mmap_min_addrAdrian Bunk-1/+0
2007-07-11SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabelPaul Moore-31/+24
2007-07-11security: Protection for exploiting null dereference using mmapEric Paris-5/+19
2007-07-11SELinux: Use %lu for inode->i_no when printing avcTobias Oed-1/+1