kernel/Documentation/security, branch linux-4.17.y

selinux: Update SELinux SCTP documentation

2018-03-20T20:26:15Z

Update SELinux-sctp.rst "SCTP Peer Labeling" section to reflect how the association permission is validated. Reported-by: Dominick Grift Signed-off-by: Richard Haines Signed-off-by: Paul Moore

selinux: Add SCTP support

2018-02-26T22:45:25Z

The SELinux SCTP implementation is explained in: Documentation/security/SELinux-sctp.rst Signed-off-by: Richard Haines Signed-off-by: Paul Moore

security: Add support for SCTP security hooks

2018-02-22T20:01:32Z

The SCTP security hooks are explained in: Documentation/security/LSM-sctp.rst Signed-off-by: Richard Haines Signed-off-by: Paul Moore

Documentation: security/credentials.rst: explain need to sort group_list

2018-01-08T21:20:31Z

This patch updates the documentation with the observations that led to commit bdcf0a423ea1 ("kernel: make groups_sort calling a responsibility group_info allocators") and the new behaviour required. Specifically that groups_sort() should be called on a new group_list before set_groups() or set_current_groups() is called. Signed-off-by: NeilBrown [jc: use proper :c:func: references] Signed-off-by: Jonathan Corbet

doc: add documentation on printing kernel addresses

2017-12-21T20:39:27Z

Hashing addresses printed with printk specifier %p was implemented recently. During development a number of issues were raised regarding leaking kernel addresses to userspace. Other documentation was updated but security/self-protection missed out. Add self-protection documentation regarding printing kernel addresses. Signed-off-by: Tobin C. Harding Signed-off-by: Jonathan Corbet

KEYS: fix in-kernel documentation for keyctl_read()

2017-11-15T16:38:44Z

When keyctl_read() is passed a buffer that is too small, the behavior is inconsistent. Some key types will fill as much of the buffer as possible, while others won't copy anything. Moreover, the in-kernel documentation contradicted the man page on this point. Update the in-kernel documentation to say that this point is unspecified. Signed-off-by: Eric Biggers Signed-off-by: David Howells

Documentation: fix security related doc refs

2017-10-12T17:14:40Z

Make security document refs valid. Signed-off-by: Tom Saeger Signed-off-by: Jonathan Corbet

docs: ReSTify table of contents in core.rst

2017-08-30T21:27:58Z

Sphinx will now generate the table of contents automatically, which avoids having the ToC getting out of sync with the rest of the document. Signed-off-by: Josh Holland Signed-off-by: Jonathan Corbet

docs: Fix paths in security/keys

2017-08-24T19:10:58Z

Several paths in the security/keys documentation were incorrect. Signed-off-by: Josh Holland Signed-off-by: Jonathan Corbet

KEYS: Add documentation for asymmetric keyring restrictions

2017-07-14T01:01:38Z

Provide more specific examples of keyring restrictions as applied to X.509 signature chain verification. Signed-off-by: Mat Martineau Signed-off-by: David Howells Signed-off-by: James Morris