summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2017-06-10apparmor: add policy revision file interfaceJohn Johansen
2017-06-10apparmor: provide finer control over policy managementJohn Johansen
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew
2017-06-09selinux: use kmem_cache for ebitmapJunil Lee
2017-06-09apparmor: rework perm mapping to a slightly broader setJohn Johansen
2017-06-09KEYS: fix refcount_inc() on zeroMark Rutland
2017-06-09KEYS: Convert KEYCTL_DH_COMPUTE to use the crypto KPP APIMat Martineau
2017-06-09KEYS: DH: ensure the KDF counter is properly alignedEric Biggers
2017-06-09KEYS: DH: don't feed uninitialized "otherinfo" into KDFEric Biggers
2017-06-09KEYS: DH: forbid using digest_null as the KDF hashEric Biggers
2017-06-09KEYS: sanitize key structs before freeingEric Biggers
2017-06-09KEYS: trusted: sanitize all key materialEric Biggers
2017-06-09KEYS: encrypted: sanitize all key materialEric Biggers
2017-06-09KEYS: user_defined: sanitize key payloadsEric Biggers
2017-06-09KEYS: sanitize add_key() and keyctl() key payloadsEric Biggers
2017-06-09KEYS: fix freeing uninitialized memory in key_update()Eric Biggers
2017-06-09KEYS: fix dereferencing NULL payload with nonzero lengthEric Biggers
2017-06-09KEYS: encrypted: use constant-time HMAC comparisonEric Biggers
2017-06-09KEYS: encrypted: fix race causing incorrect HMAC calculationsEric Biggers
2017-06-09KEYS: encrypted: fix buffer overread in valid_master_desc()Eric Biggers
2017-06-09KEYS: encrypted: avoid encrypting/decrypting stack buffersEric Biggers
2017-06-09KEYS: put keyring if install_session_keyring_to_cred() failsEric Biggers
2017-06-09KEYS: Delete an error message for a failed memory allocation in get_derived_k...Markus Elfring
2017-06-09security: use READ_ONCE instead of deprecated ACCESS_ONCEDavidlohr Bueso
2017-06-09security/keys: add CONFIG_KEYS_COMPAT to KconfigBilal Amarni
2017-06-08apparmor: move permissions into their own file to be more easily sharedJohn Johansen
2017-06-08apparmor: convert from securityfs to apparmorfs for policy ns filesJohn Johansen
2017-06-08apparmor: allow specifying an already created dir to create ns entries inJohn Johansen
2017-06-08apparmor: rename apparmor file fns and data to indicate useJohn Johansen
2017-06-08apparmor: add custom apparmorfs that will be used by policy namespace filesJohn Johansen
2017-06-08apparmor: use macro template to simplify namespace seq_filesJohn Johansen
2017-06-08apparmor: use macro template to simplify profile seq_filesJohn Johansen
2017-06-08apparmor: move to per loaddata files, instead of replicating in profilesJohn Johansen
2017-06-08securityfs: add the ability to support symlinksJohn Johansen
2017-06-08apparmor: Move path lookup to using preallocated buffersJohn Johansen
2017-06-08apparmor: allow profiles to provide info to disconnected pathsJohn Johansen
2017-06-08apparmor: make internal lib fn skipn_spaces available to the rest of apparmorJohn Johansen
2017-06-08apparmor: move file context into file.hJohn Johansen
2017-06-08security/apparmor: Use POSIX-compatible "printf '%s'"Thomas Schneider
2017-06-08apparmor: Fix error cod in __aa_fs_profile_mkdir()Dan Carpenter
2017-06-08apparmorfs: Use seq_putc() in two functionsMarkus Elfring
2017-06-08apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()Markus Elfring
2017-06-05fs: switch ->s_uuid to uuid_tChristoph Hellwig
2017-06-05ima/policy: switch to use uuid_tChristoph Hellwig
2017-06-05block: remove blk_part_pack_uuidChristoph Hellwig
2017-06-02selinux: use pernet operations for hook registrationFlorian Westphal
2017-06-01Smack: Use cap_capable in privilege checkCasey Schaufler
2017-06-01Smack: Safer check for a socket in file_receiveCasey Schaufler
2017-06-01smack: use pernet operations for hook registrationFlorian Westphal
2017-05-25sel_write_validatetrans(): don't open-code memdup_user_nul()Al Viro