aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'v3.4.95' into cm11.0dhacker292014-06-291-2/+10
|\
| * evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar2014-06-261-2/+10
* | selinux: Report permissive mode in avc: denied messages.Stephen Smalley2014-05-081-2/+7
* | Merge tag 'v3.4.87' into cm-11.0dhacker292014-04-192-13/+31
|\|
| * selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore2014-04-141-9/+27
| * SELinux: bigendian problems with filename trans rulesEric Paris2014-03-111-4/+4
* | Merge tag 'v3.4.81' into HEADdhacker292014-02-211-0/+4
|\|
| * SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley2014-02-201-0/+4
* | Merge tag 'v3.4.80' into cm-11.0dhacker292014-02-141-1/+13
|\|
| * SELinux: Fix memory leak upon loading policyTetsuo Handa2014-02-131-1/+13
* | Merge tag 'v3.4.78' into cm-11.0dhacker292014-01-312-3/+22
|\|
| * SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt2014-01-292-3/+22
* | Merge tag 'v3.4.76' into cm-11.0dhacker292014-01-153-26/+89
|\|
| * selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore2014-01-081-7/+36
| * selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore2014-01-083-16/+48
| * selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov2014-01-081-2/+2
| * selinux: fix broken peer recv checkChad Hanson2014-01-081-1/+3
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-201-15/+53
| * selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-201-2/+23
* | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore2013-12-221-15/+53
* | selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore2013-12-221-2/+23
* | Merge Moto X 4.4 source for 13.11.3Q2.X-69-3-2dhacker292013-12-201-0/+5
* | Merge tag 'v3.4.72' into cm-11.0dhacker292013-12-051-4/+2
|\|
| * selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore2013-12-041-4/+2
* | Merge tag 'v3.4.71' into cm-11.0dhacker292013-12-011-1/+0
|\|
| * Revert "ima: policy for RAMFS"Mimi Zohar2013-11-291-1/+0
* | SELinux: include definition of new capabilitiesEric Paris2013-11-201-1/+3
* | Enable setting security contexts on rootfs inodes.Stephen Smalley2013-10-181-0/+7
* | Add security hooks to binder and implement the hooks for SELinux.Stephen Smalley2013-08-234-0/+111
* | Overlay Ultra 3.4.42 open source drop from Motoroladhacker292013-08-233-2/+21
* | Merge tag 'v3.4.42' into HEADdhacker292013-08-229-11/+13
|\|
| * key: Fix resource leakAlan Cox2013-03-281-2/+2
| * selinux: use GFP_ATOMIC under spin_lockDan Carpenter2013-03-201-1/+1
| * Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and securit...Mathieu Desnoyers2013-03-141-2/+2
| * keys: fix race with concurrent install_user_keyrings()David Howells2013-03-141-1/+1
| * evm: checking if removexattr is not a NULLDmitry Kasatkin2013-01-271-2/+2
| * selinux: fix sel_netnode_insert() suspicious rcu dereferenceDave Jones2012-11-261-1/+2
| * Yama: handle 32-bit userspace prctlKees Cook2012-10-071-1/+1
| * posix_types.h: Cleanup stale __NFDBITS and related definitionsJosh Boyer2012-08-091-1/+1
| * SELinux: if sel_make_bools errors don't leave inconsistent stateEric Paris2012-06-011-0/+1
* | security: Add proper checks for Android specific capability checksTushar Behera2012-05-071-0/+2
* | Merge commit 'v3.4-rc4' into android-3.4Colin Cross2012-04-273-25/+39
|\|
| * security: fix compile error in commoncap.cJonghwan Choi2012-04-191-0/+1
| * fcaps: clear the same personality flags as suid when fcaps are usedEric Paris2012-04-181-0/+5
| * Smack: move label list initializationCasey Schaufler2012-04-182-25/+33
* | Merge commit 'v3.4-rc3' into android-3.4Colin Cross2012-04-191-4/+15
|\|
| * Smack: build when CONFIG_AUDIT not definedKees Cook2012-04-101-4/+15
* | security: Add AID_NET_RAW and AID_NET_ADMIN capability check in cap_capable().Chia-chi Yeh2012-04-091-0/+9
|/
* lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit...Linus Torvalds2012-04-034-13/+12
* SELinux: do not allocate stack space for AVC data unless neededEric Paris2012-04-032-14/+27