aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2016-04-08BACKPORT: sched: move no_new_privs into new atomic flagsKees Cook
2016-01-20UPSTREAM: KEYS: Fix keyring ref leak in join_session_keyring()brillo-m10-releasebrillo-m10-devYevgeny Pats
2015-12-08selinux: do not check open perm on ftruncate callbrillo-m8-releaseJeff Vander Stoep
2015-12-08selinux: extended permissions for ioctlsJeff Vander Stoep
2015-12-08security: add ioctl specific auditing to lsm_auditJeff Vander Stoep
2015-12-08selinux: remove unnecessary pointer reassignmentJeff Vander Stoep
2015-12-08Revert "security: lsm_audit: add ioctl specific auditing"Jeff Vander Stoep
2015-12-08Revert "SELinux: per-command whitelisting of ioctls"Jeff Vander Stoep
2015-12-08Revert "SELinux: use deletion-safe iterator to free list"Jeff Vander Stoep
2015-09-25SELinux: use deletion-safe iterator to free listJeff Vander Stoep
2015-09-25SELinux: per-command whitelisting of ioctlsJeff Vander Stoep
2015-09-25security: lsm_audit: add ioctl specific auditingJeff Vander Stoep
2015-09-25SELinux: Enable setting security contexts on rootfs inodes.Stephen Smalley
2015-09-25SELinux: Update policy version to support constraints infoRichard Haines
2015-01-27selinux: reduce the number of calls to synchronize_net() when flushing cachesPaul Moore
2014-09-30Merge "security: add PFT to the default security LSM list"Linux Build Service Account
2014-09-29security: add PFT to the default security LSM listAmir Samuelov
2014-09-23nick kvfree() from apparmorAl Viro
2014-08-24Merge "Merge upstream tag 'v3.10.49' into msm-3.10"Linux Build Service Account
2014-08-20Merge upstream tag 'v3.10.49' into msm-3.10Ian Maund
2014-08-20pft: register PFT to security frameworkAmir Samuelov
2014-07-09Merge "Merge google-common commits into msm-3.10"Linux Build Service Account
2014-07-06platform: msm: fix PFT for 64-bitAmir Samuelov
2014-06-26evm: prohibit userspace writing 'security.evm' HMAC valueMimi Zohar
2014-06-26ima: introduce ima_kernel_read()Dmitry Kasatkin
2014-06-23selinux: Report permissive mode in avc: denied messages.Stephen Smalley
2014-06-18Merge upstream tag 'v3.10.40' into msm-3.10Ian Maund
2014-05-21security: selinux: Add Per-File-Encryption hooksAmir Samuelov
2014-05-20platform: msm: add Per-File-Tagger (PFT) driverAmir Samuelov
2014-04-23Merge upstream linux-stable v3.10.36 into msm-3.10Ian Maund
2014-04-14selinux: correctly label /proc inodes in use before the policy is loadedPaul Moore
2014-03-26Merge "Merge upstream linux-stable v3.10.28 into msm-3.10"Linux Build Service Account
2014-03-24Merge upstream linux-stable v3.10.28 into msm-3.10Ian Maund
2014-03-13selinux: Fix Kernel panic due to NULL pointer dereferenceSatya Durga Srinivasu Prabhala
2014-03-06SELinux: bigendian problems with filename trans rulesEric Paris
2014-02-20SELinux: Fix kernel BUG on empty security contexts.Stephen Smalley
2014-02-13SELinux: Fix memory leak upon loading policyTetsuo Handa
2014-01-25SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()Steven Rostedt
2014-01-09selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_pos...Paul Moore
2014-01-09selinux: look for IPsec labels on both inbound and outbound packetsPaul Moore
2014-01-09selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()Oleg Nesterov
2014-01-09selinux: fix broken peer recv checkChad Hanson
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()Paul Moore
2013-12-20selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()Paul Moore
2013-12-04selinux: correct locking in selinux_netlbl_socket_connect)Paul Moore
2013-11-29Revert "ima: policy for RAMFS"Mimi Zohar
2013-07-01selinux: binder: Fix COMMON_AUDIT_DATA_INIT compile issueJohn Stultz
2013-07-01Add security hooks to binder and implement the hooks for SELinux.Stephen Smalley
2013-07-01security: Add proper checks for Android specific capability checksTushar Behera
2013-07-01security: Add AID_NET_RAW and AID_NET_ADMIN capability check in cap_capable().Chia-chi Yeh