asedeno.scripts.mit.edu Git - linux.git/search

]> asedeno.scripts.mit.edu Git - linux.git/search

2016-09-19	Vivek Goyal	lsm,audit,selinux: Introduce a new audit data type... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-09-13	Wei Yongjun	selinux: fix error return code in policydb_read() Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-30	William Roberts	selinux: fix overflow and 0 length allocations Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-29	William Roberts	selinux: initialize structures Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-29	William Roberts	selinux: detect invalid ebitmap Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-19	William Roberts	selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-10	Vivek Goyal	selinux: Implement dentry_create_files_as() hook Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	security, overlayfs: Provide hook to correctly label... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	selinux: Pass security pointer to determine_inode_label() Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	selinux: Implementation for inode_copy_up_xattr() hook Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	security,overlayfs: Provide security hook for copy... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	selinux: Implementation for inode_copy_up() hook Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-09	Vivek Goyal	security, overlayfs: provide copy up security hook... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-08	William Roberts	selinux: print leading 0x on ioctlcmd audits Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-08-08	Javier Martinez Canillas	security: Use IS_ENABLED() instead of checking for... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-07-20	Paul Moore	audit: fix a double fetch in audit_log_single_execve_arg() Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-07-14	Steve Grubb	audit: fix whitespace in CWD record Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-28	Richard Guy Briggs	audit: move audit_get_tty to reduce scope and kabi changes Suggested-by: Paul Moore <pmoore@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-28	Richard Guy Briggs	audit: move calcs after alloc and check when logging... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Implement CALIPSO config functions for SMACK. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	calipso: Add a label cache. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	calipso: Add validation of CALIPSO option. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Pass a family parameter to netlbl_skbuff_err(). Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	calipso: Allow the lsm to label the skbuff directly. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	ipv6: constify the skb pointer of ipv6_find_tlv(). Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	calipso: Allow request sockets to be relabelled by the lsm. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	ipv6: Allow request socks to contain IPv6 options. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Prevent setsockopt() from changing the hop... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	calipso: Set the calipso socket label to match the secattr. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Move bitmap manipulation functions to the... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	ipv6: Add ipv6_renew_options_kern() that accepts a... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Add support for removing a CALIPSO DOI. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Add support for creating a CALIPSO protocol... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Add support for enumerating the CALIPSO DOI list. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Add support for querying a CALIPSO DOI. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Initial support for the CALIPSO netlink protocol. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Add an address family to domain hash entries. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Huw Davies	netlabel: Mark rcu pointers with __rcu. Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-27	Richard Guy Briggs	audit: add fields to exclude filter by reusing user filter Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-22	Paul Moore	s390: ensure that syscall arguments are properly masked on s390 Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-16	Paul Moore	audit: fix some horrible switch statement style crimes Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-15	Heinrich Schuchardt	selinux: fix type mismatch Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-09	Paul Moore	netlabel: handle sparse category maps in netlbl_catmap_getlong() Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-09	Paul Moore	selinux: import NetLabel category bitmaps correctly Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-07	Paul Moore	iucv: properly clone LSM attributes to newly created... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-06-06	Paul Moore	netlabel: add address family checks to netlbl_{sock... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-05-31	Richard Guy Briggs	audit: fixup: log on errors from filter user rules Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-05-31	Stephen Smalley	selinux: Only apply bounds checking to source types Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-27	Arnd Bergmann	tty: provide tty_name() even without CONFIG_TTY Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-26	Richard Guy Briggs	audit: add tty field to LOGIN event Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-26	Stephen Smalley	selinux: apply execstack check on thread stacks Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-26	Stephen Smalley	selinux: distinguish non-init user namespace capability checks Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-19	Paul Moore	selinux: check ss_initialized before revalidating an inode label Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-19	Paul Moore	selinux: delay inode label lookup as long as possible Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-19	Paul Moore	selinux: don't revalidate an inode's label when explicitly... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-14	Prarit Bhargava	selinux: Change bool variable name to index. Cc: Paul Moore <paul@paul-moore.com> Cc: Paul Moore <pmoore@redhat.com> Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-05	Jeff Vander Stoep	selinux: restrict kernel module loading Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-05	Paul Moore	selinux: consolidate the ptrace parent lookup code Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-05	Paul Moore	selinux: simply inode label states to INVALID and INITIALIZED Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-05	Paul Moore	selinux: don't revalidate inodes in selinux_socket_getpeerse... Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-05	Janak Desai	netlabel: fix a problem with netlbl_secattr_catmap_setrng() Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-04	Paul Moore	audit: we don't need to __set_current_state(TASK_RUNNING) Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-04-04	Jiri Slaby	audit: cleanup prune_tree_thread Cc: Paul Moore <paul@paul-moore.com> Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-02-19	Andreas Gruenbacher	selinux: Don't sleep inside inode_getsecid hook Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-02-08	Wei Yuan	audit: Fix typo in comment Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-01-28	Andy Shevchenko	selinux: use absolute path to include directory Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2016-01-25	Richard Guy Briggs	audit: log failed attempts to change audit_pid configuration Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-25	Richard Guy Briggs	audit: stop an old auditd being starved out by a new auditd Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Paul Moore	audit: always enable syscall auditing when supported... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Paul Moore	audit: force seccomp event logging to honor the audit_enable... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Markus Elfring	audit: Delete unnecessary checks before two function calls Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Richard Guy Briggs	audit: wake up threads if queue switched from limited... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Richard Guy Briggs	audit: include auditd's threads in audit_log_start... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Paul Moore	audit: remove audit_backlog_wait_overflow Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-13	Richard Guy Briggs	audit: don't needlessly reset valid wait time Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2016-01-08	Andreas Gruenbacher	selinux: Inode label revalidation performance fix Signed-off-by: Paul Moore <paul@paul-moore.com>	commit \| commitdiff \| tree
2015-12-24	Vladis Dronov	selinux: rate-limit netlink message warnings in selinux_nlms... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andrew Perepechko	selinux: export validatetrans decisions Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	gfs2: Invalid security labels of inodes when they go invalid Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	selinux: Revalidate invalid inode security labels Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	security: Add hook to invalidate inode security labels Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	selinux: Add accessor functions for inode->i_security Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	security: Make inode argument of inode_getsecid non-const Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	security: Make inode argument of inode_getsecurity non-const Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-12-24	Andreas Gruenbacher	selinux: Remove unused variable in selinux_inode_init_security Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-24	Stephen Smalley	selinux: fix bug in conditional rules handling Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Paul Moore	audit: make audit_log_common_recv_msg() a void function Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Saurabh Sengar	audit: removing unused variable Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Scott Matheina	audit: fix comment block whitespace Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Yaowei Bai	audit: audit_tree_match can be boolean Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Yaowei Bai	audit: audit_string_contains_control can be boolean Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Yaowei Bai	audit: audit_dummy_context can be boolean Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-11-04	Richard Guy Briggs	audit: try harder to send to auditd upon netlink failure Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Sangwoo	selinux: Use a kmem_cache for allocation struct file_securit... Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Geliang Tang	selinux: ioctl_has_perm should be static Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Rasmus Villemoes	selinux: use sprintf return value Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Rasmus Villemoes	selinux: use kstrdup() in security_get_bools() Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Rasmus Villemoes	selinux: use kmemdup in security_sid_to_context_core() Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Rasmus Villemoes	selinux: remove pointless cast in selinux_inode_setsecurity() Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
2015-10-21	Rasmus Villemoes	selinux: introduce security_context_str_to_sid Signed-off-by: Paul Moore <pmoore@redhat.com>	commit \| commitdiff \| tree
next

local clone of linux.git

RSS Atom