| 2017-03-10 |
Nicolas Iooss | selinux: include sys/socket.h in host programs to have...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-03-06 |
James Morris | selinux: constify nlmsg permission tables
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-02-14 |
Paul Moore | audit: remove unnecessary curly braces from switch...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-02-13 |
Richard Guy Briggs | audit: log module name on init_module
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-02-08 |
Antonio Murdaca | selinux: allow changing labels for cgroupfs
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-02-07 |
Stephen Smalley | selinux: fix off-by-one in setprocattr
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-18 |
Richard Guy Briggs | audit: log 32-bit socketcalls
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-18 |
Richard Guy Briggs | audit: add feature audit_lost reset
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-12 |
Stephen Smalley | security,selinux,smack: kill security_task_wait hook
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-12 |
Stephen Smalley | selinux: drop unused socket security classes
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Gary Tierney | selinux: default to security isid in sel_make_bools...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Gary Tierney | selinux: log errors when loading new policy
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Stephen Smalley | proc,security: move restriction on writing /proc/pid...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Stephen Smalley | selinux: clean up cred usage and simplify
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Stephen Smalley | selinux: allow context mounts on tmpfs, ramfs, devpts...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Stephen Smalley | selinux: handle ICMPv6 consistently with ICMP
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Yongqin Liu | selinux: add security in-core xattr support for tracefs
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-09 |
Stephen Smalley | selinux: support distinctions among all network address...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2017-01-03 |
Jan Kara | audit: Fix sleep in atomic
CC: Paul Moore <paul@paul-moore.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-23 |
Jan Kara | fsnotify: Remove fsnotify_duplicate_mark()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-21 |
Paul Moore | selinux: use the kernel headers when building scripts...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Steve Grubb | audit: Make AUDIT_ANOM_ABEND event normalized
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Steve Grubb | audit: Make AUDIT_KERNEL event conform to the specification
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Richard Guy Briggs | audit: use proper refcount locking on audit_sock
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | netns: avoid disabling irq for netns id
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: don't ever sleep on a command record/message
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: handle a clean auditd shutdown with grace
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: wake up kauditd_thread after auditd registers
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: rework audit_log_start()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: rework the audit queue handling
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: rename the queues and kauditd related functions
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: queue netlink multicast sends just like we do...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Paul Moore | audit: fixup audit_init()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-12-14 |
Richard Guy Briggs | audit: move kaudit thread start from auditd registration...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-29 |
Richard Guy Briggs | audit: add support for session ID user filter
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-22 |
Andreas Gruenbacher | selinux: Convert isec->lock into a spinlock
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-21 |
Stephen Smalley | selinux: keep SELinux in sync with new capability definitions
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-20 |
Stephen Smalley | selinux: normalize input to /sys/fs/selinux/enforce
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-20 |
Steve Grubb | audit: fix formatting of AUDIT_CONFIG_CHANGE events
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-20 |
Richard Guy Briggs | audit: skip sessionid sentinel value when auto-incrementing
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-14 |
Andreas Gruenbacher | selinux: Clean up initialization of isec->sclass
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-14 |
Andreas Gruenbacher | proc: Pass file mode to proc_pid_make_inode
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-14 |
Andreas Gruenbacher | selinux: Minor cleanups
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-14 |
Richard Guy Briggs | audit: tame initialization warning len_abuf in audit_log_exe...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-14 |
Tetsuo Handa | SELinux: Use GFP_KERNEL for selinux_parse_opts_str().
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-11-03 |
Alexey Dobriyan | audit: less stack usage for /proc/*/loginuid
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-09-29 |
Richard Guy Briggs | audit: add exclude filter extension to feature bitmap
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-09-19 |
Vivek Goyal | lsm,audit,selinux: Introduce a new audit data type...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-09-13 |
Wei Yongjun | selinux: fix error return code in policydb_read()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-31 |
Mateusz Guzik | audit: fix exe_file access in audit_exe_compare
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-31 |
Mateusz Guzik | mm: introduce get_task_exe_file
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-30 |
Paul Moore | audit: consistently record PIDs with task_tgid_nr()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-30 |
William Roberts | selinux: fix overflow and 0 length allocations
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-29 |
William Roberts | selinux: initialize structures
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-29 |
William Roberts | selinux: detect invalid ebitmap
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-19 |
William Roberts | selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-10 |
Vivek Goyal | selinux: Implement dentry_create_files_as() hook
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | security, overlayfs: Provide hook to correctly label...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | selinux: Pass security pointer to determine_inode_label()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | selinux: Implementation for inode_copy_up_xattr() hook
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | security,overlayfs: Provide security hook for copy...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | selinux: Implementation for inode_copy_up() hook
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-09 |
Vivek Goyal | security, overlayfs: provide copy up security hook...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-08 |
William Roberts | selinux: print leading 0x on ioctlcmd audits
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-08-08 |
Javier Martinez... | security: Use IS_ENABLED() instead of checking for...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-07-20 |
Paul Moore | audit: fix a double fetch in audit_log_single_execve_arg()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-07-14 |
Steve Grubb | audit: fix whitespace in CWD record
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-28 |
Richard Guy Briggs | audit: move audit_get_tty to reduce scope and kabi...
Suggested-by: Paul Moore <pmoore@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-28 |
Richard Guy Briggs | audit: move calcs after alloc and check when logging...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Implement CALIPSO config functions for SMACK.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | calipso: Add a label cache.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | calipso: Add validation of CALIPSO option.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Pass a family parameter to netlbl_skbuff_err().
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | calipso: Allow the lsm to label the skbuff directly.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | ipv6: constify the skb pointer of ipv6_find_tlv().
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | calipso: Allow request sockets to be relabelled by...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | ipv6: Allow request socks to contain IPv6 options.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Prevent setsockopt() from changing the hop...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | calipso: Set the calipso socket label to match the...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Move bitmap manipulation functions to the...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | ipv6: Add ipv6_renew_options_kern() that accepts a...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Add support for removing a CALIPSO DOI.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Add support for creating a CALIPSO protocol...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Add support for enumerating the CALIPSO DOI...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Add support for querying a CALIPSO DOI.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Initial support for the CALIPSO netlink protocol.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Add an address family to domain hash entries.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Huw Davies | netlabel: Mark rcu pointers with __rcu.
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-27 |
Richard Guy Briggs | audit: add fields to exclude filter by reusing user...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-22 |
Paul Moore | s390: ensure that syscall arguments are properly masked...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-16 |
Paul Moore | audit: fix some horrible switch statement style crimes
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-15 |
Heinrich Schuchardt | selinux: fix type mismatch
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-09 |
Paul Moore | netlabel: handle sparse category maps in netlbl_catmap_getlong()
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-09 |
Paul Moore | selinux: import NetLabel category bitmaps correctly
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-07 |
Paul Moore | iucv: properly clone LSM attributes to newly created...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-06-06 |
Paul Moore | netlabel: add address family checks to netlbl_{sock...
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-05-31 |
Richard Guy Briggs | audit: fixup: log on errors from filter user rules
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-05-31 |
Stephen Smalley | selinux: Only apply bounds checking to source types
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-04-27 |
Arnd Bergmann | tty: provide tty_name() even without CONFIG_TTY
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| 2016-04-26 |
Richard Guy Briggs | audit: add tty field to LOGIN event
Signed-off-by: Paul Moore <paul@paul-moore.com>
|
commit | commitdiff | tree |
| next |
projects / karo-tx-linux.git / search