- 7cffc37 selinux: Corrected comment to match kernel-doc comment by Souptick Joarder · 3 years, 9 months ago
- 8a92280 selinux: delete selinux_xfrm_policy_lookup() useless argument by Zhongjun Tan · 3 years, 9 months ago
- e1cce3a selinux: constify some avtab function arguments by Ondrej Mosnacek · 3 years, 10 months ago
- fba472b selinux: simplify duplicate_policydb_cond_list() by using kmemdup() by Ondrej Mosnacek · 3 years, 10 months ago
- 17ae69a Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 3 years, 8 months ago
- 9d31d23 Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 9 months ago
- f1c921f Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 9 months ago
- 1aea780 LSM: Infrastructure management of the superblock by Casey Schaufler · 3 years, 9 months ago
- e4c82ea selinux: add proper NULL termination to the secclass_map permissions by Paul Moore · 3 years, 9 months ago
- 8859a44 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 9 months ago
- 60144b2 Merge tag 'selinux-pr-20210409' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 9 months ago
- 9ad6e9cb selinux: fix race between old and new sidtab by Ondrej Mosnacek · 3 years, 9 months ago
- d8f5f0e selinux: fix cond_list corruption when changing booleans by Ondrej Mosnacek · 3 years, 9 months ago
- 442dc00 selinux: make nslot handling in avtab more robust by Ondrej Mosnacek · 3 years, 9 months ago
- efd13b7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by David S. Miller · 3 years, 10 months ago
- eb1231f selinux: clarify task subjective and objective credentials by Paul Moore · 3 years, 11 months ago
- 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 11 months ago
- 69c4a42 lsm,selinux: add new hook to compare new mount to an existing mount by Olga Kornievskaia · 3 years, 11 months ago
- 8419639 Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 10 months ago
- ee5de60 selinuxfs: unify policy load error reporting by Ondrej Mosnacek · 3 years, 10 months ago
- 6406887 selinux: fix variable scope issue in live sidtab conversion by Ondrej Mosnacek · 3 years, 10 months ago
- 519dad3 selinux: don't log MAC_POLICY_LOAD record on failed policy load by Ondrej Mosnacek · 3 years, 10 months ago
- 710ec56 nexthop: Add netlink defines and enumerators for resilient NH groups by Ido Schimmel · 3 years, 10 months ago
- 431c3be selinux: fix misspellings using codespell tool by Xiong Zhenwu · 3 years, 10 months ago
- 63ddf1b selinux: fix misspellings using codespell tool by Xiong Zhenwu · 3 years, 10 months ago
- 2554a48 selinux: measure state and policy capabilities by Lakshmi Ramasubramanian · 4 years ago
- 7fa2e79 selinux: Allow context mounts for unpriviliged overlayfs by Vivek Goyal · 4 years ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 11 months ago
- d643a99 Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 11 months ago
- 71bc356 commoncap: handle idmapped mounts by Christian Brauner · 4 years ago
- c7c7a1a1 xattr: handle idmapped mounts by Tycho Andersen · 4 years ago
- 21cb47b inode: make init and permission helpers idmapped mount aware by Christian Brauner · 4 years ago
- fdd1ffe selinux: include a consumer of the new IMA critical data hook by Lakshmi Ramasubramanian · 4 years ago
- 29cd659 selinux: teach SELinux about anonymous inodes by Daniel Colascione · 4 years ago
- 08abe46 selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support by Ondrej Mosnacek · 4 years ago
- e0de8a9 selinux: mark selinux_xfrm_refcount as __read_mostly by Ondrej Mosnacek · 4 years ago
- cd2bb4c selinux: mark some global variables __ro_after_init by Ondrej Mosnacek · 4 years ago
- db478cd selinux: make selinuxfs_mount static by Ondrej Mosnacek · 4 years ago
- 3c797e5 selinux: drop the unnecessary aurule_callback variable by Ondrej Mosnacek · 4 years ago
- 46434ba selinux: remove unused global variables by Ondrej Mosnacek · 4 years ago
- a9ffe68 selinux: fix inconsistency between inode_getxattr and inode_listsecurity by Amir Goldstein · 4 years, 1 month ago
- 95ca907 selinux: handle MPTCP consistently with TCP by Paolo Abeni · 4 years, 1 month ago
- ca5b877 Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 1 month ago
- 41dd959 security: add const qualifier to struct sock in various places by Florian Westphal · 4 years, 1 month ago
- 3df98d7 lsm,selinux: pass flowi_common instead of flowi to the LSM hooks by Paul Moore · 4 years, 4 months ago
- b2d99bc selinux: Fix fall-through warnings for Clang by Gustavo A. R. Silva · 4 years, 2 months ago
- 30636a5 Merge tag 'selinux-pr-20201113' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 2 months ago
- c350f8b selinux: Fix error return code in sel_ib_pkey_sid_slow() by Chen Zhou · 4 years, 2 months ago
- b159e86 selinux: drop super_block backpointer from superblock_security_struct by Ondrej Mosnacek · 4 years, 2 months ago
- 200ea5a selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling by Paul Moore · 4 years, 2 months ago
- 44141f5 selinux: allow dontauditx and auditallowx rules to take effect without allowx by bauen1 · 4 years, 3 months ago
- 83370b3 selinux: fix error initialization in inode_doinit_with_dentry() by Tianyue Ren · 4 years, 3 months ago
- 726eb70 Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc by Linus Torvalds · 4 years, 3 months ago
- 7b54081 Merge tag 'selinux-pr-20201012' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 3 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 3 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 3 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 3 months ago
- 8861d0a selinux: Add helper functions to get and set checkreqprot by Lakshmi Ramasubramanian · 4 years, 4 months ago
- e8ba53d0 selinux: access policycaps with READ_ONCE/WRITE_ONCE by Stephen Smalley · 4 years, 4 months ago
- 66ccd25 selinux: simplify away security_policydb_len() by Ondrej Mosnacek · 4 years, 5 months ago
- 9ff9abc selinux: move policy mutex to selinux_state, use in lockdep checks by Stephen Smalley · 4 years, 5 months ago
- 0256b0a selinux: fix error handling bugs in security_load_policy() by Dan Carpenter · 4 years, 5 months ago
- 1b8b31a selinux: convert policy read-write lock to RCU by Stephen Smalley · 4 years, 5 months ago
- c76a2f9 selinux: delete repeated words in comments by Randy Dunlap · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 5 months ago
- 30969bc selinux: add basic filtering for audit trace events by Peter Enderborg · 4 years, 5 months ago
- dd81662 selinux: add tracepoint on audited events by Thiébaud Weksteen · 4 years, 5 months ago
- 0eea609 selinux: Create new booleans and class dirs out of tree by Daniel Burgener · 4 years, 5 months ago
- 613ba18 selinux: Standardize string literal usage for selinuxfs directory names by Daniel Burgener · 4 years, 5 months ago
- 66ec384 selinux: Refactor selinuxfs directory populating functions by Daniel Burgener · 4 years, 5 months ago
- aeecf4a selinux: Create function for selinuxfs directory cleanup by Daniel Burgener · 4 years, 5 months ago
- 9530a3e selinux: permit removing security.selinux xattr before policy load by Stephen Smalley · 4 years, 5 months ago
- 8792293 selinux: fix memdup.cocci warnings by kernel test robot · 4 years, 5 months ago
- 37ea433 selinux: avoid dereferencing the policy prior to initialization by Stephen Smalley · 4 years, 5 months ago
- 69ea651 selinux: fix allocation failure check on newpolicy->sidtab by Colin Ian King · 4 years, 5 months ago
- c7c556f selinux: refactor changing booleans by Stephen Smalley · 4 years, 5 months ago
- 02a52c5 selinux: move policy commit after updating selinuxfs by Stephen Smalley · 4 years, 5 months ago
- 4616980 selinux: encapsulate policy state, refactor policy load by Stephen Smalley · 4 years, 5 months ago
- 339949b scripts/selinux,selinux: update mdp to enable policy capabilities by Stephen Smalley · 4 years, 5 months ago
- 74858ab Merge tag 'cap-checkpoint-restore-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 4 years, 5 months ago
- 49e917d Merge tag 'selinux-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 5 months ago
- 124ea650 capabilities: Introduce CAP_CHECKPOINT_RESTORE by Adrian Reber · 4 years, 6 months ago
- 54b27f9 selinux: complete the inlining of hashtab functions by Ondrej Mosnacek · 4 years, 6 months ago
- 24def7b selinux: prepare for inlining of hashtab functions by Ondrej Mosnacek · 4 years, 6 months ago
- 237389e selinux: specialize symtab insert and search functions by Ondrej Mosnacek · 4 years, 6 months ago
- 2c3d8df selinux: Fix spelling mistakes in the comments by lihao · 4 years, 6 months ago
- 65d9635 selinux: fixed a checkpatch warning with the sizeof macro by Ethan Edwards · 4 years, 7 months ago
- 7383c0f selinux: log error messages on required process class / permissions by Stephen Smalley · 4 years, 7 months ago
- c8e2226 selinux: allow reading labels before policy is loaded by Jonathan Lebon · 4 years, 8 months ago
- 817d914 Merge tag 'selinux-pr-20200621' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 7 months ago
- 8231b0b selinux: fix undefined return of cond_evaluate_expr by Tom Rix · 4 years, 7 months ago
- aa449a7 selinux: fix a double free in cond_read_node()/cond_read_list() by Tom Rix · 4 years, 7 months ago
- 6c32978 Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 4 years, 7 months ago
- 65de509 selinux: fix double free by Tom Rix · 4 years, 7 months ago
- 15a2bc4 Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 4 years, 7 months ago
- cb8e59c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 4 years, 7 months ago
- f41030a Merge tag 'selinux-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 7 months ago
- 0bffedb Merge tag 'v5.7-rc7' into perf/core, to pick up fixes by Ingo Molnar · 4 years, 8 months ago
- b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 4 years, 10 months ago
- 3e412cc selinux: Implement the watch_key security hook by David Howells · 5 years ago