- 6672efb lsm: constify the 'target' parameter in security_capget() by Khadija Kamran · 1 year, 5 months ago
- a495108 capability: fix kernel-doc warnings in capability.c by Gaosheng Cui · 1 year, 8 months ago
- f122a08 capability: just use a 'u64' instead of a 'u32[2]' array by Linus Torvalds · 1 year, 10 months ago
- e67fe63 fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmap by Christian Brauner · 2 years ago
- 9452e93 fs: port privilege checking helpers to mnt_idmap by Christian Brauner · 2 years ago
- b7c9b67 caps: use type safe idmapping helpers by Christian Brauner · 2 years, 2 months ago
- eba0549 xfs: don't generate selinux audit messages for capability testing by Darrick J. Wong · 2 years, 10 months ago
- 0558c1b capability: handle idmapped mounts by Christian Brauner · 4 years ago
- 111767c LSM: Signal to SafeSetID when setting group IDs by Thomas Cedeno · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 4 months ago
- 4085227 LSM: add SafeSetID module that gates setid calls by Micah Morton · 6 years ago
- 39e83be capabilities:: annotate implicit fall through by Mathieu Malaterre · 6 years ago
- c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
- b244131 License cleanup: add SPDX GPL-2.0 license identifier to files with no license by Greg Kroah-Hartman · 7 years ago
- 19c816e capability: export has_capability by Jike Song · 8 years ago
- 7c0f6ba Replace <asm/uaccess.h> with <linux/uaccess.h> globally by Linus Torvalds · 8 years ago
- f84df2a exec: Ensure mm->user_ns contains the execed files by Eric W. Biederman · 8 years ago
- 64b875f ptrace: Capture the ptracer's creds not PT_PTRACE_CAP by Eric W. Biederman · 8 years ago
- 98f368e kernel: Add noaudit variant of ns_capable() by Tyler Hicks · 9 years ago
- 2813893 kernel: conditionally support non-root users, groups and capabilities by Iulia Manda · 10 years ago
- 7d8b6c6 CAPABILITIES: remove undefined caps from all processes by Eric Paris · 10 years ago
- 23adbe1 fs,userns: Change inode_capable to capable_wrt_inode_uidgid by Andy Lutomirski · 11 years ago
- a6c8c69 kernel/capability.c: code clean-up by Fabian Frederick · 11 years ago
- bea8031 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 11 years ago
- f5645d3 capability: Use current logging styles by Joe Perches · 11 years ago
- ca24a23 audit: Simplify and correct audit_log_capset by Eric W. Biederman · 12 years ago
- 300893b Merge tag 'xfs-for-linus-v3.12-rc1' of git://oss.sgi.com/xfs/xfs by Linus Torvalds · 11 years ago
- c7b96ac userns: Kill nsown_capable it makes the wrong thing easy by Eric W. Biederman · 12 years ago
- fd5e2aa xfs: ioctl check for capabilities in the current user namespace by Dwight Engen · 11 years ago
- 935d8aa Add file_ns_capable() helper function for open-time capability checking by Linus Torvalds · 12 years ago
- 65cc5a1 userns: Teach inode_capable to understand inodes whose uids map to other namespaces. by Eric W. Biederman · 13 years ago
- 1a48e2a userns: Replace the hard to write inode_userns with inode_capable. by Eric W. Biederman · 13 years ago
- 951880e Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call" by Linus Torvalds · 13 years ago
- c49c41a Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security by Linus Torvalds · 13 years ago
- f1c84da capabilities: remove task_ns_* functions by Eric Paris · 13 years ago
- d2a7009 capabitlies: ns_capable can use the cap helpers rather than lsm call by Eric Paris · 13 years ago
- 105ddf4 capabilities: style only - move capable below ns_capable by Eric Paris · 13 years ago
- 7b61d64 capabilites: introduce new has_ns_capabilities_noaudit by Eric Paris · 13 years ago
- 25e7570 capabilities: call has_ns_capability from has_capability by Eric Paris · 13 years ago
- 2920a84 capabilities: remove all _real_ interfaces by Eric Paris · 13 years ago
- b7e724d capabilities: reverse arguments to security_capable by Eric Paris · 13 years ago
- 9984de1 kernel: Map most files to use export.h instead of module.h by Paul Gortmaker · 14 years ago
- 12a5a26 Merge branch 'master' into next by James Morris · 14 years ago
- 47a150e Cache user_ns in struct cred by Serge E. Hallyn · 14 years ago
- 5163b58 capabilities: delete unused cap_set_full by Eric Paris · 14 years ago
- ffa8e59 capabilities: do not drop CAP_SETPCAP from the initial task by Eric Paris · 14 years ago
- 3263245 userns: make has_capability* into real functions by Serge E. Hallyn · 14 years ago
- 3486740 userns: security: make capabilities relative to the user namespace by Serge E. Hallyn · 14 years ago
- 6037b71 security: add cred argument to security_capable() by Chris Wright · 14 years ago
- 32bd7eb sched: Remove remaining USER_SCHED code by Li Zefan · 15 years ago
- 86fc80f capabilities: Use RCU to protect task lookup in sys_capget by Thomas Gleixner · 15 years ago
- b3a222e remove CONFIG_SECURITY_FILE_CAPABILITIES compile option by Serge E. Hallyn · 15 years ago
- c4a5af5 Silence the existing API for capability version compatibility check. by Andrew G. Morgan · 15 years ago
- 825332e capabilities: simplify bound checks for copy_from_user() by Arjan van de Ven · 15 years ago
- b290ebe [CVE-2009-0029] System call wrappers part 04 by Heiko Carstens · 16 years ago
- ac8cc0f Merge branch 'next' into for-linus by James Morris · 16 years ago
- 3699c53 CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3] by David Howells · 16 years ago
- 29881c4 Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]" by James Morris · 16 years ago
- 14eaddc CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2] by David Howells · 16 years ago
- 57f71a0 sanitize audit_log_capset() by Al Viro · 16 years ago
- d84f4f9 CRED: Inaugurate COW credentials by David Howells · 16 years ago
- b6dff3e CRED: Separate task security context from task_struct by David Howells · 16 years ago
- 1cdcbec CRED: Neuter sys_capset() by David Howells · 16 years ago
- 637d32d Capabilities: BUG when an invalid capability is requested by Eric Paris · 16 years ago
- e68b75a0 When the capset syscall is used it is not possible for audit to record the by Eric Paris · 16 years ago
- 1f29fae file capabilities: add no_file_caps switch (v4) by Serge E. Hallyn · 16 years ago
- 5cd9c58 security: Fix setting of PF_SUPERPRIV by __capable() by David Howells · 16 years ago
- ab763c7 security: filesystem capabilities refactor kernel code by Andrew G. Morgan · 16 years ago
- 086f731 security: filesystem capabilities: fix fragile setuid fixup code by Andrew G. Morgan · 16 years ago
- ca05a99 capabilities: remain source compatible with 32-bit raw legacy capability support. by Andrew G. Morgan · 17 years ago
- e338d26 Add 64-bit capability support to the kernel by Andrew Morgan · 17 years ago
- 8990571 Uninline find_pid etc set of functions by Pavel Emelyanov · 17 years ago
- 228ebcb Uninline find_task_by_xxx set of functions by Pavel Emelyanov · 17 years ago
- b488893 pid namespaces: changes to show virtual ids to user by Pavel Emelyanov · 17 years ago
- b460cbc pid namespaces: define is_global_init() and is_container_init() by Serge E. Hallyn · 17 years ago
- 314f70f whitespace fixes: capability syscalls by Daniel Walker · 17 years ago
- 72c2d58 V3 file capabilities: alter behavior of cap_setpcap by Andrew Morgan · 17 years ago
- cbfee34 security/ cleanups by Adrian Bunk · 17 years ago
- 41487c6 [PATCH] pid: replace do/while_each_task_pid with do/while_each_pid_task by Eric W. Biederman · 18 years ago
- f400e19 [PATCH] pidspace: is_init() by Sukadev Bhattiprolu · 18 years ago
- 36c8b58 [PATCH] sched: cleanup, remove task_t, convert to struct task_struct by Ingo Molnar · 18 years ago
- 12b5989 [PATCH] refactor capable() to one implementation, add __capable() helper by Chris Wright · 19 years ago
- c59ede7 [PATCH] move capable() to capability.h by Randy.Dunlap · 19 years ago
- 207a7ba [PATCH] kernel/capability.c: add kerneldoc by Randy Dunlap · 19 years ago
- 1da177e Linux-2.6.12-rc2 by Linus Torvalds · 20 years ago v2.6.12-rc2