- 4c0ddc8 selinux: add proper NULL termination to the secclass_map permissions by Paul Moore · 3 years, 8 months ago
- a28124e selinux: fix race between old and new sidtab by Ondrej Mosnacek · 3 years, 9 months ago
- fd75d73 selinux: fix cond_list corruption when changing booleans by Ondrej Mosnacek · 3 years, 9 months ago
- 4f29b08 selinux: make nslot handling in avtab more robust by Ondrej Mosnacek · 3 years, 9 months ago
- 19c9967 selinux: fix variable scope issue in live sidtab conversion by Ondrej Mosnacek · 3 years, 10 months ago
- 9731e08 selinux: don't log MAC_POLICY_LOAD record on failed policy load by Ondrej Mosnacek · 3 years, 10 months ago
- 2fe9215 selinux: fix inconsistency between inode_getxattr and inode_listsecurity by Amir Goldstein · 4 years ago
- 6e5ea34 selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling by Paul Moore · 4 years, 2 months ago
- f0d7de0 selinux: fix error initialization in inode_doinit_with_dentry() by Tianyue Ren · 4 years, 3 months ago
- 30636a5 Merge tag 'selinux-pr-20201113' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 2 months ago
- c350f8b selinux: Fix error return code in sel_ib_pkey_sid_slow() by Chen Zhou · 4 years, 2 months ago
- 726eb70 Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc by Linus Torvalds · 4 years, 3 months ago
- 7b54081 Merge tag 'selinux-pr-20201012' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 3 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 3 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 3 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 3 months ago
- 8861d0a selinux: Add helper functions to get and set checkreqprot by Lakshmi Ramasubramanian · 4 years, 4 months ago
- e8ba53d0 selinux: access policycaps with READ_ONCE/WRITE_ONCE by Stephen Smalley · 4 years, 4 months ago
- 66ccd25 selinux: simplify away security_policydb_len() by Ondrej Mosnacek · 4 years, 4 months ago
- 9ff9abc selinux: move policy mutex to selinux_state, use in lockdep checks by Stephen Smalley · 4 years, 4 months ago
- 0256b0a selinux: fix error handling bugs in security_load_policy() by Dan Carpenter · 4 years, 4 months ago
- 1b8b31a selinux: convert policy read-write lock to RCU by Stephen Smalley · 4 years, 4 months ago
- c76a2f9 selinux: delete repeated words in comments by Randy Dunlap · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 4 months ago
- 30969bc selinux: add basic filtering for audit trace events by Peter Enderborg · 4 years, 4 months ago
- dd81662 selinux: add tracepoint on audited events by Thiébaud Weksteen · 4 years, 4 months ago
- 0eea609 selinux: Create new booleans and class dirs out of tree by Daniel Burgener · 4 years, 4 months ago
- 613ba18 selinux: Standardize string literal usage for selinuxfs directory names by Daniel Burgener · 4 years, 4 months ago
- 66ec384 selinux: Refactor selinuxfs directory populating functions by Daniel Burgener · 4 years, 4 months ago
- aeecf4a selinux: Create function for selinuxfs directory cleanup by Daniel Burgener · 4 years, 4 months ago
- 9530a3e selinux: permit removing security.selinux xattr before policy load by Stephen Smalley · 4 years, 4 months ago
- 8792293 selinux: fix memdup.cocci warnings by kernel test robot · 4 years, 4 months ago
- 37ea433 selinux: avoid dereferencing the policy prior to initialization by Stephen Smalley · 4 years, 4 months ago
- 69ea651 selinux: fix allocation failure check on newpolicy->sidtab by Colin Ian King · 4 years, 4 months ago
- c7c556f selinux: refactor changing booleans by Stephen Smalley · 4 years, 5 months ago
- 02a52c5 selinux: move policy commit after updating selinuxfs by Stephen Smalley · 4 years, 5 months ago
- 4616980 selinux: encapsulate policy state, refactor policy load by Stephen Smalley · 4 years, 5 months ago
- 339949b scripts/selinux,selinux: update mdp to enable policy capabilities by Stephen Smalley · 4 years, 5 months ago
- 74858ab Merge tag 'cap-checkpoint-restore-v5.9' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 4 years, 5 months ago
- 49e917d Merge tag 'selinux-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 5 months ago
- 124ea65 capabilities: Introduce CAP_CHECKPOINT_RESTORE by Adrian Reber · 4 years, 5 months ago
- 54b27f9 selinux: complete the inlining of hashtab functions by Ondrej Mosnacek · 4 years, 6 months ago
- 24def7b selinux: prepare for inlining of hashtab functions by Ondrej Mosnacek · 4 years, 6 months ago
- 237389e selinux: specialize symtab insert and search functions by Ondrej Mosnacek · 4 years, 6 months ago
- 2c3d8df selinux: Fix spelling mistakes in the comments by lihao · 4 years, 6 months ago
- 65d9635 selinux: fixed a checkpatch warning with the sizeof macro by Ethan Edwards · 4 years, 6 months ago
- 7383c0f selinux: log error messages on required process class / permissions by Stephen Smalley · 4 years, 7 months ago
- c8e2226 selinux: allow reading labels before policy is loaded by Jonathan Lebon · 4 years, 7 months ago
- 817d914 Merge tag 'selinux-pr-20200621' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 6 months ago
- 8231b0b selinux: fix undefined return of cond_evaluate_expr by Tom Rix · 4 years, 7 months ago
- aa449a7 selinux: fix a double free in cond_read_node()/cond_read_list() by Tom Rix · 4 years, 7 months ago
- 6c32978 Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 4 years, 7 months ago
- 65de509 selinux: fix double free by Tom Rix · 4 years, 7 months ago
- 15a2bc4 Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 4 years, 7 months ago
- cb8e59c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 4 years, 7 months ago
- f41030a Merge tag 'selinux-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 7 months ago
- 0bffedb Merge tag 'v5.7-rc7' into perf/core, to pick up fixes by Ingo Molnar · 4 years, 7 months ago
- b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 4 years, 9 months ago
- 3e412cc selinux: Implement the watch_key security hook by David Howells · 5 years ago
- 8c0637e keys: Make the KEY_NEED_* perms an enum rather than a mask by David Howells · 4 years, 8 months ago
- a17b53c bpf, capability: Introduce CAP_BPF by Alexei Starovoitov · 4 years, 8 months ago
- d00f26b Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next by David S. Miller · 4 years, 8 months ago
- fe5a90b selinux: netlabel: Remove unused inline function by YueHaibing · 4 years, 8 months ago
- f87b87a Merge tag 'perf-for-bpf-2020-05-06' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip into bpf-next by Alexei Starovoitov · 4 years, 8 months ago
- 03414a4 selinux: do not allocate hashtabs dynamically by Ondrej Mosnacek · 4 years, 8 months ago
- 46619b4 selinux: fix return value on error in policydb_read() by Ondrej Mosnacek · 4 years, 8 months ago
- 3348bd3 selinux: simplify range_write() by Ondrej Mosnacek · 4 years, 8 months ago
- 4c09f8b selinux: fix error return code in policydb_read() by Wei Yongjun · 4 years, 8 months ago
- 39e16d9 Merge tag 'selinux-pr-20200430' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 8 months ago
- fb73974 selinux: properly handle multiple messages in selinux_netlink_send() by Paul Moore · 4 years, 8 months ago
- 292fed1 selinux: fix error return code in cond_read_list() by Wei Yongjun · 4 years, 8 months ago
- 9521eb3 selinux: don't produce incorrect filename_trans_count by Ondrej Mosnacek · 4 years, 8 months ago
- 87cfeb1 Merge tag 'perf-core-for-mingo-5.8-20200420' of git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core by Ingo Molnar · 4 years, 8 months ago
- 4300590 selinux: implement new format of filename transitions by Ondrej Mosnacek · 4 years, 9 months ago
- 225621c selinux: move context hashing under sidtab by Ondrej Mosnacek · 4 years, 9 months ago
- 5007728 selinux: hash context structure directly by Ondrej Mosnacek · 4 years, 9 months ago
- e67b2ec selinux: store role transitions in a hash table by Ondrej Mosnacek · 4 years, 9 months ago
- 9786cab Merge tag 'selinux-pr-20200416' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 9 months ago
- 9807372 capabilities: Introduce CAP_PERFMON to kernel and user space by Alexey Budankov · 4 years, 9 months ago
- 433e3aa selinux: drop unnecessary smp_load_acquire() call by Ondrej Mosnacek · 4 years, 9 months ago
- af15f14 selinux: free str on error in str_read() by Ondrej Mosnacek · 4 years, 9 months ago
- 4b85039 selinux: fix warning Comparison to bool by Zou Wei · 4 years, 9 months ago
- ff2ae60 Merge tag 'spdx-5.7-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/spdx by Linus Torvalds · 4 years, 9 months ago
- b3aa112 Merge tag 'selinux-pr-20200330' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 9 months ago
- c753924 selinux: clean up indentation issue with assignment statement by Colin Ian King · 4 years, 9 months ago
- d198b34 .gitignore: add SPDX License Identifier by Masahiro Yamada · 4 years, 10 months ago
- 5e729e1 selinux: avtab_init() and cond_policydb_init() return void by Paul Moore · 4 years, 10 months ago
- 34a2dab selinux: clean up error path in policydb_init() by Ondrej Mosnacek · 4 years, 10 months ago
- e3e0b58 selinux: remove unused initial SIDs and improve handling by Stephen Smalley · 4 years, 10 months ago
- e0ac568 selinux: reduce the use of hard-coded hash sizes by Ondrej Mosnacek · 4 years, 10 months ago
- e4cfa05 selinux: Add xfs quota command types by Richard Haines · 4 years, 10 months ago
- c3a2761 selinux: optimize storage of filename transitions by Ondrej Mosnacek · 4 years, 11 months ago
- 253050f selinux: factor out loop body from filename_trans_read() by Ondrej Mosnacek · 4 years, 11 months ago
- 4ca54d3 security: selinux: allow per-file labeling for bpffs by Connor O'Brien · 5 years ago
- 89d4d7c selinux: generalize evaluate_cond_node() by Ondrej Mosnacek · 5 years ago
- 8794d78 selinux: convert cond_expr to array by Ondrej Mosnacek · 5 years ago
- 2b3a003 selinux: convert cond_av_list to array by Ondrej Mosnacek · 5 years ago
- 60abd31 selinux: convert cond_list to array by Ondrej Mosnacek · 5 years ago
- a5650ac Merge tag 'selinux-pr-20200210' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 11 months ago
- 8d269a8 selinux: sel_avc_get_stat_idx should increase position index by Vasily Averin · 5 years ago