- 49e917d Merge tag 'selinux-pr-20200803' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 6 months ago
- 24def7b selinux: prepare for inlining of hashtab functions by Ondrej Mosnacek · 4 years, 6 months ago
- 237389e selinux: specialize symtab insert and search functions by Ondrej Mosnacek · 4 years, 6 months ago
- 65de509 selinux: fix double free by Tom Rix · 4 years, 7 months ago
- 03414a4 selinux: do not allocate hashtabs dynamically by Ondrej Mosnacek · 4 years, 9 months ago
- 225621c selinux: move context hashing under sidtab by Ondrej Mosnacek · 4 years, 9 months ago
- 5007728 selinux: hash context structure directly by Ondrej Mosnacek · 4 years, 9 months ago
- e67b2ec selinux: store role transitions in a hash table by Ondrej Mosnacek · 4 years, 10 months ago
- 4b85039 selinux: fix warning Comparison to bool by Zou Wei · 4 years, 9 months ago
- e3e0b58 selinux: remove unused initial SIDs and improve handling by Stephen Smalley · 5 years ago
- c3a2761 selinux: optimize storage of filename transitions by Ondrej Mosnacek · 5 years ago
- 89d4d7c selinux: generalize evaluate_cond_node() by Ondrej Mosnacek · 5 years ago
- 60abd31 selinux: convert cond_list to array by Ondrej Mosnacek · 5 years ago
- 7470d0d1 selinux: allow kernfs symlinks to inherit parent directory context by Christian Göttsche · 5 years ago
- 06c2efe selinux: simplify evaluate_cond_node() by Ondrej Mosnacek · 5 years ago
- 4b36cb7 selinux: move status variables out of selinux_ss by Ondrej Mosnacek · 5 years ago
- dd89b9d selinux: do not allocate ancillary buffer on first load by Ondrej Mosnacek · 5 years ago
- 65cddd5 selinux: treat atomic flags more carefully by Ondrej Mosnacek · 5 years ago
- f126853 selinux: remove set but not used variable 'sidtab' by YueHaibing · 5 years ago
- 15b590a selinux: ensure the policy has been loaded before reading the sidtab stats by Paul Moore · 5 years ago
- d97bd23 selinux: cache the SID -> context string translation by Ondrej Mosnacek · 5 years ago
- 66f8e2f selinux: sidtab reverse lookup hash table by Jeff Vander Stoep · 5 years ago
- 2ef4591 Merge tag 'selinux-pr-20191007' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 5 years ago
- 2a52439 selinux: fix context string corruption in convert_context() by Ondrej Mosnacek · 5 years ago
- 5825a95 Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 5 years ago
- f07ea1d selinux: policydb - rename type_val_to_struct_array by Ondrej Mosnacek · 5 years ago
- 7c0f896 Merge tag 'selinux-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
- ea74a68 selinux: format all invalid context as untrusted by Richard Guy Briggs · 6 years ago
- a10e763 treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372 by Thomas Gleixner · 6 years ago
- beee56f selinux: remove some no-op BUG_ONs by Ondrej Mosnacek · 6 years ago
- 9e0cfe2 selinux: remove useless assignments by Ondrej Mosnacek · 6 years ago
- acdf52d selinux: convert to kvmalloc by Kent Overstreet · 6 years ago
- be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 3ac96c3 Merge tag 'selinux-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- fede148 selinux: log invalid contexts in AVCs by Ondrej Mosnacek · 6 years ago
- 3d25252 SELinux: Remove unused selinux_is_enabled by Casey Schaufler · 6 years ago
- ee1a84f selinux: overhaul sidtab to fix bug and improve performance by Ondrej Mosnacek · 6 years ago
- 24ed7fd selinux: use separate table for initial SID lookup by Ondrej Mosnacek · 6 years ago
- 89f5beb selinux: make "selinux_policycap_names[]" const char * by Alexey Dobriyan · 6 years ago
- 5386e6c selinux: refactor sidtab conversion by Ondrej Mosnacek · 6 years ago
- 95ffe19 selinux: refactor mls_context_to_sid() and make it stricter by Jann Horn · 6 years ago
- b54c85c15 selinux: Cleanup printk logging in services by peter enderborg · 7 years ago
- 6396bb2 treewide: kzalloc() -> kcalloc() by Kees Cook · 7 years ago
- 8b5c6a3 Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 7 years ago
- efe3de7 selinux: KASAN: slab-out-of-bounds in xattr_getsecurity by Sachin Grover · 7 years ago
- cdfb6b3 audit: use inline function to get audit context by Richard Guy Briggs · 7 years ago
- 6b6bc62 selinux: wrap AVC state by Stephen Smalley · 7 years ago
- 274f62e selinux: fix handling of uninitialized selinux state in get_bools/classes by Stephen Smalley · 7 years ago
- e5a5ca9 selinux: rename the {is,set}_enforcing() functions by Paul Moore · 7 years ago
- aa8e712 selinux: wrap global selinux state by Stephen Smalley · 7 years ago
- 4b14752 selinux: skip bounded transition processing if the policy isn't loaded by Paul Moore · 7 years ago
- ef28df5 selinux: ensure the context is NUL terminated in security_context_to_sid_core() by Paul Moore · 7 years ago
- 7c620ec selinux: Use kmem_cache for hashtab_node by Kyeongdon Kim · 7 years ago
- 7efbb60 selinux: update my email address by Stephen Smalley · 7 years ago
- af63f41 selinux: Generalize support for NNP/nosuid SELinux domain transitions by Stephen Smalley · 7 years ago
- b4958c8 selinux: use kmem_cache for ebitmap by Junil Lee · 8 years ago
- ab861df selinux: Add IB Port SMP access vector by Daniel Jurgens · 8 years ago
- cfc4d88 selinux: Implement Infiniband PKey "Access" access vector by Daniel Jurgens · 8 years ago
- 4dc2fce selinux: log policy capability state when a policy is loaded by Stephen Smalley · 8 years ago
- 342e915 selinux: Remove unnecessary check of array base in selinux_set_mapping() by Matthias Kaehlcke · 8 years ago
- 2651225b selinux: wrap cgroup seclabel support with its own policy capability by Stephen Smalley · 8 years ago
- da69a53 selinux: support distinctions among all network address families by Stephen Smalley · 8 years ago
- 7ea5920 selinux: Only apply bounds checking to source types by Stephen Smalley · 9 years ago
- 0fd71a6 selinux: Change bool variable name to index. by Prarit Bhargava · 9 years ago
- f9df645 selinux: export validatetrans decisions by Andrew Perepechko · 9 years ago
- 9529c78 selinux: use sprintf return value by Rasmus Villemoes · 9 years ago
- 21b76f1 selinux: use kstrdup() in security_get_bools() by Rasmus Villemoes · 9 years ago
- aa736c3 selinux: use kmemdup in security_sid_to_context_core() by Rasmus Villemoes · 9 years ago
- 44be2f6 selinux: introduce security_context_str_to_sid by Rasmus Villemoes · 9 years ago
- fa1aa14 selinux: extended permissions for ioctls by Jeff Vander Stoep · 10 years ago
- da8026f selinux: reconcile security_netlbl_secattr_to_sid() and mls_import_netlbl_cat() by Paul Moore · 10 years ago
- 4093a84 selinux: normalize audit log formatting by Richard Guy Briggs · 10 years ago
- f31e799 selinux: no recursive read_lock of policy_rwlock in security_genfs_sid() by Waiman Long · 11 years ago
- 52a4c64 selinux: add gfp argument to security_xfrm_policy_alloc and fix callers by Nikolay Aleksandrov · 11 years ago
- f743166 Merge branch 'stable-3.14' of git://git.infradead.org/users/pcmoore/selinux into for-linus by James Morris · 11 years ago
- 2172fa7 SELinux: Fix kernel BUG on empty security contexts. by Stephen Smalley · 11 years ago
- 6dd9158 Merge git://git.infradead.org/users/eparis/audit by Linus Torvalds · 11 years ago
- 9ad42a7 selinux: call WARN_ONCE() instead of calling audit_log_start() by Richard Guy Briggs · 11 years ago
- 4d546f8 selinux: revert 102aefdda4d8275ce7d7100bc16c88c74272b260 by Paul Moore · 11 years ago
- b5495b4 SELinux: security_load_policy: Silence frame-larger-than warning by Tim Gardner · 11 years ago
- 102aefd selinux: consider filesystem subtype in policies by Anand Avati · 12 years ago
- 2be4d74 Add SELinux policy capability for always checking packet and peer classes. by Chris PeBenito · 12 years ago
- a64c54c SELinux: pass a superblock to security_fs_use by Eric Paris · 12 years ago
- f936c6e SELinux: change sbsec->behavior to short by Eric Paris · 12 years ago
- 581abc0 userns: Convert selinux to use kuid and kgid where appropriate by Eric W. Biederman · 12 years ago
- 562c99f SELinux: avc: remove the useless fields in avc_add_callback by Wanlong Gao · 13 years ago
- bb7081a SELinux: possible NULL deref in context_struct_to_string by Eric Paris · 13 years ago
- eed7795 SELinux: add default_type statements by Eric Paris · 13 years ago
- aa89326 SELinux: allow default source/target selectors for user/role/range by Eric Paris · 13 years ago
- 6a3fbe8 selinux: sparse fix: fix warnings in netlink code by James Morris · 13 years ago
- cc59a58 selinux: sparse fix: move selinux_complete_init by James Morris · 13 years ago
- 82c21bf doc: Update the email address for Paul Moore in various source files by Paul Moore · 13 years ago
- f01e1af selinux: don't pass in NULL avd to avc_has_perm_noaudit by Linus Torvalds · 14 years ago
- b7b5755 Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into for-linus by James Morris · 14 years ago
- 2463c26d SELinux: put name based create rules in a hashtable by Eric Paris · 14 years ago
- 03a4c01 SELinux: skip filename trans rules if ttype does not match parent dir by Eric Paris · 14 years ago
- 2667991 SELinux: rename filename_compute_type argument to *type instead of *con by Eric Paris · 14 years ago
- 4742600 SELinux: fix comment to state filename_compute_type takes an objname not a qstr by Eric Paris · 14 years ago
- 6b69732 SELinux: security_read_policy should take a size_t not ssize_t by Eric Paris · 14 years ago