- 732bc2f selinux: initialize proto variable in selinux_ip_postroute_compat() by Tom Rix · 3 years ago
- cc274ae selinux: fix sleeping function called from invalid context by Scott Mayhew · 3 years ago
- dc27f3c selinux: fix NULL-pointer dereference when hashtab allocation fails by Ondrej Mosnacek · 3 years, 1 month ago
- 32a370a net,lsm,selinux: revert the security_sctp_assoc_established() hook by Paul Moore · 3 years, 2 months ago
- e7310c9 security: implement sctp_assoc_established hook in selinux by Xin Long · 3 years, 2 months ago
- c081d53 security: pass asoc to sctp_assoc_request and sctp_sk_clone by Xin Long · 3 years, 2 months ago
- cdab10b Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 2 months ago
- 15bf323 security: Return xattr name from security_dentry_init_security() by Vivek Goyal · 3 years, 3 months ago
- 1c73213 selinux: fix a sock regression in selinux_ip_postroute_compat() by Paul Moore · 3 years, 2 months ago
- 52f8869 binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
- e9fd729 selinux: fix all of the W=1 build warnings by Paul Moore · 4 years, 1 month ago
- 1d1e1de selinux: make better use of the nf_hook_state passed to the NF hooks by Paul Moore · 3 years, 3 months ago
- cbfcd13 selinux: fix race condition when computing ocontext SIDs by Ondrej Mosnacek · 3 years, 5 months ago
- 4342f70 selinux: remove unneeded ipv6 hook wrappers by Florian Westphal · 3 years, 3 months ago
- 578f393 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ by David S. Miller · 3 years, 3 months ago
- f5d0e5e selinux: remove the SELinux lockdown implementation by Paul Moore · 3 years, 3 months ago
- 8a764ef selinux: enable genfscon labeling for securityfs by Christian Göttsche · 3 years, 3 months ago
- a3727a8 selinux,smack: fix subjective/objective credential use mixups by Paul Moore · 3 years, 3 months ago
- 740b034 selinux: add support for the io_uring access controls by Paul Moore · 3 years, 10 months ago
- 844f7ea include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage by Eugene Syromiatnikov · 3 years, 4 months ago
- aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 4 months ago
- 9e9fb76 Merge tag 'net-next-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 4 months ago
- befa491 Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 4 months ago
- 0ca8d3c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 5 months ago
- 4c15608 selinux: correct the return value when loads initial sids by Xiu Jianfeng · 3 years, 5 months ago
- bc49d81 mctp: Add MCTP base by Jeremy Kerr · 3 years, 5 months ago
- ca3c9bd ima: Add digest and digest_len params to the functions to measure a buffer by Roberto Sassu · 3 years, 5 months ago
- 893c47d selinux: return early for possible NULL audit buffers by Austin Kim · 3 years, 6 months ago
- d99cf13 selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit() by Al Viro · 4 years ago
- b17ec22 selinux: slow_avc_audit has become non-blocking by Al Viro · 4 years ago
- d0a8331 selinux: Fix kernel-doc by Yang Li · 3 years, 7 months ago
- 648f2c6 selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC by Minchan Kim · 3 years, 7 months ago
- 869cbee lsm_audit,selinux: pass IB device name by reference by Ondrej Mosnacek · 3 years, 8 months ago
- fd781f4 selinux: Remove redundant assignment to rc by Jiapeng Chong · 3 years, 8 months ago
- 7cffc37 selinux: Corrected comment to match kernel-doc comment by Souptick Joarder · 3 years, 8 months ago
- 8a92280 selinux: delete selinux_xfrm_policy_lookup() useless argument by Zhongjun Tan · 3 years, 9 months ago
- e1cce3a selinux: constify some avtab function arguments by Ondrej Mosnacek · 3 years, 9 months ago
- fba472b selinux: simplify duplicate_policydb_cond_list() by using kmemdup() by Ondrej Mosnacek · 3 years, 9 months ago
- 17ae69a Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 3 years, 8 months ago
- 9d31d23 Merge tag 'net-next-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 8 months ago
- f1c921f Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 8 months ago
- 1aea780 LSM: Infrastructure management of the superblock by Casey Schaufler · 3 years, 8 months ago
- e4c82ea selinux: add proper NULL termination to the secclass_map permissions by Paul Moore · 3 years, 8 months ago
- 8859a44 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 9 months ago
- 60144b2 Merge tag 'selinux-pr-20210409' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 9 months ago
- 9ad6e9cb selinux: fix race between old and new sidtab by Ondrej Mosnacek · 3 years, 9 months ago
- d8f5f0e selinux: fix cond_list corruption when changing booleans by Ondrej Mosnacek · 3 years, 9 months ago
- 442dc00 selinux: make nslot handling in avtab more robust by Ondrej Mosnacek · 3 years, 9 months ago
- efd13b7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by David S. Miller · 3 years, 9 months ago
- eb1231f selinux: clarify task subjective and objective credentials by Paul Moore · 3 years, 10 months ago
- 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 10 months ago
- 69c4a42 lsm,selinux: add new hook to compare new mount to an existing mount by Olga Kornievskaia · 3 years, 10 months ago
- 8419639 Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 9 months ago
- ee5de60 selinuxfs: unify policy load error reporting by Ondrej Mosnacek · 3 years, 9 months ago
- 6406887 selinux: fix variable scope issue in live sidtab conversion by Ondrej Mosnacek · 3 years, 9 months ago
- 519dad3 selinux: don't log MAC_POLICY_LOAD record on failed policy load by Ondrej Mosnacek · 3 years, 9 months ago
- 710ec56 nexthop: Add netlink defines and enumerators for resilient NH groups by Ido Schimmel · 3 years, 10 months ago
- 431c3be selinux: fix misspellings using codespell tool by Xiong Zhenwu · 3 years, 10 months ago
- 63ddf1b selinux: fix misspellings using codespell tool by Xiong Zhenwu · 3 years, 10 months ago
- 2554a48 selinux: measure state and policy capabilities by Lakshmi Ramasubramanian · 3 years, 11 months ago
- 7fa2e79 selinux: Allow context mounts for unpriviliged overlayfs by Vivek Goyal · 3 years, 11 months ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 10 months ago
- d643a99 Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 10 months ago
- 71bc356 commoncap: handle idmapped mounts by Christian Brauner · 4 years ago
- c7c7a1a1 xattr: handle idmapped mounts by Tycho Andersen · 4 years ago
- 21cb47b inode: make init and permission helpers idmapped mount aware by Christian Brauner · 4 years ago
- fdd1ffe selinux: include a consumer of the new IMA critical data hook by Lakshmi Ramasubramanian · 4 years ago
- 29cd659 selinux: teach SELinux about anonymous inodes by Daniel Colascione · 4 years ago
- 08abe46 selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support by Ondrej Mosnacek · 4 years ago
- e0de8a9 selinux: mark selinux_xfrm_refcount as __read_mostly by Ondrej Mosnacek · 4 years ago
- cd2bb4c selinux: mark some global variables __ro_after_init by Ondrej Mosnacek · 4 years ago
- db478cd selinux: make selinuxfs_mount static by Ondrej Mosnacek · 4 years ago
- 3c797e5 selinux: drop the unnecessary aurule_callback variable by Ondrej Mosnacek · 4 years ago
- 46434ba selinux: remove unused global variables by Ondrej Mosnacek · 4 years ago
- a9ffe68 selinux: fix inconsistency between inode_getxattr and inode_listsecurity by Amir Goldstein · 4 years ago
- 95ca907 selinux: handle MPTCP consistently with TCP by Paolo Abeni · 4 years ago
- ca5b877 Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years ago
- 41dd959 security: add const qualifier to struct sock in various places by Florian Westphal · 4 years, 1 month ago
- 3df98d7 lsm,selinux: pass flowi_common instead of flowi to the LSM hooks by Paul Moore · 4 years, 3 months ago
- b2d99bc selinux: Fix fall-through warnings for Clang by Gustavo A. R. Silva · 4 years, 1 month ago
- 30636a5 Merge tag 'selinux-pr-20201113' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 1 month ago
- c350f8b selinux: Fix error return code in sel_ib_pkey_sid_slow() by Chen Zhou · 4 years, 2 months ago
- b159e86 selinux: drop super_block backpointer from superblock_security_struct by Ondrej Mosnacek · 4 years, 2 months ago
- 200ea5a selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling by Paul Moore · 4 years, 2 months ago
- 44141f5 selinux: allow dontauditx and auditallowx rules to take effect without allowx by bauen1 · 4 years, 3 months ago
- 83370b3 selinux: fix error initialization in inode_doinit_with_dentry() by Tianyue Ren · 4 years, 3 months ago
- 726eb70 Merge tag 'char-misc-5.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc by Linus Torvalds · 4 years, 2 months ago
- 7b54081 Merge tag 'selinux-pr-20201012' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years, 2 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 3 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 3 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 3 months ago
- 8861d0a selinux: Add helper functions to get and set checkreqprot by Lakshmi Ramasubramanian · 4 years, 3 months ago
- e8ba53d0 selinux: access policycaps with READ_ONCE/WRITE_ONCE by Stephen Smalley · 4 years, 4 months ago
- 66ccd25 selinux: simplify away security_policydb_len() by Ondrej Mosnacek · 4 years, 4 months ago
- 9ff9abc selinux: move policy mutex to selinux_state, use in lockdep checks by Stephen Smalley · 4 years, 4 months ago
- 0256b0a selinux: fix error handling bugs in security_load_policy() by Dan Carpenter · 4 years, 4 months ago
- 1b8b31a selinux: convert policy read-write lock to RCU by Stephen Smalley · 4 years, 4 months ago
- c76a2f9 selinux: delete repeated words in comments by Randy Dunlap · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 4 months ago
- 30969bc selinux: add basic filtering for audit trace events by Peter Enderborg · 4 years, 4 months ago