Commits

Branch selector

 master

User selector

stephensmalley

Datepicker

All time

Commit History

Commits on May 23, 2017

• selinux: log policy capability state when a policy is loaded

  Show description for 4dc2fce
  

  stephensmalley

  authored and

  pcmoore

  committed
  4dc2fce

• selinux: do not check open permission on sockets

  Show description for ccb5447
  

  stephensmalley

  authored and

  pcmoore

  committed
  ccb5447

• selinux: add a map permission check for mmap

  Show description for 3ba4bf5
  

  stephensmalley

  authored and

  pcmoore

  committed
  3ba4bf5

• selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checks

  Show description for db59000
  

  stephensmalley

  authored and

  pcmoore

  committed
  db59000

Commits on Mar 29, 2017

• fs: switch order of CAP_DAC_OVERRIDE and CAP_DAC_READ_SEARCH checks

  Show description for 2a4c224
  

  stephensmalley

  authored and

  pcmoore

  committed
  2a4c224

Commits on Mar 5, 2017

• selinux: fix kernel BUG on prlimit(..., NULL, NULL)

  Show description for 84e6885
  

  stephensmalley

  authored and

  James Morris

  committed
  84e6885

• prlimit,security,selinux: add a security hook for prlimit

  Show description for 791ec49
  

  stephensmalley

  authored and

  James Morris

  committed
  791ec49

Commits on Mar 1, 2017

• selinux: wrap cgroup seclabel support with its own policy capability

  Show description for 2651225
  

  stephensmalley

  authored and

  James Morris

  committed
  2651225

• timerfd: Only check CAP_WAKE_ALARM when it is needed

  Show description for 25b68a8
  

  stephensmalley

  authored and

  KAGA-KOKO

  committed
  25b68a8

Commits on Feb 8, 2017

• selinux: fix off-by-one in setprocattr

  Show description for 0c461cb
  

  stephensmalley

  authored and

  James Morris

  committed
  0c461cb

Commits on Feb 7, 2017

• selinux: fix off-by-one in setprocattr

  Show description for a050a57
  

  stephensmalley

  authored and

  pcmoore

  committed
  a050a57

Commits on Jan 12, 2017

• security,selinux,smack: kill security_task_wait hook

  Show description for 3a2f5a5
  

  stephensmalley

  authored and

  pcmoore

  committed
  3a2f5a5

• selinux: drop unused socket security classes

  Show description for b4ba35c
  

  stephensmalley

  authored and

  pcmoore

  committed
  b4ba35c

Commits on Jan 9, 2017

• proc,security: move restriction on writing /proc/pid/attr nodes to proc

  Show description for b21507e
  

  stephensmalley

  authored and

  pcmoore

  committed
  b21507e

• selinux: clean up cred usage and simplify

  Show description for be0554c
  

  stephensmalley

  authored and

  pcmoore

  committed
  be0554c

• selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces

  Show description for 01593d3
  

  stephensmalley

  authored and

  pcmoore

  committed
  01593d3

• selinux: handle ICMPv6 consistently with ICMP

  Show description for ef37979
  

  stephensmalley

  authored and

  pcmoore

  committed
  ef37979

• selinux: support distinctions among all network address families

  Show description for da69a53
  

  stephensmalley

  authored and

  pcmoore

  committed
  da69a53

Commits on Nov 21, 2016

• selinux: keep SELinux in sync with new capability definitions

  Show description for 3322d0d
  

  stephensmalley

  authored and

  pcmoore

  committed
  3322d0d

Commits on Nov 20, 2016

• selinux: normalize input to /sys/fs/selinux/enforce

  Show description for ea49d10
  

  stephensmalley

  authored and

  pcmoore

  committed
  ea49d10

Commits on May 31, 2016

• selinux: Only apply bounds checking to source types

  Show description for 7ea5920
  

  stephensmalley

  authored and

  pcmoore

  committed
  7ea5920

Commits on Apr 26, 2016

• selinux: apply execstack check on thread stacks

  Show description for c2316db
  

  stephensmalley

  authored and

  pcmoore

  committed
  c2316db

• selinux: distinguish non-init user namespace capability checks

  Show description for 8e4ff6f
  

  stephensmalley

  authored and

  pcmoore

  committed
  8e4ff6f

Commits on Nov 24, 2015

• selinux: fix bug in conditional rules handling

  Show description for f3bef67
  

  stephensmalley

  authored and

  pcmoore

  committed
  f3bef67

Commits on Oct 29, 2015

• lkdtm: fix ACCESS_USERSPACE test

  Show description for 2cb202c
  

  stephensmalley

  authored and

  gregkh

  committed
  2cb202c

Commits on Oct 6, 2015

• x86/mm: Warn on W^X mappings

  Show description for e1a5832
  

  stephensmalley

  authored and

  Ingo Molnar

  committed
  e1a5832

Commits on Oct 2, 2015

• x86/mm: Set NX on gap between __ex_table and rodata

  Show description for ab76f7b
  

  stephensmalley

  authored and

  Ingo Molnar

  committed
  ab76f7b

Commits on Aug 7, 2015

• ipc: use private shmem or hugetlbfs inodes for shm segments.

  Show description for e1832f2
  

  stephensmalley

  authored and

  torvalds

  committed
  e1832f2

Commits on Jul 13, 2015

• selinux: Augment BUG_ON assertion for secclass_map.

  Show description for bd1741f
  

  stephensmalley

  authored and

  pcmoore

  committed
  bd1741f

• selinux: initialize sock security class to default value

  Show description for 5dee25d
  

  stephensmalley

  authored and

  pcmoore

  committed
  5dee25d

Commits on Jul 10, 2015

• selinux: fix mprotect PROT_EXEC regression caused by mm change

  Show description for 892e8ca
  

  stephensmalley

  authored and

  pcmoore

  committed
  892e8ca

Commits on Jul 8, 2015

• net/tipc: initialize security state for new connection socket

  Show description for fdd75ea
  

  stephensmalley

  authored and

  davem330

  committed
  fdd75ea

Commits on Jun 11, 2015

• net/unix: support SCM_SECURITY for stream sockets

  Show description for 37a9a8d
  

  stephensmalley

  authored and

  davem330

  committed
  37a9a8d

Commits on Jun 4, 2015

• selinux: Remove unused permission definitions

  Show description for 42a9699
  

  stephensmalley

  authored and

  pcmoore

  committed
  42a9699

• selinux: enable genfscon labeling for sysfs and pstore files

  Show description for 8e01472
  

  stephensmalley

  authored and

  pcmoore

  committed
  8e01472

Pagination

PreviousNext