git://ftp.safe.ca / safe / jmp / linux-2.6 / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
IMA: handle comments in policy
2010-04-20 Eric ParisIMA: handle comments in policy
 commit | commitdiff | tree
2010-04-20 Eric ParisIMA: handle whitespace better
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-20 Eric ParisIMA: reject policies with unknown entries
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-20 Eric ParisIMA: set entry->action to UNKNOWN rather than hard...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-20 Eric ParisIMA: do not allow the same rule to specify the same...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-20 Eric Parisima: handle multiple rules per write
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-20 Eric ParisSELinux: return error codes on policy load failure
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook acct
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook key_session_to_parent
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook task_setgroups
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook task_setgid
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook task_setuid
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook cred_commit
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook inode_delete
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook sb_post_pivotroot
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook sb_post_addmount
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook sb_post_remount
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook sb_umount_busy
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove dead hook sb_umount_close
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-12 Eric Parissecurity: remove sb_check_sb hooks
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-07 Eric ParisSMACK: remove dead cred_commit hook
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-04-07 Eric Parisselinux: always call sk_security_struct sksec
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-03-13 Eric Parisanon_inodes: mark the anon inode private
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-03-08 Eric ParisBtrfs: use RB_ROOT to intialize rb_trees instead of...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-02-07 Eric Parisima: initialize ima before inodes can be allocated
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-01-15 Eric Parisinotify: only warn once for inotify problems
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2010-01-15 Eric Parisinotify: do not reuse watch descriptors
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-12-16 Eric Parisima: call ima_inode_free ima_inode_free
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-12-16 Eric ParisIMA: clean up the IMA counts updating code
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-12-16 Eric Parisima: only insert at inode creation time
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-12-16 Eric Parisima: valid return code from ima_inode_alloc
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-12-16 Eric Parisfs: move get_empty_filp() deffinition to internal.h
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-24 Eric ParisSELinux: print denials for buggy kernel with unknown...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-22 Eric ParisSELinux: header generation may hit infinite loop
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-09 Eric Parissecurity: report the module name to security_module_request
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-06 Eric Parisnet: check kern before calling security subsystem
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-06 Eric Parisnet: pass kern to net_proto_family create function
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-11-06 Eric Parisnet: drop capability from protocol definitions
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-10-24 Eric ParisSELinux: add .gitignore files for dynamic classes
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-10-18 Eric Parisinotify: deprecate the inotify kernel interface
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-10-18 Eric Parisfsnotify: do not set group for a mark before it is...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-30 Eric ParisSELinux: reset the security_ops before flushing the...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-24 Eric ParisAudit: send signal info if selinux is disabled
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-24 Eric ParisAudit: rearrange audit_context to save 16 bytes per...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-24 Eric ParisAudit: reorganize struct audit_watch to save 8 bytes
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-23 Eric ParisSELinux: do not destroy the avc_cache_nodep
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-15 Eric ParisSELinux: inline selinux_is_enabled in !CONFIG_SECURITY_SELINUX
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-14 Eric ParisSELinux: flush the avc before disabling SELinux
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-14 Eric ParisSELinux: seperate avc_cache flushing
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-09-14 Eric ParisCreds: creds->security can be NULL is selinux is disabled
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-28 Eric Parisinotify: update the group mask on mark addition
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-28 Eric Parisinotify: fix length reporting and size checking
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-27 Eric Parisinotify: fix locking around inotify watching in the idr
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-27 Eric Parisinotify: do not BUG on idr entries at inotify destruction
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-27 Eric Parisinotify: seperate new watch creation updating existing...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-27 Eric ParisIMA: iint put in ima_counts_get and put
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric Parisinotify: start watch descriptor count at 1
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric Parisinotify: tail drop inotify q_overflow events
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric Parisnotify: unused event private race
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric Parissecurity: define round_hint_to_min in !CONFIG_SECURITY
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric ParisSecurity/SELinux: seperate lsm specific mmap_min_addr
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric ParisSELinux: call cap_file_mmap in selinux_file_mmap
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-17 Eric ParisCapabilities: move cap_file_mmap to commoncap.c
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-14 Eric ParisSELinux: add selinux_kernel_module_request
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-14 Eric Parissecurity: introducing security_request_module
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-14 Eric ParisNetworking: use CAP_NET_ADMIN when deciding to call...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-10 Eric Parissecurity: define round_hint_to_min in !CONFIG_SECURITY
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-05 Eric ParisSecurity/SELinux: seperate lsm specific mmap_min_addr
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-05 Eric ParisSELinux: call cap_file_mmap in selinux_file_mmap
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-08-05 Eric ParisCapabilities: move cap_file_mmap to commoncap.c
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisinotify: use GFP_NOFS under potential memory pressure
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisfsnotify: fix inotify tail drop check with path entries
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisinotify: check filename before dropping repeat events
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisfsnotify: use def_bool in kconfig instead of letting...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisinotify: fix error paths in inotify_update_watch
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisinotify: do not leak inode marks in inotify_add_watch
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-07-21 Eric Parisinotify: drop user watch count when a watch is removed
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric Parisaudit: inode watches depend on CONFIG_AUDIT not CONFIG_AUDIT...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: clean up all op= output to include string quoting
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: move audit_get_nd completely into audit_watch
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric Parisaudit: seperate audit inode watches into a subfile
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: clean up audit_receive_skb
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: cleanup netlink mesg handling
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: unify the printk of an skb when auditd not around
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: dereferencing krule as if it were an audit_watch
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: better estimation of execve record length
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-24 Eric ParisAudit: fix audit watch use after free
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-19 Eric Parisinotify: inotify_destroy_mark_entry could get called...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: allow groups to set freeing_mark to null
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisinotify/dnotify: should_send_event shouldn't match...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisdnotify: do not bother to lock entry->lock when reading...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisdnotify: do not use ?true:false when assigning to a...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: move events should indicate the event was...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisinotify: reimplement inotify using fsnotify
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: handle filesystem unmounts with fsnotify...
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: fsnotify marks on inodes pin them in core
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: allow groups to add private data to events
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: add correlations between events
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: include pathnames with entries when possible
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
2009-06-11 Eric Parisfsnotify: generic notification queue and waitq
Signed-off-by: Eric Paris <eparis@redhat.com>
 commit | commitdiff | tree
next
Full containers within linux kernel