summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2017-10-26Revert "apparmor: add base infastructure for socket mediation"Linus Torvalds12-840/+16
2017-10-19commoncap: move assignment of fs_ns to avoid null pointer dereferenceColin Ian King1-1/+2
2017-10-19Merge commit 'tags/keys-fixes-20171018' into fixes-v4.14-rc5James Morris14-53/+88
2017-10-18KEYS: load key flags and expiry time atomically in proc_keys_show()Eric Biggers1-10/+14
2017-10-18KEYS: Load key expiry time atomically in keyring_search_iterator()Eric Biggers1-1/+3
2017-10-18KEYS: load key flags and expiry time atomically in key_validate()Eric Biggers1-3/+4
2017-10-18KEYS: don't let add_key() update an uninstantiated keyDavid Howells1-0/+10
2017-10-18KEYS: Fix race between updating and finding a negative keyDavid Howells12-39/+49
2017-10-18security/keys: BIG_KEY requires CONFIG_CRYPTOArnd Bergmann1-0/+1
2017-10-12KEYS: encrypted: fix dereference of NULL user_key_payloadEric Biggers1-0/+7
2017-10-04lsm: fix smack_inode_removexattr and xattr_getsecurity memleakCasey Schaufler1-30/+25
2017-09-28Merge commit 'keys-fixes-20170927' into fixes-v4.14-rc3James Morris9-152/+137
2017-09-25security/keys: rewrite all of big_key cryptoJason A. Donenfeld2-71/+60
2017-09-25security/keys: properly zero out sensitive key material in big_keyJason A. Donenfeld1-6/+6
2017-09-25KEYS: use kmemdup() in request_key_auth_new()Eric Biggers1-3/+2
2017-09-25KEYS: restrict /proc/keys by credentials at open timeEric Biggers1-6/+2
2017-09-25KEYS: reset parent each time before searching key_user_treeEric Biggers1-2/+2
2017-09-25KEYS: prevent KEYCTL_READ on negative keyEric Biggers1-0/+5
2017-09-25KEYS: prevent creating a different user's keyringsEric Biggers4-12/+21
2017-09-25KEYS: fix writing past end of user-supplied buffer in keyring_read()Eric Biggers1-9/+5
2017-09-25KEYS: fix key refcount leak in keyctl_read_key()Eric Biggers1-1/+1
2017-09-25KEYS: fix key refcount leak in keyctl_assume_authority()Eric Biggers1-4/+2
2017-09-25KEYS: don't revoke uninstantiated key in request_key_auth_new()Eric Biggers1-1/+0
2017-09-25KEYS: fix cred refcount leak in request_key_auth_new()Eric Biggers1-37/+31
2017-09-24Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-3/+3
2017-09-23security: fix description of values returned by cap_inode_need_killprivStefan Berger1-3/+3
2017-09-23Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds24-137/+2088
2017-09-22apparmor: fix apparmorfs DAC access permissionsJohn Johansen1-4/+4
2017-09-22apparmor: fix build failure on sparc caused by undeclared signalsJohn Johansen1-1/+4
2017-09-22apparmor: fix incorrect type assignment when freeing proxiesJohn Johansen1-1/+1
2017-09-22apparmor: ensure unconfined profiles have dfas initializedJohn Johansen1-0/+2
2017-09-22apparmor: fix race condition in null profile creationJohn Johansen1-3/+11
2017-09-22apparmor: move new_null_profile to after profile lookup fns()John Johansen1-79/+79
2017-09-22apparmor: add base infastructure for socket mediationJohn Johansen12-16/+840
2017-09-22apparmor: add more debug asserts to apparmorfsJohn Johansen1-0/+17
2017-09-22apparmor: make policy_unpack able to audit different info messagesJohn Johansen2-16/+40
2017-09-22apparmor: add support for absolute root view based labelsJohn Johansen2-1/+10
2017-09-22apparmor: cleanup conditional check for label in label_printJohn Johansen1-14/+8
2017-09-22apparmor: add mount mediationJohn Johansen9-4/+841
2017-09-22apparmor: add the ability to mediate signalsJohn Johansen7-0/+231
2017-09-22apparmor: Redundant condition: prev_ns. in [label.c:1498]John Johansen1-1/+1
2017-09-22apparmor: Fix an error code in aafs_create()Dan Carpenter1-1/+3
2017-09-22apparmor: Fix logical error in verify_header()Christos Gkekas1-1/+1
2017-09-22apparmor: Fix shadowed local variable in unpack_trans_table()Geert Uytterhoeven1-2/+2
2017-09-14Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds1-2/+4
2017-09-12Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds28-56/+78
2017-09-11Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-21/+256
2017-09-07Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-2/+0
2017-09-07Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds9-120/+23
2017-09-05selinux: remove AVC init audit log messageRichard Guy Briggs1-2/+0