aboutsummaryrefslogtreecommitdiffstats
path: root/security/security.c
AgeCommit message (Expand)AuthorFilesLines
2017-06-09security/selinux: allow security_sb_clone_mnt_opts to enable/disable native l...Scott Mayhew1-2/+5
2017-05-23IB/core: Enforce security on management datagramsDaniel Jurgens1-0/+6
2017-05-23selinux lsm IB/core: Implement LSM notification systemDaniel Jurgens1-0/+20
2017-05-23IB/core: Enforce PKey security on QPsDaniel Jurgens1-0/+22
2017-05-22Sync to mainline for security submaintainers to work againstJames Morris1-4/+8
2017-05-15LSM: Enable multiple calls to security_add_hooks() for the same LSMMickaël Salaün1-0/+19
2017-05-03Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-352/+18
2017-04-02kernel-api.rst: fix a series of errors when parsing C filesmchehab@s-opensource.com1-4/+8
2017-03-28LSM: Revive security_task_alloc() hook and per "struct task_struct" security ...Tetsuo Handa1-0/+5
2017-03-24LSM: Initialize security_hook_heads upon registration.Tetsuo Handa1-354/+7
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-03-06prlimit,security,selinux: add a security hook for prlimitStephen Smalley1-0/+8
2017-02-10Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux i...James Morris1-8/+2
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-0/+38
2017-01-12security,selinux,smack: kill security_task_wait hookStephen Smalley1-6/+0
2017-01-09proc,security: move restriction on writing /proc/pid/attr nodes to procStephen Smalley1-2/+2
2016-08-08security, overlayfs: Provide hook to correctly label newly created filesVivek Goyal1-0/+11
2016-08-08security,overlayfs: Provide security hook for copy up of xattrs for overlay fileVivek Goyal1-0/+8
2016-08-08security, overlayfs: provide copy up security hook for unioned filesVivek Goyal1-0/+8
2016-08-06Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2016-07-20qstr: constify dentry_init_securityAl Viro1-1/+1
2016-06-06LSM: Fix for security_inode_getsecurity and -EOPNOTSUPPCasey Schaufler1-4/+25
2016-05-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-1/+1
2016-05-17Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-14/+14
2016-04-22security: Introduce security_settime64()Baolin Wang1-1/+1
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook1-0/+1
2016-04-11security: drop the unused hook skb_owned_byPaolo Abeni1-1/+0
2016-03-28constify security_sb_pivotroot()Al Viro1-1/+1
2016-03-28constify security_path_chroot()Al Viro1-1/+1
2016-03-28constify security_path_{link,rename}Al Viro1-3/+3
2016-03-28constify security_path_{mkdir,mknod,symlink}Al Viro1-3/+3
2016-03-28constify security_path_{unlink,rmdir}Al Viro1-2/+2
2016-03-28constify chmod_common/security_path_chmodAl Viro1-1/+1
2016-03-28constify security_sb_mount()Al Viro1-1/+1
2016-03-28constify chown_common/security_path_chownAl Viro1-1/+1
2016-03-28constify security_path_truncate()Al Viro1-1/+1
2016-02-21module: replace copy_module_from_fd with kernel versionMimi Zohar1-12/+0
2016-02-21security: define kernel_read_file hookMimi Zohar1-0/+13
2016-02-21firmware: replace call to fw_read_file_contents() with kernel versionMimi Zohar1-13/+0
2016-02-20ima: define a new hook to measure and appraise a file already in memoryMimi Zohar1-1/+6
2016-02-18vfs: define kernel_read_file_id enumerationMimi Zohar1-2/+3
2016-02-18vfs: define a generic function to read a file from the kernelMimi Zohar1-0/+8
2015-12-24security: Add hook to invalidate inode security labelsAndreas Gruenbacher1-0/+8
2015-12-24security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher1-1/+1
2015-12-24security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher1-1/+1
2015-09-08Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-8/+3
2015-09-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebi...Linus Torvalds1-1/+1
2015-08-26LSM: restore certain default error codesJan Beulich1-5/+6
2015-07-28Yama: remove needless CONFIG_SECURITY_YAMA_STACKEDKees Cook1-8/+3
2015-07-10vfs: Commit to never having exectuables on proc and sysfs.Eric W. Biederman1-1/+1
2015-06-27Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-279/+676
2015-05-12LSM: Switch to lists of hooksCasey Schaufler1-96/+474
2015-05-12LSM: Introduce security hook calling MacrosCasey Schaufler1-207/+226
2015-05-12LSM: Split security.hCasey Schaufler1-1/+1
2015-05-11security: make inode_follow_link RCU-walk awareNeilBrown1-3/+4
2015-05-10SECURITY: remove nameidata arg from inode_follow_link.NeilBrown1-2/+2
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells1-25/+25
2015-04-11Merge branch 'for-davem' into for-nextAl Viro1-5/+0
2015-04-11switch security_inode_getattr() to struct path *Al Viro1-3/+3
2015-03-20Revert "selinux: add a skb_owned_by() hook"Eric Dumazet1-5/+0
2015-02-15Merge tag 'char-misc-3.20-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-0/+23
2015-01-25Add security hooks to binder and implement the hooks for SELinux.Stephen Smalley1-0/+23
2015-01-20fs: introduce f_op->mmap_capabilities for nommu mmap supportChristoph Hellwig1-7/+6
2014-09-09security: make security_file_set_fowner, f_setown and __f_setown void returnJeff Layton1-2/+2
2014-07-25ima: add support for measuring and appraising firmwareMimi Zohar1-1/+6
2014-07-25security: introduce kernel_fw_from_file hookKees Cook1-0/+6
2014-06-24Merge commit 'v3.15' into nextJames Morris1-2/+20
2014-04-14Merge tag 'keys-20140314' of git://git.kernel.org/pub/scm/linux/kernel/git/dh...James Morris1-1/+1
2014-04-01vfs: add cross-renameMiklos Szeredi1-0/+16
2014-04-01security: add flags to rename hooksMiklos Szeredi1-2/+4
2014-03-14KEYS: Move the flags representing required permission to linux/key.hDavid Howells1-1/+1
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov1-2/+4
2013-10-22Merge branch 'master' of git://git.infradead.org/users/pcmoore/selinux into r...James Morris1-9/+4
2013-09-18Merge git://git.infradead.org/users/eparis/selinuxPaul Moore1-9/+4
2013-07-25lsm: split the xfrm_state_alloc_security() hook implementationPaul Moore1-9/+4
2013-07-25xattr: Constify ->name member of "struct xattr".Tetsuo Handa1-5/+3
2013-06-08NFS: Extend NFS xattr handlers to accept the security namespaceDavid Quigley1-0/+1
2013-06-08LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data.David Quigley1-2/+5
2013-06-08Security: Add Hook to test if the particular xattr is part of a MAC model.David Quigley1-0/+6
2013-06-08Security: Add hook to calculate context based on a negative dentry.David Quigley1-0/+10
2013-04-30Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-2/+2
2013-04-09selinux: add a skb_owned_by() hookEric Dumazet1-0/+5
2013-04-02selinux: make security_sb_clone_mnt_opts return an error on context mismatchJeff Layton1-2/+2
2013-01-14tun: fix LSM/SELinux labeling of tun/tap devicesPaul Moore1-5/+23
2012-12-14ima: support new kernel module syscallMimi Zohar1-1/+6
2012-12-14security: introduce kernel_module_from_file hookKees Cook1-0/+5
2012-10-11consitify do_mount() argumentsAl Viro1-2/+2
2012-10-02Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-0/+27
2012-09-21userns: Teach security_path_chown to take kuids and kgidsEric W. Biederman1-1/+1
2012-09-07ima: add ima_inode_setxattr/removexattr function and callsMimi Zohar1-0/+6
2012-09-05security: allow Yama to be unconditionally stackedKees Cook1-0/+21
2012-07-03security: Fix nommu build.Paul Mundt1-0/+1
2012-07-02security: Fix nommu build.Paul Mundt1-0/+1
2012-06-01take calculation of final prot in security_mmap_file() into a helperAl Viro1-18/+28
2012-06-01take security_mmap_file() outside of ->mmap_semAl Viro1-3/+30
2012-05-31split ->file_mmap() into ->mmap_addr()/->mmap_file()Al Viro1-4/+8
2012-04-09SELinux: rename dentry_open to file_openEric Paris1-2/+2
2012-02-14security: trim security.hAl Viro1-0/+2
2012-02-14mm: collapse security_vm_enough_memory() variants into a single functionAl Viro1-14/+0
2012-02-10security: create task_free security callbackKees Cook1-0/+5
2012-01-14Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-30/+5
2012-01-06switch security_path_chmod() to struct path *Al Viro1-4/+3
2012-01-05security: remove the security_netlink_recv hook as it is equivalent to capable()Eric Paris1-6/+0
2012-01-05capabilities: remove all _real_ interfacesEric Paris1-24/+0
2012-01-05capabilities: introduce security_capable_noauditEric Paris1-0/+6
2012-01-05capabilities: reverse arguments to security_capableEric Paris1-1/+1
2012-01-05capabilities: remove the task from capable LSM hook entirelyEric Paris1-4/+3
2012-01-03switch ->path_mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->path_mkdir() to umode_tAl Viro1-1/+1
2012-01-03switch security_path_chmod() to umode_tAl Viro1-1/+1
2012-01-03switch ->mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->create() to umode_tAl Viro1-1/+1
2012-01-03switch vfs_mkdir() and ->mkdir() to umode_tAl Viro1-1/+1
2012-01-03security: Fix security_old_inode_init_security() when CONFIG_SECURITY is not setJan Kara1-1/+1
2011-10-25Merge branch 'next' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-11/+65
2011-10-18bluetooth: Properly clone LSM attributes to newly created child connectionsPaul Moore1-0/+1
2011-09-14evm: fix security/security_old_init_security return codeMimi Zohar1-2/+2
2011-09-09security: sparse fix: Move security_fixup_op to security.hJames Morris1-3/+0
2011-08-09Merge branch 'next-evm' of git://git.kernel.org/pub/scm/linux/kernel/git/zoha...James Morris1-7/+64
2011-07-20->permission() sanitizing: don't pass flags to exec_permission()Al Viro1-10/+0
2011-07-20->permission() sanitizing: don't pass flags to ->inode_permission()Al Viro1-2/+5
2011-07-18evm: add evm_inode_setattr to prevent updating an invalid security.evmMimi Zohar1-1/+6
2011-07-18evm: call evm_inode_init_security from security_inode_init_securityMimi Zohar1-6/+12
2011-07-18security: imbed evm calls in security hooksMimi Zohar1-2/+14
2011-07-18integrity: move ima inode integrity data managementMimi Zohar1-1/+2
2011-07-18security: new security_inode_init_security API adds function callbackMimi Zohar1-3/+36
2011-04-22SECURITY: Move exec_permission RCU checks into security modulesAndi Kleen1-4/+2
2011-03-23userns: security: make capabilities relative to the user namespaceSerge E. Hallyn1-6/+10
2011-03-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6Linus Torvalds1-3/+4
2011-03-16Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-7/+12
2011-03-15Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-1/+1
2011-03-12net: Put flowi_* prefix on AF independent members of struct flowiDavid S. Miller1-2/+2
2011-03-08Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris1-7/+9
2011-03-08Merge branch 'master'; commit 'v2.6.38-rc7' into nextJames Morris1-3/+2
2011-03-03LSM: Pass -o remount options to the LSMEric Paris1-0/+5
2011-02-22xfrm: Mark flowi arg to security_xfrm_state_pol_flow_match() const.David S. Miller1-1/+2
2011-02-11security: add cred argument to security_capable()Chris Wright1-3/+2
2011-02-02time: Correct the *settime* parametersRichard Cochran1-1/+1
2011-02-01security: remove unused security_sysctl hookLucian Adrian Grijincu1-5/+0
2011-02-01fs/vfs/security: pass last path component to LSM on inode creationEric Paris1-2/+4
2011-01-24CacheFiles: Add calls to path-based security hooksDavid Howells1-0/+3
2011-01-07Merge branch 'vfs-scale-working' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-0/+9
2011-01-07fs: rcu-walk for path lookupNick Piggin1-0/+9
2011-01-05af_unix: Avoid socket->sk NULL OOPS in stream connect security hooks.David S. Miller1-2/+1
2010-11-15capabilities/syslog: open code cap_syslog logic to fix build failureEric Paris1-2/+2
2010-10-26Merge branch 'ima-memory-use-fixes'Linus Torvalds1-9/+1
2010-10-26IMA: only allocate iint when neededEric Paris1-9/+1
2010-10-21secmark: make secmark object handling genericEric Paris1-0/+18
2010-10-21security: remove unused parameter from security_task_setscheduler()KOSAKI Motohiro1-3/+2
2010-10-21LSM: Fix security_module_enable() error.Tetsuo Handa1-10/+2
2010-08-10Merge branch 'writable_limits' of git://decibel.fi.muni.cz/~xslaby/linuxLinus Torvalds1-2/+3
2010-08-10Merge branch 'for-linus' of git://git.infradead.org/users/eparis/notifyLinus Torvalds1-2/+14
2010-08-02LSM: Remove unused arguments from security_path_truncate().Tetsuo Handa1-3/+2
2010-07-28fsnotify: new fsnotify hooks and events types for access decisionsEric Paris1-2/+14
2010-07-16rlimits: security, add task_struct to setrlimitJiri Slaby1-2/+3
2010-05-17LSM: Add __init to fixup function.Tetsuo Handa1-2/+2
2010-04-12security: remove dead hook acctEric Paris1-5/+0
2010-04-12security: remove dead hook key_session_to_parentEric Paris1-7/+0
2010-04-12security: remove dead hook task_setgroupsEric Paris1-5/+0
2010-04-12security: remove dead hook task_setgidEric Paris1-5/+0
2010-04-12security: remove dead hook task_setuidEric Paris1-5/+0
2010-04-12security: remove dead hook cred_commitEric Paris1-5/+0
2010-04-12security: remove dead hook inode_deleteEric Paris1-7/+0
2010-04-12security: remove dead hook sb_post_pivotrootEric Paris1-5/+0
2010-04-12security: remove dead hook sb_post_addmountEric Paris1-5/+0
2010-04-12security: remove dead hook sb_post_remountEric Paris1-5/+0
2010-04-12security: remove dead hook sb_umount_busyEric Paris1-5/+0
2010-04-12security: remove dead hook sb_umount_closeEric Paris1-5/+0
2010-04-12security: remove sb_check_sb hooksEric Paris1-5/+0
2010-03-09Merge branch 'next-queue' into nextJames Morris1-1/+1
2010-03-03Security: Add __init to register_security to disable load a security module o...wzt.wzt@gmail.com1-1/+1
2010-03-01Merge branch 'next' into for-linusJames Morris1-21/+28
2010-02-24Security: add static to security_ops and default_security_ops variablewzt.wzt@gmail.com1-2/+9
2010-02-07Take ima_file_free() to proper place.Al Viro1-2/+0
2010-02-04syslog: distinguish between /proc/kmsg and syscallsKees Cook1-2/+2
2010-01-15security: correct error returns for get/set security with private inodesJames Morris1-2/+2
2009-12-08LSM: Rename security_path_ functions argument names.Tetsuo Handa1-15/+15
2009-11-10security: report the module name to security_module_requestEric Paris1-2/+2
2009-11-09Config option to set a default LSMJohn Johansen1-3/+6
2009-10-25LSM: imbed ima calls in the security hooksMimi Zohar1-3/+25
2009-10-12LSM: Add security_path_chroot().Tetsuo Handa1-0/+5
2009-10-12LSM: Add security_path_chmod() and security_path_chown().Tetsuo Handa1-0/+15
2009-09-10LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security contex...David P. Quigley1-0/+18
2009-09-02KEYS: Add a keyctl to install a process's session keyring on its parent [try #6]David Howells1-0/+17
2009-09-01lsm: Add hooks to the TUN driverPaul Moore1-0/+18
2009-08-14security: introducing security_request_moduleEric Paris1-0/+5
2009-06-25security: rename ptrace_may_access => ptrace_access_checkIngo Molnar1-2/+2
2009-06-04security: use mmap_min_addr indepedently of security modelsChristoph Lameter1-3/+0
2009-04-03CacheFiles: Export things for CacheFilesDavid Howells1-0/+2
2009-03-28lsm: Remove the socket_post_accept() hookPaul Moore1-5/+0
2009-01-07Merge branch 'next' into for-linusJames Morris1-4/+22
2009-01-07CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]David Howells1-4/+22
2009-01-07Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() ...James Morris1-21/+4
2009-01-05CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]David Howells1-4/+21
2008-12-31introduce new LSM hooks where vfsmount is available.Kentaro Takeda1-0/+66
2008-12-20security: pass mount flags to security_sb_kern_mount()James Morris1-2/+2
2008-11-25CRED: fix sparse warningsHannes Eder1-3/+3
2008-11-14CRED: Allow kernel services to override LSM settings for task actionsDavid Howells1-0/+10
2008-11-14CRED: Make execve() take advantage of copy-on-write credentialsDavid Howells1-18/+8
2008-11-14CRED: Inaugurate COW credentialsDavid Howells1-31/+27
generated by cgit 1.2.3-korg (git 2.43.0) at 2025-12-06 15:32:51 +0000