| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-10-22 | memfd,selinux: call security_inode_init_security_anon() | Thiébaud Weksteen | 1 | -0/+5 |
| 2025-09-07 | selinux: enable per-file labeling for functionfs | Neill Kapron | 1 | -0/+6 |
| 2025-08-11 | selinux: Remove unused function selinux_policycap_netif_wildcard() | Yue Haibing | 1 | -6/+0 |
| 2025-06-19 | selinux: introduce neveraudit types | Stephen Smalley | 1 | -1/+3 |
| 2025-04-11 | selinux: constify network address pointer | Christian Göttsche | 1 | -1/+1 |
| 2025-03-07 | selinux: support wildcard network interface names | Christian Göttsche | 1 | -1/+7 |
| 2025-01-21 | Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/... | Linus Torvalds | 1 | -3/+4 |
| 2025-01-07 | selinux: constify and reconcile function parameter names | Christian Göttsche | 1 | -2/+2 |
| 2025-01-04 | selinux: match extended permissions to their base permissions | Thiébaud Weksteen | 1 | -0/+3 |
| 2024-12-13 | selinux: add support for xperms in conditional policies | Christian Göttsche | 1 | -1/+2 |
| 2024-10-07 | selinux: Add netlink xperm support | Thiébaud Weksteen | 1 | -0/+6 |
| 2023-12-22 | selinux: fix style issues in security/selinux/include/security.h | Paul Moore | 1 | -80/+75 |
| 2023-11-21 | selinux: introduce an initial SID for early boot processes | Ondrej Mosnacek | 1 | -0/+6 |
| 2023-08-09 | selinux: revert SECINITSID_INIT support | Paul Moore | 1 | -6/+0 |
| 2023-08-03 | selinux: avoid implicit conversions in services code | Christian Göttsche | 1 | -2/+2 |
| 2023-07-19 | selinux: update my email address | Stephen Smalley | 1 | -1/+1 |
| 2023-07-18 | selinux: avoid implicit conversions regarding enforcing status | Christian Göttsche | 1 | -1/+1 |
| 2023-07-18 | selinux: consistently use u32 as sequence number type in the status code | Christian Göttsche | 1 | -1/+1 |
| 2023-07-10 | selinux: introduce an initial SID for early boot processes | Ondrej Mosnacek | 1 | -0/+6 |
| 2023-07-10 | selinux: cleanup the policycap accessor functions | Paul Moore | 1 | -24/+11 |
| 2023-05-30 | selinux: make labeled NFS work when mounted before policy load | Ondrej Mosnacek | 1 | -0/+1 |
| 2023-05-30 | selinux: cleanup exit_sel_fs() declaration | Xiu Jianfeng | 1 | -1/+0 |
| 2023-03-20 | selinux: remove the runtime disable functionality | Paul Moore | 1 | -21/+0 |
| 2023-03-20 | selinux: remove the 'checkreqprot' functionality | Paul Moore | 1 | -9/+2 |
| 2023-03-14 | selinux: stop passing selinux_state pointers and their offspring | Stephen Smalley | 1 | -106/+65 |
| 2022-04-14 | selinux: don't sleep when CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is true | Paul Moore | 1 | -3/+1 |
| 2022-04-04 | selinux: checkreqprot is deprecated, add some ssleep() discomfort | Paul Moore | 1 | -0/+6 |
| 2022-03-02 | selinux: shorten the policy capability enum names | Paul Moore | 1 | -9/+9 |
| 2022-02-25 | selinux: allow FIOCLEX and FIONCLEX with policy capability | Richard Haines | 1 | -0/+7 |
| 2022-01-26 | selinux: enclose macro arguments in parenthesis | Christian Göttsche | 1 | -2/+2 |
| 2022-01-25 | selinux: declare path parameters of _genfs_sid const | Christian Göttsche | 1 | -2/+2 |
| 2021-04-27 | Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/... | Linus Torvalds | 1 | -1/+1 |
| 2021-03-22 | Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/... | Linus Torvalds | 1 | -4/+11 |
| 2021-03-18 | selinux: fix variable scope issue in live sidtab conversion | Ondrej Mosnacek | 1 | -4/+11 |
| 2021-03-08 | selinux: fix misspellings using codespell tool | Xiong Zhenwu | 1 | -1/+1 |
| 2021-02-21 | Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/... | Linus Torvalds | 1 | -1/+2 |
| 2021-01-14 | selinux: include a consumer of the new IMA critical data hook | Lakshmi Ramasubramanian | 1 | -1/+2 |
| 2021-01-12 | selinux: make selinuxfs_mount static | Ondrej Mosnacek | 1 | -1/+0 |
| 2020-09-15 | selinux: Add helper functions to get and set checkreqprot | Lakshmi Ramasubramanian | 1 | -0/+10 |
| 2020-09-11 | selinux: access policycaps with READ_ONCE/WRITE_ONCE | Stephen Smalley | 1 | -7/+7 |
| 2020-08-31 | selinux: simplify away security_policydb_len() | Ondrej Mosnacek | 1 | -1/+0 |
| 2020-08-27 | selinux: move policy mutex to selinux_state, use in lockdep checks | Stephen Smalley | 1 | -0/+1 |
| 2020-08-25 | selinux: convert policy read-write lock to RCU | Stephen Smalley | 1 | -3/+2 |
| 2020-08-17 | selinux: move policy commit after updating selinuxfs | Stephen Smalley | 1 | -3/+13 |
| 2020-08-17 | scripts/selinux,selinux: update mdp to enable policy capabilities | Stephen Smalley | 1 | -15/+1 |
| 2020-04-17 | selinux: implement new format of filename transitions | Ondrej Mosnacek | 1 | -1/+2 |
| 2020-02-10 | selinux: allow kernfs symlinks to inherit parent directory context | Christian Göttsche | 1 | -0/+8 |
| 2020-02-10 | selinux: move status variables out of selinux_ss | Ondrej Mosnacek | 1 | -0/+4 |
| 2020-01-10 | selinux: treat atomic flags more carefully | Ondrej Mosnacek | 1 | -2/+31 |
| 2019-12-18 | selinux: randomize layout of key structures | Stephen Smalley | 1 | -1/+1 |
| 2019-12-18 | selinux: clean up selinux_enabled/disabled/enforcing_boot | Stephen Smalley | 1 | -1/+3 |
| 2019-12-09 | selinux: sidtab reverse lookup hash table | Jeff Vander Stoep | 1 | -0/+1 |
| 2019-10-07 | selinux: default_range glblub implementation | Joshua Brindle | 1 | -1/+2 |
| 2019-03-20 | selinux: try security xattr after genfs for kernfs filesystems | Ondrej Mosnacek | 1 | -0/+1 |
| 2019-03-12 | Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/vi... | Linus Torvalds | 1 | -5/+5 |
| 2019-02-28 | selinux: Implement the new mount API LSM hooks | David Howells | 1 | -5/+5 |
| 2019-01-25 | selinux: log invalid contexts in AVCs | Ondrej Mosnacek | 1 | -0/+3 |
| 2018-11-26 | selinux: make "selinux_policycap_names[]" const char * | Alexey Dobriyan | 1 | -1/+1 |
| 2018-03-20 | selinux: wrap AVC state | Stephen Smalley | 1 | -0/+3 |
| 2018-03-02 | selinux: rename the {is,set}_enforcing() functions | Paul Moore | 1 | -4/+4 |
| 2018-03-01 | selinux: wrap global selinux state | Stephen Smalley | 1 | -59/+169 |
| 2017-11-02 | License cleanup: add SPDX GPL-2.0 license identifier to files with no license | Greg Kroah-Hartman | 1 | -0/+1 |
| 2017-08-17 | selinux: update my email address | Stephen Smalley | 1 | -1/+1 |
| 2017-08-02 | selinux: Generalize support for NNP/nosuid SELinux domain transitions | Stephen Smalley | 1 | -0/+2 |
| 2017-05-23 | selinux: Add IB Port SMP access vector | Daniel Jurgens | 1 | -0/+2 |
| 2017-05-23 | selinux: Implement Infiniband PKey "Access" access vector | Daniel Jurgens | 1 | -0/+2 |
| 2017-05-23 | selinux: Create policydb version for Infiniband support | Daniel Jurgens | 1 | -1/+2 |
| 2017-05-23 | selinux: log policy capability state when a policy is loaded | Stephen Smalley | 1 | -0/+2 |
| 2017-03-02 | selinux: wrap cgroup seclabel support with its own policy capability | Stephen Smalley | 1 | -0/+2 |
| 2017-01-09 | selinux: support distinctions among all network address families | Stephen Smalley | 1 | -1/+2 |
| 2016-08-18 | selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX | William Roberts | 1 | -4/+0 |
| 2015-12-24 | selinux: export validatetrans decisions | Andrew Perepechko | 1 | -0/+3 |
| 2015-10-21 | selinux: introduce security_context_str_to_sid | Rasmus Villemoes | 1 | -0/+2 |
| 2015-07-13 | selinux: extended permissions for ioctls | Jeff Vander Stoep | 1 | -2/+30 |
| 2015-06-04 | selinux: enable per-file labeling for debugfs files. | Stephen Smalley | 1 | -0/+1 |
| 2014-06-18 | security: Used macros from compiler.h instead of __attribute__((...)) | Gideon Israel Dsouza | 1 | -1/+2 |
| 2014-03-10 | selinux: add gfp argument to security_xfrm_policy_alloc and fix callers | Nikolay Aleksandrov | 1 | -1/+1 |
| 2013-11-19 | SELinux: Update policy version to support constraints info | Richard Haines | 1 | -1/+2 |
| 2013-09-18 | Merge git://git.infradead.org/users/eparis/selinux | Paul Moore | 1 | -5/+8 |
| 2013-08-28 | Revert "SELinux: do not handle seclabel as a special flag" | Eric Paris | 1 | -1/+1 |
| 2013-07-25 | Add SELinux policy capability for always checking packet and peer classes. | Chris PeBenito | 1 | -0/+3 |
| 2013-07-25 | SELinux: pass a superblock to security_fs_use | Eric Paris | 1 | -2/+1 |
| 2013-07-25 | SELinux: do not handle seclabel as a special flag | Eric Paris | 1 | -1/+1 |
| 2013-07-25 | SELinux: change sbsec->behavior to short | Eric Paris | 1 | -1/+1 |
| 2013-07-25 | SELinux: renumber the superblock options | Eric Paris | 1 | -3/+4 |
| 2013-07-25 | SELinux: rename SE_SBLABELSUPP to SBLABEL_MNT | Eric Paris | 1 | -1/+1 |
| 2013-06-08 | SELinux: Add new labeling type native labels | David Quigley | 1 | -0/+2 |
| 2012-07-23 | switch dentry_open() to struct path, make it grab references itself | Al Viro | 1 | -1/+1 |
| 2012-04-09 | SELinux: add default_type statements | Eric Paris | 1 | -1/+2 |
| 2012-04-09 | SELinux: allow default source/target selectors for user/role/range | Eric Paris | 1 | -1/+2 |
| 2011-09-09 | selinux: sparse fix: fix warnings in netlink code | James Morris | 1 | -0/+3 |
| 2011-09-09 | selinux: sparse fix: eliminate warnings for selinuxfs | James Morris | 1 | -0/+3 |
| 2011-09-09 | selinux: sparse fix: declare selinux_disable() in security.h | James Morris | 1 | -0/+1 |
| 2011-09-09 | selinux: sparse fix: move selinux_complete_init | James Morris | 1 | -0/+1 |
| 2011-04-25 | SELinux: security_read_policy should take a size_t not ssize_t | Eric Paris | 1 | -1/+1 |
| 2011-04-01 | selinux: add type_transition with name extension support for selinuxfs | Kohei Kaigai | 1 | -2/+2 |
| 2011-03-28 | SELinux: Add class support to the role_trans structure | Harry Ciao | 1 | -1/+2 |
| 2011-02-01 | SELinux: Use dentry name in new object labeling | Eric Paris | 1 | -3/+5 |
| 2010-10-21 | SELinux: allow userspace to read policy back out of the kernel | Eric Paris | 1 | -0/+2 |
| 2010-10-21 | secmark: make secmark object handling generic | Eric Paris | 1 | -0/+1 |
| 2010-10-21 | selinux: fix up style problem on /selinux/status | KaiGai Kohei | 1 | -2/+1 |
| 2010-10-21 | selinux: fast status update interface (/selinux/status) | KaiGai Kohei | 1 | -0/+21 |
| 2010-02-04 | selinux: allow MLS->non-MLS and vice versa upon policy reload | Guido Trentalancia | 1 | -1/+2 |
| 2010-01-18 | selinux: change the handling of unknown classes | Stephen Smalley | 1 | -6/+4 |
| 2009-10-07 | selinux: dynamic class/perm discovery | Stephen Smalley | 1 | -3/+10 |
| 2009-05-19 | SELinux: move SELINUX_MAGIC into magic.h | Eric Paris | 1 | -2/+1 |
| 2009-04-02 | Permissive domain in userspace object manager | KaiGai Kohei | 1 | -1/+3 |
| 2009-02-14 | SELinux: remove unused av.decided field | Eric Paris | 1 | -1/+0 |
| 2009-01-19 | SELinux: Add new security mount option to indicate security label support. | David P. Quigley | 1 | -0/+2 |
| 2009-01-19 | SELinux: Condense super block security structure flags and cleanup necessary ... | David P. Quigley | 1 | -0/+6 |
| 2008-08-29 | SELinux: add boundary support and thread context assignment | KaiGai Kohei | 1 | -1/+14 |
| 2008-07-15 | Revert "SELinux: allow fstype unknown to policy to use xattrs if present" | James Morris | 1 | -1/+1 |
| 2008-07-14 | SELinux: allow fstype unknown to policy to use xattrs if present | Eric Paris | 1 | -1/+1 |
| 2008-07-14 | selinux: support deferred mapping of contexts | Stephen Smalley | 1 | -0/+5 |
| 2008-04-29 | Security: Make secctx_to_secid() take const secdata | David Howells | 1 | -1/+1 |
| 2008-04-29 | xattr: add missing consts to function arguments | David Howells | 1 | -1/+1 |
| 2008-04-28 | SELinux: selinux/include/security.h whitespace, syntax, and other cleanups | Eric Paris | 1 | -2/+2 |
| 2008-04-18 | SELinux: Add network port SID cache | Paul Moore | 1 | -2/+1 |
| 2008-04-18 | SELinux: turn mount options strings into defines | Eric Paris | 1 | -0/+5 |
| 2008-04-18 | selinux: introduce permissive types | Eric Paris | 1 | -1/+4 |
| 2008-04-18 | SELinux: create new open permission | Eric Paris | 1 | -0/+2 |
| 2008-04-08 | SELinux: more GFP_NOFS fixups to prevent selinux from re-entering the fs code | Stephen Smalley | 1 | -1/+2 |
| 2008-03-06 | LSM/SELinux: Interfaces to allow FS to control mount options | Eric Paris | 1 | -0/+5 |
| 2008-02-06 | SELinux: Remove security_get_policycaps() | Paul Moore | 1 | -1/+0 |
| 2008-01-30 | SELinux: Allow NetLabel to directly cache SIDs | Paul Moore | 1 | -2/+0 |
| 2008-01-30 | SELinux: Better integration between peer labeling subsystems | Paul Moore | 1 | -0/+4 |
| 2008-01-30 | SELinux: Add a capabilities bitmap to SELinux policy version 22 | Paul Moore | 1 | -1/+14 |
| 2008-01-30 | SELinux: Convert the netif code to use ifindex values | Paul Moore | 1 | -2/+1 |
| 2007-10-17 | SELinux: policy selectable handling of unknown classes and perms | Eric Paris | 1 | -0/+2 |
| 2007-07-11 | selinux: add selinuxfs structure for object class discovery | Christopher J. PeBenito | 1 | -0/+1 |
| 2007-07-11 | selinux: add support for querying object classes and permissions from the run... | Christopher J. PeBenito | 1 | -0/+3 |
| 2007-04-26 | selinux: export initial SID contexts via selinuxfs | James Carter | 1 | -0/+2 |
| 2007-04-26 | SELinux: move security_skb_extlbl_sid() out of the security server | Paul Moore | 1 | -3/+0 |
| 2007-04-26 | SELinux: extract the NetLabel SELinux support from the security server | Paul Moore | 1 | -0/+24 |
| 2006-12-02 | Compile fix for "peer secid consolidation for external network labeling" | James Morris | 1 | -1/+2 |
| 2006-12-02 | SELinux: peer secid consolidation for external network labeling | Paul Moore | 1 | -0/+3 |
| 2006-09-26 | [PATCH] selinux: add support for range transitions on object classes | Darrel Goeddel | 1 | -1/+2 |
| 2006-09-26 | [PATCH] selinux: enable configuration of max policy version | Stephen Smalley | 1 | -1/+5 |
| 2006-09-22 | [MLSXFRM]: Define new SELinux service routine | Venkat Yekkirala | 1 | -0/+2 |
| 2006-05-03 | [PATCH] selinux: Clear selinux_enabled flag upon runtime disable. | Stephen Smalley | 1 | -5/+0 |
| 2005-09-05 | [PATCH] selinux: Reduce memory use by avtab | Stephen Smalley | 1 | -1/+2 |
| 2005-07-28 | [PATCH] SELinux: default labeling of MLS field | James Morris | 1 | -0/+2 |
| 2005-04-16 | Linux-2.6.12-rc2v2.6.12-rc2 | Linus Torvalds | 1 | -0/+97 |