aboutsummaryrefslogtreecommitdiffstats
path: root/security/selinux/include/security.h
AgeCommit message (Expand)AuthorFilesLines
2025-10-22memfd,selinux: call security_inode_init_security_anon()Thiébaud Weksteen1-0/+5
2025-09-07selinux: enable per-file labeling for functionfsNeill Kapron1-0/+6
2025-08-11selinux: Remove unused function selinux_policycap_netif_wildcard()Yue Haibing1-6/+0
2025-06-19selinux: introduce neveraudit typesStephen Smalley1-1/+3
2025-04-11selinux: constify network address pointerChristian Göttsche1-1/+1
2025-03-07selinux: support wildcard network interface namesChristian Göttsche1-1/+7
2025-01-21Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-3/+4
2025-01-07selinux: constify and reconcile function parameter namesChristian Göttsche1-2/+2
2025-01-04selinux: match extended permissions to their base permissionsThiébaud Weksteen1-0/+3
2024-12-13selinux: add support for xperms in conditional policiesChristian Göttsche1-1/+2
2024-10-07selinux: Add netlink xperm supportThiébaud Weksteen1-0/+6
2023-12-22selinux: fix style issues in security/selinux/include/security.hPaul Moore1-80/+75
2023-11-21selinux: introduce an initial SID for early boot processesOndrej Mosnacek1-0/+6
2023-08-09selinux: revert SECINITSID_INIT supportPaul Moore1-6/+0
2023-08-03selinux: avoid implicit conversions in services codeChristian Göttsche1-2/+2
2023-07-19selinux: update my email addressStephen Smalley1-1/+1
2023-07-18selinux: avoid implicit conversions regarding enforcing statusChristian Göttsche1-1/+1
2023-07-18selinux: consistently use u32 as sequence number type in the status codeChristian Göttsche1-1/+1
2023-07-10selinux: introduce an initial SID for early boot processesOndrej Mosnacek1-0/+6
2023-07-10selinux: cleanup the policycap accessor functionsPaul Moore1-24/+11
2023-05-30selinux: make labeled NFS work when mounted before policy loadOndrej Mosnacek1-0/+1
2023-05-30selinux: cleanup exit_sel_fs() declarationXiu Jianfeng1-1/+0
2023-03-20selinux: remove the runtime disable functionalityPaul Moore1-21/+0
2023-03-20selinux: remove the 'checkreqprot' functionalityPaul Moore1-9/+2
2023-03-14selinux: stop passing selinux_state pointers and their offspringStephen Smalley1-106/+65
2022-04-14selinux: don't sleep when CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is truePaul Moore1-3/+1
2022-04-04selinux: checkreqprot is deprecated, add some ssleep() discomfortPaul Moore1-0/+6
2022-03-02selinux: shorten the policy capability enum namesPaul Moore1-9/+9
2022-02-25selinux: allow FIOCLEX and FIONCLEX with policy capabilityRichard Haines1-0/+7
2022-01-26selinux: enclose macro arguments in parenthesisChristian Göttsche1-2/+2
2022-01-25selinux: declare path parameters of _genfs_sid constChristian Göttsche1-2/+2
2021-04-27Merge tag 'selinux-pr-20210426' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+1
2021-03-22Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-4/+11
2021-03-18selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek1-4/+11
2021-03-08selinux: fix misspellings using codespell toolXiong Zhenwu1-1/+1
2021-02-21Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+2
2021-01-14selinux: include a consumer of the new IMA critical data hookLakshmi Ramasubramanian1-1/+2
2021-01-12selinux: make selinuxfs_mount staticOndrej Mosnacek1-1/+0
2020-09-15selinux: Add helper functions to get and set checkreqprotLakshmi Ramasubramanian1-0/+10
2020-09-11selinux: access policycaps with READ_ONCE/WRITE_ONCEStephen Smalley1-7/+7
2020-08-31selinux: simplify away security_policydb_len()Ondrej Mosnacek1-1/+0
2020-08-27selinux: move policy mutex to selinux_state, use in lockdep checksStephen Smalley1-0/+1
2020-08-25selinux: convert policy read-write lock to RCUStephen Smalley1-3/+2
2020-08-17selinux: move policy commit after updating selinuxfsStephen Smalley1-3/+13
2020-08-17scripts/selinux,selinux: update mdp to enable policy capabilitiesStephen Smalley1-15/+1
2020-04-17selinux: implement new format of filename transitionsOndrej Mosnacek1-1/+2
2020-02-10selinux: allow kernfs symlinks to inherit parent directory contextChristian Göttsche1-0/+8
2020-02-10selinux: move status variables out of selinux_ssOndrej Mosnacek1-0/+4
2020-01-10selinux: treat atomic flags more carefullyOndrej Mosnacek1-2/+31
2019-12-18selinux: randomize layout of key structuresStephen Smalley1-1/+1
2019-12-18selinux: clean up selinux_enabled/disabled/enforcing_bootStephen Smalley1-1/+3
2019-12-09selinux: sidtab reverse lookup hash tableJeff Vander Stoep1-0/+1
2019-10-07selinux: default_range glblub implementationJoshua Brindle1-1/+2
2019-03-20selinux: try security xattr after genfs for kernfs filesystemsOndrej Mosnacek1-0/+1
2019-03-12Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds1-5/+5
2019-02-28selinux: Implement the new mount API LSM hooksDavid Howells1-5/+5
2019-01-25selinux: log invalid contexts in AVCsOndrej Mosnacek1-0/+3
2018-11-26selinux: make "selinux_policycap_names[]" const char *Alexey Dobriyan1-1/+1
2018-03-20selinux: wrap AVC stateStephen Smalley1-0/+3
2018-03-02selinux: rename the {is,set}_enforcing() functionsPaul Moore1-4/+4
2018-03-01selinux: wrap global selinux stateStephen Smalley1-59/+169
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-08-17selinux: update my email addressStephen Smalley1-1/+1
2017-08-02selinux: Generalize support for NNP/nosuid SELinux domain transitionsStephen Smalley1-0/+2
2017-05-23selinux: Add IB Port SMP access vectorDaniel Jurgens1-0/+2
2017-05-23selinux: Implement Infiniband PKey "Access" access vectorDaniel Jurgens1-0/+2
2017-05-23selinux: Create policydb version for Infiniband supportDaniel Jurgens1-1/+2
2017-05-23selinux: log policy capability state when a policy is loadedStephen Smalley1-0/+2
2017-03-02selinux: wrap cgroup seclabel support with its own policy capabilityStephen Smalley1-0/+2
2017-01-09selinux: support distinctions among all network address familiesStephen Smalley1-1/+2
2016-08-18selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAXWilliam Roberts1-4/+0
2015-12-24selinux: export validatetrans decisionsAndrew Perepechko1-0/+3
2015-10-21selinux: introduce security_context_str_to_sidRasmus Villemoes1-0/+2
2015-07-13selinux: extended permissions for ioctlsJeff Vander Stoep1-2/+30
2015-06-04selinux: enable per-file labeling for debugfs files.Stephen Smalley1-0/+1
2014-06-18security: Used macros from compiler.h instead of __attribute__((...))Gideon Israel Dsouza1-1/+2
2014-03-10selinux: add gfp argument to security_xfrm_policy_alloc and fix callersNikolay Aleksandrov1-1/+1
2013-11-19SELinux: Update policy version to support constraints infoRichard Haines1-1/+2
2013-09-18Merge git://git.infradead.org/users/eparis/selinuxPaul Moore1-5/+8
2013-08-28Revert "SELinux: do not handle seclabel as a special flag"Eric Paris1-1/+1
2013-07-25Add SELinux policy capability for always checking packet and peer classes.Chris PeBenito1-0/+3
2013-07-25SELinux: pass a superblock to security_fs_useEric Paris1-2/+1
2013-07-25SELinux: do not handle seclabel as a special flagEric Paris1-1/+1
2013-07-25SELinux: change sbsec->behavior to shortEric Paris1-1/+1
2013-07-25SELinux: renumber the superblock optionsEric Paris1-3/+4
2013-07-25SELinux: rename SE_SBLABELSUPP to SBLABEL_MNTEric Paris1-1/+1
2013-06-08SELinux: Add new labeling type native labelsDavid Quigley1-0/+2
2012-07-23switch dentry_open() to struct path, make it grab references itselfAl Viro1-1/+1
2012-04-09SELinux: add default_type statementsEric Paris1-1/+2
2012-04-09SELinux: allow default source/target selectors for user/role/rangeEric Paris1-1/+2
2011-09-09selinux: sparse fix: fix warnings in netlink codeJames Morris1-0/+3
2011-09-09selinux: sparse fix: eliminate warnings for selinuxfsJames Morris1-0/+3
2011-09-09selinux: sparse fix: declare selinux_disable() in security.hJames Morris1-0/+1
2011-09-09selinux: sparse fix: move selinux_complete_initJames Morris1-0/+1
2011-04-25SELinux: security_read_policy should take a size_t not ssize_tEric Paris1-1/+1
2011-04-01selinux: add type_transition with name extension support for selinuxfsKohei Kaigai1-2/+2
2011-03-28SELinux: Add class support to the role_trans structureHarry Ciao1-1/+2
2011-02-01SELinux: Use dentry name in new object labelingEric Paris1-3/+5
2010-10-21SELinux: allow userspace to read policy back out of the kernelEric Paris1-0/+2
2010-10-21secmark: make secmark object handling genericEric Paris1-0/+1
2010-10-21selinux: fix up style problem on /selinux/statusKaiGai Kohei1-2/+1
2010-10-21selinux: fast status update interface (/selinux/status)KaiGai Kohei1-0/+21
2010-02-04selinux: allow MLS->non-MLS and vice versa upon policy reloadGuido Trentalancia1-1/+2
2010-01-18selinux: change the handling of unknown classesStephen Smalley1-6/+4
2009-10-07selinux: dynamic class/perm discoveryStephen Smalley1-3/+10
2009-05-19SELinux: move SELINUX_MAGIC into magic.hEric Paris1-2/+1
2009-04-02Permissive domain in userspace object managerKaiGai Kohei1-1/+3
2009-02-14SELinux: remove unused av.decided fieldEric Paris1-1/+0
2009-01-19SELinux: Add new security mount option to indicate security label support.David P. Quigley1-0/+2
2009-01-19SELinux: Condense super block security structure flags and cleanup necessary ...David P. Quigley1-0/+6
2008-08-29SELinux: add boundary support and thread context assignmentKaiGai Kohei1-1/+14
2008-07-15Revert "SELinux: allow fstype unknown to policy to use xattrs if present"James Morris1-1/+1
2008-07-14SELinux: allow fstype unknown to policy to use xattrs if presentEric Paris1-1/+1
2008-07-14selinux: support deferred mapping of contextsStephen Smalley1-0/+5
2008-04-29Security: Make secctx_to_secid() take const secdataDavid Howells1-1/+1
2008-04-29xattr: add missing consts to function argumentsDavid Howells1-1/+1
2008-04-28SELinux: selinux/include/security.h whitespace, syntax, and other cleanupsEric Paris1-2/+2
2008-04-18SELinux: Add network port SID cachePaul Moore1-2/+1
2008-04-18SELinux: turn mount options strings into definesEric Paris1-0/+5
2008-04-18selinux: introduce permissive typesEric Paris1-1/+4
2008-04-18SELinux: create new open permissionEric Paris1-0/+2
2008-04-08SELinux: more GFP_NOFS fixups to prevent selinux from re-entering the fs codeStephen Smalley1-1/+2
2008-03-06LSM/SELinux: Interfaces to allow FS to control mount optionsEric Paris1-0/+5
2008-02-06SELinux: Remove security_get_policycaps()Paul Moore1-1/+0
2008-01-30SELinux: Allow NetLabel to directly cache SIDsPaul Moore1-2/+0
2008-01-30SELinux: Better integration between peer labeling subsystemsPaul Moore1-0/+4
2008-01-30SELinux: Add a capabilities bitmap to SELinux policy version 22Paul Moore1-1/+14
2008-01-30SELinux: Convert the netif code to use ifindex valuesPaul Moore1-2/+1
2007-10-17SELinux: policy selectable handling of unknown classes and permsEric Paris1-0/+2
2007-07-11selinux: add selinuxfs structure for object class discoveryChristopher J. PeBenito1-0/+1
2007-07-11selinux: add support for querying object classes and permissions from the run...Christopher J. PeBenito1-0/+3
2007-04-26selinux: export initial SID contexts via selinuxfsJames Carter1-0/+2
2007-04-26SELinux: move security_skb_extlbl_sid() out of the security serverPaul Moore1-3/+0
2007-04-26SELinux: extract the NetLabel SELinux support from the security serverPaul Moore1-0/+24
2006-12-02Compile fix for "peer secid consolidation for external network labeling"James Morris1-1/+2
2006-12-02SELinux: peer secid consolidation for external network labelingPaul Moore1-0/+3
2006-09-26[PATCH] selinux: add support for range transitions on object classesDarrel Goeddel1-1/+2
2006-09-26[PATCH] selinux: enable configuration of max policy versionStephen Smalley1-1/+5
2006-09-22[MLSXFRM]: Define new SELinux service routineVenkat Yekkirala1-0/+2
2006-05-03[PATCH] selinux: Clear selinux_enabled flag upon runtime disable.Stephen Smalley1-5/+0
2005-09-05[PATCH] selinux: Reduce memory use by avtabStephen Smalley1-1/+2
2005-07-28[PATCH] SELinux: default labeling of MLS fieldJames Morris1-0/+2
2005-04-16Linux-2.6.12-rc2v2.6.12-rc2Linus Torvalds1-0/+97