Chris PeBenito
|
2be4d74f2f
Add SELinux policy capability for always checking packet and peer classes.
|
12 years ago |
Eric Paris
|
b43e725d8d
SELinux: use a helper function to determine seclabel
|
12 years ago |
Eric Paris
|
a64c54cf08
SELinux: pass a superblock to security_fs_use
|
13 years ago |
Eric Paris
|
308ab70c46
SELinux: do not handle seclabel as a special flag
|
13 years ago |
Eric Paris
|
eadcabc697
SELinux: do all flags twiddling in one place
|
13 years ago |
Eric Paris
|
12f348b9dc
SELinux: rename SE_SBLABELSUPP to SBLABEL_MNT
|
12 years ago |
Eric Paris
|
af8e50cc7d
SELinux: use define for number of bits in the mnt flags mask
|
13 years ago |
Eric Paris
|
d355987f47
SELinux: make it harder to get the number of mnt opts wrong
|
13 years ago |
Eric Paris
|
40d3d0b85f
SELinux: remove crazy contortions around proc
|
13 years ago |
Stephen Smalley
|
5c73fceb8c
SELinux: Enable setting security contexts on rootfs inodes.
|
12 years ago |
Paul Moore
|
bed4d7efb3
selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()
|
12 years ago |
Paul Moore
|
2e5aa86609
lsm: split the xfrm_state_alloc_security() hook implementation
|
12 years ago |
Linus Torvalds
|
73287a43cc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
|
12 years ago |
Linus Torvalds
|
2e1deaad1e
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
|
12 years ago |
David S. Miller
|
6e0895c2ea
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
|
12 years ago |
Eric Dumazet
|
ca10b9e9a8
selinux: add a skb_owned_by() hook
|
12 years ago |
Jeff Layton
|
094f7b69ea
selinux: make security_sb_clone_mnt_opts return an error on context mismatch
|
12 years ago |
Hong zhi guo
|
77954983ad
selinux: replace obsolete NLMSG_* with type safe nlmsg_*
|
12 years ago |
Al Viro
|
45e09bd51b
selinux: opened file can't have NULL or negative ->f_path.dentry
|
12 years ago |
Linus Torvalds
|
d895cb1af1
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
|
12 years ago |
Al Viro
|
496ad9aa8e
new helper: file_inode(file)
|
12 years ago |
Paul Moore
|
5dbbaf2de8
tun: fix LSM/SELinux labeling of tun/tap devices
|
12 years ago |
Al Viro
|
45525b26a4
fix a leak in replace_fd() users
|
12 years ago |
Al Viro
|
808d4e3cfd
consitify do_mount() arguments
|
12 years ago |
Al Viro
|
cb0942b812
make get_file() return its argument
|
13 years ago |
Al Viro
|
c3c073f808
new helper: iterate_fd()
|
13 years ago |
Al Viro
|
ee97cd872d
switch flush_unauthorized_files() to replace_fd()
|
13 years ago |
Linus Torvalds
|
27c1ee3f92
Merge branch 'akpm' (Andrew's patch-bomb)
|
13 years ago |
Cyrill Gorcunov
|
1d151c337d
c/r: fcntl: add F_GETOWNER_UIDS option
|
13 years ago |
Al Viro
|
e3fea3f70f
selinux: fix selinux_inode_setxattr oops
|
13 years ago |