 Paul Moore
|
c0828e5048
selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
|
11 years ago |
|
Paul Moore
|
817eff718d
selinux: look for IPsec labels on both inbound and outbound packets
|
11 years ago |
|
Paul Moore
|
446b802437
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
|
11 years ago |
|
Paul Moore
|
4718006827
selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
|
11 years ago |
|
Paul Moore
|
dd0a11815a
Merge tag 'v3.12'
|
11 years ago |
 Linus Torvalds
|
ab35406264
selinux: remove 'flags' parameter from avc_audit()
|
12 years ago |
|
Linus Torvalds
|
19e49834d2
selinux: remove 'flags' parameter from inode_has_perm
|
12 years ago |
|
Paul Moore
|
98f700f317
Merge git://git.infradead.org/users/eparis/selinux
|
12 years ago |
 Eric Paris
|
0b4bdb3573
Revert "SELinux: do not handle seclabel as a special flag"
|
12 years ago |
 Anand Avati
|
102aefdda4
selinux: consider filesystem subtype in policies
|
12 years ago |
 Chris PeBenito
|
2be4d74f2f
Add SELinux policy capability for always checking packet and peer classes.
|
12 years ago |
|
Eric Paris
|
b43e725d8d
SELinux: use a helper function to determine seclabel
|
13 years ago |
|
Eric Paris
|
a64c54cf08
SELinux: pass a superblock to security_fs_use
|
13 years ago |
|
Eric Paris
|
308ab70c46
SELinux: do not handle seclabel as a special flag
|
13 years ago |
|
Eric Paris
|
eadcabc697
SELinux: do all flags twiddling in one place
|
13 years ago |
|
Eric Paris
|
12f348b9dc
SELinux: rename SE_SBLABELSUPP to SBLABEL_MNT
|
13 years ago |
|
Eric Paris
|
af8e50cc7d
SELinux: use define for number of bits in the mnt flags mask
|
13 years ago |
|
Eric Paris
|
d355987f47
SELinux: make it harder to get the number of mnt opts wrong
|
13 years ago |
|
Eric Paris
|
40d3d0b85f
SELinux: remove crazy contortions around proc
|
13 years ago |
 Stephen Smalley
|
5c73fceb8c
SELinux: Enable setting security contexts on rootfs inodes.
|
12 years ago |
|
Paul Moore
|
bed4d7efb3
selinux: remove the BUG_ON() from selinux_skb_xfrm_sid()
|
12 years ago |
|
Paul Moore
|
2e5aa86609
lsm: split the xfrm_state_alloc_security() hook implementation
|
12 years ago |
 Tetsuo Handa
|
9548906b2b
xattr: Constify ->name member of "struct xattr".
|
12 years ago |
|
Linus Torvalds
|
be0c5d8c0b
Merge tag 'nfs-for-3.11-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs
|
12 years ago |
 David Howells
|
13f8e9810b
SELinux: Institute file_path_has_perm()
|
12 years ago |
 David Quigley
|
aa9c266962
NFS: Client implementation of Labeled-NFS
|
12 years ago |
|
David Quigley
|
eb9ae68650
SELinux: Add new labeling type native labels
|
12 years ago |
|
David Quigley
|
649f6e7718
LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data.
|
12 years ago |
|
David Quigley
|
746df9b59c
Security: Add Hook to test if the particular xattr is part of a MAC model.
|
12 years ago |
|
David Quigley
|
d47be3dfec
Security: Add hook to calculate context based on a negative dentry.
|
12 years ago |
