summaryrefslogtreecommitdiff
path: root/security/selinux/hooks.c (unfollow)
Commit message (Expand)Author
2024-10-17Merge remote-tracking branch 'msm8998/lineage-20' into lineage-20Raghuram Subramani
2024-01-02lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore
2022-10-28selinux: always allow mounting submountsOndrej Mosnacek
2022-04-19UPSTREAM: security: selinux: allow per-file labeling for bpffsConnor O'Brien
2022-04-19selinux: distinguish non-init user namespace capability checksStephen Smalley
2022-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore
2022-04-19selinux: delay inode label lookup as long as possiblePaul Moore
2022-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore
2022-04-19selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore
2022-04-19selinux: Inode label revalidation performance fixAndreas Gruenbacher
2022-04-19selinux: Revalidate invalid inode security labelsAndreas Gruenbacher
2022-04-19security: Add hook to invalidate inode security labelsAndreas Gruenbacher
2022-04-19selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher
2022-04-19security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher
2022-04-19security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher
2022-04-19selinux: Remove unused variable in selinux_inode_init_securityAndreas Gruenbacher
2022-04-19UPSTREAM: selinux: bpf: Add addtional check for bpf object file receiveChenbo Feng
2022-04-19UPSTREAM: selinux: bpf: Add selinux check for eBPF syscall operationsChenbo Feng
2022-01-05selinux: initialize proto variable in selinux_ip_postroute_compat()Tom Rix
2021-11-26binder: use cred instead of task for selinux checksTodd Kjos
2021-11-22BACKPORT: binder: use cred instead of task for selinux checksTodd Kjos
2020-05-05selinux: properly handle multiple messages in selinux_netlink_send()Paul Moore
2019-05-16selinux: never allow relabeling on context mountsOndrej Mosnacek
2018-04-13selinux: do not check open permission on socketsStephen Smalley
2018-04-08selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke
2018-03-22selinux: check for address length in selinux_socket_bind()Alexander Potapenko
2018-02-03selinux: general protection fault in sock_has_permMark Salyzyn
2017-10-24security: Extend SELinux to support CAN socketsAlex Yakavenka
2017-06-30UPSTREAM: selinux: enable genfscon labeling for tracefsJeff Vander Stoep
2017-02-14selinux: fix off-by-one in setprocattrStephen Smalley
2017-01-09security: switched to stackable model for PFT/PFK moduleAndrey Markovytch
2016-09-15ext4 crypto: enable HW based encryption with ICEAndrey Markovytch
2016-08-15quick selinux support for tracefsYongqin Liu
2016-05-19quick selinux support for tracefsYongqin Liu
2016-05-19Revert "SELinux: Enable setting security contexts on rootfs inodes."Amit Pundir
2016-05-19Revert "SELinux: build fix for 4.1"Amit Pundir
2016-05-19BACKPORT: selinux: restrict kernel module loadingJeff Vander Stoep
2016-04-28quick selinux support for tracefsYongqin Liu
2016-04-26Revert "SELinux: Enable setting security contexts on rootfs inodes."Amit Pundir
2016-04-26Revert "SELinux: build fix for 4.1"Amit Pundir
2016-04-07BACKPORT: selinux: restrict kernel module loadingJeff Vander Stoep
2016-03-23PFK: new module to work with ecryptfsAndrey Markovytch
2016-03-23platform: msm: add Per-File-Tagger (PFT) driverAndrey Markovytch
2016-02-16SELinux: build fix for 4.1Amit Pundir
2016-02-16SELinux: Enable setting security contexts on rootfs inodes.Stephen Smalley
2015-11-08net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid()Eric Dumazet
2015-11-05selinux: fix random read in selinux_ip_postroute_compat()Eric Dumazet
2015-10-21selinux: Use a kmem_cache for allocation struct file_security_structSangwoo
2015-10-21selinux: ioctl_has_perm should be staticGeliang Tang
2015-10-21selinux: remove pointless cast in selinux_inode_setsecurity()Rasmus Villemoes