1. 6b6bc62 selinux: wrap AVC state by Stephen Smalley · 7 years ago
  2. 68741a8a selinux: Fix ltp test connect-syscall failure by Richard Haines · 7 years ago
  3. e5a5ca9 selinux: rename the {is,set}_enforcing() functions by Paul Moore · 7 years ago
  4. aa8e712 selinux: wrap global selinux state by Stephen Smalley · 7 years ago
  5. d452930 selinux: Add SCTP support by Richard Haines · 7 years ago
  6. 8c38fb5 Merge tag 'selinux-pr-20171113' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
  7. f66e448 selinux: bpf: Add addtional check for bpf object file receive by Chenbo Feng · 7 years ago
  8. ec27c35 selinux: bpf: Add selinux check for eBPF syscall operations by Chenbo Feng · 7 years ago
  9. add2437 selinux: remove redundant assignment to str by Colin Ian King · 7 years ago
  10. 4298555 selinux: fix build warning by Corentin LABBE · 7 years ago
  11. c0d4f46 selinux: fix build warning by removing the unused sid variable by Corentin LABBE · 7 years ago
  12. 6b24030 selinux: Perform both commoncap and selinux xattr checks by Eric W. Biederman · 7 years ago
  13. 7f85565 Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
  14. 828f425 Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 7 years ago
  15. 0c3014f selinux: constify nf_hook_ops by Arvind Yadav · 7 years ago
  16. 901ef84 selinux: allow per-file labeling for cgroupfs by Antonio Murdaca · 8 years ago
  17. 7efbb60 selinux: update my email address by Stephen Smalley · 8 years ago
  18. af63f41 selinux: Generalize support for NNP/nosuid SELinux domain transitions by Stephen Smalley · 8 years ago
  19. 62874c3 selinux: Refactor to remove bprm_secureexec hook by Kees Cook · 8 years ago
  20. ddb4a14 exec: Rename bprm->cred_prepared to called_set_creds by Kees Cook · 8 years ago
  21. 591bb27 netfilter: nf_hook_ops structs can be const by Florian Westphal · 8 years ago
  22. 2a764b5 selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets by Luis Ressel · 8 years ago
  23. e24dd9e Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  24. 6a39118 selinux: enable genfscon labeling for tracefs by Jeff Vander Stoep · 8 years ago
  25. 023f108 selinux: fix double free in selinux_parse_opts_str() by Paul Moore · 8 years ago
  26. 0b4d345 security/selinux: allow security_sb_clone_mnt_opts to enable/disable native labeling behavior by Scott Mayhew · 8 years ago
  27. 8e71bf7 selinux: use pernet operations for hook registration by Florian Westphal · 8 years ago
  28. 409dcf3 selinux: Add a cache for quicker retreival of PKey SIDs by Daniel Jurgens · 8 years ago
  29. ab861df selinux: Add IB Port SMP access vector by Daniel Jurgens · 8 years ago
  30. cfc4d88 selinux: Implement Infiniband PKey "Access" access vector by Daniel Jurgens · 8 years ago
  31. 3a976fa selinux: Allocate and free infiniband security hooks by Daniel Jurgens · 8 years ago
  32. 8f408ab selinux lsm IB/core: Implement LSM notification system by Daniel Jurgens · 8 years ago
  33. 270e857 selinux: Remove redundant check for unknown labeling behavior by Matthias Kaehlcke · 8 years ago
  34. ccb5447 selinux: do not check open permission on sockets by Stephen Smalley · 8 years ago
  35. 3ba4bf5 selinux: add a map permission check for mmap by Stephen Smalley · 8 years ago
  36. db59000 selinux: only invoke capabilities and selinux for CAP_MAC_ADMIN checks by Stephen Smalley · 8 years ago
  37. a79be23 selinux: Use task_alloc hook rather than task_create hook by Tetsuo Handa · 8 years ago
  38. e2f586b selinux: check for address length in selinux_socket_bind() by Alexander Potapenko · 8 years ago
  39. ca97d93 security: mark LSM hooks as __ro_after_init by James Morris · 8 years ago
  40. 84e6885 selinux: fix kernel BUG on prlimit(..., NULL, NULL) by Stephen Smalley · 8 years ago
  41. 791ec49 prlimit,security,selinux: add a security hook for prlimit by Stephen Smalley · 8 years ago
  42. 1827adb Merge branch 'WIP.sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 8 years ago
  43. 2993002 sched/headers: Prepare for new header dependencies before moving code to <linux/sched/task.h> by Ingo Molnar · 8 years ago
  44. 3f07c01 sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h> by Ingo Molnar · 8 years ago
  45. 2651225b selinux: wrap cgroup seclabel support with its own policy capability by Stephen Smalley · 8 years ago
  46. f1ef09f Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
  47. 3051bf3 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 8 years ago
  48. 35eeacf Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
  49. a2a1547 Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  50. 0c461cb selinux: fix off-by-one in setprocattr by Stephen Smalley · 8 years ago
  51. e2241be Merge branch 'stable-4.10' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  52. 1ea0ce4 selinux: allow changing labels for cgroupfs by Antonio Murdaca · 8 years ago
  53. a050a57 selinux: fix off-by-one in setprocattr by Stephen Smalley · 8 years ago
  54. 4548b68 Introduce a sysctl that modifies the value of PROT_SOCK. by Krister Johansen · 8 years ago
  55. 9227dd2 exec: Remove LSM_UNSAFE_PTRACE_CAP by Eric W. Biederman · 8 years ago
  56. d69dece5 LSM: Add /sys/kernel/security/lsm by Casey Schaufler · 8 years ago
  57. 3a2f5a5 security,selinux,smack: kill security_task_wait hook by Stephen Smalley · 8 years ago
  58. b4ba35c selinux: drop unused socket security classes by Stephen Smalley · 8 years ago
  59. b21507e proc,security: move restriction on writing /proc/pid/attr nodes to proc by Stephen Smalley · 8 years ago
  60. be0554c selinux: clean up cred usage and simplify by Stephen Smalley · 8 years ago
  61. 01593d3 selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces by Stephen Smalley · 8 years ago
  62. ef37979 selinux: handle ICMPv6 consistently with ICMP by Stephen Smalley · 8 years ago
  63. a2c7c6fb selinux: add security in-core xattr support for tracefs by Yongqin Liu · 8 years ago
  64. da69a53 selinux: support distinctions among all network address families by Stephen Smalley · 8 years ago
  65. 683b96f4 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  66. 9287aed selinux: Convert isec->lock into a spinlock by Andreas Gruenbacher · 8 years ago
  67. baa73d9 posix-timers: Make them configurable by Nicolas Pitre · 8 years ago
  68. 13457d0 selinux: Clean up initialization of isec->sclass by Andreas Gruenbacher · 8 years ago
  69. db978da proc: Pass file mode to proc_pid_make_inode by Andreas Gruenbacher · 8 years ago
  70. 4205911 selinux: Minor cleanups by Andreas Gruenbacher · 8 years ago
  71. 8931c3b SELinux: Use GFP_KERNEL for selinux_parse_opts_str(). by Tetsuo Handa · 8 years ago
  72. d17af50 mm: Change vm_is_stack_for_task() to vm_is_stack_for_current() by Andy Lutomirski · 8 years ago
  73. 97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  74. 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
  75. 43af5de lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE by Vivek Goyal · 8 years ago
  76. a518b0a selinux: Implement dentry_create_files_as() hook by Vivek Goyal · 9 years ago
  77. c957f6d selinux: Pass security pointer to determine_inode_label() by Vivek Goyal · 9 years ago
  78. 19472b6 selinux: Implementation for inode_copy_up_xattr() hook by Vivek Goyal · 9 years ago
  79. 56909eb selinux: Implementation for inode_copy_up() hook by Vivek Goyal · 9 years ago
  80. 1a93a6e security: Use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 9 years ago
  81. 835c92d Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
  82. 7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
  83. 4f3ccd7 qstr: constify dentry_init_security by Al Viro · 9 years ago
  84. d011a4d Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 9 years ago
  85. a04e71f netlabel: Pass a family parameter to netlbl_skbuff_err(). by Huw Davies · 9 years ago
  86. 2917f57 calipso: Allow the lsm to label the skbuff directly. by Huw Davies · 9 years ago
  87. aad8289 selinux: Add support for unprivileged mounts from user namespaces by Seth Forshee · 9 years ago
  88. 380cf5b fs: Treat foreign mounts as nosuid by Andy Lutomirski · 9 years ago
  89. f4f27d0 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 9 years ago
  90. c52b7618 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
  91. c2316db selinux: apply execstack check on thread stacks by Stephen Smalley · 9 years ago
  92. 8e4ff6f selinux: distinguish non-init user namespace capability checks by Stephen Smalley · 9 years ago
  93. 1ac42476 selinux: check ss_initialized before revalidating an inode label by Paul Moore · 9 years ago
  94. 20cdef8 selinux: delay inode label lookup as long as possible by Paul Moore · 9 years ago
  95. 2c97165 selinux: don't revalidate an inode's label when explicitly setting it by Paul Moore · 9 years ago
  96. ce23e64 ->getxattr(): pass dentry and inode as separate arguments by Al Viro · 9 years ago
  97. fc64005 don't bother with ->d_inode->i_sb - it's always equal to ->d_sb by Al Viro · 9 years ago
  98. 61d612ea selinux: restrict kernel module loading by Jeff Vander Stoep · 9 years ago
  99. 0c6181c selinux: consolidate the ptrace parent lookup code by Paul Moore · 9 years ago
  100. 4b57d6b selinux: simply inode label states to INVALID and INITIALIZED by Paul Moore · 9 years ago