summaryrefslogtreecommitdiff
AgeCommit messageAuthorFilesLines
2019-05-08Merge 4.9.174 into android-4.9Greg Kroah-Hartman69-318/+612
2019-05-08selinux: never allow relabeling on context mountsOndrej Mosnacek1-9/+31
2019-04-30Merge 4.9.171 into android-4.9Greg Kroah-Hartman51-269/+471
2019-04-27device_cgroup: fix RCU imbalance in error caseJann Horn1-1/+1
2019-04-05Merge 4.9.168 into android-4.9Greg Kroah-Hartman105-264/+529
2019-04-05selinux: do not override context on context mountsOndrej Mosnacek1-1/+8
2019-03-19Merge 4.9.164 into android-4.9Greg Kroah-Hartman32-86/+190
2019-03-19missing barriers in some of unix_sock ->addr and ->path accessesAl Viro3-24/+37
2019-03-19KEYS: restrict /proc/keys by credentials at open timeEric Biggers1-6/+2
2019-02-27Merge 4.9.161 into android-4.9Greg Kroah-Hartman65-472/+524
2019-02-27KEYS: always initialize keyring_index_key::desc_lenEric Biggers4-6/+4
2019-02-27KEYS: allow reaching the keys quotas exactlyEric Biggers1-2/+2
2019-02-12Merge 4.9.156 into android-4.9Greg Kroah-Hartman140-325/+712
2019-02-12smack: fix access permissions for keyringZoran Markovic1-3/+9
2019-01-26Merge 4.9.153 into android-4.9Greg Kroah-Hartman45-70/+255
2019-01-26selinux: always allow mounting submountsOndrej Mosnacek1-1/+1
2019-01-23Merge 4.9.152 into android-4.9Greg Kroah-Hartman44-170/+367
2019-01-23selinux: fix GPF on invalid policyStephen Smalley1-1/+2
2019-01-23LSM: Check for NULL cred-security on freeJames Morris1-0/+7
2019-01-23Yama: Check for pid death before checking ancestryKees Cook1-1/+3
2018-12-01Merge 4.9.142 into android-4.9Greg Kroah-Hartman86-462/+1317
2018-12-01ima: re-initialize iint->atomic_flagsMimi Zohar1-0/+1
2018-12-01ima: re-introduce own integrity cache lockDmitry Kasatkin4-40/+77
2018-12-01EVM: Add support for portable signature formatMatthew Garrett6-21/+92
2018-12-01ima: always measure and audit files in policyMimi Zohar3-30/+56
2018-12-01Revert "evm: Translate user/group ids relative to s_user_ns when computing HMAC"Eric W. Biederman1-2/+10
2018-12-01selinux: Add __GFP_NOWARN to allocation at str_read()Tetsuo Handa1-1/+1
2018-11-23Merge 4.9.137 into android-4.9Greg Kroah-Hartman145-359/+1102
2018-11-13ima: fix showing large 'violations' or 'runtime_measurements_count'Eric Biggers1-3/+3
2018-09-26Merge 4.9.129 into android-4.9Greg Kroah-Hartman110-325/+607
2018-09-26evm: Don't deadlock if a crypto algorithm is unavailableMatthew Garrett3-2/+8
2018-09-26Smack: Fix handling of IPv4 traffic received by PF_INET6 socketsPiotr Sawicki1-5/+9
2018-09-20Merge 4.9.128 into android-4.9Greg Kroah-Hartman81-195/+357
2018-09-19selinux: use GFP_NOWAIT in the AVC kmem_cachesMichal Hocko1-8/+6
2018-08-24Merge 4.9.124 into android-4.9Greg Kroah-Hartman139-573/+894
2018-08-24Smack: Mark inode instant in smack_task_to_inodeCasey Schaufler1-0/+1
2018-08-03Merge 4.9.117 into android-4.9Greg Kroah-Hartman137-285/+721
2018-08-03ima: based on policy verify firmware signatures (pre-allocated buffer)Mimi Zohar1-0/+1
2018-06-06Merge 4.9.107 into android-4.9Greg Kroah-Hartman60-295/+1275
2018-06-06selinux: KASAN: slab-out-of-bounds in xattr_getsecuritySachin Grover1-1/+1
2018-06-06Revert "ima: limit file hash setting by user to fix and log modes"Mimi Zohar1-6/+2
2018-05-30Merge 4.9.104 into android-4.9Greg Kroah-Hartman348-2235/+3819
2018-05-30ima: Fallback to the builtin hash algorithmPetr Vorel2-0/+15
2018-05-30integrity/security: fix digsig.c build error with header fileRandy Dunlap1-0/+1
2018-04-14Merge 4.9.94 into android-4.9Greg Kroah-Hartman311-916/+2420
2018-04-13selinux: do not check open permission on socketsStephen Smalley1-3/+7
2018-04-09Merge tag 'v4.9.93' into android-4.9Greg Hackmann97-418/+849
2018-04-08selinux: Remove redundant check for unknown labeling behaviorMatthias Kaehlcke1-16/+0
2018-04-08selinux: Remove unnecessary check of array base in selinux_set_mapping()Matthias Kaehlcke1-1/+1
2018-03-22Merge 4.9.89 into android-4.9Greg Kroah-Hartman233-674/+1739
[next]