| 2009-06-24 |
Eric Paris | Audit: dereferencing krule as if it were an audit_watch
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-24 |
Eric Paris | Audit: better estimation of execve record length
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-24 |
Eric Paris | Audit: fix audit watch use after free
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-19 |
Eric Paris | inotify: inotify_destroy_mark_entry could get called...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: allow groups to set freeing_mark to null
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | inotify/dnotify: should_send_event shouldn't match...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | dnotify: do not bother to lock entry->lock when reading...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | dnotify: do not use ?true:false when assigning to a...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: move events should indicate the event was...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | inotify: reimplement inotify using fsnotify
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: handle filesystem unmounts with fsnotify...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: fsnotify marks on inodes pin them in core
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: allow groups to add private data to events
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: add correlations between events
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: include pathnames with entries when possible
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: generic notification queue and waitq
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | dnotify: reimplement dnotify using fsnotify
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: parent event notification
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: add marks to inodes so groups can interpret...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-11 |
Eric Paris | fsnotify: unified filesystem notification backend
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-06-02 |
Eric Paris | SELinux: define audit permissions for audit tree netlink...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-21 |
Eric Paris | IMA: Add __init notation to ima functions
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-21 |
Eric Paris | IMA: Minimal IMA policy and boot param for TCB IMA...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-19 |
Eric Paris | TPM: get_event_name stack corruption
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-18 |
Eric Paris | SELinux: move SELINUX_MAGIC into magic.h
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-14 |
Eric Paris | IMA: do not measure everything opened by root by default
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-14 |
Eric Paris | IMA: remove read permissions on the ima policy file
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-13 |
Eric Paris | TPM: get_event_name stack corruption
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-12 |
Eric Paris | securityfs: securityfs_remove should handle IS_ERR...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-12 |
Eric Paris | IMA: open all files O_LARGEFILE
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-12 |
Eric Paris | IMA: Handle dentry_open failures
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-05-12 |
Eric Paris | IMA: use current_cred() instead of current->cred
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-29 |
Eric Paris | SELinux: drop secondary_ops->sysctl
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-29 |
Eric Paris | mutex: add atomic_dec_and_mutex_lock()
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-21 |
Eric Paris | scsi: mpt: suppress debugobjects warning
|
commit | commitdiff | tree |
| 2009-04-06 |
Eric Paris | mutex: add atomic_dec_and_mutex_lock()
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-05 |
Eric Paris | Audit: remove spaces from audit_log_d_path
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-05 |
Eric Paris | audit: audit_set_auditable defined but not used
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-05 |
Eric Paris | audit: incorrect ref counting in audit tree tag_chunk
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-04-02 |
Eric Paris | Btrfs: introduce btrfs_show_options
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-03-09 |
Eric Paris | SELinux: inode_doinit_with_dentry drop no dentry printk
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-03-05 |
Eric Paris | SELinux: new permission between tty audit and audit...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-03-05 |
Eric Paris | SELinux: open perm for sock files
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: convert the avc cache hash list to an hlist
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: code readability with avc_cache
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: remove unused av.decided field
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: more careful use of avd in avc_has_perm_noaudit
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: remove the unused ae.used
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: check seqno when updating an avc_node
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: NULL terminate al contexts from disk
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: better printk when file with invalid label...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-02-13 |
Eric Paris | SELinux: call capabilities code directory
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-01-27 |
Eric Paris | tty_open can return to userspace holding tty_mutex
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-01-05 |
Eric Paris | sys_execve and sys_uselib do not call into fsnotify
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2009-01-05 |
Eric Paris | SELinux: shrink sizeof av_inhert selinux_class_perm...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-12-31 |
Eric Paris | filesystem notification: create fs/notify to contain...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-12-09 |
Eric Paris | [PATCH] Audit: make audit=0 actually turn off audit
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-14 |
Eric Paris | capabilities: define get_vfs_caps_from_disk when file...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | Currently SELinux jumps through some ugly hoops to...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | The oomkiller calculations make decisions based on...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | Add a new capable interface that will be used by systems...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | Capabilities: BUG when an invalid capability is requested
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | When the capset syscall is used it is not possible...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | Any time fcaps or a setuid app under SECURE_NOROOT...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | This patch will print cap_permitted and cap_inheritable...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | This patch add a generic cpu endian caps structure...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-11 |
Eric Paris | Document the order of arguments for cap_issubset. ...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-08 |
Eric Paris | SELinux: Use unknown perm handling to handle unknown...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-11-04 |
Eric Paris | SELinux: hold tasklist_lock and siglock while waking...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-10-31 |
Eric Paris | SELinux: properly handle empty tty_files list
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-10-30 |
Eric Paris | SELinux: check open perms in dentry_open not inode_permission
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-09-03 |
Eric Paris | SELinux: memory leak in security_context_to_sid_core
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-08-28 |
Eric Paris | securityfs: do not depend on CONFIG_SECURITY
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-08-01 |
Eric Paris | [PATCH] Audit: Collect signal info when SIGUSR2 is...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-29 |
Eric Paris | SELinux: /proc/mounts should show what it can
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | LSM/SELinux: show LSM mount options in /proc/mounts
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | SELinux: allow fstype unknown to policy to use xattrs...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | SELinux: more user friendly unknown handling printk
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | SELinux: drop load_mutex in security_load_policy
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | SELinux: fix off by 1 reference of class_to_string...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-07-14 |
Eric Paris | SELinux: keep the code clean formating and syntax
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-05-16 |
Eric Paris | nfs/lsm: make NFSv4 set LSM mount options
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: MAINTAINERS update
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: increase the maximum length of the key field
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: standardize string audit interfaces
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: stop deadlock from signals under load
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: save audit_backlog_limit audit messages in case...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: collect sessionid in netlink messages
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-28 |
Eric Paris | Audit: end printk with newline
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: include/security.h whitespace, syntax, and...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: policydb.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: mls_types.h whitespace, syntax, and other...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: mls.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: hashtab.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: context.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: ss/conditional.h whitespace, syntax, and other...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: selinux/include/security.h whitespace, syntax...
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: objsec.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: netlabel.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
| 2008-04-27 |
Eric Paris | SELinux: avc_ss.h whitespace, syntax, and other cleanups
Signed-off-by: Eric Paris <eparis@redhat.com>
|
commit | commitdiff | tree |
