Activity for Paul Moore
-
Paul Moore committed [ea64aa] on GIT
selinux: drop the BUG() in cred_has_capability()
-
selinux: fix a capabilities parsing typo in selinux_bpf_token_capable()
-
selinux: add support for BPF token access control
-
selinux: move the selinux_blob_sizes struct
-
lsm: make keys for static branch static
-
cred: remove unused set_security_override_from_ctx()
-
rust: security: add __rust_helper to helpers
-
rust: cred: add __rust_helper to helpers
-
nfs: unify security_inode_listsecurity() calls
-
lsm: fix kernel-doc struct member names
-
audit: move the compat_xxx_class[] extern declarations to audit_arch.h
-
audit: add missing syscalls to read class
-
audit: include source and destination ports to NETFILTER_PKT
-
audit: add audit_log_nf_skb helper function
-
audit: add fchmodat2() to change attributes class
-
lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY
-
audit: merge loops in __audit_inode_child()
-
audit: fix comment misindentation in audit.h
-
selinux: improve bucket distribution uniformity of avc_hash()
-
selinux: Move avtab_hash() to a shared location for future reuse
-
selinux: Introduce a new config to make avc cache slot size adjustable
-
memfd,selinux: call security_inode_init_security_anon()
-
lsm: use unrcu_pointer() for current->cred in security_init()
-
device_cgroup: Refactor devcgroup_seq_show to use seq_put* helpers
-
lsm: add a LSM_STARTED_ALL notification event
-
lsm: consolidate all of the LSM framework initcalls
-
selinux: move initcalls to the LSM framework
-
ima,evm: move initcalls to the LSM framework
-
lockdown: move initcalls to the LSM framework
-
apparmor: move initcalls to the LSM framework
-
safesetid: move initcalls to the LSM framework
-
tomoyo: move initcalls to the LSM framework
-
smack: move initcalls to the LSM framework
-
ipe: move initcalls to the LSM framework
-
loadpin: move initcalls to the LSM framework
-
lsm: introduce an initcall mechanism into the LSM framework
-
lsm: group lsm_order_parse() with the other lsm_order_*() functions
-
lsm: output available LSMs when debugging
-
lsm: cleanup the debug and console output in lsm_init.c
-
lsm: add/tweak function header comment blocks in lsm_init.c
-
lsm: fold lsm_init_ordered() into security_init()
-
lsm: cleanup initialize_lsm() and rename to lsm_init_single()
-
lsm: cleanup the LSM blob size code
-
lsm: rename/rework ordered_lsm_parse() to lsm_order_parse()
-
lsm: rename/rework append_ordered_lsm() into lsm_order_append()
-
lsm: rename exists_ordered_lsm() to lsm_order_exists()
-
lsm: rework the LSM enable/disable setter/getter functions
-
lsm: get rid of the lsm_names list and do some cleanup
-
lsm: rework lsm_active_cnt and lsm_idlist[]
-
lsm: rename the lsm order variables for consistency
-
lsm: replace the name field with a pointer to the lsm_id struct
-
lsm: rename ordered_lsm_init() to lsm_init_ordered()
-
lsm: integrate lsm_early_cred() and lsm_early_task() into caller
-
lsm: integrate report_lsm_order() code into caller
-
lsm: introduce looping macros for the initialization code
-
lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare()
-
lsm: split the init code out into lsm_init.c
-
lsm: split the notifier code out into lsm_notifier.c
-
selinux: rename the cred_security_struct variables to "crsec"
-
selinux: move avdcache to per-task security struct
-
selinux: rename task_security_struct to cred_security_struct
-
lsm: CONFIG_LSM can depend on CONFIG_SECURITY
-
MAINTAINERS: add the associated Rust helper to the CREDENTIALS section
-
MAINTAINERS: add the associated Rust helper to the LSM section
-
rust,cred: update AlwaysRefCounted import to sync::aref
-
security: use umax() to improve code
-
lsm,selinux: Add LSM blob support for BPF objects
-
lsm: use lsm_blob_alloc() in lsm_bdev_alloc()
-
selinux: enable per-file labeling for functionfs
-
selinux: fix sel_read_bool() allocation and error handling
-
selinux: Remove redundant __GFP_NOWARN
-
selinux: use a consistent method to get full socket from skb
-
selinux: Remove unused function selinux_policycap_netif_wildcard()
-
audit: add record for multiple task security contexts
-
lsm: security_lsmblob_to_secctx module selection
-
audit: create audit_stamp structure
-
audit: add a missing tab
-
audit: record fanotify event regardless of presence of rules
-
audit: fix typo in auditfilter.c comment
-
audit: Replace deprecated strcpy() with strscpy()
-
audit: fix indentation in audit_log_exit()
-
audit: fix out-of-bounds read in audit_compare_dname_path()
-
audit,module: restore audit logging in load failure case
-
selinux: don't bother with selinuxfs_info_free() on failures
-
selinux: add __GFP_NOWARN to hashtab_init() allocations
-
selinux: optimize selinux_inode_getattr/permission() based on neveraudit|permissive
-
selinux: introduce neveraudit types
-
documentation: add links to SELinux resources
-
selinux: add a 5 second sleep to /sys/fs/selinux/user
-
MAINTAINERS: Add Xiu and myself as Lockdown maintainers
-
security: Remove unused declaration cap_mmap_file()
-
lsm: trivial comment fix
-
selinux: change security_compute_sid to return the ssid or tsid on match
-
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
-
audit: record AUDIT_ANOM_* events regardless of presence of rules
-
audit: mark audit_log_vformat() with __printf() attribute
-
selinux: fix the kdoc header for task_avdcache_update
-
selinux: remove a duplicated include
-
selinux: reduce path walk overhead
-
selinux: support wildcard match in genfscon
1 >
