Activity for Paul Moore
-
Paul Moore committed [c8a3df] on GIT
audit: merge loops in __audit_inode_child()
-
audit: fix comment misindentation in audit.h
-
selinux: improve bucket distribution uniformity of avc_hash()
-
selinux: Move avtab_hash() to a shared location for future reuse
-
selinux: Introduce a new config to make avc cache slot size adjustable
-
memfd,selinux: call security_inode_init_security_anon()
-
lsm: use unrcu_pointer() for current->cred in security_init()
-
device_cgroup: Refactor devcgroup_seq_show to use seq_put* helpers
-
lsm: add a LSM_STARTED_ALL notification event
-
lsm: consolidate all of the LSM framework initcalls
-
selinux: move initcalls to the LSM framework
-
ima,evm: move initcalls to the LSM framework
-
lockdown: move initcalls to the LSM framework
-
apparmor: move initcalls to the LSM framework
-
safesetid: move initcalls to the LSM framework
-
tomoyo: move initcalls to the LSM framework
-
smack: move initcalls to the LSM framework
-
ipe: move initcalls to the LSM framework
-
loadpin: move initcalls to the LSM framework
-
lsm: introduce an initcall mechanism into the LSM framework
-
lsm: group lsm_order_parse() with the other lsm_order_*() functions
-
lsm: output available LSMs when debugging
-
lsm: cleanup the debug and console output in lsm_init.c
-
lsm: add/tweak function header comment blocks in lsm_init.c
-
lsm: fold lsm_init_ordered() into security_init()
-
lsm: cleanup initialize_lsm() and rename to lsm_init_single()
-
lsm: cleanup the LSM blob size code
-
lsm: rename/rework ordered_lsm_parse() to lsm_order_parse()
-
lsm: rename/rework append_ordered_lsm() into lsm_order_append()
-
lsm: rename exists_ordered_lsm() to lsm_order_exists()
-
lsm: rework the LSM enable/disable setter/getter functions
-
lsm: get rid of the lsm_names list and do some cleanup
-
lsm: rework lsm_active_cnt and lsm_idlist[]
-
lsm: rename the lsm order variables for consistency
-
lsm: replace the name field with a pointer to the lsm_id struct
-
lsm: rename ordered_lsm_init() to lsm_init_ordered()
-
lsm: integrate lsm_early_cred() and lsm_early_task() into caller
-
lsm: integrate report_lsm_order() code into caller
-
lsm: introduce looping macros for the initialization code
-
lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare()
-
lsm: split the init code out into lsm_init.c
-
lsm: split the notifier code out into lsm_notifier.c
-
selinux: rename the cred_security_struct variables to "crsec"
-
selinux: move avdcache to per-task security struct
-
selinux: rename task_security_struct to cred_security_struct
-
lsm: CONFIG_LSM can depend on CONFIG_SECURITY
-
MAINTAINERS: add the associated Rust helper to the CREDENTIALS section
-
MAINTAINERS: add the associated Rust helper to the LSM section
-
rust,cred: update AlwaysRefCounted import to sync::aref
-
security: use umax() to improve code
-
lsm,selinux: Add LSM blob support for BPF objects
-
lsm: use lsm_blob_alloc() in lsm_bdev_alloc()
-
selinux: enable per-file labeling for functionfs
-
selinux: fix sel_read_bool() allocation and error handling
-
selinux: Remove redundant __GFP_NOWARN
-
selinux: use a consistent method to get full socket from skb
-
selinux: Remove unused function selinux_policycap_netif_wildcard()
-
audit: add record for multiple task security contexts
-
lsm: security_lsmblob_to_secctx module selection
-
audit: create audit_stamp structure
-
audit: add a missing tab
-
audit: record fanotify event regardless of presence of rules
-
audit: fix typo in auditfilter.c comment
-
audit: Replace deprecated strcpy() with strscpy()
-
audit: fix indentation in audit_log_exit()
-
audit: fix out-of-bounds read in audit_compare_dname_path()
-
audit,module: restore audit logging in load failure case
-
selinux: don't bother with selinuxfs_info_free() on failures
-
selinux: add __GFP_NOWARN to hashtab_init() allocations
-
selinux: optimize selinux_inode_getattr/permission() based on neveraudit|permissive
-
selinux: introduce neveraudit types
-
documentation: add links to SELinux resources
-
selinux: add a 5 second sleep to /sys/fs/selinux/user
-
MAINTAINERS: Add Xiu and myself as Lockdown maintainers
-
security: Remove unused declaration cap_mmap_file()
-
lsm: trivial comment fix
-
selinux: change security_compute_sid to return the ssid or tsid on match
-
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
-
audit: record AUDIT_ANOM_* events regardless of presence of rules
-
audit: mark audit_log_vformat() with __printf() attribute
-
selinux: fix the kdoc header for task_avdcache_update
-
selinux: remove a duplicated include
-
selinux: reduce path walk overhead
-
selinux: support wildcard match in genfscon
-
selinux: drop copy-paste comment
-
selinux: unify OOM handling in network hashtables
-
selinux: add likely hints for fast paths
-
selinux: contify network namespace pointer
-
selinux: constify network address pointer
-
lsm: Move security_netlink_send to under CONFIG_SECURITY_NETWORK
-
selinux: support wildcard network interface names
-
selinux: Chain up tool resolving errors in install_policy.sh
-
selinux: add permission checks for loading other kinds of kernel files
-
selinux: always check the file label in selinux_kernel_read_file()
-
mailmap: map Stephen Smalley's old email addresses
-
lsm: remove old email address for Stephen Smalley
-
MAINTAINERS: add Serge Hallyn as a credentials reviewer
-
MAINTAINERS: add an explicit credentials entry
-
cred,rust: mark Credential methods inline
-
lsm,rust: reword "destroy" -> "release" in SecurityCtx
1 >
