aboutsummaryrefslogtreecommitdiffstats
path: root/security/smack/smack.h
AgeCommit message (Expand)AuthorFilesLines
2025-12-03Merge tag 'Smack-for-6.19' of https://github.com/cschaufler/smack-nextLinus Torvalds1-0/+3
2025-10-22smack: move initcalls to the LSM frameworkPaul Moore1-0/+14
2025-06-24smack: fix bug: setting task label silently ignores input garbageKonstantin Andreev1-0/+3
2025-02-13smack: remove /smack/logging if audit is not configuredKonstantin Andreev1-6/+6
2025-02-12smack: dont compile ipv6 code unless ipv6 is configuredKonstantin Andreev1-0/+6
2025-02-11Smack: fix typos and spelling errorsCasey Schaufler1-1/+1
2024-12-06smack: deduplicate access to string conversionKonstantin Andreev1-0/+1
2024-07-29lsm: infrastructure management of the key security blobCasey Schaufler1-0/+7
2024-07-29lsm: infrastructure management of the sock securityCasey Schaufler1-0/+5
2023-07-10smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security()Roberto Sassu1-1/+1
2023-05-11smack: Record transmuting in smk_transmutedRoberto Sassu1-0/+1
2022-09-27smack: cleanup obsolete mount option flagsXiu Jianfeng1-9/+0
2021-11-22lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()Paul Moore1-16/+0
2021-07-20smack: mark 'smack_enabled' global variable as __initdataAustin Kim1-1/+1
2021-05-01Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds1-0/+6
2021-04-22LSM: Infrastructure management of the superblockCasey Schaufler1-0/+6
2021-03-22smack: differentiate between subjective and objective task credentialsPaul Moore1-1/+17
2020-09-11Smack: Use the netlabel cacheCasey Schaufler1-0/+1
2020-09-11Smack: Set socket labels only onceCasey Schaufler1-13/+5
2020-05-11Smack: Remove unused inline function smk_ad_setfield_u_fs_path_mntYueHaibing1-4/+0
2020-05-06Smack:- Remove mutex lock "smk_lock" from inode_smackCasey Schaufler1-1/+0
2020-05-06smack: remove redundant structure variable from header.Maninder Singh1-1/+0
2020-05-06smack: avoid unused 'sip' variable warningArnd Bergmann1-6/+0
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372Thomas Gleixner1-5/+1
2019-04-02Smack: Create smack_rule cache to optimize memory usageCasey Schaufler1-0/+1
2019-03-12Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds1-14/+5
2019-02-28smack: Implement filesystem context security hooksDavid Howells1-14/+5
2019-01-08LSM: Infrastructure management of the ipc security blobCasey Schaufler1-2/+2
2019-01-08Smack: Abstract use of ipc security blobsCasey Schaufler1-0/+11
2019-01-08LSM: Infrastructure management of the inode securityCasey Schaufler1-1/+1
2019-01-08Smack: Abstract use of inode security blobCasey Schaufler1-2/+7
2019-01-08LSM: Infrastructure management of the file securityCasey Schaufler1-1/+2
2019-01-08Smack: Abstract use of file security blobCasey Schaufler1-0/+5
2019-01-08Infrastructure management of the cred security blobCasey Schaufler1-1/+2
2019-01-08Smack: Abstract use of cred security blobCasey Schaufler1-3/+14
2018-01-10Smack: Privilege check on key operationsCasey Schaufler1-0/+1
2017-06-01Smack: Use cap_capable in privilege checkCasey Schaufler1-1/+1
2017-01-10SMACK: Free the i_security blob in inode using RCUHimanshu Shukla1-0/+1
2017-01-10Smack: Fix the issue of wrong SMACK label update in socket bind fail caseVishal Goel1-0/+1
2017-01-10Smack: Fix the issue of permission denied error in ipv6 hookVishal Goel1-0/+1
2016-11-15Smack: Remove unnecessary smack_known_invalidCasey Schaufler1-1/+0
2016-09-08Smack: Signal delivery as an append operationCasey Schaufler1-0/+10
2016-06-24Smack: Add support for unprivileged mounts from user namespacesSeth Forshee1-1/+7
2015-10-19Smack: limited capability for changing process labelZbigniew Jasinski1-1/+3
2015-07-28Smack: IPv6 host labelingCasey Schaufler1-9/+39
2015-07-22smack: allow mount opts setting over filesystems with binary mount dataVivek Trivedi1-0/+18
2015-06-02Smack: allow multiple labels in onlycapRafal Krypa1-16/+9
2015-05-12LSM: Switch to lists of hooksCasey Schaufler1-2/+0
2015-05-12LSM: Split security.hCasey Schaufler1-1/+1
2015-03-23Smack: Allow an unconfined label in bringup modeCasey Schaufler1-0/+8
2015-01-21smack: fix possible use after frees in task_security() callersAndrey Ryabinin1-0/+10
2015-01-20Smack: secmark support for netfilterCasey Schaufler1-0/+1
2014-08-29Make Smack operate on smack_known struct where it still used char*Lukasz Pawelczyk1-17/+17
2014-08-28Smack: Bring-up access modeCasey Schaufler1-2/+3
2014-04-11Smack: bidirectional UDS connect checkCasey Schaufler1-3/+3
2014-04-11Smack: adds smackfs/ptrace interfaceLukasz Pawelczyk1-0/+9
2014-04-11Smack: fix the subject/object order in smack_ptrace_traceme()Lukasz Pawelczyk1-0/+1
2013-12-23Smack: Make the syslog control configurableCasey Schaufler1-2/+3
2013-10-18Smack: Implement lock security modeCasey Schaufler1-4/+8
2013-08-01Smack: network label match fixCasey Schaufler1-2/+6
2013-08-01security: smack: add a hash table to quicken smk_find_entry()Tomasz Stanislawski1-0/+5
2013-05-28Smack: Add smkfstransmute mount optionCasey Schaufler1-0/+1
2013-05-28Smack: Improve access check performanceCasey Schaufler1-53/+55
2013-05-28Smack: Local IPv6 port based controlsCasey Schaufler1-0/+11
2013-03-19smack: SMACK_MAGIC to include/uapi/linux/magic.hJarkko Sakkinen1-5/+0
2012-07-13Smack: onlycap limits on CAP_MAC_ADMINCasey Schaufler1-0/+13
2012-07-13Smack: fix smack_new_inode bogositiesCasey Schaufler1-1/+0
2012-05-22Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris1-1/+1
2012-05-14Smack: allow for significantly longer Smack labels v4Casey Schaufler1-36/+20
2012-05-14Smack: recursive tramsmuteCasey Schaufler1-0/+1
2012-04-09LSM: do not initialize common_audit_data to 0Eric Paris1-1/+1
2012-04-03LSM: shrink the common_audit_data data unionEric Paris1-1/+9
2012-04-03LSM: shrink sizeof LSM specific portion of common_audit_dataEric Paris1-1/+12
2011-10-20Smack: allow to access /smack/access as normal userJarkko Sakkinen1-0/+1
2011-10-12Smack: Clean up commentsCasey Schaufler1-3/+2
2011-10-12Smack: Rule list lookup performanceCasey Schaufler1-6/+12
2011-04-25LSM: separate LSM_AUDIT_DATA_DENTRY from LSM_AUDIT_DATA_PATHEric Paris1-6/+1
2011-04-25LSM: split LSM_AUDIT_DATA_FS into _PATH and _INODEEric Paris1-4/+4
2011-02-09security:smack: kill unused SMACK_LIST_MAX, MAY_ANY and MAY_ANYWRITEShan Wei1-8/+0
2011-01-17Subject: [PATCH] Smack: mmap controls for library containmentCasey Schaufler1-3/+6
2010-12-07Smack: Transmute labels on specified directoriesJarkko Sakkinen1-1/+16
2010-12-02This patch adds a new security attribute to Smack calledCasey Schaufler1-0/+30
2010-08-02security: move LSM xattrnames to xattr.hMimi Zohar1-10/+0
2009-07-10security: Make lsm_priv union in lsm_audit.h anonymousThomas Liu1-1/+1
2009-07-10Move variable function in lsm_audit.h into SMACK private spaceThomas Liu1-1/+1
2009-04-14smack: implement logging V3Etienne Basset1-2/+106
2009-03-28smack: Add a new '-CIPSO' option to the network address label configurationEtienne Basset1-0/+3
2009-03-28netlabel: Cleanup the Smack/NetLabel code to fix incoming TCP connectionsPaul Moore1-1/+0
2009-03-26smack: convert smack to standard linux listsEtienne Basset1-16/+12
2008-12-31smack: Add support for unlabeled network hosts and networksCasey Schaufler1-2/+29
2008-08-05smack: limit privilege by labelCasey Schaufler1-0/+1
2008-04-19Security: Introduce security= boot parameterAhmed S. Darwish1-0/+2
2008-03-13smackfs: do not trust `count' in inodes write()sAhmed S. Darwish1-8/+0
2008-02-05Smack: Simplified Mandatory Access Control KernelCasey Schaufler1-0/+220