mirror of https://github.com/torvalds/linux.git
cb60e3e65c
Pull security subsystem updates from James Morris:
"New notable features:
- The seccomp work from Will Drewry
- PR_{GET,SET}_NO_NEW_PRIVS from Andy Lutomirski
- Longer security labels for Smack from Casey Schaufler
- Additional ptrace restriction modes for Yama by Kees Cook"
Fix up trivial context conflicts in arch/x86/Kconfig and include/linux/filter.h
* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (65 commits)
apparmor: fix long path failure due to disconnected path
apparmor: fix profile lookup for unconfined
ima: fix filename hint to reflect script interpreter name
KEYS: Don't check for NULL key pointer in key_validate()
Smack: allow for significantly longer Smack labels v4
gfp flags for security_inode_alloc()?
Smack: recursive tramsmute
Yama: replace capable() with ns_capable()
TOMOYO: Accept manager programs which do not start with / .
KEYS: Add invalidation support
KEYS: Do LRU discard in full keyrings
KEYS: Permit in-place link replacement in keyring list
KEYS: Perform RCU synchronisation on keys prior to key destruction
KEYS: Announce key type (un)registration
KEYS: Reorganise keys Makefile
KEYS: Move the key config into security/keys/Kconfig
KEYS: Use the compat keyctl() syscall wrapper on Sparc64 for Sparc32 compat
Yama: remove an unused variable
samples/seccomp: fix dependencies on arch macros
Yama: add additional ptrace scopes
...
|
||
|---|---|---|
| .. | ||
| cpu | ||
| vsyscall | ||
| .gitignore | ||
| Makefile | ||
| asm-offsets.c | ||
| cpufreq.c | ||
| crash_dump.c | ||
| debugtraps.S | ||
| disassemble.c | ||
| dma-nommu.c | ||
| dumpstack.c | ||
| dwarf.c | ||
| entry-common.S | ||
| ftrace.c | ||
| head_32.S | ||
| head_64.S | ||
| hw_breakpoint.c | ||
| idle.c | ||
| io.c | ||
| io_trapped.c | ||
| iomap.c | ||
| ioport.c | ||
| irq.c | ||
| irq_32.c | ||
| irq_64.c | ||
| kdebugfs.c | ||
| kgdb.c | ||
| kprobes.c | ||
| localtimer.c | ||
| machine_kexec.c | ||
| machvec.c | ||
| module.c | ||
| nmi_debug.c | ||
| perf_callchain.c | ||
| perf_event.c | ||
| process.c | ||
| process_32.c | ||
| process_64.c | ||
| ptrace.c | ||
| ptrace_32.c | ||
| ptrace_64.c | ||
| reboot.c | ||
| relocate_kernel.S | ||
| return_address.c | ||
| setup.c | ||
| sh_bios.c | ||
| sh_ksyms_32.c | ||
| sh_ksyms_64.c | ||
| signal_32.c | ||
| signal_64.c | ||
| smp.c | ||
| stacktrace.c | ||
| swsusp.c | ||
| sys_sh.c | ||
| sys_sh32.c | ||
| sys_sh64.c | ||
| syscalls_32.S | ||
| syscalls_64.S | ||
| time.c | ||
| topology.c | ||
| traps.c | ||
| traps_32.c | ||
| traps_64.c | ||
| unwinder.c | ||
| vmlinux.lds.S | ||