Kees Cook 2cc8a71641 Yama: replace capable() with ns_capable() ...

When checking capabilities, the question we want to be asking is "does
current() have the capability in the child's namespace?"

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>

2012-05-15 10:27:57 +10:00

..

apparmor

Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS

2012-04-14 11:13:18 +10:00

integrity

security: fix ima kconfig warning

2012-02-28 11:01:15 +11:00

keys

KEYS: Add invalidation support

2012-05-11 10:56:56 +01:00

selinux

Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

2012-04-14 11:13:18 +10:00

smack

Smack: move label list initialization

2012-04-18 12:02:28 +10:00

tomoyo

TOMOYO: Accept manager programs which do not start with / .

2012-05-15 10:24:29 +10:00

yama

Yama: replace capable() with ns_capable()

2012-05-15 10:27:57 +10:00

capability.c

security: create task_free security callback

2012-02-10 09:14:51 +11:00

commoncap.c

Merge tag 'v3.4-rc5' into next

2012-05-04 12:46:40 +10:00

device_cgroup.c

cgroup: remove cgroup_subsys argument from callbacks

2012-02-02 09:20:22 -08:00

inode.c

securityfs: fix object creation races

2012-01-10 10:20:35 -05:00

Kconfig

KEYS: Move the key config into security/keys/Kconfig

2012-05-11 10:56:56 +01:00

lsm_audit.c

lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit_data'

2012-04-03 09:49:59 -07:00

Makefile

security: Yama LSM

2012-02-10 09:18:52 +11:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

security: trim security.h

2012-02-14 10:45:42 +11:00