Huw Davies 1f440c99d3 netlabel: Prevent setsockopt() from changing the hop-by-hop option. ... If a socket has a netlabel in place then don't let setsockopt() alter the socket's IPv6 hop-by-hop option. This is in the same spirit as the existing check for IPv4. Signed-off-by: Huw Davies <huw@codeweavers.com> Signed-off-by: Paul Moore <paul@paul-moore.com>		2016-06-27 15:05:27 -04:00
..
apparmor	apparmor: clarify CRYPTO dependency	2015-10-22 11:11:28 +11:00
integrity	Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next	2016-05-06 09:29:00 +10:00
keys	Merge branch 'keys-trust' into keys-next	2016-05-04 17:20:20 +01:00
loadpin	LSM: LoadPin: provide enablement CONFIG	2016-05-17 20:10:30 +10:00
selinux	netlabel: Prevent setsockopt() from changing the hop-by-hop option.	2016-06-27 15:05:27 -04:00
smack	smack: fix cache of access labels	2016-02-16 09:56:35 -08:00
tomoyo	mm/gup: Introduce get_user_pages_remote()	2016-02-16 10:04:09 +01:00
yama	Yama: use atomic allocations when reporting	2016-05-04 10:54:05 -07:00
Kconfig	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
commoncap.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-01-20 17:09:18 -08:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
lsm_audit.c	Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next	2015-08-15 13:29:57 +10:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00