Mimi Zohar 2068626d13 ima: don't remove the securityfs policy file ... The securityfs policy file is removed unless additional rules can be appended to the IMA policy (CONFIG_IMA_WRITE_POLICY), regardless as to whether the policy is configured so that it can be displayed. This patch changes this behavior, removing the securityfs policy file, only if CONFIG_IMA_READ_POLICY is also not enabled. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2017-11-08 15:16:36 -05:00
..
apparmor	+ Features	2017-09-23 05:33:29 -10:00
integrity	ima: don't remove the securityfs policy file	2017-11-08 15:16:36 -05:00
keys	fs: fix kernel_write prototype	2017-09-04 19:05:15 -04:00
loadpin	security: mark LSM hooks as __ro_after_init	2017-03-06 11:00:15 +11:00
selinux	selinux/stable-4.14 PR 20170831	2017-09-12 13:21:00 -07:00
smack	Smack: Base support for overlayfs	2017-11-02 11:26:57 +11:00
tomoyo	tomoyo: fix timestamping for y2038	2017-10-21 06:21:06 +04:00
yama	doc: ReSTify Yama.txt	2017-05-18 10:33:04 -06:00
Kconfig	include/linux/string.h: add the option of fortified string.h functions	2017-07-12 16:26:03 -07:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
commoncap.c	capabilities: audit log other surprising conditions	2017-10-20 15:22:46 +11:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	securityfs: add the ability to support symlinks	2017-06-08 12:51:43 -07:00
lsm_audit.c	lsm_audit: update my email address	2017-08-17 15:33:39 -04:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	selinux/stable-4.14 PR 20170831	2017-09-12 13:21:00 -07:00