linux-sg2042/net/rxrpc
Linus Torvalds f4f27d0028 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
Pull security subsystem updates from James Morris:
 "Highlights:

   - A new LSM, "LoadPin", from Kees Cook is added, which allows forcing
     of modules and firmware to be loaded from a specific device (this
     is from ChromeOS, where the device as a whole is verified
     cryptographically via dm-verity).

     This is disabled by default but can be configured to be enabled by
     default (don't do this if you don't know what you're doing).

   - Keys: allow authentication data to be stored in an asymmetric key.
     Lots of general fixes and updates.

   - SELinux: add restrictions for loading of kernel modules via
     finit_module().  Distinguish non-init user namespace capability
     checks.  Apply execstack check on thread stacks"

* 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (48 commits)
  LSM: LoadPin: provide enablement CONFIG
  Yama: use atomic allocations when reporting
  seccomp: Fix comment typo
  ima: add support for creating files using the mknodat syscall
  ima: fix ima_inode_post_setattr
  vfs: forbid write access when reading a file into memory
  fs: fix over-zealous use of "const"
  selinux: apply execstack check on thread stacks
  selinux: distinguish non-init user namespace capability checks
  LSM: LoadPin for kernel file loading restrictions
  fs: define a string representation of the kernel_read_file_id enumeration
  Yama: consolidate error reporting
  string_helpers: add kstrdup_quotable_file
  string_helpers: add kstrdup_quotable_cmdline
  string_helpers: add kstrdup_quotable
  selinux: check ss_initialized before revalidating an inode label
  selinux: delay inode label lookup as long as possible
  selinux: don't revalidate an inode's label when explicitly setting it
  selinux: Change bool variable name to index.
  KEYS: Add KEYCTL_DH_COMPUTE command
  ...
2016-05-19 09:21:36 -07:00
..
Kconfig rxrpc: Absorb the rxkad security module 2016-04-11 15:34:41 -04:00
Makefile rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
af_rxrpc.c rxrpc: Absorb the rxkad security module 2016-04-11 15:34:41 -04:00
ar-accept.c rxrpc: Don't pass gfp around in incoming call handling functions 2016-04-11 15:34:41 -04:00
ar-ack.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-call.c rxrpc: Don't pass gfp around in incoming call handling functions 2016-04-11 15:34:41 -04:00
ar-connection.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-connevent.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-error.c rxrpc: Don't try to map ICMP to error as the lower layer already did that 2016-03-04 16:02:03 +00:00
ar-input.c net: udp: rename UDP_INC_STATS_BH() 2016-04-27 22:48:23 -04:00
ar-internal.h rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-key.c KEYS: Add a facility to restrict new links into a keyring 2016-04-11 22:37:37 +01:00
ar-local.c rxrpc: Keep the skb private record of the Rx header in host byte order 2016-03-04 15:53:46 +00:00
ar-output.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-peer.c rxrpc: Keep the skb private record of the Rx header in host byte order 2016-03-04 15:53:46 +00:00
ar-proc.c rxrpc: Differentiate local and remote abort codes in structs 2016-04-11 15:34:40 -04:00
ar-recvmsg.c rxrpc: Differentiate local and remote abort codes in structs 2016-04-11 15:34:40 -04:00
ar-security.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
ar-skbuff.c rxrpc: Adjust some whitespace and comments 2016-03-04 15:56:19 +00:00
ar-transport.c rxrpc: Replace all unsigned with unsigned int 2016-03-13 15:14:57 -04:00
insecure.c rxrpc: Create a null security type and get rid of conditional calls 2016-04-11 15:34:41 -04:00
misc.c rxrpc: Static arrays of strings should be const char *const[] 2016-04-11 15:34:40 -04:00
rxkad.c rxrpc: Absorb the rxkad security module 2016-04-11 15:34:41 -04:00
sysctl.c rxrpc: Replace all unsigned with unsigned int 2016-03-13 15:14:57 -04:00