bauen1 44141f58e1 selinux: allow dontauditx and auditallowx rules to take effect without allowx ...

This allows for dontauditing very specific ioctls e.g. TCGETS without
dontauditing every ioctl or granting additional permissions.

Now either an allowx, dontauditx or auditallowx rules enables checking
for extended permissions.

Signed-off-by: Jonathan Hettwer <j2468h@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2020-10-27 22:21:11 -04:00

..

apparmor

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

bpf

bpf: Implement bpf_local_storage for inodes

2020-08-25 15:00:04 -07:00

integrity

integrity-v5.10

2020-10-15 15:58:18 -07:00

keys

task_work: cleanup notification modes

2020-10-17 15:05:30 -06:00

loadpin

LSM: Add "contents" flag to kernel_read_file hook

2020-10-05 13:37:03 +02:00

lockdown

Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2020-06-02 17:36:24 -07:00

safesetid

LSM: SafeSetID: Fix warnings reported by test bot

2020-10-13 09:17:36 -07:00

selinux

selinux: allow dontauditx and auditallowx rules to take effect without allowx

2020-10-27 22:21:11 -04:00

smack

Smack LSM changes for Linux 5.10

2020-10-13 16:18:51 -07:00

tomoyo

tomoyo: Loosen pathname/domainname validation.

2020-10-12 19:53:34 +09:00

yama

task_work: cleanup notification modes

2020-10-17 15:05:30 -06:00

commoncap.c

exec: Compute file based creds only once

2020-05-29 22:00:54 -05:00

device_cgroup.c

device_cgroup: Fix RCU list debugging warning

2020-08-20 11:25:03 -07:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

Replace HTTP links with HTTPS ones: security

2020-08-06 12:00:05 -07:00

Kconfig.hardening

security: allow using Clang's zero initialization for stack variables

2020-06-16 02:06:23 -07:00

lsm_audit.c

audit: purge audit_log_string from the intra-kernel audit API

2020-07-21 11:12:31 -04:00

Makefile

device_cgroup: Cleanup cgroup eBPF device filter code

2020-04-13 14:41:54 -04:00

min_addr.c

sysctl: pass kernel pointers to ->proc_handler

2020-04-27 02:07:40 -04:00

security.c

LSM: Add "contents" flag to kernel_read_file hook

2020-10-05 13:37:03 +02:00