Linus Torvalds f4f27d0028 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security ... Pull security subsystem updates from James Morris: "Highlights: - A new LSM, "LoadPin", from Kees Cook is added, which allows forcing of modules and firmware to be loaded from a specific device (this is from ChromeOS, where the device as a whole is verified cryptographically via dm-verity). This is disabled by default but can be configured to be enabled by default (don't do this if you don't know what you're doing). - Keys: allow authentication data to be stored in an asymmetric key. Lots of general fixes and updates. - SELinux: add restrictions for loading of kernel modules via finit_module(). Distinguish non-init user namespace capability checks. Apply execstack check on thread stacks" * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (48 commits) LSM: LoadPin: provide enablement CONFIG Yama: use atomic allocations when reporting seccomp: Fix comment typo ima: add support for creating files using the mknodat syscall ima: fix ima_inode_post_setattr vfs: forbid write access when reading a file into memory fs: fix over-zealous use of "const" selinux: apply execstack check on thread stacks selinux: distinguish non-init user namespace capability checks LSM: LoadPin for kernel file loading restrictions fs: define a string representation of the kernel_read_file_id enumeration Yama: consolidate error reporting string_helpers: add kstrdup_quotable_file string_helpers: add kstrdup_quotable_cmdline string_helpers: add kstrdup_quotable selinux: check ss_initialized before revalidating an inode label selinux: delay inode label lookup as long as possible selinux: don't revalidate an inode's label when explicitly setting it selinux: Change bool variable name to index. KEYS: Add KEYCTL_DH_COMPUTE command ...		2016-05-19 09:21:36 -07:00
..
af_rxrpc.c	rxrpc: Absorb the rxkad security module	2016-04-11 15:34:41 -04:00
ar-accept.c	rxrpc: Don't pass gfp around in incoming call handling functions	2016-04-11 15:34:41 -04:00
ar-ack.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-call.c	rxrpc: Don't pass gfp around in incoming call handling functions	2016-04-11 15:34:41 -04:00
ar-connection.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-connevent.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-error.c
ar-input.c	net: udp: rename UDP_INC_STATS_BH()	2016-04-27 22:48:23 -04:00
ar-internal.h	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-key.c	KEYS: Add a facility to restrict new links into a keyring	2016-04-11 22:37:37 +01:00
ar-local.c
ar-output.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-peer.c
ar-proc.c	rxrpc: Differentiate local and remote abort codes in structs	2016-04-11 15:34:40 -04:00
ar-recvmsg.c	rxrpc: Differentiate local and remote abort codes in structs	2016-04-11 15:34:40 -04:00
ar-security.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
ar-skbuff.c
ar-transport.c
insecure.c	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
Kconfig	rxrpc: Absorb the rxkad security module	2016-04-11 15:34:41 -04:00
Makefile	rxrpc: Create a null security type and get rid of conditional calls	2016-04-11 15:34:41 -04:00
misc.c	rxrpc: Static arrays of strings should be const char *const[]	2016-04-11 15:34:40 -04:00
rxkad.c	rxrpc: Absorb the rxkad security module	2016-04-11 15:34:41 -04:00
sysctl.c