History

Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

Pull security subsystem updates from James Morris: "Highlights: IMA: - provide ">" and "<" operators for fowner/uid/euid rules KEYS: - add a system blacklist keyring - add KEYCTL_RESTRICT_KEYRING, exposes keyring link restriction functionality to userland via keyctl() LSM: - harden LSM API with __ro_after_init - add prlmit security hook, implement for SELinux - revive security_task_alloc hook TPM: - implement contextual TPM command 'spaces'" * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: (98 commits) tpm: Fix reference count to main device tpm_tis: convert to using locality callbacks tpm: fix handling of the TPM 2.0 event logs tpm_crb: remove a cruft constant keys: select CONFIG_CRYPTO when selecting DH / KDF apparmor: Make path_max parameter readonly apparmor: fix parameters so that the permission test is bypassed at boot apparmor: fix invalid reference to index variable of iterator line 836 apparmor: use SHASH_DESC_ON_STACK security/apparmor/lsm.c: set debug messages apparmor: fix boolreturn.cocci warnings Smack: Use GFP_KERNEL for smk_netlbl_mls(). smack: fix double free in smack_parse_opts_str() KEYS: add SP800-56A KDF support for DH KEYS: Keyring asymmetric key restrict method with chaining KEYS: Restrict asymmetric key linkage using a specific keychain KEYS: Add a lookup_restriction function for the asymmetric key type KEYS: Add KEYCTL_RESTRICT_KEYRING KEYS: Consistent ordering for __key_link_begin and restrict check KEYS: Add an optional lookup_restriction hook to key_type ...

Linus Torvalds committed 9 years ago

Commit 0302e282 parents 89c9fea 8979b0295 files · +3240 −1120Browse files

Showing the changes to scripts (2 of 95 files). Show all

Unified · Split

2 files
  1. scripts/selinux/genheaders/genheaders.c +1 −0
  2. scripts/selinux/mdp/mdp.c +1 −0
scripts/selinux/genheaders/genheaders.c+1−0
@@ -8,6 +8,7 @@ · 7 unmodified lines
8#include <string.h>8#include <string.h>
9#include <errno.h>9#include <errno.h>
10#include <ctype.h>10#include <ctype.h>
11#include <sys/socket.h>
11 12
12struct security_class_mapping {13struct security_class_mapping {
13 const char *name;14 const char *name;
scripts/selinux/mdp/mdp.c+1−0
@@ -32,6 +32,7 @@ · 31 unmodified lines
32#include <stdlib.h>32#include <stdlib.h>
33#include <unistd.h>33#include <unistd.h>
34#include <string.h>34#include <string.h>
35#include <sys/socket.h>
35 36
36static void usage(char *name)37static void usage(char *name)
37{38{