Eric Paris cee74f47a6 SELinux: allow userspace to read policy back out of the kernel ...

There is interest in being able to see what the actual policy is that was
loaded into the kernel.  The patch creates a new selinuxfs file
/selinux/policy which can be read by userspace.  The actual policy that is
loaded into the kernel will be written back out to userspace.

Signed-off-by: Eric Paris <eparis@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

2010-10-21 10:12:58 +11:00

..

apparmor

AppArmor: Ensure the size of the copy is < the buffer allocated to hold it

2010-10-21 10:12:46 +11:00

integrity/ima

ima: always maintain counters

2010-09-08 09:51:41 +10:00

keys

KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyring

2010-09-10 07:30:00 -07:00

selinux

SELinux: allow userspace to read policy back out of the kernel

2010-10-21 10:12:58 +11:00

smack

security: secid_to_secctx returns len when data is NULL

2010-10-21 10:12:50 +11:00

tomoyo

TOMOYO: Print URL information before panic().

2010-10-21 10:12:45 +11:00

capability.c

secmark: make secmark object handling generic

2010-10-21 10:12:48 +11:00

commoncap.c

security: remove unused parameter from security_task_setscheduler()

2010-10-21 10:12:44 +11:00

device_cgroup.c

Merge branch 'master' into next

2010-05-06 10:56:07 +10:00

inode.c

securityfs: Drop dentry reference count when mknod fails

2010-08-02 15:34:59 +10:00

Kconfig

AppArmor: Enable configuring and building of the AppArmor security module

2010-08-02 15:38:34 +10:00

lsm_audit.c

Merge branch 'master' into next

2010-05-06 10:56:07 +10:00

Makefile

AppArmor: Enable configuring and building of the AppArmor security module

2010-08-02 15:38:34 +10:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

secmark: make secmark object handling generic

2010-10-21 10:12:48 +11:00