Kees Cook 2cc8a71641 Yama: replace capable() with ns_capable() ... When checking capabilities, the question we want to be asking is "does current() have the capability in the child's namespace?" Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: James Morris <james.l.morris@oracle.com>		2012-05-15 10:27:57 +10:00
..
apparmor	Fix execve behavior apparmor for PR_{GET,SET}_NO_NEW_PRIVS	2012-04-14 11:13:18 +10:00
integrity	security: fix ima kconfig warning	2012-02-28 11:01:15 +11:00
keys	KEYS: Add invalidation support	2012-05-11 10:56:56 +01:00
selinux	Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs	2012-04-14 11:13:18 +10:00
smack	Smack: move label list initialization	2012-04-18 12:02:28 +10:00
tomoyo	TOMOYO: Accept manager programs which do not start with / .	2012-05-15 10:24:29 +10:00
yama	Yama: replace capable() with ns_capable()	2012-05-15 10:27:57 +10:00
capability.c	security: create task_free security callback	2012-02-10 09:14:51 +11:00
commoncap.c	Linux 3.4-rc5	2012-05-04 12:46:40 +10:00
device_cgroup.c	cgroup: remove cgroup_subsys argument from callbacks	2012-02-02 09:20:22 -08:00
inode.c	securityfs: fix object creation races	2012-01-10 10:20:35 -05:00
Kconfig	KEYS: Move the key config into security/keys/Kconfig	2012-05-11 10:56:56 +01:00
lsm_audit.c	lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit_data'	2012-04-03 09:49:59 -07:00
Makefile	security: Yama LSM	2012-02-10 09:18:52 +11:00
min_addr.c	mmap_min_addr check CAP_SYS_RAWIO only for write	2010-04-23 08:56:31 +10:00
security.c	security: trim security.h	2012-02-14 10:45:42 +11:00