Catherine Zhang
2c7946a7bf
[SECURITY]: TCP/UDP getpeersec ...
This patch implements an application of the LSM-IPSec networking
controls whereby an application can determine the label of the
security association its TCP or UDP sockets are currently connected to
via getsockopt and the auxiliary data mechanism of recvmsg.
Patch purpose:
This patch enables a security-aware application to retrieve the
security context of an IPSec security association a particular TCP or
UDP socket is using. The application can then use this security
context to determine the security context for processing on behalf of
the peer at the other end of this connection. In the case of UDP, the
security context is for each individual packet. An example
application is the inetd daemon, which could be modified to start
daemons running at security contexts dependent on the remote client.
Patch design approach:
- Design for TCP
The patch enables the SELinux LSM to set the peer security context for
a socket based on the security context of the IPSec security
association. The application may retrieve this context using
getsockopt. When called, the kernel determines if the socket is a
connected (TCP_ESTABLISHED) TCP socket and, if so, uses the dst_entry
cache on the socket to retrieve the security associations. If a
security association has a security context, the context string is
returned, as for UNIX domain sockets.
- Design for UDP
Unlike TCP, UDP is connectionless. This requires a somewhat different
API to retrieve the peer security context. With TCP, the peer
security context stays the same throughout the connection, thus it can
be retrieved at any time between when the connection is established
and when it is torn down. With UDP, each read/write can have
different peer and thus the security context might change every time.
As a result the security context retrieval must be done TOGETHER with
the packet retrieval.
The solution is to build upon the existing Unix domain socket API for
retrieving user credentials. Linux offers the API for obtaining user
credentials via ancillary messages (i.e., out of band/control messages
that are bundled together with a normal message).
Patch implementation details:
- Implementation for TCP
The security context can be retrieved by applications using getsockopt
with the existing SO_PEERSEC flag. As an example (ignoring error
checking):
getsockopt(sockfd, SOL_SOCKET, SO_PEERSEC, optbuf, &optlen);
printf("Socket peer context is: %s\n", optbuf);
The SELinux function, selinux_socket_getpeersec, is extended to check
for labeled security associations for connected (TCP_ESTABLISHED ==
sk->sk_state) TCP sockets only. If so, the socket has a dst_cache of
struct dst_entry values that may refer to security associations. If
these have security associations with security contexts, the security
context is returned.
getsockopt returns a buffer that contains a security context string or
the buffer is unmodified.
- Implementation for UDP
To retrieve the security context, the application first indicates to
the kernel such desire by setting the IP_PASSSEC option via
getsockopt. Then the application retrieves the security context using
the auxiliary data mechanism.
An example server application for UDP should look like this:
toggle = 1;
toggle_len = sizeof(toggle);
setsockopt(sockfd, SOL_IP, IP_PASSSEC, &toggle, &toggle_len);
recvmsg(sockfd, &msg_hdr, 0);
if (msg_hdr.msg_controllen > sizeof(struct cmsghdr)) {
cmsg_hdr = CMSG_FIRSTHDR(&msg_hdr);
if (cmsg_hdr->cmsg_len <= CMSG_LEN(sizeof(scontext)) &&
cmsg_hdr->cmsg_level == SOL_IP &&
cmsg_hdr->cmsg_type == SCM_SECURITY) {
memcpy(&scontext, CMSG_DATA(cmsg_hdr), sizeof(scontext));
}
}
ip_setsockopt is enhanced with a new socket option IP_PASSSEC to allow
a server socket to receive security context of the peer. A new
ancillary message type SCM_SECURITY.
When the packet is received we get the security context from the
sec_path pointer which is contained in the sk_buff, and copy it to the
ancillary message space. An additional LSM hook,
selinux_socket_getpeersec_udp, is defined to retrieve the security
context from the SELinux space. The existing function,
selinux_socket_getpeersec does not suit our purpose, because the
security context is copied directly to user space, rather than to
kernel space.
Testing:
We have tested the patch by setting up TCP and UDP connections between
applications on two machines using the IPSec policies that result in
labeled security associations being built. For TCP, we can then
extract the peer security context using getsockopt on either end. For
UDP, the receiving end can retrieve the security context using the
auxiliary data mechanism of recvmsg.
Signed-off-by: Catherine Zhang <cxzhang@watson.ibm.com>
Acked-by: James Morris <jmorris@namei.org>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-03-20 22:41:23 -08:00
[ARM] Move AMBA include files to include/linux/amba/
2006-01-07 13:52:45 +00:00
[PATCH] remove gcc-2 checks
2006-01-08 20:14:02 -08:00
[PATCH] __user annotations of video_spu_palette
2006-02-07 20:58:50 -05:00
[PATCH] NLM: Fix the NLM_GRANTED callback checks
2006-02-14 16:09:34 -08:00
[MMC] Fix mmc_cmd_type() mask
2006-02-22 09:32:46 +00:00
[PATCH] remove bogus asm/bug.h includes.
2006-02-07 20:56:35 -05:00
[NETFILTER]: ctnetlink: avoid unneccessary event message generation
2006-03-20 18:03:59 -08:00
[NETFILTER] x_tables: Abstraction layer for {ip,ip6,arp}_tables
2006-01-12 14:06:43 -08:00
[NETFILTER]: Restore {ipt,ip6t,ebt}_LOG compatibility
2006-02-27 13:04:17 -08:00
[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family independant version
2006-03-20 18:03:40 -08:00
[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family independant version
2006-03-20 18:03:40 -08:00
[PATCH] nfsd4: rename lk_stateowner
2006-01-18 19:20:24 -08:00
[PATCH] md: allow sync-speed to be controlled per-device
2006-01-06 08:34:10 -08:00
[PATCH] spi: remove fastcall crap
2006-01-13 16:29:56 -08:00
[NET]: sem2mutex part 2
2006-03-20 22:35:41 -08:00
[PATCH] acct.h needs jiffies.h
2005-11-13 18:14:17 -08:00
[PATCH] suspend-to-ram: allow video options to be set at runtime
2006-02-20 20:00:10 -08:00
[AGPGART] Semaphore to Mutex conversion.
2006-01-16 20:53:46 -08:00
[PATCH] aio: reorder kiocb structure elements to make sync iocb setup faster
2006-01-08 20:14:03 -08:00
[PATCH] drivers/net/arcnet/: possible cleanups
2006-01-17 08:38:12 -05:00
Merge branch 'post-2.6.15' of git://brick.kernel.dk/data/git/linux-2.6-block
2006-01-06 09:01:25 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[ATM]: deregistration removes device from atm_devs list immediately
2005-11-29 16:16:41 -08:00
[PATCH] Increase AT_VECTOR_SIZE
2006-01-13 09:12:21 -08:00
[SCSI] Convert SCSI mid-layer to scsi_execute_async
2005-12-14 19:03:35 -08:00
[PATCH] cpusets: bitmap and mask remap operators
2005-10-30 17:37:21 -08:00
[PATCH] fix generic_fls64()
2006-02-03 08:32:00 -08:00
[PATCH] fix sysfs interaction and lifetime rules handling for queues
2006-03-18 18:34:37 -05:00
[PATCH] Cleanup bootmem allocator and fix alloc_bootmem_low
2006-01-06 08:33:26 -08:00
[PATCH] fat: support a truncate() for expanding size (generic_cont_expand)
2006-01-08 20:13:47 -08:00
[PARISC] Add __read_mostly section for parisc
2006-01-10 20:35:03 -05:00
[PATCH] hrtimer: move div_long_long_rem out of jiffies.h
2006-01-10 08:01:35 -08:00
[PATCH] move capable() to capability.h
2006-01-11 18:42:13 -08:00
[PATCH 1/3] cciss: bug fix for hpacucli
2005-11-18 22:00:17 +01:00
[ARM] Move asm/hardware/clock.h to linux/clk.h
2006-01-07 16:15:52 +00:00
[PATCH] New Omnikey Cardman 4000 driver
2005-11-13 18:14:10 -08:00
[PATCH] Add timestamp field to process events
2005-12-12 08:57:42 -08:00
[PATCH] select: fix returned timeval
2006-02-11 21:41:11 -08:00
[PATCH] mtd: 64 bit fixes
2006-03-09 19:47:37 -08:00
[PATCH] Work around ppc64 compiler bug
2006-01-10 08:32:35 -08:00
[PATCH] Make __always_inline actually force always inlining
2006-01-14 18:27:15 -08:00
[PATCH] When CONFIG_CC_OPTIMIZE_FOR_SIZE, allow gcc4 to control inlining
2006-01-14 18:27:16 -08:00
[PATCH] Abandon gcc-2.95.x
2006-01-08 20:14:02 -08:00
[PATCH] kbuild: permanently fix kernel configuration include mess
2005-11-06 10:22:04 +01:00
configfs: Add permission and ownership to configfs objects.
2006-02-03 14:01:05 -08:00
[CIFS] Reserve upcall IDX value for CIFS with connector header and add
2005-11-10 15:33:38 -08:00
[PATCH] console: Fix compile error
2005-11-07 07:53:52 -08:00
[PATCH] clean up lock_cpu_hotplug() in cpufreq
2005-11-28 14:42:23 -08:00
[CPUFREQ] convert remaining cpufreq semaphore to a mutex
2006-01-18 13:53:45 -08:00
[PATCH] x86: don't initialise cpu_possible_map to all ones
2006-02-10 08:13:12 -08:00
[PATCH] cpuset oom lock fix
2006-01-14 18:27:10 -08:00
[CRYPTO] Allow multiple implementations of the same algorithm
2006-01-09 14:15:37 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PATCH] remove bogus asm/bug.h includes.
2006-02-07 20:56:35 -05:00
[DCCP]: Make CCID2 be the default
2006-03-20 19:23:58 -08:00
[PATCH] dm: dm-table warning fix
2006-02-01 08:53:11 -08:00
[PATCH] Add bus_type probe, remove, shutdown methods.
2006-01-13 11:26:04 -08:00
[PATCH] device-mapper ioctl: add skip lock_fs flag
2006-01-06 08:34:01 -08:00
[PATCH] x86_64: Generalize DMI and enable for x86-64
2006-01-11 19:04:51 -08:00
[XFS] Add a mechanism for XFS to use the generic quota sync method.
2005-11-03 13:53:34 +11:00
Add definitions for the Dallas DS1742 RTC / non-volatile memory.
2005-11-17 16:23:43 +00:00
Add definitions for the Dallas DS17287 RTC.
2005-11-17 16:23:42 +00:00
[PATCH] fix rmmod problems with elevator attributes, clean them up
2006-03-18 22:27:18 -05:00
[PATCH] ELF: symbol table type additions
2006-01-08 20:13:49 -08:00
[PATCH] Compilation of kexec/kdump broken
2006-02-03 08:32:09 -08:00
[NET]: Don't exclude broadcast addresses from is_multicast_ether_addr()
2006-01-03 15:25:45 -08:00
[PATCH] bnx2: add 5708 support
2005-11-05 21:00:02 -05:00
[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem
2006-01-09 15:59:24 -08:00
[PATCH] fbdev: Sanitize ->fb_mmap prototype
2006-01-14 18:27:15 -08:00
[PATCH] vfs: *at functions: core
2006-01-18 19:20:29 -08:00
[PATCH] fix file counting
2006-03-08 14:14:01 -08:00
[NET]: Change sk_run_filter()'s return type in net/core/filter.c
2006-01-06 13:08:20 -08:00
[PATCH] driver core: replace "hotplug" by "uevent"
2006-01-04 16:18:08 -08:00
Revert "[PATCH] fbcon: Add rl (Roman Large) font"
2005-11-12 10:14:02 -08:00
[PATCH] ext3: ext3_symlink should use GFP_NOFS allocations inside
2006-03-11 09:19:34 -08:00
[PATCH] changing CONFIG_LOCALVERSION rebuilds too much, for no good reason
2005-11-09 07:55:57 -08:00
[PATCH] gianfar: Use new PHY_ID_FMT macro
2006-01-12 16:31:52 -05:00
[PATCH] fuse: fix async read for legacy filesystems
2006-02-01 08:53:09 -08:00
[PATCH] fix missing includes
2005-10-30 17:37:32 -08:00
[NETLINK]: Generic netlink family
2005-11-10 02:26:41 +01:00
[BLOCK] Document the READ/WRITE splitup of the disk stats
2005-11-12 10:55:21 +01:00
[PATCH] slab: Node rotor for freeing alien caches and remote per cpu pages.
2006-03-09 19:47:38 -08:00
[PATCH] s390: cputime misaccounting
2006-01-14 18:27:09 -08:00
[PATCH] ide: remove dead code from flagged_taskfile()
2005-11-19 22:17:55 +01:00
[PATCH] fix next_timer_interrupt() for hrtimer
2006-03-06 18:40:44 -08:00
[PATCH] Add NUMA policy support for huge pages.
2006-01-06 08:33:23 -08:00
[PATCH] hwmon: add VRM/VID support for some VIA CPUs
2006-01-05 22:16:26 -08:00
V4L/DVB (3365): i2c ids for upd64031a saa717x upd64083 wm8739
2006-01-15 09:02:44 -02:00
[PATCH] I2C: Resurrect i2c_smbus_write_i2c_block_data.
2006-02-06 12:02:14 -08:00
[PATCH] I2O: fix and workaround for Motorola/Freescale controller
2006-02-03 08:32:07 -08:00
[IPV6]: ROUTE: Add support for Router Preference (RFC4191).
2006-03-20 17:04:53 -08:00
[PATCH] drivers/ide/ide-io.c: make __ide_end_request() static
2006-02-03 08:32:12 -08:00
include/linux: enclose idr.h in #ifndef
2005-11-08 17:14:08 +01:00
[NET] core: add RFC2863 operstate
2006-03-20 17:09:11 -08:00
[PATCH] bonding: suppress duplicate packets
2006-03-03 20:58:00 -05:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PPP]: add PPP MPPE encryption module
2005-11-08 09:40:47 -08:00
[PPPOX]: Fix assignment into const proto_ops.
2006-01-03 13:11:23 -08:00
[PATCH] changing CONFIG_LOCALVERSION rebuilds too much, for no good reason
2005-11-09 07:55:57 -08:00
[SECURITY]: TCP/UDP getpeersec
2006-03-20 22:41:23 -08:00
[NET]: Endian-annotate in_aton()
2006-01-06 13:24:54 -08:00
[IPV4] ARP: Alloc acceptance of unsolicited ARP via netdevice sysctl.
2006-03-20 22:39:47 -08:00
[PATCH] x86_64: add __meminit for memory hotplug
2006-01-16 23:18:35 -08:00
[PATCH] aio: remove kioctx from mm_struct
2005-11-13 18:14:16 -08:00
[PATCH] inotify: add two inotify_add_watch flags
2005-12-12 08:57:43 -08:00
[PATCH] Input: fix add modalias support build error
2006-01-04 16:18:09 -08:00
[SCSI] Kill the SCSI softirq handling
2006-01-09 16:03:03 +01:00
[PATCH] Introduce __iowrite32_copy
2006-02-01 08:53:13 -08:00
[PATCH] sn3 iomem annotations and fixes
2006-02-08 01:03:52 -05:00
[PATCH] __deprecated_for_modules: insert_resource
2005-11-07 07:54:07 -08:00
[NET]: Endian-annotate struct iphdr
2006-01-06 13:24:29 -08:00
[PATCH] ipmi: use refcount in message handler
2005-11-07 07:53:43 -08:00
[IPV6]: ROUTE: Add accept_ra_rt_info_max_plen sysctl.
2006-03-20 17:07:03 -08:00
[IPV6]: ROUTE: Add experimental support for Route Information Option in RA (RFC4191).
2006-03-20 17:06:24 -08:00
[IRDA]: TOIM3232 dongle support
2006-03-20 22:21:10 -08:00
[PATCH] s390: cleanup Kconfig
2006-01-06 08:33:53 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PATCH] char/isicom: More whitespaces and coding style
2006-01-10 08:02:01 -08:00
[PATCH] changing CONFIG_LOCALVERSION rebuilds too much, for no good reason
2005-11-09 07:55:57 -08:00
[PATCH] jbd: revert checkpoint list changes
2006-02-14 16:09:34 -08:00
[JFFS2] Clean up trailing white spaces
2005-11-07 14:18:56 +01:00
[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem
2006-01-09 15:59:24 -08:00
[JFFS2] Clean up trailing white spaces
2005-11-07 14:18:56 +01:00
[PATCH] hrtimer: move div_long_long_rem out of jiffies.h
2006-01-10 08:01:35 -08:00
[PATCH] tty buffering stall fix
2006-02-10 08:13:12 -08:00
[PATCH] x86_64: Add boot option to disable randomized mappings and cleanup
2006-02-17 08:00:40 -08:00
[PATCH] small kernel_stat.h cleanup
2005-11-07 07:53:37 -08:00
[PATCH] kexec: fix in free initrd when overlapped with crashkernel region
2006-02-10 08:13:12 -08:00
[PATCH] Keys: Add LSM hooks for key management [try #3 ]
2005-10-30 17:37:23 -08:00
[PATCH] keys: Permit running process to instantiate keys
2006-01-08 20:13:53 -08:00
[PATCH] keys: Permit running process to instantiate keys
2006-01-08 20:13:53 -08:00
[PATCH] Increase max kmalloc size for very large systems
2006-03-06 18:40:44 -08:00
[PATCH] fix missing includes
2005-10-30 17:37:32 -08:00
Revert mount/umount uevent removal
2006-02-22 09:39:02 -08:00
[PATCH] kprobes: fix unloading of self probed module
2006-01-11 18:42:12 -08:00
[PATCH] Add kthread_stop_sem()
2005-10-30 17:37:17 -08:00
[PATCH] hrtimer: fix multiple macro argument expansion
2006-02-15 15:32:22 -08:00
[PATCH] libata: fix qc->n_elem == 0 case handling in ata_qc_next_sg
2006-02-20 16:48:18 -05:00
[LIST]: Introduce list_for_each_entry_from
2006-03-20 17:19:17 -08:00
[PATCH] mutex subsystem, semaphore to completion: drivers/block/loop.c
2006-01-09 15:59:27 -08:00
[PATCH] Fix compilation with CONFIG_MEMORY_HOTPLUG=y and gcc41.
2006-01-08 20:12:39 -08:00
[PATCH] memory-hotplug compile fix
2006-03-06 18:40:44 -08:00
[PATCH] NUMA policies in the slab allocator V2
2006-01-18 19:20:18 -08:00
[PATCH] Fix undefined symbols for nommu architecture
2006-02-20 20:00:11 -08:00
[PATCH] mm: migration page refcounting fix
2006-01-18 19:20:17 -08:00
[PATCH] GFP_ZONETYPES: calculate from GFP_ZONEMASK
2006-02-01 08:53:15 -08:00
[PATCH] modules: fix sparse warning for every MODULE_PARM
2005-10-30 17:37:26 -08:00
kbuild: un-stringnify KBUILD_MODNAME
2006-01-06 21:17:50 +01:00
[PATCH] per-mountpoint noatime/nodiratime
2006-01-10 08:01:34 -08:00
[PATCH] fat: support ->direct_IO()
2006-01-08 20:13:46 -08:00
[PATCH] fix/simplify mutex debugging code
2006-01-11 08:14:16 -08:00
[PATCH] fix/simplify mutex debugging code
2006-01-11 08:14:16 -08:00
[PATCH] mv643xx_eth: Clean up platform_data configuration
2006-01-27 11:11:16 -05:00
[PATCH] n_r3964: fixed usage of HZ; removed bad include
2005-12-24 15:37:00 -08:00
[PATCH] vfs: *at functions: core
2006-01-18 19:20:29 -08:00
[PATCH] unshare system call -v5: unshare namespace
2006-02-07 16:12:34 -08:00
[PATCH] nbd: fix TX/RX race condition
2006-01-06 08:33:20 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PATCH] ncpfs: remove kmalloc wrapper
2006-01-14 18:27:12 -08:00
[NET]: move struct proto_ops to const
2006-01-03 13:11:15 -08:00
[NET]: dev_put/dev_hold cleanup
2006-03-20 22:32:28 -08:00
[NETFILTER]: Don't invoke okfn in CONFIG_NETFILTER=n variant of nf_hook()
2006-02-15 15:18:19 -08:00
[NETFILTER]: Fix xfrm lookup after SNAT
2006-02-15 01:34:23 -08:00
[NETFILTER]: net/ipv[46]/netfilter.c cleanups
2006-01-10 12:54:29 -08:00
[NETLINK]: Add netlink_has_listeners for avoiding unneccessary event message generation
2006-03-20 18:52:01 -08:00
[PATCH] Fix compile for CONFIG_SYSVIPC=n or CONFIG_SYSCTL=n
2006-02-20 20:00:11 -08:00
NFSv4: Allow entries in the idmap cache to expire
2006-01-06 14:58:58 -05:00
NFS: simplify inlined bit ops in nfs_page.h
2006-01-06 14:58:48 -05:00
NFSv4: Ensure DELEGRETURN returns attributes
2006-01-06 14:58:51 -05:00
[PATCH] remove bogus asm/bug.h includes.
2006-02-07 20:56:35 -05:00
[PATCH] mm: page_state opt docs
2006-01-06 08:33:29 -08:00
[PATCH] mm: gfp_noreclaim cleanup
2005-11-13 18:14:12 -08:00
[PATCH] Permit multiple inclusion of linux/pagevec.h
2006-01-08 20:13:52 -08:00
[PATCH] parport: add parallel port support for SGI O2
2006-02-03 08:32:05 -08:00
[PATCH] include/linux/parport_pc.h: "extern inline" -> "static inline"
2006-01-06 08:33:58 -08:00
[PATCH] pciehp: request control of each hotplug controller individually
2005-11-10 16:09:15 -08:00
[PATCH] PCI: drivers/pci/pci.c: #if 0 pci_find_ext_capability()
2006-01-31 18:00:11 -08:00
[TG3]: Add 5787 and 5754 basic support
2006-03-20 22:27:35 -08:00
[PATCH] powerpc: Experimental support for new G5 Macs ( #2 )
2006-01-09 15:03:17 +11:00
[PATCH] remove unused blkp field in percpu_data
2006-01-08 20:13:59 -08:00
[PATCH] percpu_counter_sum()
2006-03-08 14:14:01 -08:00
Fix "stuct", "strut", "struc" typos
2006-01-15 02:12:54 +01:00
[PATCH] changing CONFIG_LOCALVERSION rebuilds too much, for no good reason
2005-11-09 07:55:57 -08:00
[PATCH] phy: Added a macro to represent the string format used to match a phy device
2006-01-12 16:31:52 -05:00
[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem
2006-01-09 15:59:24 -08:00
[PKT_SCHED] netem: packet corruption option
2006-01-03 13:11:05 -08:00
[PATCH] pktcdvd: Allow larger packets
2006-02-05 11:06:52 -08:00
[PATCH] Driver Core: Add platform_device_del()
2006-01-04 16:18:09 -08:00
[PATCH] move pm_register/etc. to CONFIG_PM_LEGACY, pm_legacy.h
2005-11-13 18:14:10 -08:00
[PATCH] move pm_register/etc. to CONFIG_PM_LEGACY, pm_legacy.h
2005-11-13 18:14:10 -08:00
[PATCH] 1/5 powerpc: Rework PowerMac i2c part 1
2006-01-09 15:47:16 +11:00
[ALSA] [PATCH] alsa: Improved PnP suspend support
2006-01-03 12:31:30 +01:00
[PATCH] Add pselect/ppoll system call implementation
2006-01-18 19:20:30 -08:00
[PATCH] kernel/posix-timers.c: remove do_posix_clock_notimer_create()
2006-02-01 08:53:13 -08:00
[PPP]: add PPP MPPE encryption module
2005-11-08 09:40:47 -08:00
[PATCH] fix race with preempt_enable()
2005-12-22 09:17:39 -08:00
[PATCH] powerpc: Add/remove/update properties in /proc/device-tree
2006-01-13 21:02:13 +11:00
[PATCH] fix zap_thread's ptrace related problems
2006-02-15 11:05:43 -08:00
[PATCH] saner handling of auto_acct_off() and DQUOT_OFF() in umount
2005-11-07 18:18:09 -08:00
[PATCH] quota: remove unused sync_dquots_dev()
2006-02-03 08:32:08 -08:00
[PATCH] rcu file: use atomic primitives
2006-01-08 20:13:48 -08:00
[SCSI] raid_class.c - adding RAID10 and RAID10 defines
2006-01-12 11:35:15 -06:00
[PATCH] NOMMU: Provide shared-writable mmap support on ramfs
2006-01-06 08:33:32 -08:00
[INET6]: Generalise tcp_v6_hash_connect
2006-01-03 13:10:56 -08:00
[PATCH] rcu batch tuning
2006-03-08 14:14:01 -08:00
[ACPI] fix reboot upon suspend-to-disk
2005-12-15 13:28:14 -05:00
[PATCH] reiserfs_get_acl() build fix
2006-02-05 11:06:52 -08:00
[PATCH] reiserfs: fix unaligned bitmap usage
2006-03-02 10:37:59 -08:00
[PATCH] reiserfs: remove kmalloc wrapper
2006-02-01 08:53:25 -08:00
[PATCH] reiserfs: remove reiserfs_permission_locked
2006-02-01 08:53:25 -08:00
[PATCH] relayfs: cleanup, change relayfs_file_* to relay_file_*
2006-01-08 20:13:51 -08:00
[PATCH] rapidio: message interface updates
2005-11-07 07:53:47 -08:00
[PATCH] DocBook: fix kernel-doc comments
2006-01-10 08:01:53 -08:00
[PATCH] RapidIO support: core includes
2005-11-07 07:53:46 -08:00
[PATCH] rapidio: core updates
2005-11-07 07:53:46 -08:00
[PATCH] Direct Migration V9: remove_from_swap() to remove swap ptes
2006-02-01 08:53:16 -08:00
[LIB] reed_solomon: Clean up trailing white spaces
2005-11-07 14:25:38 +01:00
[PATCH] move rtc_interrupt() prototype to rtc.h
2006-01-08 20:13:47 -08:00
[NET] rtnetlink: Add RTPROT entry for Netsukuku.
2006-03-20 22:26:17 -08:00
[PATCH] add sem_is_read/write_locked()
2005-10-29 21:40:35 -07:00
[PATCH] Introduce sg_set_buf
2005-10-30 11:14:39 +11:00
[PATCH] remove __put_task_struct_cb export again
2006-03-11 09:19:34 -08:00
[PATCH] vesafb: Drop blank hook
2006-01-10 08:01:42 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PATCH] remove gcc-2 checks
2006-01-08 20:14:02 -08:00
[SECURITY]: TCP/UDP getpeersec
2006-03-20 22:41:23 -08:00
[PATCH] fix remaining missing includes
2005-11-07 07:53:41 -08:00
[PATCH] fix missing includes
2005-10-30 17:37:32 -08:00
[SERIAL] Make uart_port flags a bitwise type
2006-01-21 23:03:28 +00:00
[SPARC64]: Add SUN4V Hypervisor Console driver.
2006-03-20 01:12:18 -08:00
Philips PNX8550 support: MIPS32-like core with 2 Trimedias on it.
2005-10-29 19:31:54 +01:00
[SERIAL] Trivial comment fix: include/linux/serial_reg.h
2006-02-23 09:49:35 +00:00
[PATCH] SHM_NORESERVE flags for shmget()
2005-11-07 07:53:37 -08:00
[PATCH] Add tmpfs options for memory placement policies
2006-01-14 18:27:07 -08:00
[PATCH] sigaction should clear all signals on SIG_IGN, not just < 32
2006-01-08 20:13:53 -08:00
[NET]: Uninline kfree_skb and allow NULL argument
2006-03-20 21:28:35 -08:00
[PATCH] slab: fix kzalloc and kstrdup caller report for CONFIG_DEBUG_SLAB
2006-02-01 08:53:18 -08:00
[PATCH] smbfs: remove kmalloc wrapper
2006-01-14 18:27:13 -08:00
[PATCH] remove bogus asm/bug.h includes.
2006-02-07 20:56:35 -05:00
[PATCH] m68k: thread_info header cleanup
2005-11-13 18:14:13 -08:00
[SECURITY]: TCP/UDP getpeersec
2006-03-20 22:41:23 -08:00
kbuild: set correct KBUILD_MODNAME when using well known kernel symbols as module names
2005-12-26 00:33:41 +01:00
[PATCH] remove gcc-2 checks
2006-01-08 20:14:02 -08:00
[PATCH] changing CONFIG_LOCALVERSION rebuilds too much, for no good reason
2005-11-09 07:55:57 -08:00
[PATCH] superhyway: multiple block support and VCR rework
2005-11-07 07:53:28 -08:00
[PATCH] Fix build failure in recent pm_prepare_* changes.
2006-02-07 16:12:33 -08:00
[PATCH] Terminate process that fails on a constrained allocation
2006-02-20 20:00:09 -08:00
[PATCH] new driver synclink_gt
2006-01-08 20:13:45 -08:00
[PATCH] flags parameter for linkat
2006-02-24 14:31:39 -08:00
[TCP]: sysctl to allow TCP window > 32767 sans wscale
2006-03-20 22:40:29 -08:00
[TCP] mtu probing: move tcp-specific data out of inet_connection_sock
2006-03-20 21:32:58 -08:00
[PATCH] fix missing includes
2005-10-30 17:37:32 -08:00
[PATCH] m68k: convert thread flags to use bit fields
2005-11-13 18:14:14 -08:00
[PATCH] select: fix returned timeval
2006-02-11 21:41:11 -08:00
[PATCH] hrtimer: switch itimers to hrtimer
2006-01-10 08:01:38 -08:00
[PATCH] Provide an interface for getting the current tick length
2006-02-17 08:24:29 -08:00
[TIPC] Update of file headers
2006-01-12 14:06:38 -08:00
[TIPC] Updated link priority macros
2006-01-18 00:45:15 +01:00
[PATCH] Zone reclaim: Reclaim logic
2006-01-18 19:20:17 -08:00
[PATCH] tty buffering stall fix
2006-02-10 08:13:12 -08:00
[PATCH] tty buffering stall fix
2006-02-10 08:13:12 -08:00
[PATCH] TTY layer buffering revamp
2006-01-10 08:01:59 -08:00
[PATCH] Define BITS_PER_BYTE
2006-02-01 08:53:13 -08:00
remove pointers to the defunct UDF mailing list
2006-01-03 13:19:13 +01:00
remove pointers to the defunct UDF mailing list
2006-01-03 13:19:13 +01:00
remove pointers to the defunct UDF mailing list
2006-01-03 13:19:13 +01:00
[INET_SOCK]: Move struct inet_sock & helper functions to net/inet_sock.h
2006-01-03 13:11:21 -08:00
[PATCH] ufs: fix char vs. __s8 clash in ufs
2006-02-03 08:32:05 -08:00
[PATCH] ufs: fix oops with `ufs1' type
2006-02-03 08:32:04 -08:00
Input: uinput - add UI_SET_SWBIT ioctl
2005-11-20 00:51:33 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-2.6
2006-01-04 18:44:12 -08:00
[PATCH] USB: USB authentication states
2006-01-31 17:23:44 -08:00
[PATCH] USB Storage: add alauda support
2006-01-04 13:51:42 -08:00
V4L/DVB (3269): ioctls cleanups.
2006-01-09 15:32:31 -02:00
[PATCH] v4l: 829: fixed user mode compiling
2005-11-09 07:56:23 -08:00
[PATCH] drivers/media/video __user annotations and fixes
2006-02-08 01:03:39 -05:00
[PATCH] vmalloc_node
2005-10-29 21:40:35 -07:00
[PATCH] fix remaining missing includes
2005-11-07 07:53:41 -08:00
[PATCH] Eliminate __attribute__ ((packed)) warnings for gcc-4.1
2006-01-08 20:14:07 -08:00
[PATCH] add schedule_on_each_cpu()
2006-01-08 20:12:40 -08:00
[PATCH] export/change sync_page_range/_nolock()
2006-01-08 20:13:47 -08:00
[PATCH] move xattr permission checks into the VFS
2006-01-10 08:01:29 -08:00
[XFRM]: Rearrange struct xfrm_aevent_id for better compatibility.
2006-03-20 21:25:50 -08:00
[PATCH] lib/zlib*: cleanups
2006-01-10 08:01:57 -08:00
[PATCH] ppc64 boot: remove include from include/linux/zutil.h
2005-10-29 15:04:02 +10:00
2c7946a7bf