Casey Schaufler
e114e47377
Smack: Simplified Mandatory Access Control Kernel ...
Smack is the Simplified Mandatory Access Control Kernel.
Smack implements mandatory access control (MAC) using labels
attached to tasks and data containers, including files, SVIPC,
and other tasks. Smack is a kernel based scheme that requires
an absolute minimum of application support and a very small
amount of configuration data.
Smack uses extended attributes and
provides a set of general mount options, borrowing technics used
elsewhere. Smack uses netlabel for CIPSO labeling. Smack provides
a pseudo-filesystem smackfs that is used for manipulation of
system Smack attributes.
The patch, patches for ls and sshd, a README, a startup script,
and x86 binaries for ls and sshd are also available on
http://www.schaufler-ca.com
Development has been done using Fedora Core 7 in a virtual machine
environment and on an old Sony laptop.
Smack provides mandatory access controls based on the label attached
to a task and the label attached to the object it is attempting to
access. Smack labels are deliberately short (1-23 characters) text
strings. Single character labels using special characters are reserved
for system use. The only operation applied to Smack labels is equality
comparison. No wildcards or expressions, regular or otherwise, are
used. Smack labels are composed of printable characters and may not
include "/".
A file always gets the Smack label of the task that created it.
Smack defines and uses these labels:
"*" - pronounced "star"
"_" - pronounced "floor"
"^" - pronounced "hat"
"?" - pronounced "huh"
The access rules enforced by Smack are, in order:
1. Any access requested by a task labeled "*" is denied.
2. A read or execute access requested by a task labeled "^"
is permitted.
3. A read or execute access requested on an object labeled "_"
is permitted.
4. Any access requested on an object labeled "*" is permitted.
5. Any access requested by a task on an object with the same
label is permitted.
6. Any access requested that is explicitly defined in the loaded
rule set is permitted.
7. Any other access is denied.
Rules may be explicitly defined by writing subject,object,access
triples to /smack/load.
Smack rule sets can be easily defined that describe Bell&LaPadula
sensitivity, Biba integrity, and a variety of interesting
configurations. Smack rule sets can be modified on the fly to
accommodate changes in the operating environment or even the time
of day.
Some practical use cases:
Hierarchical levels. The less common of the two usual uses
for MLS systems is to define hierarchical levels, often
unclassified, confidential, secret, and so on. To set up smack
to support this, these rules could be defined:
C Unclass rx
S C rx
S Unclass rx
TS S rx
TS C rx
TS Unclass rx
A TS process can read S, C, and Unclass data, but cannot write it.
An S process can read C and Unclass. Note that specifying that
TS can read S and S can read C does not imply TS can read C, it
has to be explicitly stated.
Non-hierarchical categories. This is the more common of the
usual uses for an MLS system. Since the default rule is that a
subject cannot access an object with a different label no
access rules are required to implement compartmentalization.
A case that the Bell & LaPadula policy does not allow is demonstrated
with this Smack access rule:
A case that Bell&LaPadula does not allow that Smack does:
ESPN ABC r
ABC ESPN r
On my portable video device I have two applications, one that
shows ABC programming and the other ESPN programming. ESPN wants
to show me sport stories that show up as news, and ABC will
only provide minimal information about a sports story if ESPN
is covering it. Each side can look at the other's info, neither
can change the other. Neither can see what FOX is up to, which
is just as well all things considered.
Another case that I especially like:
SatData Guard w
Guard Publish w
A program running with the Guard label opens a UDP socket and
accepts messages sent by a program running with a SatData label.
The Guard program inspects the message to ensure it is wholesome
and if it is sends it to a program running with the Publish label.
This program then puts the information passed in an appropriate
place. Note that the Guard program cannot write to a Publish
file system object because file system semanitic require read as
well as write.
The four cases (categories, levels, mutual read, guardbox) here
are all quite real, and problems I've been asked to solve over
the years. The first two are easy to do with traditonal MLS systems
while the last two you can't without invoking privilege, at least
for a while.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Cc: Joshua Brindle <method@manicmethod.com>
Cc: Paul Moore <paul.moore@hp.com>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Chris Wright <chrisw@sous-sol.org>
Cc: James Morris <jmorris@namei.org>
Cc: "Ahmed S. Darwish" <darwish.07@gmail.com>
Cc: Andrew G. Morgan <morgan@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-02-05 09:44:20 -08:00
[CAN]: Add missing Kbuild entries
2008-01-28 14:54:13 -08:00
gpiolib: pca9539 i2c gpio expander support
2008-02-05 09:44:13 -08:00
NLM: Fix sign of length of NLM variable length strings
2008-02-01 16:42:02 -05:00
mmc: remove unused 'mode' from the mmc_host structure
2007-12-12 20:01:01 +01:00
[NETFILTER]: nf_{conntrack,nat}_pptp: annotate PPtP helper with const
2008-01-31 19:28:09 -08:00
[NETFILTER]: arp_tables: netns preparation
2008-01-31 19:27:40 -08:00
[NETFILTER]: x_tables: return new table from {arp,ip,ip6}t_register_table()
2008-01-31 19:27:36 -08:00
[NETFILTER]: ip6_tables: netns preparation
2008-01-31 19:27:39 -08:00
nfsd: Allow AIX client to read dir containing mountpoints
2008-02-01 16:42:06 -05:00
mcp23s08 spi gpio expander support
2008-02-05 09:44:13 -08:00
ssb: Add boardflags_hi field to the sprom data structure
2008-01-28 15:09:52 -08:00
SUNRPC: spin svc_rqst initialization to its own function
2008-02-01 16:42:15 -05:00
[NET] tc_nat: header install
2007-12-26 19:36:35 -08:00
USB: fix codingstyle issues in include/linux/usb/
2008-02-01 14:35:07 -08:00
ACPI: make _OSI(Linux) console messages smarter
2008-01-23 21:26:15 -05:00
x86: move pmtmr related declarations
2008-01-30 13:30:18 +01:00
apm_event{,info}_t are userspace types
2007-12-17 19:28:16 -08:00
libata annotations and fixes
2008-01-23 05:24:15 -05:00
[ATM]: [br2864] whitespace cleanup
2008-01-28 15:00:14 -08:00
[ATM]: Convert struct class_device to struct device
2008-01-28 15:00:12 -08:00
[ARM] 4660/3: at91: allow selecting UART for early kernel messages
2008-02-04 13:16:39 +00:00
[SCSI] attribute_container: update to use the group interface
2008-01-23 11:29:17 -06:00
[AUDIT] break large execve argument logging into smaller messages
2008-02-01 14:23:55 -05:00
remove BITS_TO_TYPE macro
2007-10-19 11:53:42 -07:00
remove BITS_TO_TYPE macro
2007-10-19 11:53:42 -07:00
block: kill swap_io_context()
2008-02-01 11:34:49 +01:00
Fix blktrace compile warning
2008-01-29 21:55:15 +01:00
Revert "x86_64: allocate sparsemem memmap above 4G"
2007-10-29 14:05:37 -07:00
Add buffer head related helper functions
2008-01-28 23:58:26 -05:00
[CAN]: Add PF_CAN core module
2008-01-28 14:54:10 -08:00
Smack: Simplified Mandatory Access Control Kernel
2008-02-05 09:44:20 -08:00
ide-cd: move lba_to_msf() and msf_to_lba() to <linux/cdrom.h>
2008-02-01 23:09:24 +01:00
Add cgroupstats
2007-10-19 11:53:36 -07:00
sched: cpu accounting controller (V2)
2007-12-02 20:04:49 +01:00
Add cgroupstats
2007-10-19 11:53:36 -07:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
clocksource: add unregister function to disable unusable clocksources
2008-01-30 13:30:02 +01:00
timerfd: new timerfd API
2008-02-05 09:44:07 -08:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
Add wait_for_completion_killable
2007-12-06 17:40:19 -05:00
[CONNECTOR]: Cleanup struct cn_callback_entry
2008-01-28 15:00:40 -08:00
x86: add _AT() macro to conditionally cast
2008-01-30 13:32:42 +01:00
cpu-hotplug: fix build on !CONFIG_SMP
2008-01-25 21:08:02 +01:00
cpuidle: fix HP nx6125 regression
2007-11-19 21:43:22 -05:00
x86: avoid build warning
2008-01-30 13:31:10 +01:00
hotplug cpu: migrate a task within its cpuset
2007-10-19 11:53:44 -07:00
[CRYPTO] api: Set default CRYPTO_MINALIGN to unsigned long long
2008-01-11 08:17:01 +11:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
Spelling fixes: lenght->length
2008-02-03 15:42:53 +02:00
[PATCH] audit: watching subtrees
2007-10-21 02:37:45 -04:00
[DCCP]: Reorganize struct dccp_sock to save 8 bytes
2008-02-03 04:28:53 -08:00
softlockup: automatically detect hung TASK_UNINTERRUPTIBLE tasks
2008-01-25 21:08:02 +01:00
Add cgroupstats
2007-10-19 11:53:36 -07:00
dm: merge max_hw_sector
2007-12-20 17:32:12 +00:00
iommu sg merging: add device_dma_parameters structure
2008-02-05 09:44:10 -08:00
dlm: Split lock mode and flag constants into a sharable header.
2008-01-25 14:46:04 -08:00
dlm: Split lock mode and flag constants into a sharable header.
2008-01-25 14:46:04 -08:00
dm io:ctl use constant struct size
2007-10-20 02:00:58 +01:00
iommu sg merging: add accessors for segment_boundary_mask in device_dma_parameters()
2008-02-05 09:44:11 -08:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
Intel IOMMU: DMAR fault handling support
2007-10-22 08:13:19 -07:00
DMI: create dmi_get_slot()
2008-01-23 21:23:13 -05:00
Make asm-x86/bootparam.h includable from userspace.
2007-10-23 15:49:47 +10:00
kexec: add BSS to resource tree
2007-10-22 08:13:19 -07:00
efs: new export ops
2007-10-22 08:13:20 -07:00
block: let elv_register() return void
2007-12-18 08:29:28 +01:00
x86: x86 core dump TLS
2008-01-30 13:31:56 +01:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
x86 merge fallout: uml
2007-10-29 07:41:32 -07:00
exportfs: update documentation
2007-10-22 08:13:21 -07:00
fix up ext2_fs.h for userspace after reservations backport
2007-11-29 09:24:53 -08:00
Fix 64KB blocksize in ext3 directories
2007-11-14 18:45:43 -08:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
ext4: Add new functions for searching extent tree
2008-01-28 23:58:27 -05:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
ext4: Add multi block allocator for ext4
2008-01-29 00:19:52 -05:00
hwmon: (f75375s) Allow setting up fans with platform_data
2007-11-08 08:42:46 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/bunk/trivial
2008-02-04 07:58:52 -08:00
[PATCH] pass dentry to audit_inode()/audit_inode_child()
2007-10-21 02:37:18 -04:00
fuse: pass open flags to read and write
2007-11-29 09:24:54 -08:00
futex: Add bitset conditional wait/wakeup functionality
2008-02-01 17:45:14 +01:00
Driver core: convert block from raw kobjects to core devices
2008-01-24 20:40:36 -08:00
Page allocator: clean up pcp draining functions
2008-02-05 09:44:17 -08:00
sched: remove the !PREEMPT_BKL code
2008-01-25 21:08:33 +01:00
Spelling fixes: lenght->length
2008-02-03 15:42:53 +02:00
<linux/hdsmart.h> is not used by kernel code
2008-02-01 23:09:34 +01:00
HID: Support Samsung IR remote
2008-01-28 14:51:22 +01:00
mm: fix PageUptodate data race
2008-02-05 09:44:19 -08:00
x86: nuke a ton of dead hpet code
2008-01-30 13:30:27 +01:00
timerfd: new timerfd API
2008-02-05 09:44:07 -08:00
Revert "hugetlb: Add hugetlb_dynamic_pool sysctl"
2007-12-17 19:28:17 -08:00
[HWRNG]: move status polling loop to data_present callbacks
2008-01-11 08:16:16 +11:00
i2c: Discard unused driver IDs
2008-01-27 18:14:50 +01:00
i2c: Add i2c_new_dummy() utility
2008-01-27 18:14:52 +01:00
Input: i8042 - export i8042_command()
2007-10-22 00:56:52 -04:00
ide: move check_dma_crc() to ide-dma.c
2008-02-02 19:56:47 +01:00
iwlwifi: Fix MIMO PS mode
2008-02-01 16:13:16 -05:00
[IPV6]: Add RFC4214 support
2008-01-28 14:55:09 -08:00
[IPV6] ADDRCONF: Support RFC3484 configurable address selection policy table.
2008-01-28 14:53:58 -08:00
[CAN]: Allocate protocol numbers for PF_CAN
2008-01-28 14:54:09 -08:00
bonding: Add new layer2+3 hash for xor/802.3ad modes
2007-12-07 15:00:32 -05:00
[ETHER]: Bring back MAC_FMT
2008-01-28 15:08:27 -08:00
annotate the rest of drivers/net/wan
2008-01-28 15:07:58 -08:00
[TR]: Use ctl paths to register net/token-ring/ table
2008-01-28 14:56:28 -08:00
annotate tun
2008-01-28 15:07:57 -08:00
[IPV6]: Add RFC4214 support
2008-01-28 14:55:09 -08:00
[VLAN]: Turn __constant_htons into htons where possible
2008-01-28 15:08:32 -08:00
[IPV4]: Enable use of 240/4 address space.
2008-01-28 15:08:44 -08:00
[LRO]: fix lro_gen_skb() alignment
2007-12-05 05:37:32 -08:00
[IPV4]: Make struct ipv4_devconf static.
2008-01-31 19:28:31 -08:00
Remove __INIT_REFOK and __INITDATA_REFOK
2008-02-03 08:58:07 +01:00
x86: early boot debugging via FireWire (ohci1394_dma=early)
2008-01-30 13:34:11 +01:00
capabilities: introduce per-process capability bounding set
2008-02-05 09:44:20 -08:00
[PATCH] new helper - inotify_evict_watch()
2007-10-21 02:37:38 -04:00
rfkill: add the WiMAX radio type
2008-01-31 19:26:46 -08:00
Preempt-RCU: Use softirq instead of tasklets for
2008-01-25 21:08:23 +01:00
block: cfq: make the io contect sharing lockless
2008-01-28 10:50:33 +01:00
iommu sg: add IOMMU helper functions for the free area management
2008-02-05 09:44:11 -08:00
x86: remove extern declarations for code, data, bss resources
2008-01-30 13:30:32 +01:00
ioprio: move io priority from task_struct to io_context
2008-01-28 10:50:29 +01:00
virtualization of sysv msg queues is incomplete
2007-10-19 11:53:48 -07:00
IPMI: fix comparison in demangle_device_id
2007-10-30 08:06:55 -07:00
[NETNS]: Tcp-v6 sockets per-net lookup.
2008-01-31 19:28:20 -08:00
genirq: add unlocked version of set_irq_handler()
2007-12-18 18:05:58 +01:00
jbd: Fix assertion failure in fs/jbd/checkpoint.c
2007-12-05 09:21:20 -08:00
jbd2: add lockdep support
2008-01-28 23:58:27 -05:00
timers: don't #error on higher HZ values
2008-01-25 21:08:34 +01:00
Missing include file in kallsyms.h
2007-11-05 15:12:32 -08:00
Hibernation: Introduce exportable suspend ioctls header (rev. 2)
2008-02-01 18:30:53 -05:00
Fix <linux/kd.h> usage in userspace
2007-11-29 09:24:52 -08:00
x86: make early printk selectable on 64-bit as well
2008-01-30 13:33:06 +01:00
Extended crashkernel command line
2007-10-19 11:53:49 -07:00
KEYS: fix macro
2008-01-08 16:10:35 -08:00
Console keyboard events and accessibility
2007-10-19 11:53:33 -07:00
Kobject: fix coding style issues in kobject.h
2008-01-24 21:27:06 -08:00
x86: kprobes: add kprobes smoke tests that run on boot
2008-01-30 13:32:53 +01:00
kref: add kref_set()
2008-01-24 20:40:05 -08:00
KVM: Portability: Move kvm_fpu to asm-x86/kvm.h
2008-01-30 18:01:22 +02:00
KVM: Move apic timer migration away from critical section
2008-01-30 18:01:22 +02:00
KVM: Put kvm_para.h include outside __KERNEL__
2008-01-30 18:01:22 +02:00
KVM: Move arch dependent files to new directory arch/x86/kvm/
2008-01-30 18:01:18 +02:00
sched: latencytop support
2008-01-25 21:08:34 +01:00
leds: Fix led trigger locking bugs
2007-12-07 09:06:53 +00:00
lguest: documentation update
2007-10-25 15:02:50 +10:00
virtio: simplify config mechanism.
2008-02-04 23:49:57 +11:00
libata: factor out ata_pci_activate_sff_host() from ata_pci_one()
2008-01-23 05:24:16 -05:00
x86: add ENDPROC() markers
2008-01-30 13:33:13 +01:00
kernel-api docbook: fix content problems
2007-10-19 11:53:35 -07:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
workqueue: debug flushing deadlocks with lockdep
2007-10-19 11:53:38 -07:00
Task Control Groups: basic task cgroup framework
2007-10-19 11:53:36 -07:00
Linux Kernel Markers - Samples
2007-10-19 11:53:55 -07:00
rtc: fall back to requesting only the ports we actually use
2007-11-14 18:45:41 -08:00
memory hotplug: make kmem_cache_node for SLUB on memory online avoid panic
2007-10-22 08:13:17 -07:00
Task Control Groups: make cpusets a client of cgroups
2007-10-19 11:53:36 -07:00
maps4: introduce a generic page walker
2008-02-05 09:44:16 -08:00
Page allocator: get rid of the list of cold pages
2008-02-05 09:44:18 -08:00
sdio: fix module device table definition for m68k
2008-02-05 09:44:08 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/sam/kbuild
2008-01-29 22:46:14 +11:00
remove __attribute_used__
2008-01-28 23:21:18 +01:00
[IPV4]: Clean the ip_sockglue.c from some ugly ifdefs
2007-11-07 04:08:55 -08:00
ipc: store ipcs into IDRs
2007-10-19 11:53:44 -07:00
Add mutex_lock_killable
2007-12-06 17:37:59 -05:00
[I2C] Split mv643xx I2C platform support
2008-01-26 15:03:59 +00:00
mv643xx_eth: Fix MV643XX_ETH offsets used by Pegasos 2
2007-10-30 14:32:16 -04:00
[I2C] i2c-mv64xxx: Don't set i2c_adapter.retries
2008-01-26 15:04:01 +00:00
[NET]: Remove the empty net_table
2008-01-28 14:56:29 -08:00
[VLAN]: set_rx_mode support for unicast address list
2008-01-31 19:28:24 -08:00
[NETFILTER]: Extend nf_inet_addr with in{,6}_addr
2008-01-28 15:02:22 -08:00
[NETFILTER]: bridge: fix missing link layer headers on outgoing routed packets
2007-12-14 13:54:39 -08:00
[NETFILTER]: Introduce NF_INET_ hook values
2008-01-28 14:53:55 -08:00
[NETFILTER]: Introduce NF_INET_ hook values
2008-01-28 14:53:55 -08:00
[IPV4] fib_trie: rescan if key is lost during dump
2008-01-31 19:28:23 -08:00
[NETPOLL]: Don't need rx_flags.
2008-01-28 14:54:18 -08:00
Merge branch 'task_killable' of git://git.kernel.org/pub/scm/linux/kernel/git/willy/misc
2008-02-01 11:45:47 +11:00
NFS: Invoke nlmclnt_init during NFS mount processing
2008-01-30 02:06:07 -05:00
NFS: Switch from intr mount option to TASK_KILLABLE
2007-12-06 17:40:25 -05:00
NFS: Clean up the write request locking.
2008-01-30 02:05:24 -05:00
NFS: NFS version number is unsigned
2008-01-30 02:06:08 -05:00
knfsd: allow cache_register to return error on failure
2008-02-01 16:42:05 -05:00
cfg80211/nl80211: implement station attribute retrieval
2008-01-28 14:59:52 -08:00
Hibernation: Add PM_RESTORE_PREPARE and PM_POST_RESTORE notifiers (rev. 2)
2008-02-01 18:30:53 -05:00
Make access to task's nsproxy lighter
2007-10-19 11:53:37 -07:00
[POWERPC] Add of_find_matching_node() helper function
2008-01-17 14:53:22 +11:00
[POWERPC] Add of_find_matching_node() helper function
2008-01-17 14:53:22 +11:00
mm: fix PageUptodate data race
2008-02-05 09:44:19 -08:00
Add lock_page_killable
2007-12-06 17:35:41 -05:00
[PARPORT] Remove unused 'irq' argument from parport irq functions
2007-10-23 19:53:16 -04:00
libata: pata_platform: make probe and remove functions device type neutral
2008-01-15 10:23:41 -06:00
PCI ACPI: Added a function to register _OSC with only PCIe devices.
2008-02-01 15:04:29 -08:00
iommu sg merging: PCI: add dma segment boundary support
2008-02-05 09:44:12 -08:00
kset: convert pci hotplug to use kset_create_and_add
2008-01-24 20:40:14 -08:00
serial: add ADDI-DATA GmbH Communication cardsin8250_pci.c and pci_ids.h
2008-02-05 09:44:09 -08:00
Revert "PCI: PCIE ASPM support"
2008-02-02 11:32:01 -08:00
[LIB] pcounter : unline too big functions
2008-01-28 15:00:35 -08:00
pda_power: implement polling
2008-02-02 02:44:34 +03:00
ia64: use generic percpu
2008-01-30 23:27:58 +01:00
[IPSEC]: Add support for combined mode algorithms
2008-01-31 19:27:03 -08:00
Misc: phantom, improved data passing
2007-10-19 11:53:41 -07:00
PHYLIB: Locking fixes for PHY I/O potentially sleeping
2008-02-03 04:28:41 -08:00
phy/fixed.c: rework to not duplicate PHY layer functionality
2008-01-23 19:33:58 -06:00
Uninline find_pid etc set of functions
2007-10-19 11:53:41 -07:00
pidns: Place under CONFIG_EXPERIMENTAL
2007-11-14 18:45:43 -08:00
[NET_SCHED]: Add flow classifier
2008-01-31 19:28:36 -08:00
[NET_SCHED]: sch_sfq: make internal queues visible as classes
2008-01-31 19:28:35 -08:00
pktcdvd: Convert from class_device to device for block/pktcdvd
2008-01-24 20:40:06 -08:00
Driver Core: constify the name passed to platform_device_register_simple
2008-01-24 20:40:43 -08:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
PM: ACPI and APM must not be enabled at the same time
2008-01-11 12:26:47 -05:00
[POWERPC] Fix for via-pmu based backlight control
2007-12-21 22:14:07 +11:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
power_supply: add few more values and props
2008-02-02 02:43:00 +03:00
capabilities: introduce per-process capability bounding set
2008-02-05 09:44:20 -08:00
x86 & generic: change to __builtin_prefetch()
2007-10-19 20:35:04 +02:00
Fix cpusets update_cpumask
2007-10-19 11:53:41 -07:00
maps4: move clear_refs code to task_mmu.c
2008-02-05 09:44:16 -08:00
ptrace: generic PTRACE_SINGLEBLOCK
2008-01-30 13:30:53 +01:00
quicklists: do not release off node pages early
2007-12-23 12:54:36 -08:00
radix_tree.h trivial comment correction
2008-02-03 16:12:47 +02:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
Preempt-RCU: implementation
2008-01-25 21:08:24 +01:00
x86: user_regset user-copy helpers
2008-01-30 13:31:47 +01:00
reiserfs: new export ops
2007-10-22 08:13:20 -07:00
Spelling fixes: lenght->length
2008-02-03 15:42:53 +02:00
rfkill: add the WiMAX radio type
2008-01-31 19:26:46 -08:00
RTC: convert mutex to bitfield
2007-11-29 09:24:54 -08:00
[NET]: Make rtnetlink infrastructure network namespace aware (v3)
2008-01-28 14:54:25 -08:00
SG: work with the SCSI fixed maximum allocations.
2008-01-28 10:54:49 +01:00
capabilities: introduce per-process capability bounding set
2008-02-05 09:44:20 -08:00
x86_64 EFI boot support: EFI frame buffer driver
2007-11-29 09:24:54 -08:00
capabilities: introduce per-process capability bounding set
2008-02-05 09:44:20 -08:00
SELinux: Enable dynamic enable/disable of the network access checks
2008-01-30 08:17:26 +11:00
ipc: store ipcs into IDRs
2007-10-19 11:53:44 -07:00
[NET]: Consolidate net namespace related proc files creation.
2008-01-28 14:54:28 -08:00
8250.c: support specifying DW APB UARTs in device platform_data
2008-02-05 09:44:09 -08:00
IP22ZILOG: fix lockup and sysrq
2007-11-29 09:24:53 -08:00
ipc: store ipcs into IDRs
2007-10-19 11:53:44 -07:00
Fix a small number of "memeber" typoes.
2008-02-03 15:12:15 +02:00
virtio: Implement skb_partial_csum_set, for setting partial csums on untrusted packets.
2008-02-04 23:49:56 +11:00
Unify /proc/slabinfo configuration
2008-01-02 13:04:48 -08:00
Unify /proc/slabinfo configuration
2008-01-02 13:04:48 -08:00
Explain kmem_cache_cpu fields
2008-02-04 10:56:03 -08:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
x86: optimize lock prefix switching to run less frequently
2008-01-30 13:33:17 +01:00
sched: remove the !PREEMPT_BKL code
2008-01-25 21:08:33 +01:00
[XFRM]: Fix statistics.
2008-01-31 19:28:30 -08:00
[NET] sysctl: make sysctl_somaxconn per-namespace
2008-01-28 14:56:57 -08:00
spinlock: lockbreak cleanup
2008-01-30 13:31:20 +01:00
include/linux/: Spelling fixes
2008-02-03 17:45:46 +02:00
spinlock: lockbreak cleanup
2008-01-30 13:31:20 +01:00
spinlock: lockbreak cleanup
2008-01-30 13:31:20 +01:00
[SPLICE]: Don't assume regular pages in splice_to_pipe()
2008-01-28 14:53:30 -08:00
sched: latencytop support
2008-01-25 21:08:34 +01:00
[TIPC]: Fix headercheck wrt. tipc_config.h
2007-10-30 21:44:00 -07:00
Page allocator: clean up pcp draining functions
2008-02-05 09:44:17 -08:00
Hibernation: Introduce exportable suspend ioctls header (rev. 2)
2008-02-01 18:30:53 -05:00
tmpfs: move swap swizzling into shmem
2008-02-05 09:44:15 -08:00
maps4: move is_swap_pte
2008-02-05 09:44:16 -08:00
timerfd: new timerfd API
2008-02-05 09:44:07 -08:00
capabilities: introduce per-process capability bounding set
2008-02-05 09:44:20 -08:00
Driver core: change sysdev classes to use dynamic kobject names
2008-01-24 20:40:40 -08:00
[SCSI] sysfs: add filter function to groups
2008-01-23 11:29:18 -06:00
[TCP]: Rewrite SACK block processing & sack_recv_cache use
2008-01-28 14:54:07 -08:00
futex: Add bitset conditional wait/wakeup functionality
2008-02-01 17:45:14 +01:00
tick-sched: add more debug information
2008-02-01 17:45:14 +01:00
tifm: Convert from class_device to device for TI flash media
2008-01-24 20:40:06 -08:00
timekeeping: update xtime_cache when time(zone) changes
2008-02-01 17:45:13 +01:00
time: clean hungarian notation from timers
2008-01-30 13:30:00 +01:00
time: add ADJ_OFFSET_SS_READ
2007-11-26 20:42:19 +01:00
sched: whitespace cleanups in topology.h
2008-01-25 21:08:20 +01:00
[CAN]: Allocate protocol numbers for PF_CAN
2008-01-28 14:54:09 -08:00
linux/types.h: Use __u64 for aligned_u64
2008-01-31 19:27:30 -08:00
get rid of input BIT* duplicate defines
2007-10-19 11:53:42 -07:00
UIO: fix kobject usage
2008-01-24 20:40:26 -08:00
USB: fix codingstyle issues in include/linux/usb.h
2008-02-01 14:35:07 -08:00
USB: usb-storage: new "lockable" subclass 0x07
2008-02-01 14:34:49 -08:00
USB: usbdevfs_urb: __user annotation
2008-02-01 14:34:58 -08:00
[VETH]: move veth.h to include/linux
2007-12-26 19:36:35 -08:00
V4L/DVB (6320): v4l core: remove the unused .hardware V4L1 field
2007-10-22 12:01:24 -02:00
V4L/DVB (6321): Remove obsolete VIDIOC_S/G_MPEGCOMP ioctls
2007-10-22 12:01:30 -02:00
virtio: reset function
2008-02-04 23:50:03 +11:00
9p: add virtio transport
2007-10-23 13:47:31 -05:00
virtio: balloon driver
2008-02-04 23:50:13 +11:00
virtio: remove unused id field from struct virtio_blk_outhdr
2008-02-04 23:50:01 +11:00
virtio: reset function
2008-02-04 23:50:03 +11:00
Virtio console driver
2007-10-23 15:49:55 +10:00
virtio: Tweak virtio_net defines
2008-02-04 23:50:02 +11:00
virtio: Use PCI revision field to indicate virtio PCI ABI version
2008-02-04 23:50:12 +11:00
virtio: clarify NO_NOTIFY flag usage
2008-02-04 23:50:00 +11:00
vmalloc: add const to void* parameters
2008-02-05 09:44:14 -08:00
Console events and accessibility
2007-10-19 11:53:34 -07:00
lockdep: annotate epoll
2008-02-05 09:44:07 -08:00
Spelling fixes: lenght->length
2008-02-03 15:42:53 +02:00
lockdep: fix workqueue creation API lockdep interaction
2008-01-16 09:51:58 +01:00
writeback: speed up writeback of big dirty files
2008-02-05 09:44:19 -08:00
VFS/Security: Rework inode_getsecurity and callers to return resulting buffer
2008-02-05 09:44:20 -08:00
[IPSEC]: Add support for combined mode algorithms
2008-01-31 19:27:03 -08:00
e114e47377