John Johansen
ed686308c6
apparmor: reserve and mask off the top 8 bits of the base field ...
The top 8 bits of the base field have never been used, in fact can't
be used, by the current 'dfa16' format. However they will be used in the
future as flags, so mask them off when using base as an index value.
Note: the use of the top 8 bits, without masking is trapped by the verify
checks that base entries are within the size bounds.
Signed-off-by: John Johansen <john.johansen@canonical.com>
Acked-by: Kees Cook <kees@ubuntu.com>
2013-04-28 00:37:32 -07:00
apparmor: reserve and mask off the top 8 bits of the base field
2013-04-28 00:37:32 -07:00
ima: eliminate passing d_name.name to process_measurement()
2013-04-17 17:20:57 -07:00
userns: Stop oopsing in key_change_session_keyring
2013-03-03 19:35:38 -08:00
selinux: make security_sb_clone_mnt_opts return an error on context mismatch
2013-04-02 11:30:13 +11:00
Smack: include magic.h in smackfs.c
2013-04-03 13:13:51 +11:00
tomoyo: use DEFINE_SRCU() to define tomoyo_ss
2013-03-18 23:51:31 +11:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2012-12-17 15:44:47 -08:00
selinux: make security_sb_clone_mnt_opts return an error on context mismatch
2013-04-02 11:30:13 +11:00
kill f_vfsmnt
2013-02-26 02:46:10 -05:00
device_cgroup: don't grab mutex in rcu callback
2013-02-21 17:22:15 -08:00
KEYS: Move the key config into security/keys/Kconfig
2012-05-11 10:56:56 +01:00
LSM: BUILD_BUG_ON if the common_audit_data union ever grows
2012-04-09 12:23:03 -04:00
selinux: make security_sb_clone_mnt_opts return an error on context mismatch
2013-04-02 11:30:13 +11:00
ed686308c6