Huw Davies 4fee5242bf calipso: Add a label cache. ...

This works in exactly the same way as the CIPSO label cache.
The idea is to allow the lsm to cache the result of a secattr
lookup so that it doesn't need to perform the lookup for
every skbuff.

It introduces two sysctl controls:
 calipso_cache_enable - enables/disables the cache.
 calipso_cache_bucket_size - sets the size of a cache bucket.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2016-06-27 15:06:17 -04:00

..

apparmor

apparmor: clarify CRYPTO dependency

2015-10-22 11:11:28 +11:00

integrity

Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs into next

2016-05-06 09:29:00 +10:00

keys

Merge branch 'keys-trust' into keys-next

2016-05-04 17:20:20 +01:00

loadpin

LSM: LoadPin: provide enablement CONFIG

2016-05-17 20:10:30 +10:00

selinux

calipso: Add a label cache.

2016-06-27 15:06:17 -04:00

smack

netlabel: Pass a family parameter to netlbl_skbuff_err().

2016-06-27 15:06:16 -04:00

tomoyo

mm/gup: Introduce get_user_pages_remote()

2016-02-16 10:04:09 +01:00

yama

Yama: use atomic allocations when reporting

2016-05-04 10:54:05 -07:00

commoncap.c

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-01-20 17:09:18 -08:00

device_cgroup.c

security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition

2015-09-03 18:13:10 -07:00

inode.c

wrappers for ->i_mutex access

2016-01-22 18:04:28 -05:00

Kconfig

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00

lsm_audit.c

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2015-08-15 13:29:57 +10:00

Makefile

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

LSM: LoadPin for kernel file loading restrictions

2016-04-21 10:47:27 +10:00