aboutsummaryrefslogtreecommitdiffstats
path: root/xen/xsm/flask
Commit message (Expand)AuthorAgeFilesLines
...
* xsm/flask: allow policy booleans to be addressed by nameDaniel De Graaf2012-02-023-36/+203
* xsm/flask: Remove useless back pointersDaniel De Graaf2012-02-022-5/+0
* xsm/flask: Improve error reporting for ocontextsDaniel De Graaf2012-02-021-8/+21
* xsm: Add xsm_map_domain_pirq hookDaniel De Graaf2012-02-021-0/+37
* xsm/flask: Use PCI device label for PCI-MSI IRQsDaniel De Graaf2012-02-021-15/+38
* xsm: Add security label to IRQ debug outputDaniel De Graaf2012-02-021-0/+16
* xsm: Add security labels to event-channel dumpDaniel De Graaf2012-02-021-0/+30
* xen: allow global VIRQ handlers to be delegated to other domainsDaniel De Graaf2012-01-283-0/+8
* xen: reinstate previously unused XENMEM_remove_from_physmap hypercallDaniel De Graaf2012-01-281-0/+6
* xsm: add checks on PCI configuration accessDaniel De Graaf2011-12-181-0/+24
* xsm: Add missing access checksDaniel De Graaf2011-12-183-1/+248
* xsm: add remote_remap permissionDaniel De Graaf2011-12-183-2/+9
* xsm/flask: report memory and IO ranges in audit messagesDaniel De Graaf2011-12-183-11/+31
* xsm/flask: Add missing unlock on error pathDaniel De Graaf2011-12-181-0/+1
* xsm: clean up initial SIDsDaniel De Graaf2011-12-023-13/+11
* xsm: rename security_pirq_sid to security_irq_sidDaniel De Graaf2011-12-023-5/+5
* xsm: Expand I/O resource hooksDaniel De Graaf2011-12-021-55/+18
* xsm: always allow setting non-present PTEsDaniel De Graaf2011-12-021-3/+9
* xsm: Revert "Fix xsm_mmu_* and xsm_update_va_mapping hooks"Daniel De Graaf2011-12-021-8/+33
* xsm: remove unused xsm_assign_vector checkDaniel De Graaf2011-12-023-17/+2
* xsm/flask: fix resource list range checksDaniel De Graaf2011-11-223-82/+196
* xsm/flask: Use correct flag to detect writable grant mappingsDaniel De Graaf2011-11-221-1/+1
* xsm: Add support for HVMOP_track_dirty_vram.Jean Guyader2011-11-083-0/+5
* xen/xsm/flask: Fix flask_tbufcontrol hookJames Carter2011-06-281-1/+1
* xsm: fixed missing header compile errorMachon Gregory2011-06-011-0/+1
* xsm: Fix xsm_mmu_* and xsm_update_va_mapping hooksStephen Smalley2011-04-121-33/+8
* xsm: Error code consistencyMachon Gregory2011-04-041-0/+3
* xsm/flask: Fix permission tablesKeir Fraser2011-02-061-0/+2
* Move IDLE_DOMAIN_ID defn to public header, and change DOMID_INVALID to fix cl...Keir Fraser2010-12-091-1/+1
* x86: xsave save/restore support for both PV and HVM guests (version 2)Keir Fraser2010-11-082-0/+22
* Revert 22347:16093532f384 "x86: xsave save/restore support"Keir Fraser2010-11-042-22/+0
* x86: xsave save/restore support for both PV and HVM guests.Keir Fraser2010-11-032-0/+22
* xsm/flask: Code indentation.Keir Fraser2010-09-223-224/+225
* xsm: return unlabeled instead of failing with ENOENT in get_page_sidKeir Fraser2010-09-221-4/+1
* xsm: Avoid null dereference in flask get_page_sidKeir Fraser2010-09-131-1/+4
* rcu: Update all rcu_read_lock() users to implement a dummy RCU read lock.Keir Fraser2010-06-101-11/+13
* x86: Dynamically allocate percpu data area when a CPU comes online.Keir Fraser2010-05-181-1/+1
* Remove many uses of cpu_possible_map and iterators over NR_CPUS.Keir Fraser2010-05-141-5/+1
* xsm/flask: Eliminate "array subscript above array bounds" warningKeir Fraser2010-03-111-9/+12
* XSM: Restore policy backwards compatibilityKeir Fraser2009-12-162-4/+24
* xsm: Change format strings from signed to unsignedKeir Fraser2009-11-231-2/+2
* xsm: Dynamic update to device ocontextsKeir Fraser2009-11-135-1/+384
* xsm: Add support for Xen device policiesKeir Fraser2009-10-276-26/+116
* xsm: Corrected check in io_has_perm()Keir Fraser2009-10-231-1/+1
* xen/xsm/flask: Fix Flask MLS context generationKeir Fraser2009-08-251-4/+4
* Update Xen Flask module to policy.24.Keir Fraser2009-08-1920-725/+1430
* xsm/flask: Fix AVC audit message formatKeir Fraser2009-08-141-5/+3
* xsm/flask: Fix sidtab locking bugKeir Fraser2009-08-141-13/+8
* [XSM][FLASK] basic documentation and a type cast error for x86_64Keir Fraser2009-02-131-2/+2
* Add a new domctl to get a single record from the HVM save contextKeir Fraser2009-02-051-0/+1