summaryrefslogtreecommitdiffstats
path: root/security/landlock
AgeCommit message (Expand)AuthorLines
2025-09-01fs: add an icount_read helperJosef Bacik-1/+1
2025-07-28Merge tag 'landlock-6.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-27/+43
2025-07-19landlock: Fix cosmetic changeMickaël Salaün-0/+1
2025-06-27landlock: Fix warning from KUnit testsTingmao Wang-27/+42
2025-06-17landlock: opened file never has a negative dentryAl Viro-1/+0
2025-05-12landlock: Improve bit operations in audit codeMickaël Salaün-4/+34
2025-05-03landlock: Remove KUnit test that triggers a warningMickaël Salaün-1/+1
2025-04-17landlock: Fix documentation for landlock_restrict_self(2)Mickaël Salaün-6/+6
2025-04-17landlock: Fix documentation for landlock_create_ruleset(2)Mickaël Salaün-8/+7
2025-04-11landlock: Log the TGID of the domain creatorMickaël Salaün-2/+2
2025-04-08landlock: Remove incorrect warningMickaël Salaün-1/+1
2025-03-28Merge tag 'landlock-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-255/+2265
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFFMickaël Salaün-7/+43
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flagsMickaël Salaün-12/+63
2025-03-26landlock: Log scoped denialsMickaël Salaün-18/+97
2025-03-26landlock: Log TCP bind and connect denialsMickaël Salaün-4/+60
2025-03-26landlock: Log truncate and IOCTL denialsMickaël Salaün-6/+307
2025-03-26landlock: Factor out IOCTL hooksMickaël Salaün-21/+11
2025-03-26landlock: Log file-related denialsMickaël Salaün-16/+233
2025-03-26landlock: Log mount-related denialsMickaël Salaün-41/+74
2025-03-26landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain statusMickaël Salaün-4/+285
2025-03-26landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denialsMickaël Salaün-24/+336
2025-03-26landlock: Identify domain execution crossingMickaël Salaün-6/+59
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün-21/+39
2025-03-26landlock: Prepare to use credential instead of domain for scopeMickaël Salaün-24/+28
2025-03-26landlock: Prepare to use credential instead of domain for networkMickaël Salaün-15/+12
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün-30/+92
2025-03-26landlock: Move domain hierarchy managementMickaël Salaün-34/+53
2025-03-26landlock: Add unique ID generatorMickaël Salaün-0/+282
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün-6/+64
2025-03-24Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+1
2025-03-21landlock: Prepare to add second errataMickaël Salaün-0/+12
2025-03-21landlock: Add erratum for TCP fixMickaël Salaün-0/+15
2025-03-21landlock: Add the errata interfaceMickaël Salaün-4/+138
2025-03-21landlock: Move code to ease future backportsMickaël Salaün-5/+5
2025-03-08vfs: Remove invalidate_inodes()Jan Kara-1/+1
2025-02-14landlock: Fix non-TCP sockets restrictionMikhail Ivanov-2/+1
2025-02-14landlock: Fix grammar errorTanya Agarwal-1/+1
2025-01-17landlock: Optimize file path walks and prepare for audit supportMickaël Salaün-17/+27
2025-01-17landlock: Align partial refer access checks with final onesMickaël Salaün-1/+13
2025-01-17landlock: Simplify initially denied access rightsMickaël Salaün-11/+19
2025-01-17landlock: Move access typesMickaël Salaün-46/+68
2025-01-17landlock: Factor out check_access_path()Mickaël Salaün-21/+11
2025-01-14landlock: Use scoped guards for ruleset in landlock_add_rule()Mickaël Salaün-10/+4
2025-01-14landlock: Use scoped guards for rulesetMickaël Salaün-29/+23
2025-01-14landlock: Constify get_mode_access()Mickaël Salaün-1/+1
2025-01-14landlock: Handle weird filesMickaël Salaün-6/+5
2024-11-18Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds-31/+14
2024-11-09landlock: Optimize scope enforcementMickaël Salaün-3/+15
2024-11-09landlock: Refactor network access mask managementMickaël Salaün-22/+6