summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2021-01-21KEYS: remove redundant memsetTom Rix-2/+0
2021-01-21security: keys: delete repeated words in commentsRandy Dunlap-3/+3
2021-01-21security/keys: use kvfree_sensitive()Denis Efremov-6/+3
2021-01-21watch_queue: Drop references to /dev/watch_queueGabriel Krisman Bertazi-4/+4
2021-01-21keys: Remove outdated __user annotationsJann Horn-3/+3
2021-01-21security: keys: Fix fall-through warnings for ClangGustavo A. R. Silva-0/+1
2021-01-16make dump_common_audit_data() safe to be called from RCU pathwalkAl Viro-2/+3
2021-01-16dump_common_audit_data(): fix racy accesses to ->d_nameAl Viro-2/+5
2021-01-14selinux: include a consumer of the new IMA critical data hookLakshmi Ramasubramanian-10/+127
2021-01-14IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian-0/+12
2021-01-14IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi-3/+5
2021-01-14IMA: limit critical data measurement based on a labelTushar Sugandhi-3/+34
2021-01-14IMA: add policy rule to measure critical dataTushar Sugandhi-4/+25
2021-01-14IMA: define a hook to measure kernel integrity critical dataTushar Sugandhi-1/+26
2021-01-14IMA: add support to measure buffer data hashTushar Sugandhi-9/+30
2021-01-14IMA: generalize keyring specific measurement constructsTushar Sugandhi-26/+35
2021-01-14selinux: teach SELinux about anonymous inodesDaniel Colascione-0/+59
2021-01-14security: add inode_init_security_anon() LSM hookLokesh Gidra-0/+8
2021-01-13selinux: fall back to SECURITY_FS_USE_GENFS if no xattr supportOndrej Mosnacek-25/+52
2021-01-13evm: Fix memleak in init_descDinghao Liu-2/+5
2021-01-12selinux: mark selinux_xfrm_refcount as __read_mostlyOndrej Mosnacek-1/+1
2021-01-12selinux: mark some global variables __ro_after_initOndrej Mosnacek-12/+12
2021-01-12selinux: make selinuxfs_mount staticOndrej Mosnacek-2/+1
2021-01-12selinux: drop the unnecessary aurule_callback variableOndrej Mosnacek-7/+3
2021-01-12selinux: remove unused global variablesOndrej Mosnacek-4/+0
2021-01-04selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein-0/+4
2021-01-04selinux: handle MPTCP consistently with TCPPaolo Abeni-1/+2
2020-12-29capabilities: Don't allow writing ambiguous v3 file capabilitiesEric W. Biederman-1/+11
2020-12-24Merge tag 'Smack-for-5.11-io_uring-fix' of git://github.com/cschaufler/smack-...Linus Torvalds-2/+3
2020-12-24Merge tag 'efi_updates_for_v5.11' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds-0/+77
2020-12-22Smack: Handle io_uring kernel thread privilegesCasey Schaufler-2/+3
2020-12-17Merge tag 'ovl-update-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-2/+1
2020-12-16Merge tag 'Smack-for-5.11' of git://github.com/cschaufler/smack-nextLinus Torvalds-5/+5
2020-12-16Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-37/+54
2020-12-16Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-28/+35
2020-12-16Merge tag 'audit-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-5/+0
2020-12-15apparmor: remove duplicate macro list_entry_is_head()Andy Shevchenko-3/+0
2020-12-15Merge tag 'net-next-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds-35/+70
2020-12-14Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds-3/+3
2020-12-14Merge tag 'tomoyo-pr-20201214' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds-41/+44
2020-12-14vfs: move cap_convert_nscap() call into vfs_setxattr()Miklos Szeredi-2/+1
2020-12-12Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...Jakub Kicinski-0/+1
2020-12-06tomoyo: Fix typo in comments.Tetsuo Handa-7/+7
2020-12-04Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski-24/+54
2020-12-03security: add const qualifier to struct sock in various placesFlorian Westphal-11/+11
2020-11-29ima: Don't modify file descriptor mode on the flyRoberto Sassu-15/+5
2020-11-27tomoyo: Fix null pointer checkZheng Zengkai-6/+4
2020-11-27xfrm: redact SA secret with lockdown confidentialityAntony Antony-0/+1
2020-11-26ima: Implement ima_inode_hashKP Singh-24/+54
2020-11-23lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore-17/+19