summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2021-07-02Merge tag 'asm-generic-unaligned-5.14' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds-1/+1
2021-06-30Merge tag 'safesetid-5.14' of git://github.com/micah-morton/linuxLinus Torvalds-2/+2
2021-06-30Merge tag 'Smack-for-5.14' of git://github.com/cschaufler/smack-nextLinus Torvalds-5/+9
2021-06-30Merge tag 'audit-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+0
2021-06-30Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-109/+81
2021-06-28Merge tag 'integrity-v5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-75/+730
2021-06-21evm: Check xattr size discrepancy between kernel and userRoberto Sassu-1/+7
2021-06-20evm: output EVM digest calculation infoMimi Zohar-0/+47
2021-06-16tomoyo: fix doc warningsChenXiaoSong-9/+9
2021-06-11audit: remove unnecessary 'ret' initializationAustin Kim-1/+0
2021-06-11selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit()Al Viro-31/+5
2021-06-11selinux: slow_avc_audit has become non-blockingAl Viro-35/+10
2021-06-11selinux: Fix kernel-docYang Li-1/+22
2021-06-11IMA: support for duplicate measurement recordsTushar Sugandhi-2/+10
2021-06-11ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer'Lakshmi Ramasubramanian-0/+1
2021-06-10selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim-6/+7
2021-06-10ima: differentiate between EVM failures in the audit logMimi Zohar-1/+2
2021-06-10LSM: SafeSetID: Mark safesetid_initialized as __initdataAustin Kim-2/+2
2021-06-08ima: Fix fall-through warning for ClangGustavo A. R. Silva-0/+1
2021-06-08ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect()Roberto Sassu-1/+1
2021-06-08ima: Include header defining ima_post_key_create_or_update()Roberto Sassu-0/+1
2021-06-08ima/evm: Fix type mismatchRoberto Sassu-11/+12
2021-06-08ima: Set correct casting typesRoberto Sassu-9/+10
2021-06-08Smack: fix doc warningChenXiaoSong-1/+4
2021-06-03evm: Don't return an error in evm_write_xattrs() if audit is not enabledRoberto Sassu-1/+1
2021-06-03ima: Define new template evm-sigRoberto Sassu-1/+4
2021-06-02ima: Define new template fields xattrnames, xattrlengths and xattrvaluesRoberto Sassu-0/+148
2021-06-01evm: Verify portable signatures against all protected xattrsRoberto Sassu-12/+68
2021-06-01ima: Define new template field imodeRoberto Sassu-0/+26
2021-06-01ima: Define new template fields iuid and igidRoberto Sassu-0/+53
2021-06-01ima: Add ima_show_template_uint() template library functionRoberto Sassu-1/+39
2021-06-01ima: Don't remove security.ima if file must not be appraisedRoberto Sassu-2/+0
2021-06-01ima: Introduce template field evmsig and write to field sig as fallbackRoberto Sassu-1/+36
2021-06-01ima: Allow imasig requirement to be satisfied by EVM portable signaturesRoberto Sassu-7/+17
2021-06-01evm: Allow setxattr() and setattr() for unmodified metadataRoberto Sassu-1/+112
2021-05-21evm: Pass user namespace to set/remove xattr hooksRoberto Sassu-8/+13
2021-05-21evm: Allow xattr/attr operations for portable signaturesRoberto Sassu-6/+29
2021-05-21evm: Introduce evm_hmac_disabled() to safely ignore verification errorsRoberto Sassu-1/+38
2021-05-21evm: Introduce evm_revalidate_status()Roberto Sassu-9/+46
2021-05-21evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loadedRoberto Sassu-4/+4
2021-05-21evm: Load EVM key in ima_load_x509() to avoid appraisalRoberto Sassu-1/+7
2021-05-21evm: Execute evm_inode_init_security() only when an HMAC key is loadedRoberto Sassu-2/+3
2021-05-20evm: fix writing <securityfs>/evm overflowMimi Zohar-2/+3
2021-05-18Revert "Smack: Handle io_uring kernel thread privileges"Jens Axboe-3/+2
2021-05-17apparmor: use get_unaligned() only for multi-byte wordsArnd Bergmann-1/+1
2021-05-14lsm_audit,selinux: pass IB device name by referenceOndrej Mosnacek-1/+1
2021-05-12trusted-keys: match tpm_get_ops on all return pathsBen Boeckel-3/+3
2021-05-12KEYS: trusted: Fix memory leak on object tdColin Ian King-3/+5
2021-05-10selinux: Remove redundant assignment to rcJiapeng Chong-5/+0
2021-05-10selinux: Corrected comment to match kernel-doc commentSouptick Joarder-1/+1