summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2023-08-18s390/ipl: fix virtual vs physical address confusionAlexander Gordeev-2/+2
2023-08-18landlock: Annotate struct landlock_rule with __counted_byKees Cook-1/+1
2023-08-17KEYS: Replace all non-returning strlcpy with strscpyAzeem Shaikh-1/+1
2023-08-17integrity: PowerVM support for loading third party code signing keysNayna Jain-0/+30
2023-08-17integrity: PowerVM machine keyring enablementNayna Jain-1/+3
2023-08-17integrity: check whether imputed trust is enabledNayna Jain-6/+22
2023-08-17integrity: remove global variable from machine_keyring.cNayna Jain-2/+2
2023-08-17integrity: ignore keys failing CA restrictions on non-UEFI platformNayna Jain-1/+1
2023-08-17integrity: PowerVM support for loading CA keys on machine keyringNayna Jain-0/+30
2023-08-17integrity: Enforce digitalSignature usage in the ima and evm keyringsEric Snowberg-4/+6
2023-08-15selinux: prevent KMSAN warning in selinux_inet_conn_request()Andrew Kanner-0/+1
2023-08-15hardening: Move BUG_ON_DATA_CORRUPTION to hardening optionsMarco Elver-0/+10
2023-08-15list: Introduce CONFIG_LIST_HARDENEDMarco Elver-0/+13
2023-08-15lsm: constify the 'file' parameter in security_binder_transfer_file()Khadija Kamran-5/+5
2023-08-15vfs, security: Fix automount superblock LSM init problem, preventing NFS sb s...David Howells-0/+87
2023-08-13tomoyo: remove unused function declarationGONG, Ruiqi-2/+0
2023-08-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-1/+1
2023-08-09selinux: use unsigned iterator in nlmsgtab codeChristian Göttsche-1/+2
2023-08-09selinux: avoid implicit conversions in policydb codeChristian Göttsche-32/+37
2023-08-09selinux: avoid implicit conversions in selinuxfs codeChristian Göttsche-7/+7
2023-08-09selinux: make left shifts well definedChristian Göttsche-6/+6
2023-08-09selinux: update type for number of class permissions in services codeChristian Göttsche-2/+2
2023-08-09selinux: avoid implicit conversions in avtab codeChristian Göttsche-12/+12
2023-08-09selinux: revert SECINITSID_INIT supportPaul Moore-64/+1
2023-08-08lsm: constify the 'target' parameter in security_capget()Khadija Kamran-4/+4
2023-08-08apparmor: remove unused PROF_* macrosGONG, Ruiqi-3/+0
2023-08-08apparmor: cleanup unused functions in file.hXiu Jianfeng-37/+0
2023-08-08apparmor: cleanup unused declarations in policy.hXiu Jianfeng-6/+0
2023-08-08apparmor: fixup return comments for kernel doc cleanups by Gaosheng CuiJohn Johansen-4/+4
2023-08-08selinux: use GFP_KERNEL while reading binary policyChristian Göttsche-5/+5
2023-08-08selinux: update comment on selinux_hooks[]Xiu Jianfeng-4/+0
2023-08-07smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter-1/+1
2023-08-07security: smack: smackfs: fix typo (lables->labels)Tóth János-1/+1
2023-08-07sysctl: set variable key_sysctls storage-class-specifier to staticTom Rix-1/+1
2023-08-07kexec_lock: Replace kexec_mutex() by kexec_lock() in two commentsWenyu Liu-1/+1
2023-08-05tomoyo: refactor deprecated strncpyJustin Stitt-3/+2
2023-08-03selinux: avoid implicit conversions in services codeChristian Göttsche-16/+18
2023-08-03selinux: avoid implicit conversions in mls codeChristian Göttsche-4/+6
2023-08-03selinux: use identical iterator type in hashtab_duplicate()Christian Göttsche-1/+2
2023-08-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski-3/+8
2023-08-01ima: require signed IMA policy when UEFI secure boot is enabledCoiby Xu-0/+3
2023-08-01integrity: Always reference the blacklist keyring with appraisalEric Snowberg-17/+12
2023-08-01ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain-12/+0
2023-07-31lsm: add comment block for security_sk_classify_flow LSM hookKhadija Kamran-0/+7
2023-07-28selinux: move debug functions into debug configurationChristian Göttsche-3/+20
2023-07-28security: keys: perform capable check only on privileged operationsChristian Göttsche-3/+8
2023-07-28selinux: log about VM being executable by defaultChristian Göttsche-0/+2
2023-07-26security: Fix ret values doc for security_inode_init_security()Roberto Sassu-2/+2
2023-07-24selinux: convert to ctime accessor functionsJeff Layton-1/+1
2023-07-24security: convert to ctime accessor functionsJeff Layton-1/+1