summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2022-10-03apparmor: convert xmatch to using the new shared policydb structJohn Johansen-29/+28
2022-10-03apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen-59/+40
2022-10-03apparmor: compute policydb permission on profile loadJohn Johansen-86/+90
2022-10-03apparmor: convert xmatch to use aa_perms structureJohn Johansen-7/+13
2022-10-03apparmor: rework and cleanup fperm computationJohn Johansen-32/+38
2022-10-03apparmor: move fperm computation into policy_unpackJohn Johansen-98/+98
2022-10-03apparmor: compute xmatch permissions on profile loadMike Salvatore-3/+26
2022-10-03apparmor: compute file permissions on profile loadMike Salvatore-48/+110
2022-10-03apparmor: expose compression level limits in sysfsJon Tourville-0/+16
2022-10-03apparmor: use zstd compression for profile dataJon Tourville-102/+81
2022-10-03apparmor: reserve mediation classesJohn Johansen-1/+8
2022-10-03apparmor: fix lockdep warning when removing a namespaceJohn Johansen-1/+1
2022-10-03apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui-1/+3
2022-10-03security: kmsan: fix interoperability with auto-initializationAlexander Potapenko-0/+4
2022-10-03Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski-2/+0
2022-09-30efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain-1/+1
2022-09-29hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook-4/+10
2022-09-29landlock: Fix documentation styleMickaël Salaün-20/+20
2022-09-29landlock: Slightly improve documentation and fix spellingMickaël Salaün-1/+1
2022-09-28powerpc/rtas: block error injection when locked downNathan Lynch-0/+1
2022-09-28powerpc/pseries: block untrusted device tree changes when locked downNathan Lynch-0/+1
2022-09-27smack: cleanup obsolete mount option flagsXiu Jianfeng-9/+0
2022-09-27smack: lsm: remove the unneeded result variableXu Panda-3/+1
2022-09-27SMACK: Add sk_clone_security LSM hookLontke Michael-0/+16
2022-09-21KEYS: Move KEY_LOOKUP_ to include/linux/key.h and define KEY_LOOKUP_ALLRoberto Sassu-2/+0
2022-09-14selinux: remove the unneeded result variableXu Panda-15/+9
2022-09-14lockdown: ratelimit denial messagesNathan Lynch-1/+1
2022-09-07LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke-2/+21
2022-09-07LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke-1/+1
2022-09-02Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds-23/+25
2022-09-02landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün-23/+25
2022-09-01->getprocattr(): attribute name is const char *, TYVM...Al Viro-5/+5
2022-08-31Merge tag 'lsm-pr-20220829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-1/+61
2022-08-31acl: move idmapping handling into posix_acl_xattr_set()Christian Brauner-3/+14
2022-08-30selinux: declare read-only parameters constChristian Göttsche-29/+31
2022-08-30selinux: use int arrays for boolean valuesChristian Göttsche-5/+5
2022-08-30selinux: remove an unneeded variable in sel_make_class_dir_entries()ye xingchen-4/+1
2022-08-26Smack: Provide read control for io_uring_cmdCasey Schaufler-0/+32
2022-08-26selinux: implement the security_uring_cmd() LSM hookPaul Moore-1/+25
2022-08-26lsm,io_uring: add LSM hooks for the new uring_cmd file opLuis Chamberlain-0/+4
2022-08-23ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar-4/+8
2022-08-21tomoyo: struct path it might get from LSM callers won't have NULL dentry or mntAl Viro-8/+3
2022-08-21tomoyo: use vsnprintf() properlyAl Viro-2/+2
2022-08-19Merge tag 'hardening-v6.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds-4/+2
2022-08-16selinux: Implement userns_create hookFrederick Lawler-0/+11
2022-08-16security, lsm: Introduce security_create_user_ns()Frederick Lawler-0/+5
2022-08-16LoadPin: Return EFAULT on copy_from_user() failuresKees Cook-4/+2
2022-08-15lsm: clean up redundant NULL pointer checkXiu Jianfeng-13/+1
2022-08-10Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds-338/+486
2022-08-02Merge tag 'linux-kselftest-kunit-5.20-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds-6/+6