summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2022-05-23certs: Factor out the blacklist hash creationMickaël Salaün-24/+2
2022-05-23landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün-76/+528
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün-15/+46
2022-05-23landlock: Move filesystem helpers and add a new oneMickaël Salaün-41/+46
2022-05-23landlock: Fix same-layer rule unionsMickaël Salaün-26/+54
2022-05-23landlock: Create find_rule() from unmask_layers()Mickaël Salaün-13/+28
2022-05-23landlock: Reduce the maximum number of layers to 16Mickaël Salaün-11/+12
2022-05-23landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün-15/+30
2022-05-23landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün-4/+4
2022-05-23landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün-9/+13
2022-05-23landlock: Fix landlock_add_rule(2) documentationMickaël Salaün-4/+3
2022-05-19move mount-related externs from fs.h to mount.hAl Viro-0/+1
2022-05-17selinux: fix bad cleanup on error in hashtab_duplicate()Ondrej Mosnacek-1/+2
2022-05-16loadpin: stop using bdevnameChristoph Hellwig-4/+1
2022-05-16big_keys: Use struct for internal payloadKees Cook-37/+36
2022-05-16integrity: Fix sparse warnings in keyring_handlerStefan Berger-3/+3
2022-05-16evm: Clean up some variablesStefan Berger-4/+1
2022-05-16evm: Return INTEGRITY_PASS for enum integrity_status value '0'Stefan Berger-1/+1
2022-05-15efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg-0/+41
2022-05-13security: declare member holding string literal constChristian Göttsche-1/+1
2022-05-09landlock: Format with clang-formatMickaël Salaün-136/+142
2022-05-09landlock: Add clang-format exceptionsMickaël Salaün-0/+6
2022-05-08randstruct: Enable Clang supportKees Cook-2/+12
2022-05-08randstruct: Move seed generation into scripts/basic/Kees Cook-4/+5
2022-05-08randstruct: Reorganize Kconfigs and attribute macrosKees Cook-0/+62
2022-05-05ima: support fs-verity file digest based version 3 signaturesMimi Zohar-16/+177
2022-05-05ima: permit fsverity's file digests in the IMA measurement listMimi Zohar-8/+90
2022-05-05ima: define a new template field named 'd-ngv2' and templatesMimi Zohar-11/+73
2022-05-03selinux: log anon inode class nameChristian Göttsche-2/+5
2022-05-03selinux: declare data arrays constChristian Göttsche-26/+24
2022-05-03selinux: fix indentation level of mls_ops blockChristian Göttsche-21/+21
2022-05-03selinux: include necessary headers in headersChristian Göttsche-1/+12
2022-05-03selinux: avoid extra semicolonChristian Göttsche-9/+9
2022-05-03selinux: update parameter documentationChristian Göttsche-1/+2
2022-05-03selinux: resolve checkpatch errorsChristian Göttsche-18/+9
2022-05-01ima: use IMA default hash algorithm for integrity violationsMimi Zohar-1/+1
2022-05-01ima: fix 'd-ng' comments and documentationMimi Zohar-3/+5
2022-04-14selinux: don't sleep when CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE is truePaul Moore-3/+3
2022-04-13security: don't treat structure as an array of struct hlist_headBill Wendling-5/+4
2022-04-13usercopy: Remove HARDENED_USERCOPY_PAGESPANMatthew Wilcox (Oracle)-12/+1
2022-04-07ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua-8/+6
2022-04-04apparmor: test: Use NULL macrosRicardo Ribalda-3/+3
2022-04-04ima: remove redundant initialization of pointer 'file'.Colin Ian King-1/+1
2022-04-04selinux: checkreqprot is deprecated, add some ssleep() discomfortPaul Moore-3/+11
2022-04-04selinux: runtime disable is deprecated, add some ssleep() discomfortPaul Moore-0/+2
2022-04-04selinux: Remove redundant assignmentsMichal Orzel-4/+2
2022-03-31Merge tag 'hardening-v5.18-rc1-fix1' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds-1/+1
2022-03-28Merge tag 'ptrace-cleanups-for-v5.18' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds-2/+0
2022-03-27Merge tag 'landlock-5.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+1
2022-03-26Merge tag 'memcpy-v5.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds-2/+3