summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2021-03-26ima: Support EC keys for signature verificationStefan Berger-16/+14
2021-03-25Merge tag 'integrity-v5.12-fix' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-0/+8
2021-03-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller-52/+60
2021-03-24security: commoncap: fix -Wstringop-overread warningArnd Bergmann-1/+1
2021-03-24apparmor:match_mn() - constify devpath argumentAl Viro-2/+2
2021-03-24ima: Fix the error code for restoring the PCR valueLi Huafei-2/+2
2021-03-22smack: differentiate between subjective and objective task credentialsPaul Moore-14/+44
2021-03-22selinux: clarify task subjective and objective credentialsPaul Moore-39/+73
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore-14/+24
2021-03-22ima: without an IMA policy loaded, return quicklyMimi Zohar-0/+6
2021-03-22integrity: double check iint_cache was initializedMimi Zohar-0/+8
2021-03-22lsm,selinux: add new hook to compare new mount to an existing mountOlga Kornievskaia-0/+63
2021-03-22Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-41/+59
2021-03-18selinuxfs: unify policy load error reportingOndrej Mosnacek-6/+3
2021-03-18selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek-33/+55
2021-03-18selinux: don't log MAC_POLICY_LOAD record on failed policy loadOndrej Mosnacek-2/+1
2021-03-12Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file cap...Eric W. Biederman-11/+1
2021-03-11nexthop: Add netlink defines and enumerators for resilient NH groupsIdo Schimmel-1/+4
2021-03-11integrity: Load mokx variables into the blacklist keyringEric Snowberg-2/+18
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg-0/+11
2021-03-08selinux: fix misspellings using codespell toolXiong Zhenwu-1/+1
2021-03-08selinux: fix misspellings using codespell toolXiong Zhenwu-1/+1
2021-03-08selinux: measure state and policy capabilitiesLakshmi Ramasubramanian-5/+96
2021-03-08selinux: Allow context mounts for unpriviliged overlayfsVivek Goyal-1/+2
2021-03-08powerpc: Move arch independent ima kexec functions to drivers/of/kexec.cLakshmi Ramasubramanian-4/+1
2021-03-08powerpc: Move ima buffer fields to struct kimageLakshmi Ramasubramanian-6/+2
2021-02-23Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds-21/+18
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds-115/+240
2021-02-22Merge branch 'userns-for-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-1/+11
2021-02-22Merge branch 'work.audit' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds-2/+3
2021-02-21Merge tag 'tpmdd-next-v5.12-rc1-v2' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds-8/+36
2021-02-21Merge tag 'Smack-for-v5.12' of git://github.com/cschaufler/smack-nextLinus Torvalds-2/+19
2021-02-21Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-52/+301
2021-02-21Merge tag 'selinux-pr-20210215' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-51/+141
2021-02-21Merge tag 'tomoyo-pr-20210215' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds-25/+25
2021-02-16KEYS: trusted: Reserve TPM for seal and unseal operationsJarkko Sakkinen-4/+18
2021-02-16KEYS: trusted: Fix migratable=1 failingJarkko Sakkinen-1/+1
2021-02-16KEYS: trusted: Fix incorrect handling of tpm_get_random()Jarkko Sakkinen-3/+17
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun-2/+2
2021-02-10Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar-0/+3
2021-02-10ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian-0/+2
2021-02-10ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian-0/+1
2021-02-07apparmor: fix error checkTom Rix-2/+2
2021-02-07security: apparmor: delete repeated words in commentsRandy Dunlap-2/+2
2021-02-07security: apparmor: file.h: delete duplicated wordRandy Dunlap-1/+1
2021-02-07apparmor: switch to apparmor to internal capable check for policy managementJohn Johansen-1/+17
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen-23/+51
2021-02-02smackfs: restrict bytes count in smackfs write functionsSabyrzhan Tasbolatov-2/+19
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa-1/+1
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa-24/+24