summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2025-03-28Merge tag 'ipe-pr-20250324' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-2/+6
2025-03-27ima: limit the number of ToMToU integrity violationsMimi Zohar-4/+5
2025-03-27ima: limit the number of open-writers integrity violationsMimi Zohar-2/+10
2025-03-26Merge tag 'sysctl-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-0/+11
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFFMickaël Salaün-7/+43
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flagsMickaël Salaün-12/+63
2025-03-26landlock: Log scoped denialsMickaël Salaün-18/+97
2025-03-26landlock: Log TCP bind and connect denialsMickaël Salaün-4/+60
2025-03-26landlock: Log truncate and IOCTL denialsMickaël Salaün-6/+307
2025-03-26landlock: Factor out IOCTL hooksMickaël Salaün-21/+11
2025-03-26landlock: Log file-related denialsMickaël Salaün-16/+233
2025-03-26landlock: Log mount-related denialsMickaël Salaün-41/+74
2025-03-26landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain statusMickaël Salaün-4/+285
2025-03-26landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denialsMickaël Salaün-24/+336
2025-03-26landlock: Identify domain execution crossingMickaël Salaün-6/+59
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün-21/+39
2025-03-26landlock: Prepare to use credential instead of domain for scopeMickaël Salaün-24/+28
2025-03-26landlock: Prepare to use credential instead of domain for networkMickaël Salaün-15/+12
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün-30/+92
2025-03-26landlock: Move domain hierarchy managementMickaël Salaün-34/+53
2025-03-26landlock: Add unique ID generatorMickaël Salaün-0/+282
2025-03-26lsm: Add audit_log_lsm_data() helperMickaël Salaün-9/+18
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün-6/+64
2025-03-25Merge tag 'Smack-for-6.15' of https://github.com/cschaufler/smack-nextLinus Torvalds-52/+43
2025-03-25Merge tag 'selinux-pr-20250323' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-16/+73
2025-03-25Merge tag 'lsm-pr-20250323' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-6/+31
2025-03-24Merge tag 'hardening-v6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-29/+36
2025-03-24ipe: policy_fs: fix kernel-doc warningsRandy Dunlap-2/+6
2025-03-24Merge tag 'vfs-6.15-rc1.async.dir' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds-4/+4
2025-03-24Merge tag 'vfs-6.15-rc1.mount' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds-1/+4
2025-03-24Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+1
2025-03-22keys: Fix UAF in key_put()David Howells-1/+5
2025-03-21landlock: Prepare to add second errataMickaël Salaün-0/+12
2025-03-21landlock: Add erratum for TCP fixMickaël Salaün-0/+15
2025-03-21landlock: Add the errata interfaceMickaël Salaün-4/+138
2025-03-21landlock: Move code to ease future backportsMickaël Salaün-5/+5
2025-03-21crypto: lib/Kconfig - hide library optionsArnd Bergmann-1/+1
2025-03-17selinux: get netif_wildcard policycap from policy instead of cacheChristian Göttsche-2/+1
2025-03-15security: Propagate caller information in bpf hooksBlaise Boscaccy-9/+12
2025-03-10lsm: remove old email address for Stephen SmalleyStephen Smalley-1/+1
2025-03-10Merge 6.14-rc6 into driver-core-nextGreg Kroah-Hartman-10/+15
2025-03-08hardening: Enable i386 FORTIFY_SOURCE on Clang 16+Kees Cook-1/+1
2025-03-08vfs: Remove invalidate_inodes()Jan Kara-1/+1
2025-03-07capability: Remove unused has_capabilityDr. David Alan Gilbert-4/+5
2025-03-07yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()Oleg Nesterov-7/+2
2025-03-07selinux: support wildcard network interface namesChristian Göttsche-4/+22
2025-03-03loadpin: remove MODULE_COMPRESS_NONE as it is no longer supportedArulpandiyan Vadivel-1/+1
2025-02-28fortify: Move FORTIFY_SOURCE under 'Kernel hardening options'Mel Gorman-9/+9
2025-02-28mm: security: Allow default HARDENED_USERCOPY to be set at compile timeMel Gorman-0/+8
2025-02-28mm: security: Move hardened usercopy under 'Kernel hardening options'Mel Gorman-12/+16