aboutsummaryrefslogtreecommitdiffstats
path: root/security (follow)
AgeCommit message (Expand)AuthorFilesLines
2025-07-28Merge tag 'pull-securityfs' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds5-177/+73
2025-07-26kstack_erase: Support Clang stack depth trackingKees Cook1-1/+4
2025-07-21stackleak: Rename stackleak_track_stack to __sanitizer_cov_stack_depthKees Cook1-2/+2
2025-07-21stackleak: Rename STACKLEAK to KSTACK_ERASEKees Cook1-16/+20
2025-07-20apparmor: fix: accept2 being specifie even when permission table is presntJohn Johansen1-1/+2
2025-07-20apparmor: transition from a list of rules to a vector of rulesJohn Johansen15-113/+85
2025-07-20apparmor: fix documentation mismatches in val_mask_to_str and socket functionsPeng Jiang2-3/+23
2025-07-20apparmor: remove redundant perms.allow MAY_EXEC bitflag setRyan Lee1-3/+1
2025-07-20apparmor: fix kernel doc warnings for kernel test robotJohn Johansen2-4/+10
2025-07-20apparmor: Fix unaligned memory accesses in KUnit testHelge Deller1-2/+4
2025-07-20apparmor: Fix 8-byte alignment for initial dfa blob streamsHelge Deller1-2/+2
2025-07-20apparmor: shift uid when mediating af_unix in usernsGabriel Totev1-2/+6
2025-07-20apparmor: shift ouid when mediating hard links in usernsGabriel Totev1-2/+4
2025-07-20apparmor: make sure unix socket labeling is correctly updated.John Johansen6-62/+231
2025-07-19landlock: Fix cosmetic changeMickaël Salaün1-0/+1
2025-07-15apparmor: fix regression in fs based unix sockets when using old abiJohn Johansen2-51/+71
2025-07-15apparmor: fix AA_DEBUG_LABEL()John Johansen1-1/+1
2025-07-15apparmor: fix af_unix auditing to include all address informationJohn Johansen3-10/+18
2025-07-15apparmor: Remove use of the double lockJohn Johansen5-102/+104
2025-07-15apparmor: update kernel doc comments for xxx_label_crit_sectionJohn Johansen1-0/+8
2025-07-15apparmor: make __begin_current_label_crit_section() indicate whether put is n...Mateusz Guzik3-41/+67
2025-07-15Revert "apparmor: use SHA-256 library API instead of crypto_shash API"John Johansen2-13/+75
2025-07-15apparmor: mitigate parser generating large xtablesJohn Johansen3-6/+45
2025-07-14apparmor: use SHA-256 library API instead of crypto_shash APIEric Biggers2-75/+13
2025-07-09integrity/platform_certs: Allow loading of keys in the static key management ...Srish Srinivasan1-2/+3
2025-07-04tree-wide: s/struct fileattr/struct file_kattr/gChristian Brauner2-4/+4
2025-07-01selinux: implement inode_file_[g|s]etattr hooksAndrey Albershteyn1-0/+14
2025-07-01lsm: introduce new hooks for setting/getting inode fsxattrAndrey Albershteyn1-0/+30
2025-06-27landlock: Fix warning from KUnit testsTingmao Wang1-27/+42
2025-06-24selinux: don't bother with selinuxfs_info_free() on failuresAl Viro1-2/+0
2025-06-23exec: Correct the permission check for unsafe execEric W. Biederman1-12/+8
2025-06-19selinux: add __GFP_NOWARN to hashtab_init() allocationsPaul Moore1-1/+2
2025-06-19selinux: optimize selinux_inode_getattr/permission() based on neveraudit|perm...Stephen Smalley2-1/+21
2025-06-19selinux: introduce neveraudit typesStephen Smalley5-1/+48
2025-06-19selinux: change security_compute_sid to return the ssid or tsid on matchStephen Smalley1-5/+11
2025-06-17ipe: don't bother with removal of files in directory we'll be removingAl Viro2-22/+14
2025-06-17evm_secfs: clear securityfs interactionsAl Viro1-8/+7
2025-06-17ima_fs: get rid of lookup-by-dentry stuffAl Viro1-66/+16
2025-06-17ima_fs: don't bother with removal of files in directory we'll be removingAl Viro1-39/+18
2025-06-17apparmor: file never has NULL f_path.mntAl Viro1-1/+1
2025-06-17landlock: opened file never has a negative dentryAl Viro1-1/+0
2025-06-16selinux: fix selinux_xfrm_alloc_user() to set correct ctx_lenStephen Smalley1-1/+1
2025-06-16selinux: add a 5 second sleep to /sys/fs/selinux/userPaul Moore1-0/+1
2025-06-16lsm: trivial comment fixKalevi Kolttonen1-1/+1
2025-06-16ima: add a knob ima= to allow disabling IMA in kdump kernelBaoquan He1-0/+26
2025-06-11make securityfs_remove() remove the entire subtreeAl Viro1-37/+10
2025-06-11securityfs: pin filesystem only for objects directly in rootAl Viro1-8/+13
2025-06-11securityfs: don't pin dentries twice, once is enough...Al Viro1-2/+0
2025-06-11KEYS: Invert FINAL_PUT bitHerbert Xu2-4/+5
2025-05-31Merge tag 'gcc-minimum-version-6.16' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds1-76/+0