summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorLines
2025-01-07selinux: avoid unnecessary indirection in struct level_datumChristian Göttsche-17/+10
2025-01-07selinux: use known type instead of void pointerChristian Göttsche-74/+77
2025-01-07selinux: rename comparison functions for clarityChristian Göttsche-16/+16
2025-01-07selinux: rework match_ipv6_addrmask()Christian Göttsche-7/+5
2025-01-07selinux: constify and reconcile function parameter namesChristian Göttsche-6/+6
2025-01-07selinux: avoid using types indicating user space interactionChristian Göttsche-2/+2
2025-01-07selinux: supply missing field initializersChristian Göttsche-2/+2
2025-01-07Merge tag 'selinux-pr-20250107' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-38/+65
2025-01-06tomoyo: automatically use patterns for several situations in learning modeTetsuo Handa-0/+30
2025-01-05lockdown: initialize local array before use to quiet static analysisTanya Agarwal-1/+1
2025-01-04safesetid: check size of policy writesLeo Stone-0/+3
2025-01-04lsm: rename variable to avoid shadowingChristian Göttsche-2/+2
2025-01-04lsm: constify function parametersChristian Göttsche-2/+2
2025-01-04security: remove redundant assignment to return variableColin Ian King-3/+1
2025-01-04selinux: match extended permissions to their base permissionsThiébaud Weksteen-38/+65
2025-01-04lsm: Only build lsm_audit.c if CONFIG_SECURITY and CONFIG_AUDIT are setMickaël Salaün-1/+6
2025-01-03ima: ignore suffixed policy rule commentsMimi Zohar-1/+1
2025-01-03ima: limit the builtin 'tcb' dont_measure tmpfs policy ruleMimi Zohar-1/+2
2024-12-24ima: kexec: silence RCU list traversal warningBreno Leitao-1/+2
2024-12-22vfs: support caching symlink lengths in inodesMateusz Guzik-1/+1
2024-12-18ima: instantiate the bprm_creds_for_exec() hookMimi Zohar-2/+54
2024-12-18security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebitsMickaël Salaün-6/+23
2024-12-18exec: Add a new AT_EXECVE_CHECK flag to execveat(2)Mickaël Salaün-0/+10
2024-12-18Merge tag 'selinux-pr-20241217' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds-2/+6
2024-12-17tomoyo: use realpath if symlink's pathname refers to procfsTetsuo Handa-2/+9
2024-12-16bpf: lsm: Remove hook to bpf_task_storage_freeSong Liu-1/+0
2024-12-16tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa-1/+1
2024-12-15selinux: ignore unknown extended permissionsThiébaud Weksteen-2/+6
2024-12-15selinux: add netlink nlmsg_type audit messageThiébaud Weksteen-2/+5
2024-12-13selinux: add support for xperms in conditional policiesChristian Göttsche-9/+26
2024-12-11selinux: Fix SCTP error inconsistency in selinux_socket_bind()Mikhail Ivanov-1/+1
2024-12-11selinux: use native iterator typesChristian Göttsche-4/+4
2024-12-11selinux: add generated av_permissions.h to targetsThomas Weißschuh-4/+3
2024-12-11ima: Suspend PCR extends and log appends when rebootingStefan Berger-0/+47
2024-12-10fsnotify: introduce pre-content permission eventsAmir Goldstein-1/+2
2024-12-06smack: deduplicate access to string conversionKonstantin Andreev-40/+15
2024-12-05Merge tag 'net-6.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds-1/+1
2024-12-04security: add trace event for cap_capableJordan Rome-13/+41
2024-12-04capabilities: remove cap_mmap_file()Paul Moore-7/+0
2024-12-04lsm: secctx provider check on releaseCasey Schaufler-16/+10
2024-12-04lsm: lsm_context in security_dentry_init_securityCasey Schaufler-9/+8
2024-12-04lsm: use lsm_context in security_inode_getsecctxCasey Schaufler-13/+16
2024-12-04lsm: replace context+len with lsm_contextCasey Schaufler-59/+74
2024-12-04lsm: ensure the correct LSM context releaserCasey Schaufler-9/+23
2024-12-02module: Convert symbol namespace to string literalPeter Zijlstra-1/+1
2024-11-30Merge tag 'lsm-pr-20241129' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-4/+5
2024-11-30selinux: use sk_to_full_sk() in selinux_ip_output()Eric Dumazet-1/+1
2024-11-26ima: uncover hidden variable in ima_match_rules()Casey Schaufler-4/+5
2024-11-26apparmor: lift new_profile declaration to remove C23 extension warningJohn Johansen-2/+1
2024-11-26apparmor: replace misleading 'scrubbing environment' phrase in debug printRyan Lee-8/+8
generated by cgit v1.2.3 (git 2.46.0) at 2026-03-18 12:37:46 +0000