summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven2019-07-261-2/+3
* selinux: fix empty write to keycreate fileOndrej Mosnacek2019-07-261-5/+6
* apparmor: reset pos on failure to unpack for various functionsMike Salvatore2019-06-251-8/+39
* apparmor: enforce nullbyte at end of tag stringJann Horn2019-06-251-1/+1
* apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen2019-06-251-1/+10
* Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler2019-06-191-5/+7
* selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang2019-06-191-6/+14
* selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang2019-06-191-5/+14
* selinux: log raw contexts as untrusted stringsOndrej Mosnacek2019-06-191-2/+8
* evm: check hash algorithm passed to init_desc()Roberto Sassu2019-06-091-0/+3
* ima: show rules with IMA_INMASK correctlyRoberto Sassu2019-06-091-9/+12
* ima: fix wrong signed policy requirement when not appraisingPetr Vorel2019-06-091-3/+4
* selinux: avoid uninitialized variable warningArnd Bergmann2019-05-311-9/+5
* selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni2019-05-161-4/+4
* Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds2019-05-052-8/+18
|\
| * apparmorfs: fix use-after-free on symlink traversalAl Viro2019-04-101-4/+9
| * securityfs: fix use-after-free on symlink traversalAl Viro2019-04-101-4/+9
* | Merge tag 'selinux-pr-20190429' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-04-301-0/+1
|\ \
| * | selinux: use kernel linux/socket.h for genheaders and mdpPaulo Alcantara2019-04-291-0/+1
* | | Merge branch 'for-5.1-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2019-04-191-1/+1
|\ \ \
| * | | device_cgroup: fix RCU imbalance in error caseJann Horn2019-03-191-1/+1
* | | | apparmor: Restore Y/N in /sys for apparmor's "enabled"Kees Cook2019-04-101-1/+48
* | | | KEYS: trusted: fix -Wvarags warningndesaulniers@google.com2019-04-081-2/+2
* | | | KEYS: trusted: allow trusted.ko to initialize w/o a TPMJarkko Sakkinen2019-04-081-5/+23
| |_|/ |/| |
* | | LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make oldconfig"Kees Cook2019-03-291-0/+38
* | | Yama: mark local symbols as staticJann Horn2019-03-281-4/+4
| |/ |/|
* | selinux: fix NULL dereference in policydb_destroy()Ondrej Mosnacek2019-03-181-4/+9
|/
* Merge tag 'selinux-pr-20190312' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-03-131-1/+7
|\
| * security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblockJ. Bruce Fields2019-03-111-1/+4
| * selinux: add the missing walk_size + len check in selinux_sctp_bind_connectXin Long2019-03-111-0/+3
* | Merge tag 'apparmor-pr-2019-03-12' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-03-132-0/+2
|\ \
| * | apparmor: fix double free when unpack of secmark rules failsJohn Johansen2019-03-121-0/+1
| * | apparmor: delete the dentry in aafs_remove() to avoid a leakChris Coulson2019-03-121-0/+1
| * | apparmor: Fix warning about unused function apparmor_ipv6_postroutePetr Vorel2018-11-141-0/+2
* | | Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds2019-03-125-25/+194
|\ \ \
| * | | introduce cloning of fs_contextAl Viro2019-02-283-0/+93
| * | | smack: Implement filesystem context security hooksDavid Howells2019-02-282-15/+47
| * | | selinux: Implement the new mount API LSM hooksDavid Howells2019-02-282-10/+49
| * | | vfs: Add LSM hooks for the new mount APIDavid Howells2019-02-281-0/+5
* | | | selinux: convert to kvmallocKent Overstreet2019-03-126-144/+62
* | | | Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds2019-03-105-25/+90
|\ \ \ \
| * \ \ \ Merge tag 'tpmdd-next-20190213' of git://git.infradead.org/users/jjs/linux-tp...James Morris2019-02-135-25/+90
| |\ \ \ \
| | * | | | tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()Roberto Sassu2019-02-134-9/+64
| | * | | | KEYS: trusted: explicitly use tpm_chip structure from tpm_default_chip()Roberto Sassu2019-02-131-14/+24
| | * | | | tpm: retrieve digest size of unknown algorithms with PCR readRoberto Sassu2019-02-131-5/+5
* | | | | | Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2019-03-105-11/+40
|\ \ \ \ \ \
| * \ \ \ \ \ Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...James Morris2019-02-145-11/+40
| |\ \ \ \ \ \ | | |/ / / / / | |/| | | | |
| | * | | | | evm: Use defined constant for UUID representationAndy Shevchenko2019-02-041-2/+1
| | * | | | | ima: define ima_post_create_tmpfile() hook and add missing callMimi Zohar2019-02-041-2/+33
| | * | | | | evm: remove set but not used variable 'xattr'YueHaibing2019-02-041-5/+1