summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* capabilities: fix potential memleak on error path from vfs_getxattr_alloc()Gaosheng Cui2022-11-101-2/+4
* selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi2022-10-293-5/+6
* ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar2022-10-261-4/+8
* hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook2022-10-261-4/+10
* hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZEROKees Cook2022-10-261-1/+4
* efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain2022-10-151-1/+1
* apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng2022-08-251-1/+1
* apparmor: fix reference count leak in aa_pivotroot()Xin Xiong2022-08-251-0/+1
* apparmor: fix overlapping attachment computationJohn Johansen2022-08-252-2/+2
* apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-08-251-5/+7
* apparmor: fix aa_label_asxprint return checkTom Rix2022-08-251-3/+3
* apparmor: Fix failed mount permission check error messageJohn Johansen2022-08-251-3/+4
* apparmor: fix absroot causing audited secids to begin with =John Johansen2022-08-252-3/+9
* apparmor: fix quiet_denied for file rulesJohn Johansen2022-08-251-1/+1
* selinux: Add boundary check in put_entry()Xiu Jianfeng2022-08-171-0/+2
* selinux: fix memleak in security_read_state_kernel()Xiu Jianfeng2022-08-171-1/+8
* lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg2022-07-291-0/+4
* x86/retbleed: Add fine grained Kconfig knobsPeter Zijlstra2022-07-231-11/+0
* ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie2022-07-211-0/+1
* ima: force signature verification when CONFIG_KEXEC_SIG is configuredCoiby Xu2022-07-211-0/+2
* ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu2022-07-211-1/+2
* Revert "evm: Fix memleak in init_desc"Xiu Jianfeng2022-07-211-5/+2
* fs: support mapped mounts of mapped filesystemsChristian Brauner2022-07-021-5/+4
* fs: use low-level mapping helpersChristian Brauner2022-07-021-5/+8
* fs: move mapping helpersChristian Brauner2022-07-021-0/+1
* KEYS: trusted: tpm2: Fix migratable logicDavid Safford2022-06-141-2/+2
* ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua2022-06-091-8/+6
* landlock: Fix same-layer rule unionsMickaël Salaün2022-06-092-26/+54
* landlock: Create find_rule() from unmask_layers()Mickaël Salaün2022-06-091-13/+28
* landlock: Reduce the maximum number of layers to 16Mickaël Salaün2022-06-093-11/+12
* landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün2022-06-095-15/+30
* landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün2022-06-091-4/+4
* landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün2022-06-091-9/+13
* landlock: Fix landlock_add_rule(2) documentationMickaël Salaün2022-06-091-4/+3
* landlock: Format with clang-formatMickaël Salaün2022-06-0910-136/+142
* landlock: Add clang-format exceptionsMickaël Salaün2022-06-092-0/+6
* efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg2022-06-092-0/+41
* lockdown: also lock down previous kgdb useDaniel Thompson2022-05-251-0/+2
* selinux: fix bad cleanup on error in hashtab_duplicate()Ondrej Mosnacek2022-05-251-1/+2
* Fix incorrect type in assignment of ipv6 port for auditCasey Schaufler2022-04-081-1/+1
* selinux: allow FIOCLEX and FIONCLEX with policy capabilityRichard Haines2022-04-084-1/+16
* selinux: use correct type for context lengthChristian Göttsche2022-04-081-1/+1
* LSM: general protection fault in legacy_parse_paramCasey Schaufler2022-04-082-5/+17
* TOMOYO: fix __setup handlers return valuesRandy Dunlap2022-04-081-2/+2
* KEYS: trusted: Avoid calling null function trusted_key_exitDave Kleikamp2022-04-081-1/+1
* KEYS: trusted: Fix trusted key backends when building as moduleAndreas Rammhold2022-04-081-2/+2
* EVM: fix the evm= __setup handler return valueRandy Dunlap2022-04-081-1/+1
* selinux: Fix selinux_sb_mnt_opts_compat()Scott Mayhew2022-04-081-34/+41
* selinux: check return value of sel_make_avc_filesChristian Göttsche2022-04-081-0/+2
* selinux: access superblock_security_struct in LSM blob wayGONG, Ruiqi2022-04-081-2/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-28 19:18:22 +0000