summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada2023-02-011-1/+1
* device_cgroup: Roll back to original exceptions after copy failureWang Weiyang2023-01-121-4/+29
* ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu2023-01-121-1/+4
* efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg2023-01-121-0/+1
* security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor2022-12-311-0/+3
* ima: Simplify ima_lsm_copy_ruleGUO Zihua2022-12-311-7/+3
* LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook2022-12-311-12/+18
* apparmor: Fix memleak in alloc_ns()Xiu Jianfeng2022-12-311-1/+1
* apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng2022-12-311-2/+2
* apparmor: Fix abi check to include v8 abiJohn Johansen2022-12-311-1/+1
* apparmor: fix lockdep warning when removing a namespaceJohn Johansen2022-12-311-1/+1
* apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui2022-12-311-1/+3
* ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng2022-12-311-2/+2
* integrity: Fix memory leakage in keyring allocation error pathGUO Zihua2022-12-311-1/+5
* ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua2022-12-311-9/+32
* capabilities: fix potential memleak on error path from vfs_getxattr_alloc()Gaosheng Cui2022-11-101-2/+4
* selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi2022-10-293-5/+6
* ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar2022-10-261-4/+8
* hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook2022-10-261-4/+10
* hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZEROKees Cook2022-10-261-1/+4
* efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain2022-10-151-1/+1
* apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng2022-08-251-1/+1
* apparmor: fix reference count leak in aa_pivotroot()Xin Xiong2022-08-251-0/+1
* apparmor: fix overlapping attachment computationJohn Johansen2022-08-252-2/+2
* apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-08-251-5/+7
* apparmor: fix aa_label_asxprint return checkTom Rix2022-08-251-3/+3
* apparmor: Fix failed mount permission check error messageJohn Johansen2022-08-251-3/+4
* apparmor: fix absroot causing audited secids to begin with =John Johansen2022-08-252-3/+9
* apparmor: fix quiet_denied for file rulesJohn Johansen2022-08-251-1/+1
* selinux: Add boundary check in put_entry()Xiu Jianfeng2022-08-171-0/+2
* selinux: fix memleak in security_read_state_kernel()Xiu Jianfeng2022-08-171-1/+8
* lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg2022-07-291-0/+4
* x86/retbleed: Add fine grained Kconfig knobsPeter Zijlstra2022-07-231-11/+0
* ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie2022-07-211-0/+1
* ima: force signature verification when CONFIG_KEXEC_SIG is configuredCoiby Xu2022-07-211-0/+2
* ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu2022-07-211-1/+2
* Revert "evm: Fix memleak in init_desc"Xiu Jianfeng2022-07-211-5/+2
* fs: support mapped mounts of mapped filesystemsChristian Brauner2022-07-021-5/+4
* fs: use low-level mapping helpersChristian Brauner2022-07-021-5/+8
* fs: move mapping helpersChristian Brauner2022-07-021-0/+1
* KEYS: trusted: tpm2: Fix migratable logicDavid Safford2022-06-141-2/+2
* ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua2022-06-091-8/+6
* landlock: Fix same-layer rule unionsMickaël Salaün2022-06-092-26/+54
* landlock: Create find_rule() from unmask_layers()Mickaël Salaün2022-06-091-13/+28
* landlock: Reduce the maximum number of layers to 16Mickaël Salaün2022-06-093-11/+12
* landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün2022-06-095-15/+30
* landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün2022-06-091-4/+4
* landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün2022-06-091-9/+13
* landlock: Fix landlock_add_rule(2) documentationMickaël Salaün2022-06-091-4/+3
* landlock: Format with clang-formatMickaël Salaün2022-06-0910-136/+142