summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* lsm: new security_file_ioctl_compat() hookAlfred Piccioni2024-01-314-0/+48
* Revert "KEYS: encrypted: Add check for strsep"Mimi Zohar2024-01-251-4/+0
* apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin2024-01-251-0/+4
* selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün2024-01-251-0/+7
* KEYS: encrypted: Add check for strsepChen Ni2024-01-251-0/+4
* keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiryDavid Howells2024-01-014-22/+37
* ima: detect changes to the backing overlay fileMimi Zohar2023-11-283-1/+22
* ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein2023-11-281-11/+37
* KEYS: trusted: Rollback init_trusted() consistentlyJarkko Sakkinen2023-11-281-10/+10
* KEYS: trusted: tee: Refactor register SHM usageSumit Garg2023-11-281-44/+20
* apparmor: fix invalid reference on profile->disconnectedGeorgia Garcia2023-11-202-2/+4
* apparmor: test: make static symbols visible during kunit testingRae Moar2023-11-205-168/+196
* KEYS: trusted: Remove redundant static calls usageSumit Garg2023-10-191-8/+5
* ima: rework CONFIG_IMA dependency blockArnd Bergmann2023-10-101-12/+6
* ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko2023-10-101-2/+2
* smack: Retrieve transmuting information in smack_inode_getsecurity()Roberto Sassu2023-10-061-4/+18
* smack: Record transmuting in smk_transmutedRoberto Sassu2023-10-062-12/+30
* selinux: fix handling of empty opts in selinux_fs_context_submount()Ondrej Mosnacek2023-09-231-2/+8
* smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter2023-09-131-1/+1
* ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain2023-09-131-12/+0
* vfs, security: Fix automount superblock LSM init problem, preventing NFS sb s...David Howells2023-09-133-0/+87
* security: keys: perform capable check only on privileged operationsChristian Göttsche2023-09-131-3/+8
* selinux: set next pointer before attaching to listChristian Göttsche2023-08-301-1/+1
* security: keys: Modify mismatched function nameJiapeng Chong2023-07-271-1/+1
* keys: Fix linking a duplicate key to a keyring's assoc_arrayPetr Pavlu2023-07-271-11/+24
* integrity: Fix possible multiple allocation in integrity_inode_get()Tianjia Zhang2023-07-191-6/+9
* apparmor: fix missing error check for rhashtable_insert_fastDanila Chernetsov2023-07-191-2/+7
* ima: Fix build warningsRoberto Sassu2023-07-192-1/+5
* evm: Fix build warningsRoberto Sassu2023-07-192-2/+2
* evm: Complete description of evm_inode_setattr()Roberto Sassu2023-07-191-0/+2
* selinux: don't use make's grouped targets feature yetPaul Moore2023-06-091-1/+5
* selinux: ensure av_permissions.h is built when neededPaul Moore2023-05-111-1/+1
* selinux: fix Makefile dependencies of flask.hOndrej Mosnacek2023-05-111-2/+2
* IMA: allow/fix UML buildsRandy Dunlap2023-05-111-1/+1
* keys: Do not cache key in task struct if key is requested from kernel threadDavid Howells2023-03-301-3/+6
* ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu2023-03-102-5/+9
* ima: fix error handling logic when file measurement failedMatt Bobrowski2023-03-102-2/+2
* randstruct: disable Clang 15 supportEric Biggers2023-02-251-0/+3
* use less confusing names for iov_iter direction initializersAl Viro2023-02-091-2/+2
* tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada2023-02-011-1/+1
* device_cgroup: Roll back to original exceptions after copy failureWang Weiyang2023-01-071-4/+29
* ima: Fix memory leak in __ima_inode_hash()Roberto Sassu2023-01-071-1/+6
* ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu2023-01-071-1/+4
* efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg2023-01-071-0/+1
* ima: Fix hash dependency to correct algorithmTianjia Zhang2023-01-071-1/+1
* security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor2022-12-311-0/+3
* ima: Simplify ima_lsm_copy_ruleGUO Zihua2022-12-311-7/+3
* LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook2022-12-311-12/+18
* apparmor: Fix memleak in alloc_ns()Xiu Jianfeng2022-12-311-1/+1
* apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng2022-12-311-2/+2