summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* keys: Do not cache key in task struct if key is requested from kernel threadDavid Howells2023-03-211-3/+6
* capability: just use a 'u64' instead of a 'u32[2]' arrayLinus Torvalds2023-03-012-37/+52
* Merge tag 'powerpc-6.3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/po...Linus Torvalds2023-02-251-15/+32
|\
| * integrity/powerpc: Support loading keys from PLPKSRussell Currey2023-02-131-7/+10
| * integrity/powerpc: Improve error handling & reporting when loading certsRussell Currey2023-02-131-6/+20
| * powerpc/secvar: Use u64 in secvar_operationsMichael Ellerman2023-02-121-2/+2
* | Merge tag 'mm-stable-2023-02-20-13-37' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds2023-02-232-13/+4
|\ \
| * | mm: replace vma->vm_flags direct modifications with modifier callsSuren Baghdasaryan2023-02-091-3/+3
| * | mm: new primitive kvmemdup()Hao Sun2023-01-181-10/+1
| |/
* | Merge tag 'Smack-for-6.3' of https://github.com/cschaufler/smack-nextLinus Torvalds2023-02-221-3/+14
|\ \
| * | smackfs: Added check catlenDenis Arefev2023-02-211-3/+14
* | | Merge tag 'integrity-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2023-02-227-32/+62
|\ \ \
| * | | ima: Introduce MMAP_CHECK_REQPROT hookRoberto Sassu2023-01-315-6/+32
| * | | ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu2023-01-312-5/+9
| * | | evm: call dump_security_xattr() in all cases to remove code duplicationXiu Jianfeng2023-01-311-17/+16
| * | | ima: fix ima_delete_rules() kernel-doc warningRandy Dunlap2023-01-181-1/+2
| * | | ima: return IMA digest value only when IMA_COLLECTED flag is setMatt Bobrowski2023-01-181-1/+1
| * | | ima: fix error handling logic when file measurement failedMatt Bobrowski2023-01-182-2/+2
| | |/ | |/|
* | | Merge tag 'v6.3-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/...Linus Torvalds2023-02-211-25/+5
|\ \ \
| * | | KEYS: DH: Use crypto_wait_reqHerbert Xu2023-02-131-25/+5
| |/ /
* | | Merge tag 'hardening-v6.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2023-02-212-37/+55
|\ \ \
| * | | randstruct: disable Clang 15 supportEric Biggers2023-02-081-0/+3
| * | | LoadPin: Allow filesystem switch when not enforcingKees Cook2023-01-191-5/+11
| * | | LoadPin: Move pin reporting cleanly out of lockingKees Cook2023-01-191-9/+6
| * | | LoadPin: Refactor sysctl initializationKees Cook2023-01-191-16/+19
| * | | LoadPin: Refactor read-only check into a helperKees Cook2023-01-191-12/+21
| |/ /
* | | Merge tag 'fs.idmapped.v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2023-02-2019-165/+163
|\ \ \
| * | | fs: port vfs{g,u}id helpers to mnt_idmapChristian Brauner2023-01-191-6/+3
| * | | fs: port i_{g,u}id_into_vfs{g,u}id() to mnt_idmapChristian Brauner2023-01-194-14/+11
| * | | fs: port i_{g,u}id_{needs_}update() to mnt_idmapChristian Brauner2023-01-191-3/+2
| * | | fs: port privilege checking helpers to mnt_idmapChristian Brauner2023-01-191-3/+2
| * | | fs: port inode_owner_or_capable() to mnt_idmapChristian Brauner2023-01-191-3/+2
| * | | fs: port acl to mnt_idmapChristian Brauner2023-01-195-26/+26
| * | | fs: port xattr to mnt_idmapChristian Brauner2023-01-1913-94/+99
| * | | fs: port ->permission() to pass mnt_idmapChristian Brauner2023-01-199-16/+17
| * | | fs: port ->mkdir() to pass mnt_idmapChristian Brauner2023-01-191-1/+1
| * | | fs: port ->setattr() to pass mnt_idmapChristian Brauner2023-01-193-6/+7
| |/ /
* | | Merge tag 'tpm-v6.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jar...Linus Torvalds2023-02-201-37/+100
|\ \ \
| * | | KEYS: Add new function key_create()Thomas Weißschuh2023-02-131-37/+100
| | |/ | |/|
* / | apparmor: Fix regression in compat permissions for getattrJohn Johansen2023-02-151-2/+1
|/ /
* | tomoyo: Update website linkTetsuo Handa2023-01-131-1/+1
* | tomoyo: Remove "select SRCU"Paul E. McKenney2023-01-131-1/+0
* | tomoyo: Omit use of bin2cMasahiro Yamada2023-01-092-8/+8
* | tomoyo: avoid unneeded creation of builtin-policy.hMasahiro Yamada2023-01-071-0/+2
* | tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada2023-01-071-1/+1
|/
* Merge tag 'hardening-v6.2-rc1-fixes' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2022-12-232-12/+21
|\
| * security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor2022-12-141-0/+3
| * LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook2022-12-141-12/+18
* | Merge tag 'fs.vfsuid.ima.v6.2-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-12-211-0/+24
|\ \
| * | mnt_idmapping: move ima-only helpers to imaChristian Brauner2022-12-131-0/+24