summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* selinux: avoid dereference of garbage after mount failureChristian Göttsche2024-04-101-5/+7
* landlock: Warn once if a Landlock action is requested while disabledMickaël Salaün2024-04-031-3/+15
* smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu2024-04-031-0/+9
* smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu2024-04-031-1/+2
* landlock: Fix asymmetric private inodes referringMickaël Salaün2024-03-061-2/+2
* tomoyo: fix UAF write bug in tomoyo_write_control()Tetsuo Handa2024-03-061-1/+2
* lsm: fix the logic in security_inode_getsecctx()Ondrej Mosnacek2024-02-231-1/+13
* lsm: fix default return value of the socket_getpeersec_*() hooksOndrej Mosnacek2024-02-231-4/+27
* lsm: new security_file_ioctl_compat() hookAlfred Piccioni2024-01-314-0/+48
* Revert "KEYS: encrypted: Add check for strsep"Mimi Zohar2024-01-251-4/+0
* apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin2024-01-251-0/+4
* apparmor: fix possible memory leak in unpack_trans_tableFedor Pchelkin2024-01-252-4/+4
* apparmor: Fix ref count leak in task_killJohn Johansen2024-01-251-1/+0
* selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün2024-01-251-0/+7
* KEYS: encrypted: Add check for strsepChen Ni2024-01-251-0/+4
* apparmor: Fix move_mount mediation by detecting if source is detachedJohn Johansen2024-01-102-0/+5
* keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiryDavid Howells2024-01-014-22/+37
* cred: get rid of CONFIG_DEBUG_CREDENTIALSJens Axboe2023-12-201-6/+0
* apparmor: Fix regression in mount mediationJohn Johansen2023-11-283-22/+51
* apparmor: pass cred through to audit info.John Johansen2023-11-2820-211/+388
* apparmor: rename audit_data->label to audit_data->subj_labelJohn Johansen2023-11-2810-18/+17
* apparmor: combine common_audit_data and apparmor_audit_dataJohn Johansen2023-11-2815-245/+257
* apparmor: Fix kernel-doc warnings in apparmor/policy.cGaosheng Cui2023-11-281-7/+10
* apparmor: Fix kernel-doc warnings in apparmor/resource.cGaosheng Cui2023-11-281-4/+4
* apparmor: Fix kernel-doc warnings in apparmor/lib.cGaosheng Cui2023-11-281-2/+2
* apparmor: Fix kernel-doc warnings in apparmor/audit.cGaosheng Cui2023-11-281-0/+1
* ima: detect changes to the backing overlay fileMimi Zohar2023-11-283-1/+22
* ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein2023-11-281-11/+37
* integrity: powerpc: Do not select CA_MACHINE_KEYRINGMichal Suchanek2023-11-281-2/+0
* KEYS: trusted: Rollback init_trusted() consistentlyJarkko Sakkinen2023-11-281-10/+10
* KEYS: trusted: tee: Refactor register SHM usageSumit Garg2023-11-281-44/+20
* apparmor: fix invalid reference on profile->disconnectedGeorgia Garcia2023-11-202-2/+4
* KEYS: trusted: Remove redundant static calls usageSumit Garg2023-10-101-8/+5
* ima: rework CONFIG_IMA dependency blockArnd Bergmann2023-09-271-12/+6
* ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko2023-09-261-2/+2
* selinux: fix handling of empty opts in selinux_fs_context_submount()Ondrej Mosnacek2023-09-121-2/+8
* Merge tag 'landlock-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2023-09-081-1/+1
|\
| * landlock: Annotate struct landlock_rule with __counted_byKees Cook2023-08-181-1/+1
* | Merge tag 'tomoyo-pr-20230903' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds2023-09-043-7/+5
|\ \
| * | tomoyo: remove unused function declarationGONG, Ruiqi2023-08-131-2/+0
| * | tomoyo: refactor deprecated strncpyJustin Stitt2023-08-051-3/+2
| * | tomoyo: add format attributes to functionsChristian Göttsche2023-07-232-2/+3
* | | Merge tag 'Smack-for-6.6' of https://github.com/cschaufler/smack-nextLinus Torvalds2023-08-301-2/+2
|\ \ \
| * | | smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter2023-08-071-1/+1
| * | | security: smack: smackfs: fix typo (lables->labels)Tóth János2023-08-071-1/+1
* | | | Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2023-08-305-30/+16
|\ \ \ \
| * | | | kexec_lock: Replace kexec_mutex() by kexec_lock() in two commentsWenyu Liu2023-08-071-1/+1
| * | | | ima: require signed IMA policy when UEFI secure boot is enabledCoiby Xu2023-08-011-0/+3
| * | | | integrity: Always reference the blacklist keyring with appraisalEric Snowberg2023-08-012-17/+12
| * | | | ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain2023-08-011-12/+0