summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün2024-01-251-0/+7
* KEYS: encrypted: Add check for strsepChen Ni2024-01-251-0/+4
* apparmor: Fix move_mount mediation by detecting if source is detachedJohn Johansen2024-01-102-0/+5
* keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiryDavid Howells2024-01-014-22/+37
* cred: get rid of CONFIG_DEBUG_CREDENTIALSJens Axboe2023-12-201-6/+0
* apparmor: Fix regression in mount mediationJohn Johansen2023-11-283-22/+51
* apparmor: pass cred through to audit info.John Johansen2023-11-2820-211/+388
* apparmor: rename audit_data->label to audit_data->subj_labelJohn Johansen2023-11-2810-18/+17
* apparmor: combine common_audit_data and apparmor_audit_dataJohn Johansen2023-11-2815-245/+257
* apparmor: Fix kernel-doc warnings in apparmor/policy.cGaosheng Cui2023-11-281-7/+10
* apparmor: Fix kernel-doc warnings in apparmor/resource.cGaosheng Cui2023-11-281-4/+4
* apparmor: Fix kernel-doc warnings in apparmor/lib.cGaosheng Cui2023-11-281-2/+2
* apparmor: Fix kernel-doc warnings in apparmor/audit.cGaosheng Cui2023-11-281-0/+1
* ima: detect changes to the backing overlay fileMimi Zohar2023-11-283-1/+22
* ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein2023-11-281-11/+37
* integrity: powerpc: Do not select CA_MACHINE_KEYRINGMichal Suchanek2023-11-281-2/+0
* KEYS: trusted: Rollback init_trusted() consistentlyJarkko Sakkinen2023-11-281-10/+10
* KEYS: trusted: tee: Refactor register SHM usageSumit Garg2023-11-281-44/+20
* apparmor: fix invalid reference on profile->disconnectedGeorgia Garcia2023-11-202-2/+4
* KEYS: trusted: Remove redundant static calls usageSumit Garg2023-10-101-8/+5
* ima: rework CONFIG_IMA dependency blockArnd Bergmann2023-09-271-12/+6
* ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko2023-09-261-2/+2
* selinux: fix handling of empty opts in selinux_fs_context_submount()Ondrej Mosnacek2023-09-121-2/+8
* Merge tag 'landlock-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2023-09-081-1/+1
|\
| * landlock: Annotate struct landlock_rule with __counted_byKees Cook2023-08-181-1/+1
* | Merge tag 'tomoyo-pr-20230903' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds2023-09-043-7/+5
|\ \
| * | tomoyo: remove unused function declarationGONG, Ruiqi2023-08-131-2/+0
| * | tomoyo: refactor deprecated strncpyJustin Stitt2023-08-051-3/+2
| * | tomoyo: add format attributes to functionsChristian Göttsche2023-07-232-2/+3
* | | Merge tag 'Smack-for-6.6' of https://github.com/cschaufler/smack-nextLinus Torvalds2023-08-301-2/+2
|\ \ \
| * | | smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter2023-08-071-1/+1
| * | | security: smack: smackfs: fix typo (lables->labels)Tóth János2023-08-071-1/+1
* | | | Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2023-08-305-30/+16
|\ \ \ \
| * | | | kexec_lock: Replace kexec_mutex() by kexec_lock() in two commentsWenyu Liu2023-08-071-1/+1
| * | | | ima: require signed IMA policy when UEFI secure boot is enabledCoiby Xu2023-08-011-0/+3
| * | | | integrity: Always reference the blacklist keyring with appraisalEric Snowberg2023-08-012-17/+12
| * | | | ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain2023-08-011-12/+0
* | | | | Merge tag 'lsm-pr-20230829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2023-08-309-83/+162
|\ \ \ \ \
| * | | | | lsm: constify the 'file' parameter in security_binder_transfer_file()Khadija Kamran2023-08-152-5/+5
| * | | | | lsm: constify the 'target' parameter in security_capget()Khadija Kamran2023-08-084-4/+4
| * | | | | lsm: add comment block for security_sk_classify_flow LSM hookKhadija Kamran2023-07-311-0/+7
| * | | | | security: Fix ret values doc for security_inode_init_security()Roberto Sassu2023-07-261-2/+2
| * | | | | evm: Support multiple LSMs providing an xattrRoberto Sassu2023-07-103-7/+37
| * | | | | evm: Align evm_inode_init_security() definition with LSM infrastructureRoberto Sassu2023-07-102-8/+12
| * | | | | smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security()Roberto Sassu2023-07-102-18/+29
| * | | | | security: Allow all LSMs to provide xattrs for inode_init_security hookRoberto Sassu2023-07-103-44/+71
| * | | | | lsm: fix typo in security_file_lock() comment headerPairman Guo2023-07-101-1/+1
| | |/ / / | |/| | |
* | | | | Merge tag 'selinux-pr-20230829' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2023-08-3034-286/+276
|\ \ \ \ \
| * | | | | selinux: prevent KMSAN warning in selinux_inet_conn_request()Andrew Kanner2023-08-151-0/+1
| * | | | | selinux: use unsigned iterator in nlmsgtab codeChristian Göttsche2023-08-091-1/+2