summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'landlock-6.12-rc7' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds12 days5-57/+96
|\
| * landlock: Optimize scope enforcementMickaël Salaün2024-11-091-3/+15
| * landlock: Refactor network access mask managementMickaël Salaün2024-11-091-22/+6
| * landlock: Refactor filesystem access mask managementMickaël Salaün2024-11-093-32/+75
* | KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operationDavid Gstir2024-11-041-4/+5
* | security/keys: fix slab-out-of-bounds in key_task_permissionChen Ridong2024-11-041-2/+5
* | ipe: fallback to platform keyring also if key in trusted keyring is rejectedLuca Boccassi2024-10-181-1/+1
* | ipe: allow secondary and platform keyrings to install/update policiesLuca Boccassi2024-10-172-1/+32
* | ipe: also reject policy updates with the same versionLuca Boccassi2024-10-171-1/+1
* | ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower ...Luca Boccassi2024-10-171-1/+1
|/
* bcachefs: do not use PF_MEMALLOC_NORECLAIMMichal Hocko2024-10-091-4/+6
* Merge tag 'hardening-v6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2024-10-051-2/+2
|\
| * hardening: Adjust dependencies in selection of MODVERSIONSNathan Chancellor2024-09-281-2/+2
* | Merge tag 'lsm-pr-20241004' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-10-0511-577/+118
|\ \
| * | tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM supportPaul Moore2024-10-0411-577/+118
* | | move asm/unaligned.h to linux/unaligned.hAl Viro2024-10-022-2/+2
|/ /
* | Merge tag 'tomoyo-pr-20240927' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds2024-09-2712-121/+583
|\ \
| * | tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa2024-09-251-3/+6
| * | tomoyo: allow building as a loadable LSM moduleTetsuo Handa2024-09-248-4/+467
| * | tomoyo: preparation step for building as a loadable LSM moduleTetsuo Handa2024-09-236-116/+112
* | | Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2024-09-242-2/+2
|\ \ \
| * | | security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko2024-09-122-2/+2
* | | | Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2024-09-248-9/+269
|\ \ \ \
| * | | | landlock: Add signal scopingTahera Fahimi2024-09-165-2/+90
| * | | | landlock: Add abstract UNIX socket scopingTahera Fahimi2024-09-165-8/+180
* | | | | Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-243-11/+5
|\ \ \ \ \
| * | | | | ipe: Add missing terminator to list of unit testsGuenter Roeck2024-09-231-0/+1
| * | | | | selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore2024-09-192-11/+4
* | | | | | Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2024-09-233-15/+15
|\ \ \ \ \ \ | | |_|/ / / | |/| | / / | |_|_|/ / |/| | | |
| * | | | introduce fd_file(), convert all accessors to it.Al Viro2024-08-123-15/+15
| | |_|/ | |/| |
* | | | Merge tag 'bpf-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds2024-09-211-1/+0
|\ \ \ \
| * | | | bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0Song Liu2024-09-111-1/+0
* | | | | Merge tag 'Smack-for-6.12' of https://github.com/cschaufler/smack-nextLinus Torvalds2024-09-192-3/+3
|\ \ \ \ \ | |_|_|_|/ |/| | | |
| * | | | smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye2024-09-031-1/+1
| * | | | security: smack: Fix indentation in smack_netfilter.cGiSeong Ji2024-08-221-2/+2
| |/ / /
* | | | Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-1641-409/+4127
|\ \ \ \ | | |_|/ | |/| |
| * | | security: Update file_set_fowner documentationMickaël Salaün2024-09-091-0/+2
| * | | lsm: Use IS_ERR_OR_NULL() helper functionHongbo Li2024-08-291-1/+1
| * | | lsm: remove LSM_COUNT and LSM_CONFIG_COUNTTetsuo Handa2024-08-261-33/+4
| * | | ipe: Remove duplicated include in ipe.cYang Li2024-08-221-1/+0
| * | | lsm: replace indirect LSM hook calls with static callsKP Singh2024-08-221-64/+155
| * | | ipe: kunit test for parserDeven Bowers2024-08-203-0/+316
| * | | scripts: add boot policy generation programDeven Bowers2024-08-205-0/+43
| * | | ipe: enable support for fs-verity as a trust providerFan Wu2024-08-2010-1/+237
| * | | lsm: add security_inode_setintegrity() hookFan Wu2024-08-201-0/+20
| * | | ipe: add support for dm-verity as a trust providerDeven Bowers2024-08-2014-15/+460
| * | | block,lsm: add LSM blob and new LSM hooks for block devicesDeven Bowers2024-08-201-0/+103
| * | | ipe: add permissive toggleDeven Bowers2024-08-205-4/+102
| * | | audit,ipe: add IPE auditing supportDeven Bowers2024-08-2010-18/+381
| * | | ipe: add userspace interfaceDeven Bowers2024-08-208-0/+727