summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'tomoyo-pr-20240927' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds2024-09-2712-121/+583
|\
| * tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa2024-09-251-3/+6
| * tomoyo: allow building as a loadable LSM moduleTetsuo Handa2024-09-248-4/+467
| * tomoyo: preparation step for building as a loadable LSM moduleTetsuo Handa2024-09-236-116/+112
* | Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2024-09-242-2/+2
|\ \
| * | security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko2024-09-122-2/+2
* | | Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2024-09-248-9/+269
|\ \ \
| * | | landlock: Add signal scopingTahera Fahimi2024-09-165-2/+90
| * | | landlock: Add abstract UNIX socket scopingTahera Fahimi2024-09-165-8/+180
* | | | Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-243-11/+5
|\ \ \ \
| * | | | ipe: Add missing terminator to list of unit testsGuenter Roeck2024-09-231-0/+1
| * | | | selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore2024-09-192-11/+4
* | | | | Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2024-09-233-15/+15
|\ \ \ \ \ | | |_|/ / | |/| | / | |_|_|/ |/| | |
| * | | introduce fd_file(), convert all accessors to it.Al Viro2024-08-123-15/+15
* | | | Merge tag 'bpf-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds2024-09-211-1/+0
|\ \ \ \
| * | | | bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0Song Liu2024-09-111-1/+0
* | | | | Merge tag 'Smack-for-6.12' of https://github.com/cschaufler/smack-nextLinus Torvalds2024-09-192-3/+3
|\ \ \ \ \ | |_|_|_|/ |/| | | |
| * | | | smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye2024-09-031-1/+1
| * | | | security: smack: Fix indentation in smack_netfilter.cGiSeong Ji2024-08-221-2/+2
| |/ / /
* | | | Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-1641-409/+4127
|\ \ \ \ | | |_|/ | |/| |
| * | | security: Update file_set_fowner documentationMickaël Salaün2024-09-091-0/+2
| * | | lsm: Use IS_ERR_OR_NULL() helper functionHongbo Li2024-08-291-1/+1
| * | | lsm: remove LSM_COUNT and LSM_CONFIG_COUNTTetsuo Handa2024-08-261-33/+4
| * | | ipe: Remove duplicated include in ipe.cYang Li2024-08-221-1/+0
| * | | lsm: replace indirect LSM hook calls with static callsKP Singh2024-08-221-64/+155
| * | | ipe: kunit test for parserDeven Bowers2024-08-203-0/+316
| * | | scripts: add boot policy generation programDeven Bowers2024-08-205-0/+43
| * | | ipe: enable support for fs-verity as a trust providerFan Wu2024-08-2010-1/+237
| * | | lsm: add security_inode_setintegrity() hookFan Wu2024-08-201-0/+20
| * | | ipe: add support for dm-verity as a trust providerDeven Bowers2024-08-2014-15/+460
| * | | block,lsm: add LSM blob and new LSM hooks for block devicesDeven Bowers2024-08-201-0/+103
| * | | ipe: add permissive toggleDeven Bowers2024-08-205-4/+102
| * | | audit,ipe: add IPE auditing supportDeven Bowers2024-08-2010-18/+381
| * | | ipe: add userspace interfaceDeven Bowers2024-08-208-0/+727
| * | | lsm: add new securityfs delete functionFan Wu2024-08-201-0/+25
| * | | ipe: introduce 'boot_verified' as a trust providerFan Wu2024-08-208-6/+101
| * | | initramfs,lsm: add a security hook to do_populate_rootfs()Fan Wu2024-08-201-0/+10
| * | | ipe: add LSM hooks on execution and kernel readDeven Bowers2024-08-206-0/+235
| * | | ipe: add evaluation loopDeven Bowers2024-08-203-0/+127
| * | | ipe: add policy parserDeven Bowers2024-08-205-0/+697
| * | | lsm: add IPE lsmDeven Bowers2024-08-197-6/+93
| * | | lockdown: Make lockdown_lsmid staticYue Haibing2024-08-151-1/+1
| * | | lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore2024-08-125-33/+32
| * | | lsm: cleanup lsm_hooks.hPaul Moore2024-08-121-1/+1
| * | | lsm: Refactor return value of LSM hook inode_copy_up_xattrXu Kuohai2024-07-314-14/+9
| * | | lsm: Refactor return value of LSM hook vm_enough_memoryXu Kuohai2024-07-313-25/+12
| * | | lsm: infrastructure management of the perf_event security blobCasey Schaufler2024-07-293-16/+28
| * | | lsm: infrastructure management of the infiniband blobCasey Schaufler2024-07-293-15/+23
| * | | lsm: infrastructure management of the dev_tun blobCasey Schaufler2024-07-293-18/+26
| * | | lsm: add helper for blob allocationsCasey Schaufler2024-07-291-64/+33