summaryrefslogtreecommitdiffstats
path: root/security/landlock
Commit message (Expand)AuthorAgeFilesLines
* landlock: Use f_cred in security_file_open() hookMickaël Salaün2024-03-081-7/+11
* landlock: Rename "ptrace" files to "task"Mickaël Salaün2024-03-084-9/+9
* landlock: Simplify current_check_access_socket()Mickaël Salaün2024-03-081-4/+3
* landlock: Warn once if a Landlock action is requested while disabledMickaël Salaün2024-03-071-3/+15
* landlock: Add support for KUnit testsMickaël Salaün2024-02-274-0/+255
* landlock: Fix asymmetric private inodes referringMickaël Salaün2024-02-261-2/+2
* Merge tag 'landlock-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2024-01-092-16/+17
|\
| * landlock: Optimize the number of calls to get_access_mask slightlyGünther Noack2024-01-031-2/+3
| * landlock: Remove remaining "inline" modifiers in .c files [v6.6]Günther Noack2024-01-031-1/+1
| * landlock: Remove remaining "inline" modifiers in .c files [v6.1]Günther Noack2024-01-031-9/+9
| * landlock: Remove remaining "inline" modifiers in .c files [v5.15]Günther Noack2024-01-032-4/+4
* | LSM: Identify modules by more than nameCasey Schaufler2023-11-126-4/+11
|/
* landlock: Support network rules with TCP bind and connectKonstantin Meskhidze2023-10-269-24/+414
* landlock: Refactor landlock_add_rule() syscallKonstantin Meskhidze2023-10-261-44/+45
* landlock: Refactor layer helpersKonstantin Meskhidze2023-10-263-42/+66
* landlock: Move and rename layer helpersKonstantin Meskhidze2023-10-263-115/+129
* landlock: Refactor merge/inherit_ruleset helpersKonstantin Meskhidze2023-10-261-42/+74
* landlock: Refactor landlock_find_rule/insert_rule helpersKonstantin Meskhidze2023-10-263-54/+165
* landlock: Allow FS topology changes for domains without such rule typeMickaël Salaün2023-10-263-40/+60
* landlock: Make ruleset's access masks more genericKonstantin Meskhidze2023-10-265-20/+50
* landlock: Annotate struct landlock_rule with __counted_byKees Cook2023-08-181-1/+1
* hostfs: Fix ephemeral inodesMickaël Salaün2023-06-121-1/+1
* selinux: remove the runtime disable functionalityPaul Moore2023-03-204-5/+5
* landlock: Support file truncationGünther Noack2022-10-195-7/+126
* landlock: Document init_layer_masks() helperGünther Noack2022-10-191-0/+13
* landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed()Günther Noack2022-10-191-45/+44
* landlock: Fix documentation styleMickaël Salaün2022-09-291-20/+20
* landlock: Slightly improve documentation and fix spellingMickaël Salaün2022-09-291-1/+1
* landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-09-021-23/+25
* landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-05-233-76/+528
* LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün2022-05-231-1/+10
* landlock: Move filesystem helpers and add a new oneMickaël Salaün2022-05-231-41/+46
* landlock: Fix same-layer rule unionsMickaël Salaün2022-05-232-26/+54
* landlock: Create find_rule() from unmask_layers()Mickaël Salaün2022-05-231-13/+28
* landlock: Reduce the maximum number of layers to 16Mickaël Salaün2022-05-233-11/+12
* landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün2022-05-235-15/+30
* landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün2022-05-231-4/+4
* landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün2022-05-231-9/+13
* landlock: Fix landlock_add_rule(2) documentationMickaël Salaün2022-05-231-4/+3
* landlock: Format with clang-formatMickaël Salaün2022-05-0910-136/+142
* landlock: Add clang-format exceptionsMickaël Salaün2022-05-092-0/+6
* landlock: Use square brackets around "landlock-ruleset"Christian Brauner2022-02-041-1/+1
* landlock: Enable user space to infer supported featuresMickaël Salaün2021-04-221-4/+13
* landlock: Add syscall implementationsMickaël Salaün2021-04-222-1/+443
* landlock: Support filesystem access-controlMickaël Salaün2021-04-228-2/+781
* landlock: Add ptrace restrictionsMickaël Salaün2021-04-224-1/+137
* landlock: Set up the security framework and manage credentialsMickaël Salaün2021-04-226-1/+173
* landlock: Add ruleset and domain managementMickaël Salaün2021-04-224-1/+652
* landlock: Add object managementMickaël Salaün2021-04-224-0/+182