summaryrefslogtreecommitdiffstats
path: root/security/selinux
Commit message (Expand)AuthorAgeFilesLines
* lsm: use lsm_prop in security_audit_rule_matchCasey Schaufler2024-10-112-5/+9
* Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2024-09-241-1/+1
|\
| * security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko2024-09-121-1/+1
* | Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-241-1/+1
|\ \
| * | selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore2024-09-191-1/+1
* | | Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-09-163-127/+100
|\| |
| * | lsm: Refactor return value of LSM hook inode_copy_up_xattrXu Kuohai2024-07-311-2/+2
| * | lsm: Refactor return value of LSM hook vm_enough_memoryXu Kuohai2024-07-311-11/+4
| * | lsm: infrastructure management of the perf_event security blobCasey Schaufler2024-07-292-14/+10
| * | lsm: infrastructure management of the infiniband blobCasey Schaufler2024-07-292-13/+8
| * | lsm: infrastructure management of the dev_tun blobCasey Schaufler2024-07-292-16/+11
| * | lsm: infrastructure management of the key security blobCasey Schaufler2024-07-292-17/+11
| * | lsm: infrastructure management of the sock securityCasey Schaufler2024-07-293-54/+54
| |/
* | Merge tag 'selinux-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2024-09-168-76/+68
|\ \
| * | selinux: fix style problems in security/selinux/include/audit.hPaul Moore2024-09-031-23/+23
| * | selinux: simplify avc_xperms_audit_required()Zhen Lei2024-08-281-2/+2
| * | selinux: mark both IPv4 and IPv6 accepted connection sockets as labeledGuido Trentalancia2024-08-281-1/+1
| * | selinux: replace kmem_cache_create() with KMEM_CACHE()Eric Suen2024-08-274-23/+8
| * | selinux: annotate false positive data race to avoid KCSAN warningsStephen Smalley2024-08-261-1/+6
| * | selinux: refactor code to return ERR_PTR in selinux_netlbl_sock_genattrGaosheng Cui2024-07-291-9/+9
| * | selinux: Streamline type determination in security_compute_sidCanfeng Guo2024-07-291-17/+19
| |/
* | Merge tag 'vfs-6.12.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds2024-09-161-1/+1
|\ \
| * | file: reclaim 24 bytes from f_ownerChristian Brauner2024-08-281-1/+1
* | | Merge tag 'lsm-pr-20240830' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-08-311-2/+2
|\ \ \ | |/ / |/| |
| * | selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew2024-08-281-2/+2
| |/
* | selinux: revert our use of vma_is_initial_heap()Paul Moore2024-08-081-1/+11
* | selinux: add the processing of the failure of avc_add_xperms_decision()Zhen Lei2024-08-071-1/+5
* | selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei2024-08-061-1/+1
|/
* Merge tag 'lsm-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2024-07-161-16/+22
|\
| * selinux,smack: remove the capability checks in the removexattr hooksPaul Moore2024-07-091-8/+2
| * lsm: fixup the inode xattr capability handlingPaul Moore2024-06-031-8/+20
* | Merge tag 'selinux-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2024-07-161-1/+1
|\ \
| * | selinux: Use 1UL for EBITMAP_BIT to match maps typeCanfeng Guo2024-07-021-1/+1
| |/
* / ima: Avoid blocking in RCU read-side critical sectionGUO Zihua2024-06-132-3/+6
|/
* Merge tag 'integrity-v6.10' of ssh://ra.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2024-05-151-1/+1
|\
| * security: allow finer granularity in permitting copy-up of security xattrsStefan Berger2024-04-091-1/+1
* | Merge tag 'selinux-pr-20240513' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2024-05-1512-126/+146
|\ \
| * | selinux: constify source policy in cond_policydb_dup()Christian Göttsche2024-04-304-14/+17
| * | selinux: avoid printk_ratelimit()Christian Göttsche2024-04-301-2/+1
| * | selinux: pre-allocate the status pageChristian Göttsche2024-04-301-0/+6
| * | selinux: clarify return code in filename_trans_read_helper_compat()Ondrej Mosnacek2024-04-041-0/+1
| * | selinux: use u32 as bit position type in ebitmap codeChristian Göttsche2024-03-272-35/+34
| * | selinux: improve symtab string hashingChristian Göttsche2024-03-271-11/+11
| * | selinux: dump statistics for more hash tablesChristian Göttsche2024-03-272-7/+19
| * | selinux: make more use of current_sid()Christian Göttsche2024-03-272-21/+8
| * | selinux: update numeric format specifiers for ebitmapsChristian Göttsche2024-03-271-6/+6
| * | selinux: improve error checking in sel_write_load()Paul Moore2024-03-261-14/+16
| * | selinux: cleanup selinux_lsm_getattr()Paul Moore2024-03-261-18/+18
| * | selinux: reject invalid ebitmapsChristian Göttsche2024-03-261-0/+11
* | | netlabel: fix RCU annotation for IPv4 options on socket creationDavide Caratti2024-05-131-1/+4
| |/ |/|