summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* selinux: ensure we cleanup the internal AVC counters on error in avc_insert()Paul Moore2019-12-101-27/+24
* security: only build lsm_audit if CONFIG_SECURITY=yStephen Smalley2019-12-101-1/+1
* selinux: clean up selinux_inode_permission MAY_NOT_BLOCK testsStephen Smalley2019-12-091-4/+4
* selinux: fall back to ref-walk if audit is requiredStephen Smalley2019-12-093-26/+17
* selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"Stephen Smalley2019-12-093-4/+30
* security,lockdown,selinux: implement SELinux lockdownStephen Smalley2019-12-095-27/+70
* selinux: cache the SID -> context string translationOndrej Mosnacek2019-12-094-94/+288
* selinux: sidtab reverse lookup hash tableJeff Vander Stoep2019-12-099-167/+306
* Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-12-0315-165/+526
|\
| * apparmor: make it so work buffers can be allocated from atomic contextJohn Johansen2019-11-226-38/+62
| * apparmor: reduce rcu_read_lock scope for aa_file_perm mediationJohn Johansen2019-11-221-3/+3
| * apparmor: fix wrong buffer allocation in aa_new_mountJohn Johansen2019-11-221-4/+4
| * apparmor: fix unsigned len comparison with less than zeroColin Ian King2019-11-221-5/+7
| * apparmor: increase left match history buffer sizeJohn Johansen2019-06-202-5/+4
| * apparmor: Switch to GFP_KERNEL where possibleSebastian Andrzej Siewior2019-06-203-12/+12
| * apparmor: Use a memory pool instead per-CPU cachesSebastian Andrzej Siewior2019-06-205-111/+164
| * apparmor: Force type-casting of current->real_credBharath Vedartham2019-06-201-1/+1
| * apparmor: fix spelling mistake "immutible" -> "immutable"Colin Ian King2019-04-171-1/+1
| * apparmor: fix blob compression when ns is forced on a policy loadJohn Johansen2019-04-112-4/+8
| * apparmor: fix missing ZLIB definesJohn Johansen2019-04-111-0/+2
| * apparmor: fix blob compression build failure on ppcJohn Johansen2019-04-111-1/+1
| * apparmor: Initial implementation of raw policy blob compressionChris Coulson2019-04-115-8/+285
* | Merge tag 'y2038-cleanups-5.5' of git://git.kernel.org:/pub/scm/linux/kernel/...Linus Torvalds2019-12-011-7/+3
|\ \
| * | y2038: move itimer reset into itimer.cArnd Bergmann2019-11-151-7/+3
* | | Merge tag 'selinux-pr-20191126' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-11-309-5/+74
|\ \ \
| * | | selinux: default_range glblub implementationJoshua Brindle2019-10-077-1/+62
| * | | selinux: allow labeling before policy is loadedJonathan Lebon2019-10-011-0/+12
| * | | selinux: remove load size limitzhanglin2019-10-011-4/+0
* | | | Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/po...Linus Torvalds2019-11-3012-97/+328
|\ \ \ \
| * | | | x86/efi: remove unused variablesYueHaibing2019-11-291-5/+0
| * | | | Merge branch 'topic/secureboot' into nextMichael Ellerman2019-11-1311-92/+326
| |\ \ \ \
| | * | | | powerpc: Load firmware trusted keys/hashes into kernel keyringNayna Jain2019-11-133-1/+108
| | * | | | x86/efi: move common keyring handler functions to new fileNayna Jain2019-11-134-67/+115
| | * | | | ima: Check against blacklisted hashes for files with modsigNayna Jain2019-11-125-6/+60
| | * | | | ima: Make process_buffer_measurement() genericNayna Jain2019-11-122-18/+43
| * | | | | powerpc/xmon: Restrict when kernel is locked downChristopher M. Riedl2019-10-281-0/+2
| |/ / / /
* | | | | Merge tag 'notifications-pipe-prep-20191115' of git://git.kernel.org/pub/scm/...Linus Torvalds2019-11-301-1/+0
|\ \ \ \ \
| * | | | | pipe: Reduce #inclusion of pipe_fs_i.hDavid Howells2019-10-231-1/+0
| |/ / / /
* | | | | Merge tag 'drm-next-2019-11-27' of git://anongit.freedesktop.org/drm/drmLinus Torvalds2019-11-271-2/+13
|\ \ \ \ \
| * \ \ \ \ Merge v5.4-rc7 into drm-nextDave Airlie2019-11-141-0/+1
| |\ \ \ \ \ | | | |_|/ / | | |/| | |
| * | | | | Merge tag 'drm-next-5.5-2019-10-09' of git://people.freedesktop.org/~agd5f/li...Dave Airlie2019-10-261-2/+13
| |\ \ \ \ \
| | * | | | | device_cgroup: Export devcgroup_check_permissionHarish Kasiviswanathan2019-10-071-2/+13
* | | | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netLinus Torvalds2019-11-271-2/+2
|\ \ \ \ \ \ \
| * | | | | | | net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port)Maciej Żenczykowski2019-11-261-2/+2
* | | | | | | | Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2019-11-261-2/+2
|\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/pau...Ingo Molnar2019-10-311-2/+2
| |\ \ \ \ \ \ \ \ | | |_|/ / / / / / | |/| | | | | | |
| | * | | | | | | security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()Paul E. McKenney2019-10-301-2/+2
| | | |_|_|_|/ / | | |/| | | | |
* | | | | | | | Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2019-11-264-1/+103
|\ \ \ \ \ \ \ \ | |_|_|/ / / / / |/| | | | | | |
| * | | | | | | Merge tag 'v5.4-rc7' into perf/core, to pick up fixesIngo Molnar2019-11-111-0/+1
| |\ \ \ \ \ \ \ | | | |_|_|/ / / | | |/| | | | |
| * | | | | | | perf_event: Add support for LSM and SELinux checksJoel Fernandes (Google)2019-10-174-1/+103
| | |/ / / / / | |/| | | | |