index
:
linux.git
arm64-uaccess
link_path_walk
linus
master
mmu_gather-race-fix
proc-cmdline
runtime-constants
tty-splice
vsnprintf
word-at-a-time
x86-rep-insns
x86-uaccess-cleanup
Linux kernel mainline tree
Linus Torvalds
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
security
Commit message (
Expand
)
Author
Age
Files
Lines
*
Make the hardened user-copy code depend on having a hardened allocator
Linus Torvalds
2016-08-19
1
-0
/
+1
*
Merge tag 'usercopy-v4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/ke...
Linus Torvalds
2016-08-08
1
-0
/
+28
|
\
|
*
mm: Hardened usercopy
Kees Cook
2016-07-26
1
-0
/
+28
*
|
Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/g...
Linus Torvalds
2016-08-06
2
-2
/
+2
|
\
\
|
*
|
qstr: constify dentry_init_security
Al Viro
2016-07-20
2
-2
/
+2
|
|
/
*
|
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...
Linus Torvalds
2016-07-29
36
-195
/
+345
|
\
\
|
*
|
apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling
Arnd Bergmann
2016-07-27
3
-3
/
+7
|
*
|
apparmor: fix arg_size computation for when setprocattr is null terminated
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: fix oops, validate buffer size in apparmor_setprocattr()
Vegard Nossum
2016-07-12
1
-17
/
+19
|
*
|
apparmor: do not expose kernel stack
Heinrich Schuchardt
2016-07-12
1
-1
/
+3
|
*
|
apparmor: fix module parameters can be changed after policy is locked
John Johansen
2016-07-12
3
-13
/
+29
|
*
|
apparmor: fix oops in profile_unpack() when policy_db is not present
John Johansen
2016-07-12
1
-0
/
+3
|
*
|
apparmor: don't check for vmalloc_addr if kvzalloc() failed
John Johansen
2016-07-12
1
-5
/
+5
|
*
|
apparmor: add missing id bounds check on dfa verification
John Johansen
2016-07-12
2
-0
/
+3
|
*
|
apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task
Jeff Mahoney
2016-07-12
1
-2
/
+4
|
*
|
apparmor: use list_next_entry instead of list_entry_next
Geliang Tang
2016-07-12
1
-5
/
+3
|
*
|
apparmor: fix refcount race when finding a child profile
John Johansen
2016-07-12
1
-1
/
+3
|
*
|
apparmor: fix ref count leak when profile sha1 hash is read
John Johansen
2016-07-12
1
-0
/
+1
|
*
|
apparmor: check that xindex is in trans_table bounds
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: ensure the target profile name is always audited
John Johansen
2016-07-12
1
-11
/
+9
|
*
|
apparmor: fix audit full profile hname on successful load
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: fix log failures for all profiles in a set
John Johansen
2016-07-12
1
-10
/
+19
|
*
|
apparmor: fix put() parent ref after updating the active ref
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: add parameter to control whether policy hashing is used
John Johansen
2016-07-12
4
-6
/
+25
|
*
|
apparmor: internal paths should be treated as disconnected
John Johansen
2016-07-12
1
-28
/
+36
|
*
|
apparmor: fix disconnected bind mnts reconnection
John Johansen
2016-07-12
1
-1
/
+4
|
*
|
apparmor: fix update the mtime of the profile file on replacement
John Johansen
2016-07-12
1
-0
/
+2
|
*
|
apparmor: exec should not be returning ENOENT when it denies
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: fix uninitialized lsm_audit member
John Johansen
2016-07-12
2
-2
/
+4
|
*
|
apparmor: fix replacement bug that adds new child to old parent
John Johansen
2016-07-12
1
-1
/
+1
|
*
|
apparmor: fix refcount bug in profile replacement
John Johansen
2016-07-12
1
-2
/
+2
|
*
|
Merge tag 'keys-misc-20160708' of git://git.kernel.org/pub/scm/linux/kernel/g...
James Morris
2016-07-09
2
-2
/
+2
|
|
\
\
|
|
*
|
KEYS: Strip trailing spaces
David Howells
2016-06-14
2
-2
/
+2
|
*
|
|
Merge branch 'smack-for-4.8' of https://github.com/cschaufler/smack-next into...
James Morris
2016-07-08
1
-0
/
+3
|
|
\
\
\
|
|
*
|
|
Smack: ignore null signal in smack_task_kill
Rafal Krypa
2016-06-08
1
-0
/
+3
|
|
|
/
/
|
*
|
|
Merge branch 'stable-4.8' of git://git.infradead.org/users/pcmoore/selinux in...
James Morris
2016-07-07
7
-64
/
+73
|
|
\
\
\
|
|
*
|
|
calipso: Add a label cache.
Huw Davies
2016-06-27
1
-3
/
+6
|
|
*
|
|
netlabel: Pass a family parameter to netlbl_skbuff_err().
Huw Davies
2016-06-27
4
-8
/
+10
|
|
*
|
|
calipso: Allow the lsm to label the skbuff directly.
Huw Davies
2016-06-27
1
-0
/
+15
|
|
*
|
|
calipso: Allow request sockets to be relabelled by the lsm.
Huw Davies
2016-06-27
1
-1
/
+1
|
|
*
|
|
netlabel: Prevent setsockopt() from changing the hop-by-hop option.
Huw Davies
2016-06-27
1
-1
/
+16
|
|
*
|
|
calipso: Set the calipso socket label to match the secattr.
Huw Davies
2016-06-27
1
-1
/
+1
|
|
*
|
|
selinux: fix type mismatch
Heinrich Schuchardt
2016-06-15
1
-1
/
+1
|
|
*
|
|
selinux: import NetLabel category bitmaps correctly
Paul Moore
2016-06-09
1
-1
/
+1
|
|
*
|
|
selinux: Only apply bounds checking to source types
Stephen Smalley
2016-05-31
1
-48
/
+22
|
*
|
|
|
ima: extend the measurement entry specific pcr
Eric Richter
2016-06-30
1
-3
/
+3
|
*
|
|
|
ima: change integrity cache to store measured pcr
Eric Richter
2016-06-30
3
-3
/
+11
|
*
|
|
|
ima: redefine duplicate template entries
Eric Richter
2016-06-30
1
-3
/
+4
|
*
|
|
|
ima: change ima_measurements_show() to display the entry specific pcr
Eric Richter
2016-06-30
1
-5
/
+4
|
*
|
|
|
ima: include pcr for each measurement log entry
Eric Richter
2016-06-30
4
-8
/
+13
[next]