summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
...
| * | | apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen2022-10-031-4/+9
| * | | apparmor: Fix abi check to include v8 abiJohn Johansen2022-10-031-1/+1
| * | | apparmor: preparse for state being more than just an integerJohn Johansen2022-10-0315-102/+101
| * | | apparmor: convert policy lookup to use accept as an indexJohn Johansen2022-10-037-24/+33
| * | | apparmor: cleanup shared permission structJohn Johansen2022-10-032-12/+9
| * | | apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2022-10-032-4/+7
| * | | apparmor: convert fperm lookup to use accept as an indexJohn Johansen2022-10-032-19/+44
| * | | apparmor: convert xmatch to using the new shared policydb structJohn Johansen2022-10-036-29/+28
| * | | apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen2022-10-037-59/+40
| * | | apparmor: compute policydb permission on profile loadJohn Johansen2022-10-039-86/+90
| * | | apparmor: convert xmatch to use aa_perms structureJohn Johansen2022-10-033-7/+13
| * | | apparmor: rework and cleanup fperm computationJohn Johansen2022-10-031-32/+38
| * | | apparmor: move fperm computation into policy_unpackJohn Johansen2022-10-033-98/+98
| * | | apparmor: compute xmatch permissions on profile loadMike Salvatore2022-10-034-3/+26
| * | | apparmor: compute file permissions on profile loadMike Salvatore2022-10-035-48/+110
| * | | apparmor: expose compression level limits in sysfsJon Tourville2022-10-031-0/+16
| * | | apparmor: use zstd compression for profile dataJon Tourville2022-10-034-102/+81
| * | | apparmor: reserve mediation classesJohn Johansen2022-10-031-1/+8
| * | | apparmor: fix lockdep warning when removing a namespaceJohn Johansen2022-10-031-1/+1
| * | | apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui2022-10-031-1/+3
* | | | Merge tag 'integrity-v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-12-137-25/+57
|\ \ \ \
| * | | | ima: Fix hash dependency to correct algorithmTianjia Zhang2022-11-281-1/+1
| * | | | ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng2022-11-161-2/+2
| * | | | integrity: Fix memory leakage in keyring allocation error pathGUO Zihua2022-11-161-1/+5
| * | | | ima: Fix memory leak in __ima_inode_hash()Roberto Sassu2022-11-031-1/+6
| * | | | ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua2022-11-021-9/+32
| * | | | ima: Simplify ima_lsm_copy_ruleGUO Zihua2022-11-021-7/+3
| * | | | ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu2022-11-021-1/+4
| * | | | efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg2022-11-011-0/+1
| * | | | KEYS: encrypted: fix key instantiation with user-provided dataNikolaus Voss2022-10-191-3/+3
| | |_|/ | |/| |
* | | | Merge tag 'lsm-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-12-1314-80/+131
|\ \ \ \
| * | | | lsm,fs: fix vfs_getxattr_alloc() return type and caller error pathsPaul Moore2022-11-188-31/+34
| * | | | device_cgroup: Roll back to original exceptions after copy failureWang Weiyang2022-11-161-4/+29
| * | | | LSM: Better reporting of actual LSMs at bootKees Cook2022-11-161-9/+36
| * | | | lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore2022-11-044-35/+32
| * | | | audit: Fix some kernel-doc warningsBo Liu2022-10-281-0/+1
| |/ / /
* | | | Merge tag 'selinux-pr-20221212' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2022-12-135-47/+52
|\ \ \ \
| * | | | selinux: remove the sidtab context conversion indirect callsPaul Moore2022-11-094-44/+45
| * | | | selinux: increase the deprecation sleep for checkreqprot and runtime disablePaul Moore2022-10-171-2/+2
| |/ / /
* | | | Merge tag 'landlock-6.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2022-12-138-57/+213
|\ \ \ \ | |_|_|/ |/| | |
| * | | landlock: Support file truncationGünther Noack2022-10-196-12/+132
| * | | landlock: Document init_layer_masks() helperGünther Noack2022-10-191-0/+13
| * | | landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed()Günther Noack2022-10-191-45/+44
| * | | security: Create file_truncate hook from path_truncate hookGünther Noack2022-10-193-0/+24
| |/ /
* | | Merge tag 'fs.vfsuid.conversion.v6.2' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2022-12-125-54/+68
|\ \ \
| * | | ima: use type safe idmapping helpersChristian Brauner2022-10-261-16/+18
| * | | apparmor: use type safe idmapping helpersChristian Brauner2022-10-263-13/+24
| * | | caps: use type safe idmapping helpersChristian Brauner2022-10-261-25/+26
| |/ /
* | | Merge tag 'fs.acl.rework.v6.2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2022-12-125-65/+225
|\ \ \
| * | | evm: remove dead code in evm_inode_set_acl()Christian Brauner2022-10-281-3/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-05 11:22:11 +0000