summaryrefslogtreecommitdiffstats
path: root/security
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2022-09-021-23/+25
|\
| * landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-09-021-23/+25
* | Merge tag 'lsm-pr-20220829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-08-314-1/+61
|\ \
| * | Smack: Provide read control for io_uring_cmdCasey Schaufler2022-08-261-0/+32
| * | selinux: implement the security_uring_cmd() LSM hookPaul Moore2022-08-262-1/+25
| * | lsm,io_uring: add LSM hooks for the new uring_cmd file opLuis Chamberlain2022-08-261-0/+4
* | | Merge tag 'hardening-v6.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2022-08-191-4/+2
|\ \ \ | |/ / |/| |
| * | LoadPin: Return EFAULT on copy_from_user() failuresKees Cook2022-08-161-4/+2
* | | Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-08-1029-338/+486
|\ \ \
| * | | apparmor: correct config reference to intended oneLukas Bulwahn2022-07-201-1/+1
| * | | apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2022-07-195-128/+133
| * | | apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-07-194-5/+25
| * | | apparmor: allow label to carry debug flagsJohn Johansen2022-07-196-8/+20
| * | | apparmor: fix overlapping attachment computationJohn Johansen2022-07-192-2/+2
| * | | apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-07-191-5/+7
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-191-6/+6
| * | | apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)2022-07-191-1/+1
| * | | apparmor: disable showing the mode as part of a secid to secctxJohn Johansen2022-07-133-6/+20
| * | | apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox2022-07-133-32/+13
| * | | apparmor: add a kernel label to use on kernel objectsJohn Johansen2022-07-134-13/+37
| * | | apparmor: test: Remove some casts which are no-longer requiredDavid Gow2022-07-091-6/+6
| * | | apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng2022-07-091-1/+1
| * | | apparmor: fix reference count leak in aa_pivotroot()Xin Xiong2022-07-091-0/+1
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-091-2/+1
| * | | apparmor: Fix undefined reference to `zlib_deflate_workspacesize'John Johansen2022-07-092-31/+40
| * | | apparmor: fix aa_label_asxprint return checkTom Rix2022-07-091-3/+3
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-091-4/+4
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-091-2/+3
| * | | apparmor: Fix match_mnt_path_str() and match_mnt() kernel-doc commentYang Li2022-07-091-2/+2
| * | | apparmor: Use struct_size() helper in kmalloc()Gustavo A. R. Silva2022-07-091-1/+1
| * | | apparmor: Fix failed mount permission check error messageJohn Johansen2022-07-091-3/+4
| * | | security/apparmor: remove redundant ret variableMinghao Chi2022-07-091-4/+1
| * | | apparmor: fix quiet_denied for file rulesJohn Johansen2022-07-091-1/+1
| * | | apparmor: resolve uninitialized symbol warnings in policy_unpack_test.cMike Salvatore2022-07-091-8/+8
| * | | apparmor: don't create raw_sha1 symlink if sha1 hashing is disabledJohn Johansen2022-07-091-8/+9
| * | | apparmor: Enable tuning of policy paranoid load for embedded systemsJohn Johansen2022-07-093-2/+15
| * | | apparmor: make export of raw binary profile to userspace optionalJohn Johansen2022-07-097-52/+111
| * | | apparmor: Update help description of policy hash for introspectionJohn Johansen2022-07-091-1/+4
| * | | lsm: Fix kernel-docYang Li2022-07-091-5/+5
| * | | apparmor: Fix kernel-docYang Li2022-07-093-4/+4
| * | | apparmor: fix absroot causing audited secids to begin with =John Johansen2022-07-092-3/+9
* | | | Merge tag 'linux-kselftest-kunit-5.20-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds2022-08-021-6/+6
|\ \ \ \
| * | | | apparmor: test: Remove some casts which are no-longer requiredDavid Gow2022-07-061-6/+6
| |/ / /
* | | | Merge tag 'integrity-v6.0' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-08-021-29/+23
|\ \ \ \
| * | | | evm: Use IS_ENABLED to initialize .enabledXiu Jianfeng2022-07-131-29/+23
* | | | | Merge tag 'safesetid-6.0' of https://github.com/micah-morton/linuxLinus Torvalds2022-08-022-9/+35
|\ \ \ \ \
| * | | | | LSM: SafeSetID: Add setgroups() security policy handlingMicah Morton2022-07-151-9/+30
| * | | | | security: Add LSM hook to setgroups() syscallMicah Morton2022-07-151-0/+5
* | | | | | Merge tag 'Smack-for-6.0' of https://github.com/cschaufler/smack-nextLinus Torvalds2022-08-022-12/+2
|\ \ \ \ \ \
| * | | | | | smack: Remove the redundant lsm_inode_allocXiu Jianfeng2022-08-011-7/+0