summaryrefslogtreecommitdiff
path: root/security/smack
AgeCommit message (Expand)AuthorFilesLines
7 dayssmack: fix bug: setting task label silently ignores input garbageKonstantin Andreev3-63/+148
7 dayssmack: fix bug: unprivileged task can create labelsKonstantin Andreev1-14/+27
7 dayssmack: fix bug: invalid label of unix socket fileKonstantin Andreev1-14/+44
7 dayssmack: always "instantiate" inode in smack_inode_init_security()Konstantin Andreev1-3/+7
7 dayssmack: deduplicate xattr setting in smack_inode_init_security()Konstantin Andreev1-27/+29
7 dayssmack: fix bug: SMACK64TRANSMUTE set on non-directoryKonstantin Andreev1-12/+14
7 dayssmack: deduplicate "does access rule request transmutation"Konstantin Andreev1-25/+32
2025-05-29smack: Revert "smackfs: Added check catlen"Konstantin Andreev1-14/+3
2025-05-29smack: recognize ipv4 CIPSO w/o categoriesKonstantin Andreev1-0/+4
2025-04-10smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket labelKonstantin Andreev1-24/+0
2025-04-10smack: dont compile ipv6 code unless ipv6 is configuredKonstantin Andreev2-1/+15
2024-09-24Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-10/+3
2024-09-19selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore1-10/+3
2024-09-19Merge tag 'Smack-for-6.12' of https://github.com/cschaufler/smack-nextLinus Torvalds2-3/+3
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-60/+63
2024-09-16Merge tag 'vfs-6.12.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds1-1/+1
2024-09-03smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye1-1/+1
2024-08-29selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew1-2/+2
2024-08-28file: reclaim 24 bytes from f_ownerChristian Brauner1-1/+1
2024-08-22security: smack: Fix indentation in smack_netfilter.cGiSeong Ji1-2/+2
2024-07-31lsm: Refactor return value of LSM hook inode_copy_up_xattrXu Kuohai1-3/+3
2024-07-29lsm: infrastructure management of the key security blobCasey Schaufler2-18/+20
2024-07-29lsm: infrastructure management of the sock securityCasey Schaufler3-39/+40
2024-07-17Merge tag 'Smack-for-6.10' of https://github.com/cschaufler/smack-nextLinus Torvalds1-4/+10
2024-07-17Merge tag 'lsm-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-4/+30
2024-07-09selinux,smack: remove the capability checks in the removexattr hooksPaul Moore1-2/+1
2024-06-19smack: unix sockets: fix accept()ed socket labelKonstantin Andreev1-3/+9
2024-06-13ima: Avoid blocking in RCU read-side critical sectionGUO Zihua1-1/+3
2024-06-06smack: tcp: ipv4, fix incorrect labelingCasey Schaufler1-1/+1
2024-06-04lsm: fixup the inode xattr capability handlingPaul Moore1-2/+29
2024-05-15Merge tag 'integrity-v6.10' of ssh://ra.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-1/+1
2024-05-14netlabel: fix RCU annotation for IPv4 options on socket creationDavide Caratti1-1/+2
2024-04-10security: allow finer granularity in permitting copy-up of security xattrsStefan Berger1-1/+1
2024-03-14lsm: use 32-bit compatible data types in LSM syscallsCasey Schaufler1-2/+2
2024-03-13Merge tag 'lsm-pr-20240312' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+3
2024-02-16security: Align inode_setattr hook definition with EVMRoberto Sassu1-1/+3
2024-02-14Smack: use init_task_smack() in smack_cred_transfer()Casey Schaufler1-6/+1
2024-01-25smack: Initialize the in-memory inode in smack_inode_init_security()Roberto Sassu1-1/+6
2024-01-25smack: Always determine inode labels in smack_inode_init_security()Roberto Sassu1-39/+39
2024-01-25smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu1-0/+9
2024-01-25smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu1-1/+2
2024-01-12Merge tag 'for-6.8/io_uring-2024-01-08' of git://git.kernel.dk/linuxLinus Torvalds1-1/+1
2024-01-11Merge tag 'header_cleanup-2024-01-10' of https://evilpiepirate.org/git/bcachefsLinus Torvalds1-0/+1
2023-12-24lsm: new security_file_ioctl_compat() hookAlfred Piccioni1-0/+1
2023-12-21shm: Slim down dependenciesKent Overstreet1-0/+1
2023-12-12io_uring: split out cmd api into a separate headerPavel Begunkov1-1/+1
2023-11-13lsm: mark the lsm_id variables are marked as staticPaul Moore1-1/+1
2023-11-13lsm: consolidate buffer size handling into lsm_fill_user_ctx()Paul Moore1-17/+6
2023-11-13Smack: implement setselfattr and getselfattr hooksCasey Schaufler1-5/+90
2023-11-13LSM: Identify modules by more than nameCasey Schaufler1-1/+7