summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2021-07-19smackfs: restrict bytes count in smk_set_cipso()Tetsuo Handa1-0/+2
2021-07-19selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim1-6/+7
2021-07-14evm: fix writing <securityfs>/evm overflowMimi Zohar1-2/+3
2021-07-14ima: Don't remove security.ima if file must not be appraisedRoberto Sassu1-2/+0
2021-07-14evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loadedRoberto Sassu1-4/+4
2021-07-14evm: Execute evm_inode_init_security() only when an HMAC key is loadedRoberto Sassu1-2/+3
2021-06-30integrity: Load mokx variables into the blacklist keyringEric Snowberg1-2/+18
2021-06-30certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg1-0/+11
2021-05-19KEYS: trusted: Fix memory leak on object tdColin Ian King1-3/+5
2021-05-14ima: Fix the error code for restoring the PCR valueLi Huafei1-2/+2
2021-05-14security: keys: trusted: fix TPM2 authorizationsJames Bottomley2-10/+32
2021-05-14selinux: add proper NULL termination to the secclass_map permissionsPaul Moore1-2/+3
2021-05-12security: commoncap: fix -Wstringop-overread warningArnd Bergmann1-1/+1
2021-04-22KEYS: trusted: Fix TPM reservation for seal/unsealJames Bottomley1-1/+1
2021-04-17kasan: remove redundant config optionWalter Wu1-2/+2
2021-04-09Merge tag 'selinux-pr-20210409' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds6-112/+185
2021-04-08selinux: fix race between old and new sidtabOndrej Mosnacek3-37/+145
2021-04-02selinux: fix cond_list corruption when changing booleansOndrej Mosnacek3-69/+33
2021-04-02selinux: make nslot handling in avtab more robustOndrej Mosnacek1-10/+11
2021-03-28tomoyo: don't special case PF_IO_WORKER for PF_KTHREADJens Axboe1-1/+1
2021-03-26Merge tag 'integrity-v5.12-fix' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-0/+8
2021-03-22integrity: double check iint_cache was initializedMimi Zohar1-0/+8
2021-03-22Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds3-41/+59
2021-03-19selinuxfs: unify policy load error reportingOndrej Mosnacek1-6/+3
2021-03-19selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek3-33/+55
2021-03-19selinux: don't log MAC_POLICY_LOAD record on failed policy loadOndrej Mosnacek1-2/+1
2021-03-13Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file cap...Eric W. Biederman1-11/+1
2021-02-24Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds8-21/+18
2021-02-24Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds18-115/+240
2021-02-23Merge branch 'userns-for-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+11
2021-02-23Merge branch 'work.audit' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds1-2/+3
2021-02-22Merge tag 'tpmdd-next-v5.12-rc1-v2' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2-8/+36
2021-02-22Merge tag 'Smack-for-v5.12' of git://github.com/cschaufler/smack-nextLinus Torvalds1-2/+19
2021-02-22Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds16-52/+301
2021-02-22Merge tag 'selinux-pr-20210215' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds16-51/+141
2021-02-22Merge tag 'tomoyo-pr-20210215' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds3-25/+25
2021-02-16KEYS: trusted: Reserve TPM for seal and unseal operationsJarkko Sakkinen1-4/+18
2021-02-16KEYS: trusted: Fix migratable=1 failingJarkko Sakkinen1-1/+1
2021-02-16KEYS: trusted: Fix incorrect handling of tpm_get_random()Jarkko Sakkinen1-3/+17
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun1-2/+2
2021-02-11Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar1-0/+3
2021-02-10ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian1-0/+2
2021-02-10ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian1-0/+1
2021-02-03smackfs: restrict bytes count in smackfs write functionsSabyrzhan Tasbolatov1-2/+19
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa1-1/+1
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa3-24/+24
2021-01-28cap: fix conversions on getxattrMiklos Szeredi1-24/+43
2021-01-27IMA: Measure kernel version in early bootRaphael Gianotti1-0/+5
2021-01-24ima: handle idmapped mountsChristian Brauner7-40/+68
2021-01-24apparmor: handle idmapped mountsChristian Brauner3-10/+24