summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2023-01-07device_cgroup: Roll back to original exceptions after copy failureWang Weiyang1-4/+29
2023-01-07ima: Fix memory leak in __ima_inode_hash()Roberto Sassu1-1/+6
2023-01-07ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu1-1/+4
2023-01-07efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg1-0/+1
2023-01-07ima: Fix hash dependency to correct algorithmTianjia Zhang1-1/+1
2022-12-31security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor1-0/+3
2022-12-31ima: Simplify ima_lsm_copy_ruleGUO Zihua1-7/+3
2022-12-31LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook1-12/+18
2022-12-31apparmor: Fix memleak in alloc_ns()Xiu Jianfeng1-1/+1
2022-12-31apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng1-2/+2
2022-12-31apparmor: Fix regression in stacking due to label flagsJohn Johansen1-5/+7
2022-12-31apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2022-12-31apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2022-12-31apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2022-12-31ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng1-2/+2
2022-12-31integrity: Fix memory leakage in keyring allocation error pathGUO Zihua1-1/+5
2022-12-31ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua1-9/+32
2022-12-21KEYS: encrypted: fix key instantiation with user-provided dataNikolaus Voss1-3/+3
2022-11-10capabilities: fix potential memleak on error path from vfs_getxattr_alloc()Gaosheng Cui1-2/+4
2022-10-29selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi3-5/+6
2022-10-21ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar1-4/+8
2022-10-21LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke1-1/+1
2022-10-15efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain1-1/+1
2022-10-12hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook1-4/+10
2022-09-03Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-23/+25
2022-09-02landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün1-23/+25
2022-08-31Merge tag 'lsm-pr-20220829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds4-1/+61
2022-08-26Smack: Provide read control for io_uring_cmdCasey Schaufler1-0/+32
2022-08-26selinux: implement the security_uring_cmd() LSM hookPaul Moore2-1/+25
2022-08-26lsm,io_uring: add LSM hooks for the new uring_cmd file opLuis Chamberlain1-0/+4
2022-08-19Merge tag 'hardening-v6.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-4/+2
2022-08-16LoadPin: Return EFAULT on copy_from_user() failuresKees Cook1-4/+2
2022-08-10Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds29-338/+486
2022-08-03Merge tag 'linux-kselftest-kunit-5.20-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds1-6/+6
2022-08-03Merge tag 'integrity-v6.0' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds1-29/+23
2022-08-03Merge tag 'safesetid-6.0' of https://github.com/micah-morton/linuxLinus Torvalds2-9/+35
2022-08-03Merge tag 'Smack-for-6.0' of https://github.com/cschaufler/smack-nextLinus Torvalds2-12/+2
2022-08-03Merge tag 'selinux-pr-20220801' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-13/+19
2022-08-03Merge tag 'hardening-v5.20-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2-1/+182
2022-08-01smack: Remove the redundant lsm_inode_allocXiu Jianfeng1-7/+0
2022-08-01smack: Replace kzalloc + strncpy with kstrndupGONG, Ruiqi1-5/+2
2022-08-01Merge tag 'x86_kdump_for_v6.0_rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-1/+1
2022-08-01Merge tag 'fs.idmapped.vfsuid.v5.20' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-7/+10
2022-07-20apparmor: correct config reference to intended oneLukas Bulwahn1-1/+1
2022-07-20lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-07-19apparmor: move ptrace mediation to more logical task.{h,c}John Johansen5-128/+133
2022-07-19apparmor: extend policydb permission set by making use of the xbitsJohn Johansen4-5/+25
2022-07-19apparmor: allow label to carry debug flagsJohn Johansen6-8/+20
2022-07-19apparmor: fix overlapping attachment computationJohn Johansen2-2/+2
2022-07-19apparmor: fix setting unconfined mode on a loaded profileJohn Johansen1-5/+7