kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
2019-07-10	selinux: avoid silent denials in permissive mode under RCU walk	Stephen Smalley	3	-5/+28
2019-07-10	security/selinux: pass 'flags' arg to avc_audit() and avc_has_perm_flags()	NeilBrown	3	-4/+25
2019-05-02	apparmor: provide userspace flag indicating binfmt_elf_mmap change	John Johansen	1	-0/+1
2019-05-02	KEYS: always initialize keyring_index_key::desc_len	Eric Biggers	4	-6/+4
2019-05-02	KEYS: restrict /proc/keys by credentials at open time	Eric Biggers	1	-6/+2
2019-05-02	KEYS: allow reaching the keys quotas exactly	Eric Biggers	1	-2/+2
2019-05-02	Yama: Check for pid death before checking ancestry	Kees Cook	1	-1/+3
2019-02-11	ima: fix showing large 'violations' or 'runtime_measurements_count'	Eric Biggers	1	-3/+3
2018-12-17	KEYS: encrypted: fix buffer overread in valid_master_desc()	Eric Biggers	1	-16/+15
2018-12-17	apparmor: remove no-op permission check in policy_unpack	John Johansen	1	-32/+0
2018-10-21	selinux: KASAN: slab-out-of-bounds in xattr_getsecurity	Sachin Grover	1	-1/+1
2018-06-17	ima: relax requiring a file signature for new files with zero length	Mimi Zohar	1	-1/+2
2018-02-13	apparmor: ensure that undecidable profile attachments fail	John Johansen	1	-16/+37
2018-02-13	ima: fix hash algorithm initialization	Boshi Wang	1	-0/+4
2018-01-09	KPTI: Rename to PAGE_TABLE_ISOLATION	Kees Cook	1	-1/+1
2018-01-09	x86/kaiser: Reenable PARAVIRT	Borislav Petkov	1	-1/+1
2018-01-09	KAISER: Kernel Address Isolation	Richard Fellner	1	-0/+10
2018-01-01	KEYS: add missing permission check for request_key() destination	Eric Biggers	1	-9/+37
2018-01-01	security: let security modules use PTRACE_MODE_* with bitmasks	Jann Horn	2	-7/+5
2018-01-01	KEYS: trusted: fix writing past end of buffer in trusted_read()	Eric Biggers	1	-11/+12
2018-01-01	KEYS: trusted: sanitize all key material	Eric Biggers	1	-27/+21
2018-01-01	KEYS: return full count in keyring_read() if buffer is too small	Eric Biggers	1	-20/+19
2018-01-01	KEYS: encrypted: fix dereference of NULL user_key_payload	Eric Biggers	1	-0/+7
2018-01-01	lsm: fix smack_inode_removexattr and xattr_getsecurity memleak	Casey Schaufler	1	-30/+25
2018-01-01	Smack: remove unneeded NULL-termination from securtity label	Konstantin Khlebnikov	1	-3/+3
2018-01-01	security/keys: properly zero out sensitive key material in big_key	Jason A. Donenfeld	1	-1/+1
2018-01-01	KEYS: prevent creating a different user's keyrings	Eric Biggers	4	-12/+23
2018-01-01	KEYS: fix writing past end of user-supplied buffer in keyring_read()	Eric Biggers	1	-9/+5
2018-01-01	KEYS: fix key refcount leak in keyctl_read_key()	Eric Biggers	1	-1/+1
2018-01-01	KEYS: fix key refcount leak in keyctl_assume_authority()	Eric Biggers	1	-4/+2
2018-01-01	KEYS: don't revoke uninstantiated key in request_key_auth_new()	Eric Biggers	1	-1/+0
2018-01-01	KEYS: fix cred refcount leak in request_key_auth_new()	Eric Biggers	1	-37/+31
2017-11-11	KEYS: don't let add_key() update an uninstantiated key	David Howells	1	-0/+10
2017-11-11	KEYS: prevent KEYCTL_READ on negative key	Eric Biggers	1	-0/+5
2017-10-12	sched: move no_new_privs into new atomic flags	Kees Cook	1	-2/+2
2017-09-15	ptrace: use fsuid, fsgid, effective creds for fs access checks	Jann Horn	1	-1/+6
2017-09-15	selinux: fix double free in selinux_parse_opts_str()	Paul Moore	1	-3/+2
2017-09-15	KEYS: fix dereferencing NULL payload with nonzero length	Eric Biggers	1	-2/+2
2017-08-26	ima: accept previously set IMA_NEW_FILE	Daniel Glöckner	1	-2/+3
2017-08-26	ima: pass 'opened' flag to identify newly created files	Dmitry Kasatkin	3	-11/+11
2017-07-18	KEYS: Change the name of the dead type to ".dead" to prevent user access	David Howells	1	-1/+1
2017-06-05	KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings	Eric Biggers	2	-24/+31
2017-06-05	KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings	David Howells	1	-2/+7
2017-06-05	KEYS: Reinstate EPERM for a key type name beginning with a '.'	David Howells	1	-0/+2
2017-06-05	KEYS: special dot prefixed keyring name bug fix	Mimi Zohar	1	-2/+4
2017-06-05	KEYS: Fix an error code in request_master_key()	Dan Carpenter	1	-1/+1
2017-04-05	keys: Guard against null match function in keyring_search_aux()	Ben Hutchings	1	-3/+3
2017-04-05	vfs: Commit to never having exectuables on proc and sysfs.	Eric W. Biederman	1	-1/+1
2017-02-26	selinux: fix off-by-one in setprocattr	Stephen Smalley	1	-1/+1
2017-02-23	apparmor: fix change_hat not finding hat after policy replacement	John Johansen	1	-2/+4