summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2024-05-25ima: fix deadlock when traversing "ima_default_rules".liqiong1-9/+20
2024-05-17keys: Fix overwrite of key expiration on instantiationSilvio Gissi1-1/+2
2024-04-13smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu1-0/+9
2024-04-13smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu1-1/+2
2024-03-15lsm: fix default return value of the socket_getpeersec_*() hooksOndrej Mosnacek1-4/+27
2024-03-15lsm: make security_socket_getpeersec_stream() sockptr_t safePaul Moore4-35/+32
2024-03-06tomoyo: fix UAF write bug in tomoyo_write_control()Tetsuo Handa1-1/+2
2024-02-23lsm: fix the logic in security_inode_getsecctx()Ondrej Mosnacek1-1/+13
2024-02-23lsm: new security_file_ioctl_compat() hookAlfred Piccioni4-0/+48
2024-01-26apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin1-0/+4
2024-01-26selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün1-0/+7
2024-01-05keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiryDavid Howells4-22/+37
2023-12-08ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein1-11/+37
2023-11-28ima: detect changes to the backing overlay fileMimi Zohar3-1/+22
2023-10-10ima: rework CONFIG_IMA dependency blockArnd Bergmann1-11/+6
2023-10-10ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko1-2/+2
2023-10-10Smack:- Use overlay inode label in smack_inode_copy_up()Vishal Goel1-1/+1
2023-10-10smack: Retrieve transmuting information in smack_inode_getsecurity()Roberto Sassu1-4/+18
2023-10-10smack: Record transmuting in smk_transmutedRoberto Sassu2-12/+30
2023-09-19smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter1-1/+1
2023-09-19ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain1-12/+0
2023-09-19security: keys: perform capable check only on privileged operationsChristian Göttsche1-3/+8
2023-08-30selinux: set next pointer before attaching to listChristian Göttsche1-1/+1
2023-08-26IMA: allow/fix UML buildsRandy Dunlap1-1/+1
2023-07-27security: keys: Modify mismatched function nameJiapeng Chong1-1/+1
2023-07-27keys: Fix linking a duplicate key to a keyring's assoc_arrayPetr Pavlu1-11/+24
2023-07-27integrity: Fix possible multiple allocation in integrity_inode_get()Tianjia Zhang1-6/+9
2023-07-27apparmor: fix missing error check for rhashtable_insert_fastDanila Chernetsov1-2/+7
2023-07-27ima: Fix build warningsRoberto Sassu2-1/+5
2023-07-27evm: Complete description of evm_inode_setattr()Roberto Sassu1-0/+2
2023-06-09selinux: don't use make's grouped targets feature yetPaul Moore1-1/+5
2023-05-17selinux: ensure av_permissions.h is built when neededPaul Moore1-1/+1
2023-05-17selinux: fix Makefile dependencies of flask.hOndrej Mosnacek1-2/+2
2023-04-05keys: Do not cache key in task struct if key is requested from kernel threadDavid Howells1-3/+6
2023-03-11ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu2-5/+9
2023-02-01tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada1-1/+1
2023-01-14device_cgroup: Roll back to original exceptions after copy failureWang Weiyang1-4/+29
2023-01-14ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu1-1/+4
2023-01-14efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg1-0/+1
2023-01-14ima: Simplify ima_lsm_copy_ruleGUO Zihua1-7/+3
2023-01-14LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook1-12/+18
2023-01-14apparmor: Fix memleak in alloc_ns()Xiu Jianfeng1-1/+1
2023-01-14apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng1-2/+2
2023-01-14apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2023-01-14apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2023-01-14apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2023-01-14ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng1-2/+2
2023-01-14integrity: Fix memory leakage in keyring allocation error pathGUO Zihua1-1/+5
2023-01-14ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua1-9/+32
2023-01-14ima: Fix fall-through warnings for ClangGustavo A. R. Silva2-0/+3