kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
2024-09-12	smack: unix sockets: fix accept()ed socket label	Konstantin Andreev	1	-3/+9
2024-09-12	smack: tcp: ipv4, fix incorrect labeling	Casey Schaufler	1	-1/+1
2024-09-12	apparmor: fix possible NULL pointer dereference	Leesoo Ahn	1	-0/+4
2024-09-04	apparmor: fix policy_unpack_test on big endian systems	Guenter Roeck	1	-3/+3
2024-09-04	selinux: fix potential counting error in avc_add_xperms_decision()	Zhen Lei	1	-1/+1
2024-08-19	apparmor: Fix null pointer deref when receiving skb during sock creation	Xiao Liang	1	-0/+7
2024-08-19	task_work: s/task_work_cancel()/task_work_cancel_func()/	Frederic Weisbecker	1	-1/+1
2024-08-19	apparmor: use kvfree_sensitive to free data->data	Fedor Pchelkin	2	-1/+2
2024-07-18	ima: Avoid blocking in RCU read-side critical section	GUO Zihua	8	-17/+27
2024-05-25	ima: fix deadlock when traversing "ima_default_rules".	liqiong	1	-9/+20
2024-05-17	keys: Fix overwrite of key expiration on instantiation	Silvio Gissi	1	-1/+2
2024-04-13	smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()	Roberto Sassu	1	-0/+9
2024-04-13	smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()	Roberto Sassu	1	-1/+2
2024-03-15	lsm: fix default return value of the socket_getpeersec_*() hooks	Ondrej Mosnacek	1	-4/+27
2024-03-15	lsm: make security_socket_getpeersec_stream() sockptr_t safe	Paul Moore	4	-35/+32
2024-03-06	tomoyo: fix UAF write bug in tomoyo_write_control()	Tetsuo Handa	1	-1/+2
2024-02-23	lsm: fix the logic in security_inode_getsecctx()	Ondrej Mosnacek	1	-1/+13
2024-02-23	lsm: new security_file_ioctl_compat() hook	Alfred Piccioni	4	-0/+48
2024-01-26	apparmor: avoid crash when parsed profile name is empty	Fedor Pchelkin	1	-0/+4
2024-01-26	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	Mickaël Salaün	1	-0/+7
2024-01-05	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	David Howells	4	-22/+37
2023-12-08	ima: annotate iint mutex to avoid lockdep false positive warnings	Amir Goldstein	1	-11/+37
2023-11-28	ima: detect changes to the backing overlay file	Mimi Zohar	3	-1/+22
2023-10-10	ima: rework CONFIG_IMA dependency block	Arnd Bergmann	1	-11/+6
2023-10-10	ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig	Oleksandr Tymoshenko	1	-2/+2
2023-10-10	Smack:- Use overlay inode label in smack_inode_copy_up()	Vishal Goel	1	-1/+1
2023-10-10	smack: Retrieve transmuting information in smack_inode_getsecurity()	Roberto Sassu	1	-4/+18
2023-10-10	smack: Record transmuting in smk_transmuted	Roberto Sassu	2	-12/+30
2023-09-19	smackfs: Prevent underflow in smk_set_cipso()	Dan Carpenter	1	-1/+1
2023-09-19	ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig	Nayna Jain	1	-12/+0
2023-09-19	security: keys: perform capable check only on privileged operations	Christian Göttsche	1	-3/+8
2023-08-30	selinux: set next pointer before attaching to list	Christian Göttsche	1	-1/+1
2023-08-26	IMA: allow/fix UML builds	Randy Dunlap	1	-1/+1
2023-07-27	security: keys: Modify mismatched function name	Jiapeng Chong	1	-1/+1
2023-07-27	keys: Fix linking a duplicate key to a keyring's assoc_array	Petr Pavlu	1	-11/+24
2023-07-27	integrity: Fix possible multiple allocation in integrity_inode_get()	Tianjia Zhang	1	-6/+9
2023-07-27	apparmor: fix missing error check for rhashtable_insert_fast	Danila Chernetsov	1	-2/+7
2023-07-27	ima: Fix build warnings	Roberto Sassu	2	-1/+5
2023-07-27	evm: Complete description of evm_inode_setattr()	Roberto Sassu	1	-0/+2
2023-06-09	selinux: don't use make's grouped targets feature yet	Paul Moore	1	-1/+5
2023-05-17	selinux: ensure av_permissions.h is built when needed	Paul Moore	1	-1/+1
2023-05-17	selinux: fix Makefile dependencies of flask.h	Ondrej Mosnacek	1	-2/+2
2023-04-05	keys: Do not cache key in task struct if key is requested from kernel thread	David Howells	1	-3/+6
2023-03-11	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	Roberto Sassu	2	-5/+9
2023-02-01	tomoyo: fix broken dependency on *.conf.default	Masahiro Yamada	1	-1/+1
2023-01-14	device_cgroup: Roll back to original exceptions after copy failure	Wang Weiyang	1	-4/+29
2023-01-14	ima: Fix a potential NULL pointer access in ima_restore_measurement_list	Huaxin Lu	1	-1/+4
2023-01-14	efi: Add iMac Pro 2017 to uefi skip cert quirk	Aditya Garg	1	-0/+1
2023-01-14	ima: Simplify ima_lsm_copy_rule	GUO Zihua	1	-7/+3
2023-01-14	LoadPin: Ignore the "contents" argument of the LSM hooks	Kees Cook	1	-12/+18