summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
31 hoursapparmor: fix label can not be immediately before a declarationJohn Johansen1-1/+2
31 hoursapparmor: put secmark label after secid lookupZygmunt Krynicki1-0/+1
31 hoursapparmor: aa_getprocattr free procattr leak on format failureZygmunt Krynicki1-0/+2
31 hoursapparmor: fix potential UAF in aa_replace_profilesMaxime Bélair1-1/+4
31 hoursapparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee1-2/+31
31 hoursapparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki1-1/+1
31 hoursapparmor: check label build before no_new_privs testRuoyu Wang1-10/+15
31 hoursKEYS: Use acquire when reading state in keyring searchGui-Dong Han1-1/+1
31 hoursevm: terminate and bound the evm_xattrs read bufferPengpeng Hou1-5/+11
31 hoursapparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas1-1/+15
31 hoursapparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev2-2/+25
2026-07-04keys: Pin request_key_auth payload in instantiate pathsShaomin Chen3-8/+51
2026-07-04KEYS: fix overflow in keyctl_pkey_params_get_2()Jarkko Sakkinen1-1/+8
2026-06-19apparmor: validate default DFA states are in boundsBen Hutchings1-12/+15
2026-06-19selinux: enable genfscon labeling for securityfsChristian Göttsche1-1/+2
2026-06-19use less confusing names for iov_iter direction initializersAl Viro1-2/+2
2026-06-01ima: check return value of crypto_shash_final() in boot aggregateDaniel Hodges1-1/+1
2026-04-18apparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+152
2026-04-18apparmor: fix race on rawdata dereferenceJohn Johansen4-57/+94
2026-04-18apparmor: fix differential encoding verificationJohn Johansen2-4/+20
2026-04-18apparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-11/+52
2026-04-18apparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
2026-04-18apparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
2026-04-18apparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
2026-04-18apparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
2026-04-18apparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
2026-04-18apparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
2026-04-18apparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-2/+19
2026-04-18xen/privcmd: add boot control for restricted usage in domUJuergen Gross1-0/+1
2026-03-04apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia1-0/+9
2026-03-04apparmor: fix rlimit for posix cpu timersJohn Johansen1-0/+5
2026-03-04apparmor: fix NULL sock in aa_sock_file_permJohn Johansen1-2/+4
2026-03-04smack: /smack/doi: accept previously used valuesKonstantin Andreev1-26/+45
2026-03-04smack: /smack/doi must be > 0Konstantin Andreev1-5/+7
2026-01-19KEYS: trusted: Fix a memory leak in tpm2_load_cmdJarkko Sakkinen1-2/+4
2026-01-19ima: Handle error code returned by ima_filter_rule_match()Zhao Yipeng1-1/+1
2026-01-19smack: fix bug: unprivileged task can create labelsKonstantin Andreev1-14/+27
2025-10-19KEYS: trusted_tpm1: Compare HMAC values in constant timeEric Biggers1-3/+4
2025-08-28securityfs: don't pin dentries twice, once is enough...Al Viro1-2/+0
2025-08-28apparmor: ensure WB_HISTORY_SIZE value is a power of 2Ryan Lee2-1/+3
2025-06-27selinux: fix selinux_xfrm_alloc_user() to set correct ctx_lenStephen Smalley1-1/+1
2025-06-04smack: recognize ipv4 CIPSO w/o categoriesKonstantin Andreev1-0/+4
2025-05-02landlock: Add the errata interfaceMickaël Salaün4-4/+138
2025-03-13tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa1-1/+1
2025-03-13safesetid: check size of policy writesLeo Stone1-0/+3
2025-03-13landlock: Handle weird filesMickaël Salaün1-6/+5
2025-03-13landlock: Move filesystem helpers and add a new oneMickaël Salaün1-41/+46
2025-01-09selinux: ignore unknown extended permissionsThiébaud Weksteen1-2/+6
2024-12-14ima: Fix use-after-free on a dentry's dname.nameStefan Berger2-7/+26
2024-12-14apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan1-0/+6