kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
34 hours	selinux: switch two allocations to use kzalloc_objs()	Stephen Smalley	1	-4/+3
34 hours	selinux: require a class's permission values to cover its permission count	Bryam Vargas	1	-5/+46
34 hours	selinux: reject a permission value exceeding the class permission count	Bryam Vargas	1	-0/+3
34 hours	selinux: more strict policy parsing	Christian Göttsche	8	-60/+232
34 hours	selinux: use u16 for security classes	Christian Göttsche	3	-8/+9
34 hours	selinux: make more use of str_read() when loading the policy	Christian Göttsche	3	-22/+12
34 hours	selinux: avoid unnecessary indirection in struct level_datum	Christian Göttsche	3	-17/+10
34 hours	selinux: use known type instead of void pointer	Christian Göttsche	8	-74/+77
11 days	fsnotify, lsm: Decouple fsnotify from lsm	Song Liu	1	-8/+1
11 days	selinux: reject an unclaimed class value in security_get_classes()	Bryam Vargas	1	-5/+19
11 days	selinux: do not cancel a policy conversion that never started	Bryam Vargas	1	-1/+3
11 days	selinux: reject a class permission count below its inherited common	Bryam Vargas	1	-0/+12
11 days	selinux: require every boolean value to be defined	Bryam Vargas	1	-0/+19
2026-08-19	ima: Instantiate file_truncate and path_truncate hooks	Mimi Zohar	1	-0/+39
2026-08-19	ima: fix out-of-bounds read in xattr_verify()	Lincoln Wallace	1	-2/+7
2026-08-09	keys: make keyring key-chunk byte order agree with keyring_diff_objects()	Michael Bommarito	1	-2/+3
2026-08-09	keys: fix out-of-bounds read in keyring_get_key_chunk()	Michael Bommarito	1	-4/+5
2026-08-09	KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type	Fabrice Derepas	1	-4/+11
2026-08-03	landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path	Bryam Vargas	3	-0/+35
2026-08-03	landlock: Prepare to use credential instead of domain for fowner	Mickaël Salaün	3	-21/+64
2026-07-24	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized	Matt Bobrowski	1	-0/+3
2026-07-24	selinux: fix incorrect execmem checks on overlayfs	Ondrej Mosnacek	1	-18/+24
2026-07-24	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()	Tristan Madani	1	-9/+10
2026-07-24	selinux: check connect-related permissions on TCP Fast Open	Stephen Smalley	1	-1/+18
2026-07-24	apparmor: fix label can not be immediately before a declaration	John Johansen	1	-1/+2
2026-07-24	apparmor: put secmark label after secid lookup	Zygmunt Krynicki	1	-0/+1
2026-07-24	apparmor: aa_getprocattr free procattr leak on format failure	Zygmunt Krynicki	1	-0/+2
2026-07-24	apparmor: remove or add symlinks to rawdata according to export_binary	Georgia Garcia	3	-25/+104
2026-07-24	apparmor: fix potential UAF in aa_replace_profiles	Maxime Bélair	1	-1/+3
2026-07-24	apparmor: grab ns lock and refresh when looking up changehat child profiles	Ryan Lee	1	-2/+31
2026-07-24	apparmor: fix rawdata_f_data implicit flex array	John Johansen	1	-4/+3
2026-07-24	apparmor: aa_label_alloc use aa_label_free on alloc failure	Zygmunt Krynicki	1	-1/+1
2026-07-24	apparmor: check label build before no_new_privs test	Ruoyu Wang	1	-10/+15
2026-07-24	security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()	Andrew Morton	1	-0/+2
2026-07-24	KEYS: Use acquire when reading state in keyring search	Gui-Dong Han	1	-1/+1
2026-07-24	landlock: Fix unmarked concurrent access to socket family	Matthieu Buffet	1	-2/+9
2026-07-24	evm: terminate and bound the evm_xattrs read buffer	Pengpeng Hou	1	-5/+11
2026-07-18	apparmor: advertise the tcp fast open fix is applied	John Johansen	1	-0/+1
2026-07-04	keys: Pin request_key_auth payload in instantiate paths	Shaomin Chen	3	-8/+51
2026-07-04	KEYS: fix overflow in keyctl_pkey_params_get_2()	Jarkko Sakkinen	1	-1/+8
2026-07-04	apparmor: fix use-after-free in rawdata dedup loop	Ruslan Valiyev	2	-2/+25
2026-07-04	apparmor: mediate the implicit connect of TCP fast open sendmsg	Bryam Vargas	1	-1/+15
2026-07-04	selinux: fix overlayfs mmap() and mprotect() access checks	Paul Moore	2	-64/+189
2026-07-04	lsm: add backing_file LSM hooks	Paul Moore	1	-0/+109
2026-06-19	ima: kexec: move IMA log copy from kexec load to execute	Steven Chen	1	-14/+29
2026-06-19	ima: kexec: skip IMA segment validation after kexec soft reboot	Steven Chen	1	-0/+3
2026-06-09	remove pointless includes of <linux/fdtable.h>	Al Viro	1	-1/+0
2026-06-01	security/keys: fix missed RCU read section on lookup	Linus Torvalds	1	-0/+1
2026-06-01	landlock: Fix TCP handling of short AF_UNSPEC addresses	Matthieu Buffet	1	-51/+67
2026-06-01	lsm: hold cred_guard_mutex for lsm_set_self_attr()	Stephen Smalley	1	-1/+8