summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2025-04-20landlock: Prepare to add second errataMickaël Salaün1-0/+12
2025-04-20landlock: Always allow signals between threads of the same processMickaël Salaün3-6/+64
2025-04-20landlock: Add erratum for TCP fixMickaël Salaün1-0/+15
2025-04-20landlock: Add the errata interfaceMickaël Salaün4-4/+138
2025-04-20landlock: Move code to ease future backportsMickaël Salaün1-5/+5
2025-04-20ima: limit the number of ToMToU integrity violationsMimi Zohar2-4/+5
2025-04-20ima: limit the number of open-writers integrity violationsMimi Zohar2-2/+10
2025-04-10smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket labelKonstantin Andreev1-24/+0
2025-04-10smack: dont compile ipv6 code unless ipv6 is configuredKonstantin Andreev2-1/+15
2025-03-29keys: Fix UAF in key_put()David Howells2-1/+5
2025-03-07ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattrRoberto Sassu2-2/+8
2025-03-07landlock: Fix non-TCP sockets restrictionMikhail Ivanov1-2/+1
2025-02-17KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=yDavid Gstir1-4/+18
2025-02-17tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa1-1/+1
2025-02-17safesetid: check size of policy writesLeo Stone1-0/+3
2025-02-08landlock: Handle weird filesMickaël Salaün1-6/+5
2025-01-08Merge tag 'selinux-pr-20250107' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-38/+65
2025-01-05selinux: match extended permissions to their base permissionsThiébaud Weksteen5-38/+65
2024-12-18Merge tag 'selinux-pr-20241217' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+6
2024-12-16selinux: ignore unknown extended permissionsThiébaud Weksteen1-2/+6
2024-12-05Merge tag 'net-6.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-1/+1
2024-12-02module: Convert symbol namespace to string literalPeter Zijlstra1-1/+1
2024-12-01Merge tag 'lsm-pr-20241129' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-4/+5
2024-12-01selinux: use sk_to_full_sk() in selinux_ip_output()Eric Dumazet1-1/+1
2024-11-27ima: uncover hidden variable in ima_match_rules()Casey Schaufler1-4/+5
2024-11-27apparmor: lift new_profile declaration to remove C23 extension warningJohn Johansen1-2/+1
2024-11-27apparmor: replace misleading 'scrubbing environment' phrase in debug printRyan Lee1-8/+8
2024-11-27parser: drop dead code for XXX_comb macrosJohn Johansen1-24/+0
2024-11-27apparmor: Remove unused parameter L1 in macro next_combJinjie Ruan1-2/+2
2024-11-27apparmor: audit_cap dedup based on subj_cred instead of profileRyan Lee1-6/+4
2024-11-27apparmor: add a cache entry expiration time aging out capability audit cacheRyan Lee1-3/+8
2024-11-27apparmor: document capability.c:profile_capable ad ptr not being NULLRyan Lee1-1/+1
2024-11-27apparmor: fix 'Do simple duplicate message elimination'chao liu1-0/+2
2024-11-27apparmor: document first entry is in packed perms struct is reservedJohn Johansen1-1/+4
2024-11-27apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan1-0/+6
2024-11-27apparmor: Remove deadcodeDr. David Alan Gilbert9-146/+0
2024-11-27apparmor: Remove unnecessary NULL check before kvfree()Thorsten Blum1-2/+1
2024-11-27apparmor: domain: clean up duplicated parts of handle_onexec()Leesoo Ahn1-26/+12
2024-11-27apparmor: Use IS_ERR_OR_NULL() helper functionHongbo Li1-1/+1
2024-11-27apparmor: add support for 2^24 states to the dfa state machine.John Johansen3-25/+83
2024-11-27apparmor: properly handle cx/px lookup failure for complainRyan Lee1-2/+7
2024-11-27apparmor: allocate xmatch for nullpdb inside aa_alloc_nullRyan Lee1-0/+1
2024-11-26Merge tag 'mm-nonmm-stable-2024-11-24-02-05' of git://git.kernel.org/pub/scm/...Linus Torvalds2-3/+3
2024-11-21Merge tag 'fsnotify_for_v6.13-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-8/+1
2024-11-19Merge tag 'v6.13-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-3/+3
2024-11-19Merge tag 'lsm-pr-20241112' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds16-150/+252
2024-11-19Merge tag 'selinux-pr-20241112' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds13-197/+431
2024-11-18Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds3-42/+18
2024-11-18Merge tag 'vfs-6.13.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds1-1/+0
2024-11-13Merge tag 'integrity-v6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-5/+16