summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
9 daystpm2-sessions: Fix out of range indexing in name_sizeJarkko Sakkinen1-6/+23
9 daysKEYS: trusted: Fix a memory leak in tpm2_load_cmdJarkko Sakkinen1-2/+4
2025-12-18landlock: Fix handling of disconnected directoriesMickaël Salaün2-12/+44
2025-12-18ima: Handle error code returned by ima_filter_rule_match()Zhao Yipeng1-1/+1
2025-12-18ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hookRoberto Sassu1-9/+33
2025-12-18smack: fix bug: setting task label silently ignores input garbageKonstantin Andreev3-63/+148
2025-12-18smack: fix bug: unprivileged task can create labelsKonstantin Andreev1-14/+27
2025-12-18smack: fix bug: invalid label of unix socket fileKonstantin Andreev1-14/+44
2025-12-18smack: always "instantiate" inode in smack_inode_init_security()Konstantin Andreev1-3/+7
2025-12-18smack: deduplicate xattr setting in smack_inode_init_security()Konstantin Andreev1-27/+29
2025-12-18smack: deduplicate "does access rule request transmutation"Konstantin Andreev1-25/+32
2025-12-18smack: fix bug: SMACK64TRANSMUTE set on non-directoryKonstantin Andreev1-12/+14
2025-11-22Merge tag 'selinux-pr-20251121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2-129/+144
2025-11-21selinux: rename the cred_security_struct variables to "crsec"Paul Moore2-117/+117
2025-11-21selinux: move avdcache to per-task security structStephen Smalley2-15/+30
2025-11-21selinux: rename task_security_struct to cred_security_structStephen Smalley2-38/+38
2025-11-12landlock: fix splats from iput() after it started calling might_sleep()Mateusz Guzik1-4/+3
2025-10-05Merge tag 'integrity-v6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-5/+19
2025-10-05Merge tag 'keys-next-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/j...Linus Torvalds4-252/+117
2025-10-04security: keys: use menuconfig for KEYS symbolRandy Dunlap1-8/+6
2025-10-04KEYS: encrypted: Use SHA-256 library instead of crypto_shashEric Biggers2-55/+11
2025-10-04Merge tag 'pull-f_path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-7/+7
2025-10-03Merge tag 'pull-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds3-3/+3
2025-10-03ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattrCoiby Xu1-5/+18
2025-10-03integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYSEric Biggers1-0/+1
2025-10-02Merge tag 'bitmap-for-6.18' of https://github.com/norov/linuxLinus Torvalds1-0/+10
2025-09-30Merge tag 'lsm-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds5-61/+116
2025-09-30Merge tag 'selinux-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds6-25/+22
2025-09-30Merge tag 'audit-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds4-2/+29
2025-09-29Merge tag 'kernel-6.18-rc1.clone3' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds4-4/+4
2025-09-27KEYS: trusted_tpm1: Move private functionality out of public headerEric Biggers1-8/+72
2025-09-27KEYS: trusted_tpm1: Use SHA-1 library instead of crypto_shashEric Biggers2-190/+36
2025-09-27KEYS: trusted_tpm1: Compare HMAC values in constant timeEric Biggers1-3/+4
2025-09-22rust: add bitmap API.Burak Emir1-0/+10
2025-09-16apparmor/af_unix: constify struct path * argumentsAl Viro1-7/+7
2025-09-16security_dentry_init_security(): constify qstr argumentAl Viro3-3/+3
2025-09-11lsm: CONFIG_LSM can depend on CONFIG_SECURITYRandy Dunlap1-0/+1
2025-09-07selinux: enable per-file labeling for functionfsNeill Kapron4-2/+14
2025-09-04selinux: fix sel_read_bool() allocation and error handlingStephen Smalley1-13/+5
2025-09-01copy_process: pass clone_flags as u64 across calltreeSimon Schuster4-4/+4
2025-09-01fs: add an icount_read helperJosef Bacik1-1/+1
2025-08-30audit: add record for multiple object contextsCasey Schaufler2-2/+6
2025-08-30audit: add record for multiple task security contextsCasey Schaufler3-0/+9
2025-08-30lsm: security_lsmblob_to_secctx module selectionCasey Schaufler1-2/+16
2025-08-18security: use umax() to improve codeQianfeng Rong1-4/+2
2025-08-12selinux: Remove redundant __GFP_NOWARNQianfeng Rong1-7/+6
2025-08-12lsm,selinux: Add LSM blob support for BPF objectsBlaise Boscaccy3-49/+113
2025-08-12lsm: use lsm_blob_alloc() in lsm_bdev_alloc()Paul Moore1-10/+2
2025-08-11selinux: use a consistent method to get full socket from skbTianjia Zhang1-1/+1
2025-08-11selinux: Remove unused function selinux_policycap_netif_wildcard()Yue Haibing1-6/+0