summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
3 daysapparmor: advertise the tcp fast open fix is appliedJohn Johansen1-0/+2
3 dayskeys: Pin request_key_auth payload in instantiate pathsShaomin Chen3-8/+51
3 daysKEYS: fix overflow in keyctl_pkey_params_get_2()Jarkko Sakkinen1-1/+8
3 daysapparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev2-2/+25
3 daysapparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas1-1/+15
3 daysselinux: fix overlayfs mmap() and mprotect() access checksPaul Moore2-64/+189
3 dayslsm: add backing_file LSM hooksPaul Moore1-0/+109
2026-06-01security/keys: fix missed RCU read section on lookupLinus Torvalds1-0/+1
2026-06-01lsm: hold cred_guard_mutex for lsm_set_self_attr()Stephen Smalley1-1/+8
2026-05-23ima_fs: Correctly create securityfs files for unsupported hash algosDmitry Safonov1-4/+12
2026-05-23ima: check return value of crypto_shash_final() in boot aggregateDaniel Hodges1-1/+1
2026-05-14selinux: prune /sys/fs/selinux/userStephen Smalley3-190/+5
2026-05-14selinux: prune /sys/fs/selinux/disableStephen Smalley1-29/+7
2026-05-14selinux: prune /sys/fs/selinux/checkreqprotStephen Smalley1-40/+7
2026-05-14selinux: shrink critical section in sel_write_load()Stephen Smalley1-10/+8
2026-05-14selinux: don't reserve xattr slot when we won't fill itDavid Windsor1-1/+2
2026-05-14selinux: use sk blob accessor in socket permission helpersZongyao Chen1-2/+2
2026-05-14selinux: fix avdcache auditingStephen Smalley2-21/+14
2026-05-07apparmor: use target task's context in apparmor_getprocattr()Cengiz Can1-9/+7
2026-05-07landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()Mickaël Salaün1-4/+2
2026-03-25xen/privcmd: add boot control for restricted usage in domUJuergen Gross1-0/+1
2026-03-13apparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+153
2026-03-13apparmor: fix race on rawdata dereferenceJohn Johansen4-57/+93
2026-03-13apparmor: fix differential encoding verificationJohn Johansen2-4/+20
2026-03-13apparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-9/+43
2026-03-13apparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
2026-03-13apparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
2026-03-13apparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
2026-03-13apparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
2026-03-13apparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
2026-03-13apparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
2026-03-13apparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-1/+11
2026-03-04ima: verify the previous kernel's IMA buffer lies in addressable RAMHarshit Mogalapalli1-0/+35
2026-02-27apparmor: fix aa_label to return state from compount and component matchJohn Johansen1-6/+6
2026-02-27apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia1-0/+9
2026-02-27apparmor: avoid per-cpu hold underflow in aa_get_bufferZhengmian Hu1-1/+2
2026-02-27apparmor: make label_match return a consistent valueJohn Johansen1-11/+9
2026-02-27apparmor: remove apply_modes_to_perms from label_matchJohn Johansen1-3/+0
2026-02-27apparmor: fix rlimit for posix cpu timersJohn Johansen1-0/+5
2026-02-27apparmor: move check for aa_null file to cover all casesJohn Johansen2-6/+10
2026-02-27apparmor: account for in_atomic removal in common_file_permRyan Lee1-3/+2
2026-02-27apparmor: drop in_atomic flag in common_mmap, and common_file_permJohn Johansen1-12/+9
2026-02-27apparmor: fix boolean argument in apparmor_mmap_fileRyan Lee1-1/+1
2026-02-27apparmor: return -ENOMEM in unpack_perms_table upon alloc failureRyan Lee1-2/+4
2026-02-27apparmor: Fix & Optimize table creation from possibly unaligned memoryHelge Deller2-9/+10
2026-02-27AppArmor: Allow apparmor to handle unaligned dfa tablesHelge Deller1-7/+8
2026-02-27apparmor: fix NULL sock in aa_sock_file_permJohn Johansen1-2/+4
2026-02-27apparmor: fix NULL pointer dereference in __unix_needs_revalidationSystem Administrator1-0/+3
2026-02-27evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac()Roberto Sassu1-4/+10
2026-02-27smack: /smack/doi: accept previously used valuesKonstantin Andreev1-26/+45