summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
12 dayslandlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas3-0/+35
12 daysselinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek1-18/+24
12 daysselinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani1-9/+10
12 daysselinux: check connect-related permissions on TCP Fast OpenStephen Smalley1-1/+18
12 daysapparmor: fix label can not be immediately before a declarationJohn Johansen1-1/+2
12 daysapparmor: Fix inverted comparison in cache_hold_inc()Eduardo Vasconcelos1-1/+1
12 daysapparmor: fix uninitialised pointer passed to audit_log_untrustedstring()Maciek Borzecki1-5/+5
12 daysapparmor: don't audit files pointing to aa_null.dentryGeorgia Garcia1-1/+1
12 daysapparmor: put secmark label after secid lookupZygmunt Krynicki1-0/+1
12 daysapparmor: aa_getprocattr free procattr leak on format failureZygmunt Krynicki1-0/+2
12 daysapparmor: remove unnecessary goto and associated labelJohn Johansen1-4/+1
12 daysapparmor: release exe file resources on path failureZygmunt Krynicki1-2/+5
12 daysapparmor: fail policy unpack on accept2 allocation failureZygmunt Krynicki1-2/+2
12 daysapparmor: Fix return in ns_mkdir_opHongling Zeng1-1/+1
12 daysapparmor: remove or add symlinks to rawdata according to export_binaryGeorgia Garcia3-25/+104
12 daysapparmor: fix NULL pointer dereference in unpack_pdbGeorgia Garcia1-1/+1
12 daysapparmor: fix potential UAF in aa_replace_profilesMaxime Bélair1-1/+3
12 daysapparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee1-2/+31
12 daysapparmor: fix rawdata_f_data implicit flex arrayJohn Johansen1-4/+3
12 daysapparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki1-1/+1
12 daysapparmor: check label build before no_new_privs testRuoyu Wang1-10/+15
12 dayssecurity/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()Andrew Morton1-0/+2
12 daysapparmor: fix refcount leak when updating the sk_ctxJohn Johansen1-2/+4
12 daysapparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen1-29/+35
12 daysapparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen1-2/+1
12 daysKEYS: Use acquire when reading state in keyring searchGui-Dong Han1-1/+1
12 dayslandlock: Fix unmarked concurrent access to socket familyMatthieu Buffet1-2/+9
12 daysevm: terminate and bound the evm_xattrs read bufferPengpeng Hou1-5/+11
12 daysima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIGKamlesh Kumar2-3/+5
2026-07-18landlock: Account all audit data allocations to user spaceMickaël Salaün2-8/+6
2026-07-18landlock: Set audit_net.sk for socket access checksMickaël Salaün1-0/+1
2026-07-18bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedMatt Bobrowski1-0/+3
2026-07-04apparmor: advertise the tcp fast open fix is appliedJohn Johansen1-0/+2
2026-07-04keys: Pin request_key_auth payload in instantiate pathsShaomin Chen3-8/+51
2026-07-04KEYS: fix overflow in keyctl_pkey_params_get_2()Jarkko Sakkinen1-1/+8
2026-07-04apparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev2-2/+25
2026-07-04apparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas1-1/+15
2026-05-28security/keys: fix missed RCU read section on lookupLinus Torvalds1-0/+1
2026-05-19Merge tag 'lsm-pr-20260519' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-1/+8
2026-05-14lsm: hold cred_guard_mutex for lsm_set_self_attr()Stephen Smalley1-1/+8
2026-05-05selinux: shrink critical section in sel_write_load()Stephen Smalley1-10/+8
2026-05-05selinux: allow multiple opens of /sys/fs/selinux/policyStephen Smalley1-23/+4
2026-05-05selinux: prune /sys/fs/selinux/userStephen Smalley3-190/+5
2026-05-05selinux: prune /sys/fs/selinux/disableStephen Smalley1-29/+7
2026-05-05selinux: prune /sys/fs/selinux/checkreqprotStephen Smalley1-40/+7
2026-04-29selinux: fix avdcache auditingStephen Smalley2-21/+14
2026-04-28selinux: don't reserve xattr slot when we won't fill itDavid Windsor1-1/+2
2026-04-28selinux: use sk blob accessor in socket permission helpersZongyao Chen1-2/+2
2026-04-24Merge tag 'apparmor-pr-2026-04-23' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds4-26/+22
2026-04-23apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engineGONG Ruiqi1-0/+1