summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
5 daysMerge tag 'for-next-tpm-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2-108/+103
7 daysMerge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds36-613/+1609
7 daysapparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen1-2/+2
8 daystpm-buf: Memory-safe allocationsJarkko Sakkinen2-106/+103
8 daystpm-buf: Merge TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOWJarkko Sakkinen1-3/+3
8 daystpm: Initial step to reorganize TPM public headersRoss Philipson2-2/+0
10 daysMerge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
12 daysMerge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds25-1428/+2277
13 daysKEYS: trusted: Fix TPM teardown orderingChengfeng Ye1-1/+1
14 daysMerge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds9-10/+168
14 daysMerge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds4-177/+129
14 daysMerge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-3/+2
14 daysMerge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds7-61/+121
2026-08-17landlock: Add tracepoints for ptrace and scope denialsMickaël Salaün3-7/+76
2026-08-17landlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün3-1/+136
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün4-65/+147
2026-08-17landlock: Add landlock_enforce_domain tracepointMickaël Salaün2-1/+29
2026-08-17landlock: Add create_domain and free_domain tracepointsMickaël Salaün6-17/+137
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün5-2/+80
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün6-1/+48
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün1-31/+53
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün3-95/+98
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün17-570/+681
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün13-480/+403
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün5-188/+201
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün5-60/+202
2026-08-16apparmor: fix deadlock in complain-mode change_hatJohn Johansen3-14/+37
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess4-11/+30
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess1-4/+4
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack2-9/+55
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün1-0/+11
2026-08-11apparmor: constify aa_label parameters on read-only query helpersJohn Johansen2-20/+23
2026-08-11apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen8-32/+37
2026-08-11apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen10-23/+25
2026-08-11apparmor: constify aa_perms parameters that are read-onlyJohn Johansen6-10/+11
2026-08-11apparmor: drop use of _confined variant for iterationJohn Johansen1-7/+7
2026-08-11apparmor: refactory mount to use check_permsJohn Johansen4-168/+144
2026-08-11apparmor: fix auditing of mount binary dataJohn Johansen1-2/+2
2026-08-11apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen4-10/+22
2026-08-11apparmor: mark static tables and structs as read onlyJohn Johansen8-20/+22
2026-08-11apparmor: fix error debug output in fn_label_buildJohn Johansen1-2/+2
2026-08-11apparmor: make table entry count last enum for static tablesJohn Johansen3-5/+5
2026-08-11apparmor: fix race condition in label replacementJohn Johansen1-12/+48
2026-08-11apparmor: refactor xattr attachment, to take the file pathJohn Johansen1-15/+19
2026-08-11apparmor: fix unconfined user namespace restriction forced stackJohn Johansen1-26/+54
2026-08-11apparmor: reserve mediation class for packet mediationJohn Johansen2-1/+2
2026-08-11apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen1-36/+33
2026-08-11apparmor: move netfilter functions next to the LSM network operationsJohn Johansen1-44/+46
2026-08-11apparmor: refactor network socket mediation to support compatibilityJohn Johansen1-8/+10
2026-08-11apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen2-13/+497