summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2025-01-28treewide: const qualify ctl_tables where applicableJoel Granados3-3/+3
2025-01-27Merge tag 'mm-nonmm-stable-2025-01-24-23-16' of git://git.kernel.org/pub/scm/...Linus Torvalds1-3/+1
2025-01-24Merge tag 'fsnotify_hsm_for_v6.14-rc1' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds1-1/+2
2025-01-23Merge tag 'bpf-next-6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds1-1/+0
2025-01-23Merge tag 'caps-6.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/se...Linus Torvalds1-20/+41
2025-01-23Merge tag 'AT_EXECVE_CHECK-v6.14-rc1' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds4-8/+87
2025-01-23Merge tag 'hardening-v6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-0/+1
2025-01-23Merge tag 'tomoyo-pr-20250123' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds2-3/+40
2025-01-23Merge tag 'landlock-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds6-140/+169
2025-01-23Merge tag 'keys-next-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-4/+18
2025-01-22Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds21-165/+168
2025-01-22Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds10-99/+130
2025-01-22Merge tag 'Smack-for-6.14' of https://github.com/cschaufler/smack-nextLinus Torvalds4-40/+15
2025-01-22Merge tag 'integrity-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds5-3/+52
2025-01-21KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=yDavid Gstir1-4/+18
2025-01-20Merge tag 'vfs-6.14-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2025-01-17landlock: Optimize file path walks and prepare for audit supportMickaël Salaün1-17/+27
2025-01-17landlock: Align partial refer access checks with final onesMickaël Salaün1-1/+13
2025-01-17landlock: Simplify initially denied access rightsMickaël Salaün3-11/+19
2025-01-17landlock: Move access typesMickaël Salaün5-46/+68
2025-01-17landlock: Factor out check_access_path()Mickaël Salaün1-21/+11
2025-01-14landlock: Use scoped guards for ruleset in landlock_add_rule()Mickaël Salaün1-10/+4
2025-01-14landlock: Use scoped guards for rulesetMickaël Salaün3-29/+23
2025-01-14landlock: Constify get_mode_access()Mickaël Salaün1-1/+1
2025-01-14landlock: Handle weird filesMickaël Salaün1-6/+5
2025-01-13security: remove get_task_comm() and print task comm directlyYafang Shao1-3/+1
2025-01-09hardening: Document INIT_STACK_ALL_PATTERN behavior with GCCGeert Uytterhoeven1-0/+1
2025-01-08selinux: make more use of str_read() when loading the policyChristian Göttsche3-22/+12
2025-01-08selinux: avoid unnecessary indirection in struct level_datumChristian Göttsche3-17/+10
2025-01-08selinux: use known type instead of void pointerChristian Göttsche8-74/+77
2025-01-08selinux: rename comparison functions for clarityChristian Göttsche7-16/+16
2025-01-08selinux: rework match_ipv6_addrmask()Christian Göttsche1-7/+5
2025-01-08selinux: constify and reconcile function parameter namesChristian Göttsche4-6/+6
2025-01-08selinux: avoid using types indicating user space interactionChristian Göttsche2-2/+2
2025-01-08selinux: supply missing field initializersChristian Göttsche2-2/+2
2025-01-08Merge tag 'selinux-pr-20250107' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-38/+65
2025-01-06tomoyo: automatically use patterns for several situations in learning modeTetsuo Handa1-0/+30
2025-01-05lockdown: initialize local array before use to quiet static analysisTanya Agarwal1-1/+1
2025-01-05safesetid: check size of policy writesLeo Stone1-0/+3
2025-01-05lsm: rename variable to avoid shadowingChristian Göttsche1-2/+2
2025-01-05lsm: constify function parametersChristian Göttsche1-2/+2
2025-01-05security: remove redundant assignment to return variableColin Ian King1-3/+1
2025-01-05selinux: match extended permissions to their base permissionsThiébaud Weksteen5-38/+65
2025-01-04lsm: Only build lsm_audit.c if CONFIG_SECURITY and CONFIG_AUDIT are setMickaël Salaün2-1/+6
2025-01-03ima: ignore suffixed policy rule commentsMimi Zohar1-1/+1
2025-01-03ima: limit the builtin 'tcb' dont_measure tmpfs policy ruleMimi Zohar1-1/+2
2024-12-24ima: kexec: silence RCU list traversal warningBreno Leitao1-1/+2
2024-12-22vfs: support caching symlink lengths in inodesMateusz Guzik1-1/+1
2024-12-19ima: instantiate the bprm_creds_for_exec() hookMimi Zohar2-2/+54
2024-12-19security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebitsMickaël Salaün1-6/+23