summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2024-10-18ipe: fallback to platform keyring also if key in trusted keyring is rejectedLuca Boccassi1-1/+1
2024-10-17ipe: allow secondary and platform keyrings to install/update policiesLuca Boccassi2-1/+32
2024-10-17ipe: also reject policy updates with the same versionLuca Boccassi1-1/+1
2024-10-17ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower ...Luca Boccassi1-1/+1
2024-10-09bcachefs: do not use PF_MEMALLOC_NORECLAIMMichal Hocko1-4/+6
2024-10-05Merge tag 'hardening-v6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+2
2024-10-05Merge tag 'lsm-pr-20241004' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds11-577/+118
2024-10-04tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM supportPaul Moore11-577/+118
2024-10-03move asm/unaligned.h to linux/unaligned.hAl Viro2-2/+2
2024-09-28hardening: Adjust dependencies in selection of MODVERSIONSNathan Chancellor1-2/+2
2024-09-27Merge tag 'tomoyo-pr-20240927' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds12-121/+583
2024-09-25tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa1-3/+6
2024-09-25Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2-2/+2
2024-09-24Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds8-9/+269
2024-09-24Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds3-11/+5
2024-09-24tomoyo: allow building as a loadable LSM moduleTetsuo Handa8-4/+467
2024-09-23ipe: Add missing terminator to list of unit testsGuenter Roeck1-0/+1
2024-09-23Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds3-15/+15
2024-09-23tomoyo: preparation step for building as a loadable LSM moduleTetsuo Handa6-116/+112
2024-09-21Merge tag 'bpf-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds1-1/+0
2024-09-19selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore2-11/+4
2024-09-19Merge tag 'Smack-for-6.12' of https://github.com/cschaufler/smack-nextLinus Torvalds2-3/+3
2024-09-17landlock: Add signal scopingTahera Fahimi5-2/+90
2024-09-17landlock: Add abstract UNIX socket scopingTahera Fahimi5-8/+180
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds41-409/+4127
2024-09-16Merge tag 'selinux-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds8-76/+68
2024-09-16Merge tag 'vfs-6.12.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-0/+32
2024-09-16Merge tag 'vfs-6.12.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds2-2/+2
2024-09-13security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko2-2/+2
2024-09-11bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0Song Liu1-1/+0
2024-09-09security: Update file_set_fowner documentationMickaël Salaün1-0/+2
2024-09-04selinux: fix style problems in security/selinux/include/audit.hPaul Moore1-23/+23
2024-09-03smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye1-1/+1
2024-09-01Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/...Linus Torvalds1-3/+3
2024-08-30Merge tag 'lsm-pr-20240830' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-4/+4
2024-08-30proc: add config & param to block forcing mem writesAdrian Ratiu1-0/+32
2024-08-29lsm: Use IS_ERR_OR_NULL() helper functionHongbo Li1-1/+1
2024-08-29selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew2-4/+4
2024-08-28selinux: simplify avc_xperms_audit_required()Zhen Lei1-2/+2
2024-08-28selinux: mark both IPv4 and IPv6 accepted connection sockets as labeledGuido Trentalancia1-1/+1
2024-08-28file: reclaim 24 bytes from f_ownerChristian Brauner2-2/+2
2024-08-28selinux: replace kmem_cache_create() with KMEM_CACHE()Eric Suen4-23/+8
2024-08-27lsm: remove LSM_COUNT and LSM_CONFIG_COUNTTetsuo Handa1-33/+4
2024-08-27selinux: annotate false positive data race to avoid KCSAN warningsStephen Smalley1-1/+6
2024-08-26apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck1-3/+3
2024-08-22security: smack: Fix indentation in smack_netfilter.cGiSeong Ji1-2/+2
2024-08-22ipe: Remove duplicated include in ipe.cYang Li1-1/+0
2024-08-22lsm: replace indirect LSM hook calls with static callsKP Singh1-64/+155
2024-08-20ipe: kunit test for parserDeven Bowers3-0/+316
2024-08-20scripts: add boot policy generation programDeven Bowers5-0/+43