summaryrefslogtreecommitdiff
path: root/security/landlock
AgeCommit message (Expand)AuthorFilesLines
2023-10-26landlock: Support network rules with TCP bind and connectKonstantin Meskhidze9-24/+414
2023-10-26landlock: Refactor landlock_add_rule() syscallKonstantin Meskhidze1-44/+45
2023-10-26landlock: Refactor layer helpersKonstantin Meskhidze3-42/+66
2023-10-26landlock: Move and rename layer helpersKonstantin Meskhidze3-115/+129
2023-10-26landlock: Refactor merge/inherit_ruleset helpersKonstantin Meskhidze1-42/+74
2023-10-26landlock: Refactor landlock_find_rule/insert_rule helpersKonstantin Meskhidze3-54/+165
2023-10-26landlock: Allow FS topology changes for domains without such rule typeMickaël Salaün3-40/+60
2023-10-26landlock: Make ruleset's access masks more genericKonstantin Meskhidze5-20/+50
2023-08-18landlock: Annotate struct landlock_rule with __counted_byKees Cook1-1/+1
2023-06-12hostfs: Fix ephemeral inodesMickaël Salaün1-1/+1
2023-03-20selinux: remove the runtime disable functionalityPaul Moore4-5/+5
2022-10-19landlock: Support file truncationGünther Noack5-7/+126
2022-10-19landlock: Document init_layer_masks() helperGünther Noack1-0/+13
2022-10-19landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed()Günther Noack1-45/+44
2022-09-29landlock: Fix documentation styleMickaël Salaün1-20/+20
2022-09-29landlock: Slightly improve documentation and fix spellingMickaël Salaün1-1/+1
2022-09-02landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün1-23/+25
2022-05-23landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün3-76/+528
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün1-1/+10
2022-05-23landlock: Move filesystem helpers and add a new oneMickaël Salaün1-41/+46
2022-05-23landlock: Fix same-layer rule unionsMickaël Salaün2-26/+54
2022-05-23landlock: Create find_rule() from unmask_layers()Mickaël Salaün1-13/+28
2022-05-23landlock: Reduce the maximum number of layers to 16Mickaël Salaün3-11/+12
2022-05-23landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün5-15/+30
2022-05-23landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün1-4/+4
2022-05-23landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün1-9/+13
2022-05-23landlock: Fix landlock_add_rule(2) documentationMickaël Salaün1-4/+3
2022-05-09landlock: Format with clang-formatMickaël Salaün10-136/+142
2022-05-09landlock: Add clang-format exceptionsMickaël Salaün2-0/+6
2022-02-04landlock: Use square brackets around "landlock-ruleset"Christian Brauner1-1/+1
2021-04-22landlock: Enable user space to infer supported featuresMickaël Salaün1-4/+13
2021-04-22landlock: Add syscall implementationsMickaël Salaün2-1/+443
2021-04-22landlock: Support filesystem access-controlMickaël Salaün8-2/+781
2021-04-22landlock: Add ptrace restrictionsMickaël Salaün4-1/+137
2021-04-22landlock: Set up the security framework and manage credentialsMickaël Salaün6-1/+173
2021-04-22landlock: Add ruleset and domain managementMickaël Salaün4-1/+652
2021-04-22landlock: Add object managementMickaël Salaün4-0/+182