summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2024-10-10tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa
2024-10-10proc: add config & param to block forcing mem writesAdrian Ratiu
2024-10-04bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0Song Liu
2024-10-04lsm: infrastructure management of the sock securityCasey Schaufler
2024-10-04lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore
2024-10-04smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye
2024-09-12smack: unix sockets: fix accept()ed socket labelKonstantin Andreev
2024-09-08smack: tcp: ipv4, fix incorrect labelingCasey Schaufler
2024-09-08apparmor: fix possible NULL pointer dereferenceLeesoo Ahn
2024-09-04apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck
2024-09-04selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew
2024-08-29selinux: add the processing of the failure of avc_add_xperms_decision()Zhen Lei
2024-08-29selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei
2024-08-29KEYS: trusted: dcp: fix leak of blob encryption keyDavid Gstir
2024-08-29KEYS: trusted: fix DCP blob payload length assignmentDavid Gstir
2024-08-29selinux: revert our use of vma_is_initial_heap()Paul Moore
2024-08-03selinux,smack: remove the capability checks in the removexattr hooksPaul Moore
2024-08-03apparmor: unpack transition table if dfa is not presentGeorgia Garcia
2024-08-03apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang
2024-08-03task_work: s/task_work_cancel()/task_work_cancel_func()/Frederic Weisbecker
2024-08-03apparmor: use kvfree_sensitive to free data->dataFedor Pchelkin
2024-08-03lsm: fixup the inode xattr capability handlingPaul Moore
2024-08-03landlock: Don't lose track of restrictions on cred_transferJann Horn
2024-07-05Merge tag 'integrity-v6.10-fix' of ssh://ra.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2024-06-17Merge tag 'lsm-pr-20240617' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-06-17Merge tag 'mm-hotfixes-stable-2024-06-17-11-43' of git://git.kernel.org/pub/s...Linus Torvalds
2024-06-17Merge tag 'hardening-v6.10-rc5' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2024-06-15Revert "mm: init_mlocked_on_free_v3"David Hildenbrand
2024-06-13ima: Avoid blocking in RCU read-side critical sectionGUO Zihua
2024-06-06yama: document function parameterChristian Göttsche
2024-06-03ima: fix wrong zero-assignment during securityfs dentry removeEnrico Bravi
2024-06-03tomoyo: update project linksTetsuo Handa
2024-05-31landlock: Fix d_parent walkMickaël Salaün
2024-05-24Merge tag 'hardening-v6.10-rc1-fixes' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds
2024-05-21KEYS: trusted: Do not use WARN when encode failsJarkko Sakkinen
2024-05-21KEYS: trusted: Fix memory leak in tpm2_key_encode()Jarkko Sakkinen
2024-05-19Merge tag 'mm-stable-2024-05-17-19-19' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds
2024-05-18loadpin: Prevent SECURITY_LOADPIN_ENFORCE=y without module decompressionStephen Boyd
2024-05-18Merge tag 'kbuild-v6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/mas...Linus Torvalds
2024-05-18Merge tag 'landlock-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2024-05-15Merge tag 'integrity-v6.10' of ssh://ra.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
2024-05-15Merge tag 'selinux-pr-20240513' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2024-05-15Merge tag 'lsm-pr-20240513' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-05-14Merge tag 'net-next-6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds
2024-05-13netlabel: fix RCU annotation for IPv4 options on socket creationDavide Caratti
2024-05-13Merge tag 'keys-next-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2024-05-13Merge tag 'tpmdd-next-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2024-05-13landlock: Add IOCTL access right for character and block devicesGünther Noack
2024-05-10kbuild: use $(src) instead of $(srctree)/$(src) for source directoryMasahiro Yamada
2024-05-09KEYS: trusted: Add session encryption protection to the seal/unseal pathJames Bottomley