summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2023-11-28KEYS: trusted: Rollback init_trusted() consistentlyJarkko Sakkinen
2023-11-28ima: detect changes to the backing overlay fileMimi Zohar
2023-11-28ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein
2023-10-19KEYS: trusted: Remove redundant static calls usageSumit Garg
2023-10-19KEYS: trusted: allow use of kernel RNG for key materialAhmad Fatoum
2023-10-10ima: rework CONFIG_IMA dependency blockArnd Bergmann
2023-10-10ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko
2023-10-06Smack:- Use overlay inode label in smack_inode_copy_up()Vishal Goel
2023-10-06smack: Retrieve transmuting information in smack_inode_getsecurity()Roberto Sassu
2023-10-06smack: Record transmuting in smk_transmutedRoberto Sassu
2023-09-19smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter
2023-09-19ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain
2023-09-19of: kexec: Mark ima_{free,stable}_kexec_buffer() as __initNathan Chancellor
2023-09-19security: keys: perform capable check only on privileged operationsChristian Göttsche
2023-08-30selinux: set next pointer before attaching to listChristian Göttsche
2023-07-27security: keys: Modify mismatched function nameJiapeng Chong
2023-07-27keys: Fix linking a duplicate key to a keyring's assoc_arrayPetr Pavlu
2023-07-23integrity: Fix possible multiple allocation in integrity_inode_get()Tianjia Zhang
2023-07-23apparmor: fix missing error check for rhashtable_insert_fastDanila Chernetsov
2023-07-23ima: Fix build warningsRoberto Sassu
2023-07-23evm: Fix build warningsRoberto Sassu
2023-07-23evm: Complete description of evm_inode_setattr()Roberto Sassu
2023-06-09selinux: don't use make's grouped targets feature yetPaul Moore
2023-05-11selinux: ensure av_permissions.h is built when neededPaul Moore
2023-05-11selinux: fix Makefile dependencies of flask.hOndrej Mosnacek
2023-05-11IMA: allow/fix UML buildsRandy Dunlap
2023-03-30keys: Do not cache key in task struct if key is requested from kernel threadDavid Howells
2023-03-10ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu
2023-02-01tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada
2023-01-12device_cgroup: Roll back to original exceptions after copy failureWang Weiyang
2023-01-12ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu
2023-01-12efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg
2022-12-31security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor
2022-12-31ima: Simplify ima_lsm_copy_ruleGUO Zihua
2022-12-31LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook
2022-12-31apparmor: Fix memleak in alloc_ns()Xiu Jianfeng
2022-12-31apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng
2022-12-31apparmor: Fix abi check to include v8 abiJohn Johansen
2022-12-31apparmor: fix lockdep warning when removing a namespaceJohn Johansen
2022-12-31apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui
2022-12-31ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng
2022-12-31integrity: Fix memory leakage in keyring allocation error pathGUO Zihua
2022-12-31ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua
2022-11-10capabilities: fix potential memleak on error path from vfs_getxattr_alloc()Gaosheng Cui
2022-10-29selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi
2022-10-26ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar
2022-10-26hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook
2022-10-26hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZEROKees Cook
2022-10-15efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain
2022-08-25apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng