summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'lsm-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-10-0413-16/+172
|\
| * lockdown: ratelimit denial messagesNathan Lynch2022-09-141-1/+1
| * userfaultfd: open userfaultfds with O_RDONLYOndrej Mosnacek2022-08-301-2/+2
| * selinux: Implement userns_create hookFrederick Lawler2022-08-162-0/+11
| * selftests/bpf: Add tests verifying bpf lsm userns_create hookFrederick Lawler2022-08-162-0/+135
| * bpf-lsm: Make bpf_lsm_userns_create() sleepableFrederick Lawler2022-08-161-0/+1
| * security, lsm: Introduce security_create_user_ns()Frederick Lawler2022-08-165-0/+21
| * lsm: clean up redundant NULL pointer checkXiu Jianfeng2022-08-161-13/+1
* | Merge tag 'selinux-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2022-10-047-56/+48
|\ \
| * | selinux: remove runtime disable message in the install_policy.sh scriptPaul Moore2022-09-201-2/+1
| * | selinux: use "grep -E" instead of "egrep"Greg Kroah-Hartman2022-09-201-1/+1
| * | selinux: remove the unneeded result variableXu Panda2022-09-141-15/+9
| * | selinux: declare read-only parameters constChristian Göttsche2022-08-304-29/+31
| * | selinux: use int arrays for boolean valuesChristian Göttsche2022-08-301-5/+5
| * | selinux: remove an unneeded variable in sel_make_class_dir_entries()ye xingchen2022-08-301-4/+1
| |/
* | Merge tag 'integrity-v6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-10-042-5/+9
|\ \
| * | efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain2022-09-301-1/+1
| * | ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar2022-08-231-4/+8
* | | Merge tag 'Smack-for-6.1' of https://github.com/cschaufler/smack-nextLinus Torvalds2022-10-042-12/+17
|\ \ \
| * | | smack: cleanup obsolete mount option flagsXiu Jianfeng2022-09-271-9/+0
| * | | smack: lsm: remove the unneeded result variableXu Panda2022-09-271-3/+1
| * | | SMACK: Add sk_clone_security LSM hookLontke Michael2022-09-271-0/+16
* | | | Merge tag 'hardening-v6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2022-10-0433-240/+815
|\ \ \ \
| * | | | Makefile.extrawarn: Move -Wcast-function-type-strict to W=1Sami Tolvanen2022-10-011-0/+1
| * | | | hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook2022-09-302-6/+12
| * | | | sparc: Unbreak the buildBart Van Assche2022-09-305-39/+39
| * | | | x86/paravirt: add extra clobbers with ZERO_CALL_USED_REGS enabledBill Wendling2022-09-261-1/+10
| * | | | x86/paravirt: clean up typos and grammarosBill Wendling2022-09-261-8/+8
| * | | | fortify: Convert to struct vs member helpersKees Cook2022-09-261-33/+35
| * | | | fortify: Explicitly check bounds are compile-time constantsKees Cook2022-09-261-19/+30
| * | | | x86/entry: Work around Clang __bdos() bugKees Cook2022-09-261-1/+2
| * | | | ARM: decompressor: Include .data.rel.ro.localKees Cook2022-09-221-0/+2
| * | | | fortify: Adjust KUnit test for modular buildKees Cook2022-09-141-2/+1
| * | | | sh: machvec: Use char[] for section boundariesKees Cook2022-09-132-6/+6
| * | | | kunit/memcpy: Avoid pathological compile-time string sizeKees Cook2022-09-081-1/+1
| * | | | lib: Improve the is_signed_type() kunit testBart Van Assche2022-09-081-1/+6
| * | | | LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke2022-09-082-2/+21
| * | | | dm: verity-loadpin: Only trust verity targets with enforcementMatthias Kaehlcke2022-09-083-0/+25
| * | | | LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke2022-09-081-1/+1
| * | | | um: Enable FORTIFY_SOURCEKees Cook2022-09-082-0/+2
| * | | | lkdtm: Update tests for memcpy() run-time warningsKees Cook2022-09-082-16/+88
| * | | | fortify: Add run-time WARN for cross-field memcpy()Kees Cook2022-09-081-3/+67
| * | | | fortify: Use SIZE_MAX instead of (size_t)-1Kees Cook2022-09-081-14/+15
| * | | | fortify: Add KUnit test for FORTIFY_SOURCE internalsKees Cook2022-09-084-0/+88
| * | | | fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCALKees Cook2022-09-081-1/+2
| * | | | string: Introduce strtomem() and strtomem_pad()Kees Cook2022-09-084-8/+137
| * | | | overflow: Split up kunit tests for smaller stack framesKees Cook2022-09-081-27/+51
| * | | | overflow: Allow mixed type argumentsKees Cook2022-09-082-60/+113
| * | | | overflow, tracing: Define the is_signed_type() macro onceBart Van Assche2022-08-313-3/+6
| * | | | testing/selftests: Add tests for the is_signed_type() macroBart Van Assche2022-08-313-0/+61
| | |/ / | |/| |