summaryrefslogtreecommitdiffstats
path: root/security/landlock (follow)
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds13 days1-31/+14
|\
| * fdget(), trivial conversionsAl Viro2024-11-031-18/+8
| * fdget_raw() users: switch to CLASS(fd_raw)Al Viro2024-11-031-13/+6
* | landlock: Optimize scope enforcementMickaël Salaün2024-11-091-3/+15
* | landlock: Refactor network access mask managementMickaël Salaün2024-11-091-22/+6
* | landlock: Refactor filesystem access mask managementMickaël Salaün2024-11-093-32/+75
|/
* Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2024-09-248-9/+269
|\
| * landlock: Add signal scopingTahera Fahimi2024-09-165-2/+90
| * landlock: Add abstract UNIX socket scopingTahera Fahimi2024-09-165-8/+180
* | Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2024-09-231-11/+11
|\ \ | |/ |/|
| * introduce fd_file(), convert all accessors to it.Al Viro2024-08-131-11/+11
* | lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore2024-08-121-3/+6
|/
* Merge tag 'landlock-6.11-rc1-houdini-fix' of git://git.kernel.org/pub/scm/lin...Linus Torvalds2024-07-271-2/+9
|\
| * landlock: Don't lose track of restrictions on cred_transferJann Horn2024-07-241-2/+9
* | landlock: Various documentation improvementsGünther Noack2024-07-181-8/+9
* | landlock: Use bit-fields for storing handled layer access masksGünther Noack2024-07-083-21/+9
|/
* landlock: Fix d_parent walkMickaël Salaün2024-05-311-2/+11
* landlock: Add IOCTL access right for character and block devicesGünther Noack2024-05-133-5/+224
* landlock: Use f_cred in security_file_open() hookMickaël Salaün2024-03-081-7/+11
* landlock: Rename "ptrace" files to "task"Mickaël Salaün2024-03-084-9/+9
* landlock: Simplify current_check_access_socket()Mickaël Salaün2024-03-081-4/+3
* landlock: Warn once if a Landlock action is requested while disabledMickaël Salaün2024-03-071-3/+15
* landlock: Add support for KUnit testsMickaël Salaün2024-02-274-0/+255
* landlock: Fix asymmetric private inodes referringMickaël Salaün2024-02-261-2/+2
* Merge tag 'landlock-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2024-01-092-16/+17
|\
| * landlock: Optimize the number of calls to get_access_mask slightlyGünther Noack2024-01-031-2/+3
| * landlock: Remove remaining "inline" modifiers in .c files [v6.6]Günther Noack2024-01-031-1/+1
| * landlock: Remove remaining "inline" modifiers in .c files [v6.1]Günther Noack2024-01-031-9/+9
| * landlock: Remove remaining "inline" modifiers in .c files [v5.15]Günther Noack2024-01-032-4/+4
* | LSM: Identify modules by more than nameCasey Schaufler2023-11-136-4/+11
|/
* landlock: Support network rules with TCP bind and connectKonstantin Meskhidze2023-10-269-24/+414
* landlock: Refactor landlock_add_rule() syscallKonstantin Meskhidze2023-10-261-44/+45
* landlock: Refactor layer helpersKonstantin Meskhidze2023-10-263-42/+66
* landlock: Move and rename layer helpersKonstantin Meskhidze2023-10-263-115/+129
* landlock: Refactor merge/inherit_ruleset helpersKonstantin Meskhidze2023-10-261-42/+74
* landlock: Refactor landlock_find_rule/insert_rule helpersKonstantin Meskhidze2023-10-263-54/+165
* landlock: Allow FS topology changes for domains without such rule typeMickaël Salaün2023-10-263-40/+60
* landlock: Make ruleset's access masks more genericKonstantin Meskhidze2023-10-265-20/+50
* landlock: Annotate struct landlock_rule with __counted_byKees Cook2023-08-181-1/+1
* hostfs: Fix ephemeral inodesMickaël Salaün2023-06-121-1/+1
* selinux: remove the runtime disable functionalityPaul Moore2023-03-204-5/+5
* landlock: Support file truncationGünther Noack2022-10-195-7/+126
* landlock: Document init_layer_masks() helperGünther Noack2022-10-191-0/+13
* landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed()Günther Noack2022-10-191-45/+44
* landlock: Fix documentation styleMickaël Salaün2022-09-291-20/+20
* landlock: Slightly improve documentation and fix spellingMickaël Salaün2022-09-291-1/+1
* landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-09-021-23/+25
* landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-05-233-76/+528
* LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün2022-05-231-1/+10
* landlock: Move filesystem helpers and add a new oneMickaël Salaün2022-05-231-41/+46