summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'fs.acl.rework.prep.v6.1' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds2022-10-041-3/+14
|\
| * acl: move idmapping handling into posix_acl_xattr_set()Christian Brauner2022-08-311-3/+14
* | Merge tag 'lsm-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-10-045-14/+18
|\ \
| * | lockdown: ratelimit denial messagesNathan Lynch2022-09-141-1/+1
| * | selinux: Implement userns_create hookFrederick Lawler2022-08-162-0/+11
| * | security, lsm: Introduce security_create_user_ns()Frederick Lawler2022-08-161-0/+5
| * | lsm: clean up redundant NULL pointer checkXiu Jianfeng2022-08-161-13/+1
* | | Merge tag 'selinux-pr-20221003' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2022-10-046-53/+46
|\ \ \
| * | | selinux: remove the unneeded result variableXu Panda2022-09-141-15/+9
| * | | selinux: declare read-only parameters constChristian Göttsche2022-08-304-29/+31
| * | | selinux: use int arrays for boolean valuesChristian Göttsche2022-08-301-5/+5
| * | | selinux: remove an unneeded variable in sel_make_class_dir_entries()ye xingchen2022-08-301-4/+1
| |/ /
* | | Merge tag 'integrity-v6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds2022-10-042-5/+9
|\ \ \
| * | | efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain2022-09-301-1/+1
| * | | ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar2022-08-231-4/+8
| | |/ | |/|
* | | Merge tag 'Smack-for-6.1' of https://github.com/cschaufler/smack-nextLinus Torvalds2022-10-042-12/+17
|\ \ \
| * | | smack: cleanup obsolete mount option flagsXiu Jianfeng2022-09-271-9/+0
| * | | smack: lsm: remove the unneeded result variableXu Panda2022-09-271-3/+1
| * | | SMACK: Add sk_clone_security LSM hookLontke Michael2022-09-271-0/+16
| |/ /
* | | Merge tag 'hardening-v6.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2022-10-043-6/+31
|\ \ \
| * | | hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook2022-09-301-4/+10
| * | | LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke2022-09-082-2/+21
| * | | LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke2022-09-081-1/+1
| |/ /
* | | Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2022-09-031-23/+25
|\ \ \
| * | | landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-09-021-23/+25
* | | | Merge tag 'lsm-pr-20220829' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-08-314-1/+61
|\ \ \ \ | |_|/ / |/| | |
| * | | Smack: Provide read control for io_uring_cmdCasey Schaufler2022-08-261-0/+32
| * | | selinux: implement the security_uring_cmd() LSM hookPaul Moore2022-08-262-1/+25
| * | | lsm,io_uring: add LSM hooks for the new uring_cmd file opLuis Chamberlain2022-08-261-0/+4
| | |/ | |/|
* | | Merge tag 'hardening-v6.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2022-08-191-4/+2
|\ \ \ | |/ / |/| |
| * | LoadPin: Return EFAULT on copy_from_user() failuresKees Cook2022-08-161-4/+2
* | | Merge tag 'apparmor-pr-2022-08-08' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-08-1029-338/+486
|\ \ \
| * | | apparmor: correct config reference to intended oneLukas Bulwahn2022-07-201-1/+1
| * | | apparmor: move ptrace mediation to more logical task.{h,c}John Johansen2022-07-195-128/+133
| * | | apparmor: extend policydb permission set by making use of the xbitsJohn Johansen2022-07-194-5/+25
| * | | apparmor: allow label to carry debug flagsJohn Johansen2022-07-196-8/+20
| * | | apparmor: fix overlapping attachment computationJohn Johansen2022-07-192-2/+2
| * | | apparmor: fix setting unconfined mode on a loaded profileJohn Johansen2022-07-191-5/+7
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-191-6/+6
| * | | apparmor: Mark alloc_unconfined() as staticSouptick Joarder (HPE)2022-07-191-1/+1
| * | | apparmor: disable showing the mode as part of a secid to secctxJohn Johansen2022-07-143-6/+20
| * | | apparmor: Convert secid mapping to XArrays instead of IDRMatthew Wilcox2022-07-143-32/+13
| * | | apparmor: add a kernel label to use on kernel objectsJohn Johansen2022-07-144-13/+37
| * | | apparmor: test: Remove some casts which are no-longer requiredDavid Gow2022-07-101-6/+6
| * | | apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng2022-07-101-1/+1
| * | | apparmor: fix reference count leak in aa_pivotroot()Xin Xiong2022-07-101-0/+1
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-101-2/+1
| * | | apparmor: Fix undefined reference to `zlib_deflate_workspacesize'John Johansen2022-07-102-31/+40
| * | | apparmor: fix aa_label_asxprint return checkTom Rix2022-07-101-3/+3
| * | | apparmor: Fix some kernel-doc commentsYang Li2022-07-101-4/+4