summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* apparmor: make export of raw binary profile to userspace optionalJohn Johansen2022-07-107-52/+111
* apparmor: Update help description of policy hash for introspectionJohn Johansen2022-07-101-1/+4
* lsm: Fix kernel-docYang Li2022-07-101-5/+5
* apparmor: Fix kernel-docYang Li2022-07-103-4/+4
* apparmor: fix absroot causing audited secids to begin with =John Johansen2022-07-102-3/+9
* Merge tag 'pull-18-rc1-work.mount' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds2022-06-051-0/+1
|\
| * move mount-related externs from fs.h to mount.hAl Viro2022-05-201-0/+1
* | Merge tag 'linux-kselftest-kunit-5.19-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds2022-05-251-3/+3
|\ \
| * | apparmor: test: Use NULL macrosRicardo Ribalda2022-04-041-3/+3
| |/
* | Merge tag 'integrity-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2022-05-2416-52/+395
|\ \
| * | integrity: Fix sparse warnings in keyring_handlerStefan Berger2022-05-161-3/+3
| * | evm: Clean up some variablesStefan Berger2022-05-162-4/+1
| * | evm: Return INTEGRITY_PASS for enum integrity_status value '0'Stefan Berger2022-05-161-1/+1
| * | efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg2022-05-152-0/+41
| * | ima: support fs-verity file digest based version 3 signaturesMimi Zohar2022-05-055-16/+177
| * | ima: permit fsverity's file digests in the IMA measurement listMimi Zohar2022-05-055-8/+90
| * | ima: define a new template field named 'd-ngv2' and templatesMimi Zohar2022-05-053-11/+73
| * | ima: use IMA default hash algorithm for integrity violationsMimi Zohar2022-05-011-1/+1
| * | ima: fix 'd-ng' comments and documentationMimi Zohar2022-05-011-3/+5
| * | ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua2022-04-071-8/+6
| * | ima: remove redundant initialization of pointer 'file'.Colin Ian King2022-04-041-1/+1
| |/
* | Merge tag 'tpmdd-next-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds2022-05-246-43/+174
|\ \
| * | KEYS: trusted: Introduce support for NXP CAAM-based trusted keysAhmad Fatoum2022-05-234-2/+97
| * | KEYS: trusted: allow use of kernel RNG for key materialAhmad Fatoum2022-05-231-1/+34
| * | KEYS: trusted: allow use of TEE as backend without TCG_TPM supportAhmad Fatoum2022-05-234-17/+42
| * | certs: Factor out the blacklist hash creationMickaël Salaün2022-05-231-24/+2
* | | Merge tag 'Smack-for-5.19' of https://github.com/cschaufler/smack-nextLinus Torvalds2022-05-241-1/+0
|\ \ \
| * | | smack: Remove redundant assignmentsMichal Orzel2022-05-231-1/+0
| |/ /
* | | Merge tag 'landlock-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2022-05-2414-286/+848
|\ \ \
| * | | landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün2022-05-233-76/+528
| * | | LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün2022-05-234-15/+46
| * | | landlock: Move filesystem helpers and add a new oneMickaël Salaün2022-05-231-41/+46
| * | | landlock: Fix same-layer rule unionsMickaël Salaün2022-05-232-26/+54
| * | | landlock: Create find_rule() from unmask_layers()Mickaël Salaün2022-05-231-13/+28
| * | | landlock: Reduce the maximum number of layers to 16Mickaël Salaün2022-05-233-11/+12
| * | | landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün2022-05-235-15/+30
| * | | landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün2022-05-231-4/+4
| * | | landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün2022-05-231-9/+13
| * | | landlock: Fix landlock_add_rule(2) documentationMickaël Salaün2022-05-231-4/+3
| * | | landlock: Format with clang-formatMickaël Salaün2022-05-0910-136/+142
| * | | landlock: Add clang-format exceptionsMickaël Salaün2022-05-092-0/+6
| | |/ | |/|
* | | Merge tag 'selinux-pr-20220523' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2022-05-2421-81/+93
|\ \ \
| * | | security: declare member holding string literal constChristian Göttsche2022-05-131-1/+1
| * | | selinux: log anon inode class nameChristian Göttsche2022-05-032-2/+5
| * | | selinux: declare data arrays constChristian Göttsche2022-05-039-26/+24
| * | | selinux: fix indentation level of mls_ops blockChristian Göttsche2022-05-031-21/+21
| * | | selinux: include necessary headers in headersChristian Göttsche2022-05-036-1/+12
| * | | selinux: avoid extra semicolonChristian Göttsche2022-05-031-9/+9
| * | | selinux: update parameter documentationChristian Göttsche2022-05-032-1/+2
| * | | selinux: resolve checkpatch errorsChristian Göttsche2022-05-033-18/+9