summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'safesetid-5.14' of git://github.com/micah-morton/linuxLinus Torvalds2021-07-012-2/+2
|\
| * LSM: SafeSetID: Mark safesetid_initialized as __initdataAustin Kim2021-06-102-2/+2
* | Merge tag 'Smack-for-5.14' of git://github.com/cschaufler/smack-nextLinus Torvalds2021-07-012-5/+9
|\ \
| * | Smack: fix doc warningChenXiaoSong2021-06-081-1/+4
| * | Revert "Smack: Handle io_uring kernel thread privileges"Jens Axboe2021-05-181-3/+2
| * | smackfs: restrict bytes count in smk_set_cipso()Tetsuo Handa2021-05-101-0/+2
| * | security/smack/: fix misspellings using codespell toolXiong Zhenwu2021-05-101-1/+1
* | | Merge tag 'audit-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2021-07-011-1/+0
|\ \ \
| * | | audit: remove unnecessary 'ret' initializationAustin Kim2021-06-111-1/+0
| |/ /
* | | Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2021-06-3011-109/+81
|\ \ \
| * | | selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit()Al Viro2021-06-113-31/+5
| * | | selinux: slow_avc_audit has become non-blockingAl Viro2021-06-113-35/+10
| * | | selinux: Fix kernel-docYang Li2021-06-111-1/+22
| * | | selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim2021-06-111-6/+7
| * | | lsm_audit,selinux: pass IB device name by referenceOndrej Mosnacek2021-05-141-1/+1
| * | | selinux: Remove redundant assignment to rcJiapeng Chong2021-05-112-5/+0
| * | | selinux: Corrected comment to match kernel-doc commentSouptick Joarder2021-05-111-1/+1
| * | | selinux: delete selinux_xfrm_policy_lookup() useless argumentZhongjun Tan2021-05-113-4/+4
| * | | selinux: constify some avtab function argumentsOndrej Mosnacek2021-05-113-21/+26
| * | | selinux: simplify duplicate_policydb_cond_list() by using kmemdup()Ondrej Mosnacek2021-05-111-5/+6
| |/ /
* | | Merge tag 'integrity-v5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2021-06-2918-75/+730
|\ \ \
| * | | evm: Check xattr size discrepancy between kernel and userRoberto Sassu2021-06-211-1/+7
| * | | evm: output EVM digest calculation infoMimi Zohar2021-06-202-0/+47
| * | | IMA: support for duplicate measurement recordsTushar Sugandhi2021-06-112-2/+10
| * | | ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer'Lakshmi Ramasubramanian2021-06-111-0/+1
| * | | ima: differentiate between EVM failures in the audit logMimi Zohar2021-06-101-1/+2
| * | | ima: Fix fall-through warning for ClangGustavo A. R. Silva2021-06-091-0/+1
| * | | ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect()Roberto Sassu2021-06-081-1/+1
| * | | ima: Include header defining ima_post_key_create_or_update()Roberto Sassu2021-06-081-0/+1
| * | | ima/evm: Fix type mismatchRoberto Sassu2021-06-084-11/+12
| * | | ima: Set correct casting typesRoberto Sassu2021-06-082-9/+10
| * | | evm: Don't return an error in evm_write_xattrs() if audit is not enabledRoberto Sassu2021-06-031-1/+1
| * | | ima: Define new template evm-sigRoberto Sassu2021-06-031-1/+4
| * | | ima: Define new template fields xattrnames, xattrlengths and xattrvaluesRoberto Sassu2021-06-034-0/+148
| * | | evm: Verify portable signatures against all protected xattrsRoberto Sassu2021-06-014-12/+68
| * | | ima: Define new template field imodeRoberto Sassu2021-06-013-0/+26
| * | | ima: Define new template fields iuid and igidRoberto Sassu2021-06-013-0/+53
| * | | ima: Add ima_show_template_uint() template library functionRoberto Sassu2021-06-012-1/+39
| * | | ima: Don't remove security.ima if file must not be appraisedRoberto Sassu2021-06-011-2/+0
| * | | ima: Introduce template field evmsig and write to field sig as fallbackRoberto Sassu2021-06-013-1/+36
| * | | ima: Allow imasig requirement to be satisfied by EVM portable signaturesRoberto Sassu2021-06-011-7/+17
| * | | evm: Allow setxattr() and setattr() for unmodified metadataRoberto Sassu2021-06-011-1/+112
| * | | evm: Pass user namespace to set/remove xattr hooksRoberto Sassu2021-05-212-8/+13
| * | | evm: Allow xattr/attr operations for portable signaturesRoberto Sassu2021-05-212-6/+29
| * | | evm: Introduce evm_hmac_disabled() to safely ignore verification errorsRoberto Sassu2021-05-211-1/+38
| * | | evm: Introduce evm_revalidate_status()Roberto Sassu2021-05-212-9/+46
| * | | evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loadedRoberto Sassu2021-05-211-4/+4
| * | | evm: Load EVM key in ima_load_x509() to avoid appraisalRoberto Sassu2021-05-212-1/+7
| * | | evm: Execute evm_inode_init_security() only when an HMAC key is loadedRoberto Sassu2021-05-211-2/+3
| * | | evm: fix writing <securityfs>/evm overflowMimi Zohar2021-05-211-2/+3
| | |/ | |/|