summaryrefslogtreecommitdiff
path: root/security/landlock/fs.c
AgeCommit message (Expand)AuthorFilesLines
7 dayslandlock: Fix use-after-free of the source's parent directoryNorbert Szetei1-6/+12
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün1-46/+103
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün1-0/+19
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün1-13/+14
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün1-13/+12
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack1-9/+32
2026-06-19Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-70/+101
2026-06-14landlock: Suppress logging when quiet flag is presentTingmao Wang1-0/+6
2026-06-14landlock: Add API support and docs for the quiet flagsTingmao Wang1-2/+2
2026-06-14landlock: Add a place for flags to layer rulesTingmao Wang1-68/+79
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas1-0/+14
2026-05-11fs: add icount_read_once() and stop open-coding ->i_count loadsMateusz Guzik1-1/+1
2026-04-07landlock: Clarify BUILD_BUG_ON check in scoping logicGünther Noack1-3/+6
2026-04-07landlock: Control pathname UNIX domain socket resolution by pathGünther Noack1-1/+129
2026-04-07landlock: Use mem_is_zero() in is_layer_masks_allowed()Günther Noack1-1/+1
2026-04-07landlock: Improve kernel-doc "Return:" section consistencyMickaël Salaün1-15/+11
2026-04-07landlock: Add missing kernel-doc "Return:" sectionsMickaël Salaün1-1/+1
2026-02-10landlock: Transpose the layer masks data structureGünther Noack1-191/+157
2026-02-10landlock: Add access_mask_subset() helperGünther Noack1-2/+2
2025-12-29landlock: Optimize stack usage when !CONFIG_AUDITMickaël Salaün1-2/+9
2025-12-26landlock: Fix formattingMickaël Salaün1-1/+2
2025-12-06Merge tag 'landlock-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-14/+32
2025-12-01Merge tag 'vfs-6.19-rc1.inode' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2025-11-28landlock: Improve variable scopeMickaël Salaün1-2/+3
2025-11-28landlock: Fix handling of disconnected directoriesMickaël Salaün1-12/+28
2025-11-26landlock: Minor comments improvementsTingmao Wang1-1/+2
2025-11-12landlock: fix splats from iput() after it started calling might_sleep()Mateusz Guzik1-4/+3
2025-10-20Coccinelle-based conversion to use ->i_state accessorsMateusz Guzik1-1/+1
2025-09-01fs: add an icount_read helperJosef Bacik1-1/+1
2025-07-19landlock: Fix cosmetic changeMickaël Salaün1-0/+1
2025-03-28Merge tag 'landlock-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-72/+249
2025-03-26landlock: Log scoped denialsMickaël Salaün1-2/+6
2025-03-26landlock: Log truncate and IOCTL denialsMickaël Salaün1-0/+34
2025-03-26landlock: Factor out IOCTL hooksMickaël Salaün1-21/+11
2025-03-26landlock: Log file-related denialsMickaël Salaün1-9/+53
2025-03-26landlock: Log mount-related denialsMickaël Salaün1-11/+70
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün1-6/+14
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün1-29/+40
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün1-6/+33
2025-03-08vfs: Remove invalidate_inodes()Jan Kara1-1/+1
2025-01-17landlock: Optimize file path walks and prepare for audit supportMickaël Salaün1-17/+27
2025-01-17landlock: Align partial refer access checks with final onesMickaël Salaün1-1/+13
2025-01-17landlock: Simplify initially denied access rightsMickaël Salaün1-9/+1
2025-01-17landlock: Move access typesMickaël Salaün1-1/+2
2025-01-17landlock: Factor out check_access_path()Mickaël Salaün1-21/+11
2025-01-14landlock: Constify get_mode_access()Mickaël Salaün1-1/+1
2025-01-14landlock: Handle weird filesMickaël Salaün1-6/+5
2024-11-09landlock: Refactor filesystem access mask managementMickaël Salaün1-23/+8
2024-09-16landlock: Add signal scopingTahera Fahimi1-0/+25
2024-08-12lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore1-3/+6