summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2026-06-14landlock: Add API support and docs for the quiet flagsTingmao Wang8-27/+89
2026-06-14landlock: Add a place for flags to layer rulesTingmao Wang10-112/+176
2026-06-13apparmor: fix kernel-doc warningsRodrigo Zaiden2-2/+2
2026-06-13apparmor: replace get_zeroed_page() with kzalloc()Mike Rapoport (Microsoft)1-2/+3
2026-06-13security: apparmor: fix two spelling mistakesQingshuang Fu2-2/+2
2026-06-13apparmor: fix use-after-free in rawdata dedup loopRuslan Valiyev2-2/+25
2026-06-13apparmor: Fix inverted comparison in cache_hold_inc()Eduardo Vasconcelos1-1/+1
2026-06-13apparmor: fix uninitialised pointer passed to audit_log_untrustedstring()Maciek Borzecki1-5/+5
2026-06-13apparmor: don't audit files pointing to aa_null.dentryGeorgia Garcia1-1/+1
2026-06-13apparmor: put secmark label after secid lookupZygmunt Krynicki1-0/+1
2026-06-13apparmor: aa_getprocattr free procattr leak on format failureZygmunt Krynicki1-0/+2
2026-06-13apparmor: remove unnecessary goto and associated labelJohn Johansen1-4/+1
2026-06-13apparmor: release exe file resources on path failureZygmunt Krynicki1-2/+5
2026-06-13apparmor: fail policy unpack on accept2 allocation failureZygmunt Krynicki1-2/+2
2026-06-13apparmor: Fix return in ns_mkdir_opHongling Zeng1-1/+1
2026-06-13apparmor: remove or add symlinks to rawdata according to export_binaryGeorgia Garcia3-25/+104
2026-06-13apparmor: fix NULL pointer dereference in unpack_pdbGeorgia Garcia1-1/+1
2026-06-13apparmor: make fn_label_build() capable of handling not supportedJohn Johansen1-5/+8
2026-06-13apparmor: change fn_label_build() call to not return NULLJohn Johansen3-35/+35
2026-06-13apparmor: fix potential UAF in aa_replace_profilesMaxime Bélair1-1/+3
2026-06-13apparmor: free rawdata as soon as possibleJohn Johansen1-0/+7
2026-06-13apparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee1-2/+31
2026-06-13apparmor: fix rawdata_f_data implicit flex arrayJohn Johansen1-4/+3
2026-06-13apparmor: use __label_make_stale in __aa_proxy_redirectRyan Lee1-1/+1
2026-06-13apparmor: propagate -ENOMEM correctly in unpack_tableMaxime Bélair1-9/+13
2026-06-13apparmor: enable differential encodingJohn Johansen1-0/+1
2026-06-13apparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki1-1/+1
2026-06-13apparmor: check label build before no_new_privs testRuoyu Wang1-10/+15
2026-06-13security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()Andrew Morton1-0/+2
2026-06-13apparmor: add a conditional version of get_newest_labelJohn Johansen2-11/+43
2026-06-13apparmor: fix refcount leak when updating the sk_ctxJohn Johansen1-2/+4
2026-06-13apparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen1-26/+32
2026-06-13apparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen1-2/+1
2026-06-13landlock: Add UDP send+connect access controlMatthieu Buffet3-18/+134
2026-06-13landlock: Add UDP bind() access controlMatthieu Buffet4-8/+15
2026-06-13landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet1-2/+9
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas3-0/+35
2026-06-13landlock: Account all audit data allocations to user spaceMickaël Salaün2-8/+6
2026-06-13landlock: Set audit_net.sk for socket access checksMickaël Salaün1-0/+1
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski1-1/+2
2026-06-08ima: Support staging and deleting N measurements recordsRoberto Sassu4-4/+98
2026-06-08ima: Add support for flushing the hash table when staging measurementsRoberto Sassu1-6/+35
2026-06-08ima: Add support for staging measurements with promptRoberto Sassu5-20/+333
2026-06-08ima: Introduce ima_dump_measurement()Roberto Sassu1-6/+13
2026-06-08ima: Use snprintf() in create_securityfs_measurement_listsRoberto Sassu1-8/+12
2026-06-08ima: Mediate open/release method of the measurements listRoberto Sassu1-4/+98
2026-06-08ima: Introduce _ima_measurements_start() and _ima_measurements_next()Roberto Sassu1-4/+16
2026-06-08ima: Introduce per binary measurements list type binary_runtime_size valueRoberto Sassu3-15/+32
2026-06-08ima: Introduce per binary measurements list type ima_num_records counterRoberto Sassu4-5/+14
2026-06-08ima: Replace static htable queue with dynamically allocated arrayRoberto Sassu3-6/+50