summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
3 dayslandlock: Test trace path output boundariesMickaël Salaün2-0/+184
3 dayslandlock: Clean up ruleset validation checksMickaël Salaün2-2/+3
3 dayslandlock: Fix use-after-free of the source's parent directoryNorbert Szetei1-6/+12
5 daysMerge tag 'kmalloc_obj-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-2/+1
6 daystreewide: refresh kmalloc_obj() conversionsKees Cook1-2/+1
6 daysMerge tag 'integrity-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds3-2/+13
6 daysima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDXJulian Braha1-1/+5
7 daysMerge tag 'selinux-pr-20260903' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-26/+10
9 daysima: Check for ERR_PTR from dentry_path() in validate_hash_algo()Bradley Morgan1-0/+2
9 daysima: don't measure/appraise files on configfsFrederick Lawler1-1/+6
9 dayshardening: Default randstruct off with rust for better allmodconfig supportMark Brown1-1/+1
10 daysselinux: fix BPF token permission checksPaul Moore1-26/+10
13 daysMerge tag 'for-next-tpm-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2-108/+103
2026-08-26Merge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds36-613/+1609
2026-08-26apparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen1-2/+2
2026-08-25tpm-buf: Memory-safe allocationsJarkko Sakkinen2-106/+103
2026-08-25tpm-buf: Merge TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOWJarkko Sakkinen1-3/+3
2026-08-25tpm: Initial step to reorganize TPM public headersRoss Philipson2-2/+0
2026-08-23Merge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-1/+1
2026-08-21Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds25-1427/+2276
2026-08-21KEYS: trusted: Fix TPM teardown orderingChengfeng Ye1-1/+1
2026-08-19Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds9-10/+168
2026-08-19Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds4-177/+129
2026-08-19Merge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-3/+2
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds7-61/+121
2026-08-17landlock: Add tracepoints for ptrace and scope denialsMickaël Salaün3-7/+76
2026-08-17landlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün3-1/+136
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün4-65/+147
2026-08-17landlock: Add landlock_enforce_domain tracepointMickaël Salaün2-1/+29
2026-08-17landlock: Add create_domain and free_domain tracepointsMickaël Salaün6-17/+137
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün5-2/+80
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün6-1/+48
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün1-31/+53
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün3-95/+98
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün17-570/+681
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün13-480/+403
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün5-188/+201
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün5-60/+202
2026-08-15apparmor: fix deadlock in complain-mode change_hatJohn Johansen3-14/+37
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess4-11/+30
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess1-4/+4
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack2-9/+55
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün1-0/+11
2026-08-10apparmor: constify aa_label parameters on read-only query helpersJohn Johansen2-20/+23
2026-08-10apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen8-32/+37
2026-08-10apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen10-23/+25
2026-08-10apparmor: constify aa_perms parameters that are read-onlyJohn Johansen6-10/+11
2026-08-10apparmor: drop use of _confined variant for iterationJohn Johansen1-7/+7
2026-08-10apparmor: refactory mount to use check_permsJohn Johansen4-168/+144
2026-08-10apparmor: fix auditing of mount binary dataJohn Johansen1-2/+2