summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2026-08-10apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen4-10/+22
2026-08-10apparmor: mark static tables and structs as read onlyJohn Johansen8-20/+22
2026-08-10apparmor: fix error debug output in fn_label_buildJohn Johansen1-2/+2
2026-08-10apparmor: make table entry count last enum for static tablesJohn Johansen3-5/+5
2026-08-10apparmor: fix race condition in label replacementJohn Johansen1-12/+48
2026-08-10apparmor: refactor xattr attachment, to take the file pathJohn Johansen1-15/+19
2026-08-10apparmor: fix unconfined user namespace restriction forced stackJohn Johansen1-26/+54
2026-08-10apparmor: reserve mediation class for packet mediationJohn Johansen2-1/+2
2026-08-10apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen1-36/+33
2026-08-10apparmor: move netfilter functions next to the LSM network operationsJohn Johansen1-44/+46
2026-08-10apparmor: refactor network socket mediation to support compatibilityJohn Johansen1-8/+10
2026-08-10apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen2-13/+497
2026-08-10apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen6-22/+190
2026-08-10apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen3-9/+13
2026-08-10apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen1-3/+3
2026-08-10apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim1-3/+3
2026-08-09apparmor: fix integer overflow in verify_tags() bounds checkFabrice Derepas1-1/+1
2026-08-08smack: fix cred UAF in smack_file_send_sigiotask()Jann Horn1-1/+1
2026-08-07apparmor: optimize current_label_crit_section() with needputJohn Johansen5-58/+84
2026-08-06apparmor: fix cred UAF caused by begin_current_label_crit_section()Jann Horn3-9/+39
2026-08-06apparmor: use SEND_SIG_NOINFO instead of NULL in aa_audit()Oleg Nesterov1-1/+1
2026-08-05Merge tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds4-32/+136
2026-08-04ima: measure userspace policy writes before parsingEnrico Bravi4-0/+30
2026-08-04ima: add critical data measurement for loaded policyEnrico Bravi4-3/+99
2026-08-04ima: Instantiate file_truncate and path_truncate hooksMimi Zohar1-0/+39
2026-08-04security: ima: rename boot_aggregate when ima is initialised at late_syncJonathan McDowell3-5/+14
2026-08-04ima: fix out-of-bounds read in xattr_verify()Lincoln Wallace1-2/+7
2026-08-04security: ima: introduce IMA_INIT_LATE_SYNC optionYeoreum Yun2-0/+14
2026-08-04security: lsm: allow LSMs to register for late_initcall_sync initYeoreum Yun1-2/+11
2026-08-04selinux: check level category sets once at load timeStephen Smalley2-17/+30
2026-08-03selinux: require every boolean value to be definedBryam Vargas1-0/+19
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas1-5/+19
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas1-5/+46
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas1-1/+3
2026-08-02apparmor: Fix warning: 'decompress_zstd' defined but not usedJohn Johansen1-10/+6
2026-08-01apparmor: fix implicit declaration of function 'decompress_zstd'John Johansen1-6/+15
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas1-4/+4
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas1-0/+12
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas1-0/+3
2026-07-30apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabledJohn Johansen2-1/+26
2026-07-29apparmor: compressed_data not described in aa_get_data_from_compressedJohn Johansen1-1/+1
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley1-0/+35
2026-07-23apparmor: switch website link to httpsBaruch Siach1-1/+1
2026-07-23keys: make keyring key-chunk byte order agree with keyring_diff_objects()Michael Bommarito1-2/+3
2026-07-23keys: fix out-of-bounds read in keyring_get_key_chunk()Michael Bommarito1-4/+5
2026-07-23KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return typeFabrice Derepas1-4/+11
2026-07-20apparmor: leverage audit_log_n_untrustedstring() when possiblePaul Moore1-4/+1
2026-07-17Merge tag 'selinux-pr-20260717' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-18/+24
2026-07-16Merge tag 'landlock-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds3-8/+13
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges3-8/+30