summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2025-03-13ima: Fix use-after-free on a dentry's dname.nameStefan Berger
2025-03-13tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa
2025-01-09selinux: ignore unknown extended permissionsThiébaud Weksteen
2024-12-14apparmor: fix 'Do simple duplicate message elimination'chao liu
2024-11-17security/keys: fix slab-out-of-bounds in key_task_permissionChen Ridong
2024-11-08selinux: improve error checking in sel_write_load()Paul Moore
2024-11-08tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa
2024-11-08proc: add config & param to block forcing mem writesAdrian Ratiu
2024-11-08smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye
2024-09-12smack: unix sockets: fix accept()ed socket labelKonstantin Andreev
2024-09-12smack: tcp: ipv4, fix incorrect labelingCasey Schaufler
2024-09-12apparmor: fix possible NULL pointer dereferenceLeesoo Ahn
2024-09-04selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei
2024-08-19apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang
2024-04-13smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu
2024-04-13smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu
2024-02-23lsm: new security_file_ioctl_compat() hookAlfred Piccioni
2024-01-25apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin
2024-01-25selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün
2023-12-08ima: detect changes to the backing overlay fileMimi Zohar
2023-12-08ima: annotate iint mutex to avoid lockdep false positive warningsAmir Goldstein
2023-10-10ima: rework CONFIG_IMA dependency blockArnd Bergmann
2023-10-10ima: Finish deprecation of IMA_TRUSTED_KEYRING KconfigOleksandr Tymoshenko
2023-10-10Smack:- Use overlay inode label in smack_inode_copy_up()Vishal Goel
2023-10-10smack: Retrieve transmuting information in smack_inode_getsecurity()Roberto Sassu
2023-10-10smack: Record transmuting in smk_transmutedRoberto Sassu
2023-09-23smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter
2023-09-23ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain
2023-09-23security: keys: perform capable check only on privileged operationsChristian Göttsche
2023-08-30IMA: allow/fix UML buildsRandy Dunlap
2023-08-11keys: Fix linking a duplicate key to a keyring's assoc_arrayPetr Pavlu
2023-07-27integrity: Fix possible multiple allocation in integrity_inode_get()Tianjia Zhang
2023-07-27ima: Fix build warningsRoberto Sassu
2023-07-27evm: Complete description of evm_inode_setattr()Roberto Sassu
2023-06-09selinux: don't use make's grouped targets feature yetPaul Moore
2023-05-17selinux: ensure av_permissions.h is built when neededPaul Moore
2023-05-17selinux: fix Makefile dependencies of flask.hOndrej Mosnacek
2023-04-05keys: Do not cache key in task struct if key is requested from kernel threadDavid Howells
2023-03-11ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu
2023-02-06tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada
2023-01-18device_cgroup: Roll back to original exceptions after copy failureWang Weiyang
2023-01-18ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu
2023-01-18efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg
2023-01-18apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng
2023-01-18apparmor: Fix abi check to include v8 abiJohn Johansen
2023-01-18apparmor: fix lockdep warning when removing a namespaceJohn Johansen
2023-01-18apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui
2023-01-18ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng
2023-01-18integrity: Fix memory leakage in keyring allocation error pathGUO Zihua
2023-01-18ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua