summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2025-03-28keys: Fix UAF in key_put()David Howells
2025-03-07ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattrRoberto Sassu
2025-03-07landlock: Fix non-TCP sockets restrictionMikhail Ivanov
2025-02-17KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=yDavid Gstir
2025-02-17tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa
2025-02-17safesetid: check size of policy writesLeo Stone
2025-02-08landlock: Handle weird filesMickaël Salaün
2025-01-23apparmor: allocate xmatch for nullpdb inside aa_alloc_nullRyan Lee
2025-01-09selinux: ignore unknown extended permissionsThiébaud Weksteen
2024-12-05apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan
2024-12-05apparmor: fix 'Do simple duplicate message elimination'chao liu
2024-11-12Merge tag 'integrity-v6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-11-12Merge tag 'landlock-6.12-rc7' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2024-11-09landlock: Optimize scope enforcementMickaël Salaün
2024-11-09landlock: Refactor network access mask managementMickaël Salaün
2024-11-09landlock: Refactor filesystem access mask managementMickaël Salaün
2024-11-04KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operationDavid Gstir
2024-11-04security/keys: fix slab-out-of-bounds in key_task_permissionChen Ridong
2024-10-18ipe: fallback to platform keyring also if key in trusted keyring is rejectedLuca Boccassi
2024-10-17ipe: allow secondary and platform keyrings to install/update policiesLuca Boccassi
2024-10-17ipe: also reject policy updates with the same versionLuca Boccassi
2024-10-17ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower ...Luca Boccassi
2024-10-09integrity: Use static_assert() to check struct sizesGustavo A. R. Silva
2024-10-09evm: stop avoidably reading i_writecount in evm_file_releaseMateusz Guzik
2024-10-09ima: fix buffer overrun in ima_eventdigest_init_commonSamasth Norway Ananda
2024-10-09bcachefs: do not use PF_MEMALLOC_NORECLAIMMichal Hocko
2024-10-05Merge tag 'hardening-v6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2024-10-05Merge tag 'lsm-pr-20241004' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-10-04tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM supportPaul Moore
2024-10-02move asm/unaligned.h to linux/unaligned.hAl Viro
2024-09-28hardening: Adjust dependencies in selection of MODVERSIONSNathan Chancellor
2024-09-27Merge tag 'tomoyo-pr-20240927' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds
2024-09-25tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa
2024-09-24Merge tag 'bpf-next-6.12-struct-fd' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds
2024-09-24Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2024-09-24Merge tag 'lsm-pr-20240923' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-09-24tomoyo: allow building as a loadable LSM moduleTetsuo Handa
2024-09-23ipe: Add missing terminator to list of unit testsGuenter Roeck
2024-09-23Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds
2024-09-23tomoyo: preparation step for building as a loadable LSM moduleTetsuo Handa
2024-09-21Merge tag 'bpf-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds
2024-09-19selinux,smack: properly reference the LSM blob in security_watch_key()Paul Moore
2024-09-19Merge tag 'Smack-for-6.12' of https://github.com/cschaufler/smack-nextLinus Torvalds
2024-09-16landlock: Add signal scopingTahera Fahimi
2024-09-16landlock: Add abstract UNIX socket scopingTahera Fahimi
2024-09-16Merge tag 'lsm-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-09-16Merge tag 'selinux-pr-20240911' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2024-09-16Merge tag 'vfs-6.12.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-09-16Merge tag 'vfs-6.12.file' of git://git.kernel.org/pub/scm/linux/kernel/git/vf...Linus Torvalds
2024-09-12security,bpf: constify struct path in bpf_token_create() LSM hookAndrii Nakryiko