summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2025-02-17tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa
2025-02-17safesetid: check size of policy writesLeo Stone
2025-02-08landlock: Handle weird filesMickaël Salaün
2025-01-09selinux: ignore unknown extended permissionsThiébaud Weksteen
2024-12-09apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan
2024-12-09apparmor: fix 'Do simple duplicate message elimination'chao liu
2024-11-22ima: fix buffer overrun in ima_eventdigest_init_commonSamasth Norway Ananda
2024-11-14security/keys: fix slab-out-of-bounds in key_task_permissionChen Ridong
2024-11-01selinux: improve error checking in sel_write_load()Paul Moore
2024-10-10tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa
2024-10-10proc: add config & param to block forcing mem writesAdrian Ratiu
2024-10-04bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0Song Liu
2024-10-04smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye
2024-09-12smack: unix sockets: fix accept()ed socket labelKonstantin Andreev
2024-09-08smack: tcp: ipv4, fix incorrect labelingCasey Schaufler
2024-09-08apparmor: fix possible NULL pointer dereferenceLeesoo Ahn
2024-09-04apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck
2024-09-04selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew
2024-08-29evm: don't copy up 'security.evm' xattrMimi Zohar
2024-08-29selinux: add the processing of the failure of avc_add_xperms_decision()Zhen Lei
2024-08-29selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei
2024-08-29selinux: revert our use of vma_is_initial_heap()Paul Moore
2024-08-03apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang
2024-08-03task_work: s/task_work_cancel()/task_work_cancel_func()/Frederic Weisbecker
2024-08-03apparmor: use kvfree_sensitive to free data->dataFedor Pchelkin
2024-08-03landlock: Don't lose track of restrictions on cred_transferJann Horn
2024-07-11ima: Avoid blocking in RCU read-side critical sectionGUO Zihua
2024-06-21ima: Fix use-after-free on a dentry's dname.nameStefan Berger
2024-06-21landlock: Fix d_parent walkMickaël Salaün
2024-05-25KEYS: trusted: Do not use WARN when encode failsJarkko Sakkinen
2024-05-25KEYS: trusted: Fix memory leak in tpm2_key_encode()Jarkko Sakkinen
2024-05-17keys: Fix overwrite of key expiration on instantiationSilvio Gissi
2024-04-10selinux: avoid dereference of garbage after mount failureChristian Göttsche
2024-04-03landlock: Warn once if a Landlock action is requested while disabledMickaël Salaün
2024-04-03smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu
2024-04-03smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu
2024-03-06landlock: Fix asymmetric private inodes referringMickaël Salaün
2024-03-06tomoyo: fix UAF write bug in tomoyo_write_control()Tetsuo Handa
2024-02-23lsm: fix the logic in security_inode_getsecctx()Ondrej Mosnacek
2024-02-23lsm: fix default return value of the socket_getpeersec_*() hooksOndrej Mosnacek
2024-01-31lsm: new security_file_ioctl_compat() hookAlfred Piccioni
2024-01-25Revert "KEYS: encrypted: Add check for strsep"Mimi Zohar
2024-01-25apparmor: avoid crash when parsed profile name is emptyFedor Pchelkin
2024-01-25apparmor: fix possible memory leak in unpack_trans_tableFedor Pchelkin
2024-01-25apparmor: Fix ref count leak in task_killJohn Johansen
2024-01-25selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socketMickaël Salaün
2024-01-25KEYS: encrypted: Add check for strsepChen Ni
2024-01-10apparmor: Fix move_mount mediation by detecting if source is detachedJohn Johansen
2024-01-01keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiryDavid Howells
2023-12-20cred: get rid of CONFIG_DEBUG_CREDENTIALSJens Axboe