linux.git - Clone of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Age	Commit message (Expand)	Author	Files	Lines
2019-12-10	smack: use GFP_NOFS while holding inode_smack::smk_lock	Eric Biggers	2	-3/+3
2019-12-10	Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set	Jann Horn	1	-1/+2
2019-11-22	keys: Fix missing null pointer check in request_key_auth_describe()	Hillf Danton	1	-0/+6
2019-11-22	selinux: fix memory leak in policydb_init()	Ondrej Mosnacek	1	-1/+5
2019-10-05	apparmor: enforce nullbyte at end of tag string	Jann Horn	1	-1/+1
2019-08-13	device_cgroup: fix RCU imbalance in error case	Jann Horn	1	-1/+1
2019-07-09	selinux: avoid silent denials in permissive mode under RCU walk	Stephen Smalley	3	-5/+28
2019-07-09	security/selinux: pass 'flags' arg to avc_audit() and avc_has_perm_flags()	NeilBrown	3	-4/+25
2019-05-02	apparmor: provide userspace flag indicating binfmt_elf_mmap change	John Johansen	1	-0/+1
2019-05-02	KEYS: always initialize keyring_index_key::desc_len	Eric Biggers	4	-6/+4
2019-05-02	KEYS: restrict /proc/keys by credentials at open time	Eric Biggers	1	-6/+2
2019-05-02	KEYS: allow reaching the keys quotas exactly	Eric Biggers	1	-2/+2
2019-05-02	Yama: Check for pid death before checking ancestry	Kees Cook	1	-1/+3
2019-02-11	ima: fix showing large 'violations' or 'runtime_measurements_count'	Eric Biggers	1	-3/+3
2018-12-16	KEYS: encrypted: fix buffer overread in valid_master_desc()	Eric Biggers	1	-16/+15
2018-12-16	apparmor: remove no-op permission check in policy_unpack	John Johansen	1	-32/+0
2018-10-21	selinux: KASAN: slab-out-of-bounds in xattr_getsecurity	Sachin Grover	1	-1/+1
2018-06-16	ima: relax requiring a file signature for new files with zero length	Mimi Zohar	1	-1/+2
2018-02-13	apparmor: ensure that undecidable profile attachments fail	John Johansen	1	-16/+37
2018-02-13	ima: fix hash algorithm initialization	Boshi Wang	1	-0/+4
2018-01-09	KPTI: Rename to PAGE_TABLE_ISOLATION	Kees Cook	1	-1/+1
2018-01-09	x86/kaiser: Reenable PARAVIRT	Borislav Petkov	1	-1/+1
2018-01-09	KAISER: Kernel Address Isolation	Richard Fellner	1	-0/+10
2018-01-01	KEYS: add missing permission check for request_key() destination	Eric Biggers	1	-9/+37
2018-01-01	security: let security modules use PTRACE_MODE_* with bitmasks	Jann Horn	2	-7/+5
2018-01-01	KEYS: trusted: fix writing past end of buffer in trusted_read()	Eric Biggers	1	-11/+12
2018-01-01	KEYS: trusted: sanitize all key material	Eric Biggers	1	-27/+21
2018-01-01	KEYS: return full count in keyring_read() if buffer is too small	Eric Biggers	1	-20/+19
2018-01-01	KEYS: encrypted: fix dereference of NULL user_key_payload	Eric Biggers	1	-0/+7
2018-01-01	lsm: fix smack_inode_removexattr and xattr_getsecurity memleak	Casey Schaufler	1	-30/+25
2018-01-01	Smack: remove unneeded NULL-termination from securtity label	Konstantin Khlebnikov	1	-3/+3
2018-01-01	security/keys: properly zero out sensitive key material in big_key	Jason A. Donenfeld	1	-1/+1
2018-01-01	KEYS: prevent creating a different user's keyrings	Eric Biggers	4	-12/+23
2018-01-01	KEYS: fix writing past end of user-supplied buffer in keyring_read()	Eric Biggers	1	-9/+5
2018-01-01	KEYS: fix key refcount leak in keyctl_read_key()	Eric Biggers	1	-1/+1
2018-01-01	KEYS: fix key refcount leak in keyctl_assume_authority()	Eric Biggers	1	-4/+2
2018-01-01	KEYS: don't revoke uninstantiated key in request_key_auth_new()	Eric Biggers	1	-1/+0
2018-01-01	KEYS: fix cred refcount leak in request_key_auth_new()	Eric Biggers	1	-37/+31
2017-11-11	KEYS: don't let add_key() update an uninstantiated key	David Howells	1	-0/+10
2017-11-11	KEYS: prevent KEYCTL_READ on negative key	Eric Biggers	1	-0/+5
2017-10-12	sched: move no_new_privs into new atomic flags	Kees Cook	1	-2/+2
2017-09-15	ptrace: use fsuid, fsgid, effective creds for fs access checks	Jann Horn	1	-1/+6
2017-09-15	selinux: fix double free in selinux_parse_opts_str()	Paul Moore	1	-3/+2
2017-09-15	KEYS: fix dereferencing NULL payload with nonzero length	Eric Biggers	1	-2/+2
2017-08-26	ima: accept previously set IMA_NEW_FILE	Daniel Glöckner	1	-2/+3
2017-08-26	ima: pass 'opened' flag to identify newly created files	Dmitry Kasatkin	3	-11/+11
2017-07-18	KEYS: Change the name of the dead type to ".dead" to prevent user access	David Howells	1	-1/+1
2017-06-05	KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings	Eric Biggers	2	-24/+31
2017-06-05	KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings	David Howells	1	-2/+7
2017-06-05	KEYS: Reinstate EPERM for a key type name beginning with a '.'	David Howells	1	-0/+2