summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2020-10-05fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enumKees Cook3-6/+4
2020-10-03security/keys: remove compat_keyctl_instantiate_key_iovChristoph Hellwig3-40/+3
2020-10-03iov_iter: transparently handle compat iovecs in import_iovecChristoph Hellwig1-3/+2
2020-09-25integrity: Asymmetric digsig supports SM2-with-SM3 algorithmTianjia Zhang1-3/+11
2020-09-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-1/+2
2020-09-22Smack: Fix build when NETWORK_SECMARK is not setCasey Schaufler1-0/+7
2020-09-16ima: Fix NULL pointer dereference in ima_file_hashKP Singh1-0/+10
2020-09-16integrity: Load certs from the EFI MOK config tableLenny Szubowicz1-0/+22
2020-09-16integrity: Move import of MokListRT certs to a separate routineLenny Szubowicz1-19/+44
2020-09-15Merge tag 'fixes-v5.9a' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds1-1/+2
2020-09-15selinux: Add helper functions to get and set checkreqprotLakshmi Ramasubramanian3-5/+16
2020-09-15evm: Check size of security.evm before using itRoberto Sassu1-0/+6
2020-09-15ima: Remove semicolon at the end of ima_get_binary_runtime_size()Roberto Sassu1-1/+1
2020-09-15ima: Don't ignore errors from crypto_shash_update()Roberto Sassu1-0/+2
2020-09-15ima: Use kmemdup rather than kmalloc+memcpyAlex Dewar1-5/+4
2020-09-11Smack: Use the netlabel cacheCasey Schaufler4-38/+68
2020-09-11Smack: Set socket labels only onceCasey Schaufler2-89/+98
2020-09-11Smack: Consolidate uses of secmark into a functionCasey Schaufler1-28/+33
2020-09-11selinux: access policycaps with READ_ONCE/WRITE_ONCEStephen Smalley2-8/+9
2020-09-09integrity: include keyring name for unknown key requestBruno Meneguele1-2/+8
2020-09-09ima: limit secure boot feedback scope for appraiseBruno Meneguele1-9/+16
2020-09-08integrity: invalid kernel parameters feedbackBruno Meneguele4-4/+16
2020-09-08ima: add check for enforced appraise optionBruno Meneguele1-0/+2
2020-09-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski12-38/+30
2020-08-31integrity: Use current_uid() in integrity_audit_message()Denis Efremov1-1/+1
2020-08-31ima: Fail rule parsing when asymmetric key measurement isn't supportableTyler Hicks1-2/+4
2020-08-31ima: Pre-parse the list of keyrings in a KEY_CHECK ruleTyler Hicks1-45/+93
2020-08-31selinux: simplify away security_policydb_len()Ondrej Mosnacek3-30/+10
2020-08-27selinux: move policy mutex to selinux_state, use in lockdep checksStephen Smalley4-43/+22
2020-08-26selinux: fix error handling bugs in security_load_policy()Dan Carpenter1-11/+23
2020-08-25bpf: Implement bpf_local_storage for inodesKP Singh1-0/+6
2020-08-25selinux: convert policy read-write lock to RCUStephen Smalley4-218/+280
2020-08-24selinux: delete repeated words in commentsRandy Dunlap1-3/+3
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva12-38/+30
2020-08-21selinux: add basic filtering for audit trace eventsPeter Enderborg1-13/+15
2020-08-21selinux: add tracepoint on audited eventsThiƩbaud Weksteen1-0/+5
2020-08-21selinux: Create new booleans and class dirs out of treeDaniel Burgener1-23/+90
2020-08-21selinux: Standardize string literal usage for selinuxfs directory namesDaniel Burgener1-4/+6
2020-08-21selinux: Refactor selinuxfs directory populating functionsDaniel Burgener1-20/+25
2020-08-21selinux: Create function for selinuxfs directory cleanupDaniel Burgener1-14/+25
2020-08-20selinux: permit removing security.selinux xattr before policy loadStephen Smalley1-0/+3
2020-08-20device_cgroup: Fix RCU list debugging warningAmol Grover1-1/+2
2020-08-20selinux: fix memdup.cocci warningskernel test robot1-3/+2
2020-08-19selinux: avoid dereferencing the policy prior to initializationStephen Smalley1-0/+60
2020-08-19selinux: fix allocation failure check on newpolicy->sidtabColin Ian King1-1/+1
2020-08-17selinux: refactor changing booleansStephen Smalley8-64/+368
2020-08-17selinux: move policy commit after updating selinuxfsStephen Smalley6-80/+104
2020-08-17selinux: encapsulate policy state, refactor policy loadStephen Smalley2-192/+221
2020-08-17scripts/selinux,selinux: update mdp to enable policy capabilitiesStephen Smalley4-26/+40
2020-08-12Merge branch 'akpm' (patches from Andrew)Linus Torvalds1-1/+1