summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2023-03-10ima: Align ima_file_mmap() parameters with mmap_file LSM hookRoberto Sassu2-5/+9
2023-02-01tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada1-1/+1
2023-01-12device_cgroup: Roll back to original exceptions after copy failureWang Weiyang1-4/+29
2023-01-12ima: Fix a potential NULL pointer access in ima_restore_measurement_listHuaxin Lu1-1/+4
2023-01-12efi: Add iMac Pro 2017 to uefi skip cert quirkAditya Garg1-0/+1
2022-12-31security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6Nathan Chancellor1-0/+3
2022-12-31ima: Simplify ima_lsm_copy_ruleGUO Zihua1-7/+3
2022-12-31LoadPin: Ignore the "contents" argument of the LSM hooksKees Cook1-12/+18
2022-12-31apparmor: Fix memleak in alloc_ns()Xiu Jianfeng1-1/+1
2022-12-31apparmor: Use pointer to struct aa_label for lbs_credXiu Jianfeng1-2/+2
2022-12-31apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2022-12-31apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2022-12-31apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2022-12-31ima: Fix misuse of dereference of pointer in template_desc_init_fields()Xiu Jianfeng1-2/+2
2022-12-31integrity: Fix memory leakage in keyring allocation error pathGUO Zihua1-1/+5
2022-12-31ima: Handle -ESTALE returned by ima_filter_rule_match()GUO Zihua1-9/+32
2022-11-10capabilities: fix potential memleak on error path from vfs_getxattr_alloc()Gaosheng Cui1-2/+4
2022-10-29selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()GONG, Ruiqi3-5/+6
2022-10-26ima: fix blocking of security.ima xattrs of unsupported algorithmsMimi Zohar1-4/+8
2022-10-26hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook1-4/+10
2022-10-26hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZEROKees Cook1-1/+4
2022-10-15efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain1-1/+1
2022-08-25apparmor: Fix memleak in aa_simple_write_to_buffer()Xiu Jianfeng1-1/+1
2022-08-25apparmor: fix reference count leak in aa_pivotroot()Xin Xiong1-0/+1
2022-08-25apparmor: fix overlapping attachment computationJohn Johansen2-2/+2
2022-08-25apparmor: fix setting unconfined mode on a loaded profileJohn Johansen1-5/+7
2022-08-25apparmor: fix aa_label_asxprint return checkTom Rix1-3/+3
2022-08-25apparmor: Fix failed mount permission check error messageJohn Johansen1-3/+4
2022-08-25apparmor: fix absroot causing audited secids to begin with =John Johansen2-3/+9
2022-08-25apparmor: fix quiet_denied for file rulesJohn Johansen1-1/+1
2022-08-17selinux: Add boundary check in put_entry()Xiu Jianfeng1-0/+2
2022-08-17selinux: fix memleak in security_read_state_kernel()Xiu Jianfeng1-1/+8
2022-07-29lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg1-0/+4
2022-07-23x86/retbleed: Add fine grained Kconfig knobsPeter Zijlstra1-11/+0
2022-07-21ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie1-0/+1
2022-07-21ima: force signature verification when CONFIG_KEXEC_SIG is configuredCoiby Xu1-0/+2
2022-07-21ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu1-1/+2
2022-07-21Revert "evm: Fix memleak in init_desc"Xiu Jianfeng1-5/+2
2022-07-02fs: support mapped mounts of mapped filesystemsChristian Brauner1-5/+4
2022-07-02fs: use low-level mapping helpersChristian Brauner1-5/+8
2022-07-02fs: move mapping helpersChristian Brauner1-0/+1
2022-06-14KEYS: trusted: tpm2: Fix migratable logicDavid Safford1-2/+2
2022-06-09ima: remove the IMA_TEMPLATE Kconfig optionGUO Zihua1-8/+6
2022-06-09landlock: Fix same-layer rule unionsMickaël Salaün2-26/+54
2022-06-09landlock: Create find_rule() from unmask_layers()Mickaël Salaün1-13/+28
2022-06-09landlock: Reduce the maximum number of layers to 16Mickaël Salaün3-11/+12
2022-06-09landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün5-15/+30
2022-06-09landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün1-4/+4
2022-06-09landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün1-9/+13
2022-06-09landlock: Fix landlock_add_rule(2) documentationMickaël Salaün1-4/+3