summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
5 daysapparmor: fix x_table_lookup when stacking is not the first entryJohn Johansen1-23/+29
5 daysapparmor: use the condition in AA_BUG_FMT even with debug disabledMateusz Guzik1-1/+5
5 daysapparmor: shift ouid when mediating hard links in usernsGabriel Totev1-2/+4
5 dayssecurityfs: don't pin dentries twice, once is enough...Al Viro1-2/+0
5 dayslandlock: opened file never has a negative dentryAl Viro1-1/+0
10 daysapparmor: Fix unaligned memory accesses in KUnit testHelge Deller1-2/+4
10 daysapparmor: fix loop detection used in conflicting attachment resolutionRyan Lee2-15/+12
10 daysapparmor: ensure WB_HISTORY_SIZE value is a power of 2Ryan Lee2-1/+3
10 dayslandlock: Fix warning from KUnit testsTingmao Wang1-27/+42
2025-07-06selinux: change security_compute_sid to return the ssid or tsid on matchStephen Smalley1-5/+11
2025-06-27selinux: fix selinux_xfrm_alloc_user() to set correct ctx_lenStephen Smalley1-1/+1
2025-05-12landlock: Improve bit operations in audit codeMickaël Salaün3-4/+34
2025-05-03landlock: Remove KUnit test that triggers a warningMickaël Salaün1-1/+1
2025-04-24Merge tag 'landlock-6.15-rc4' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds3-17/+16
2025-04-22ima: process_measurement() needlessly takes inode_lock() on MAY_READFrederick Lawler1-1/+3
2025-04-17landlock: Fix documentation for landlock_restrict_self(2)Mickaël Salaün1-6/+6
2025-04-17landlock: Fix documentation for landlock_create_ruleset(2)Mickaël Salaün1-8/+7
2025-04-15hardening: Disable GCC randstruct for COMPILE_TESTKees Cook1-1/+1
2025-04-11landlock: Log the TGID of the domain creatorMickaël Salaün1-2/+2
2025-04-08landlock: Remove incorrect warningMickaël Salaün1-1/+1
2025-04-01mseal sysmap: kernel config and header changeJeff Xu1-0/+21
2025-04-01Merge tag 'driver-core-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-2/+5
2025-03-30Merge tag 'bpf-next-6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/bp...Linus Torvalds2-9/+12
2025-03-29Merge tag 'v6.15-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-1/+1
2025-03-28Merge tag 'landlock-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds25-264/+2283
2025-03-28Merge tag 'caps-pr-20250327' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-4/+5
2025-03-28Merge tag 'integrity-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-6/+15
2025-03-28Merge tag 'ipe-pr-20250324' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+6
2025-03-27ima: limit the number of ToMToU integrity violationsMimi Zohar2-4/+5
2025-03-27ima: limit the number of open-writers integrity violationsMimi Zohar2-2/+10
2025-03-26Merge tag 'sysctl-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-0/+11
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFFMickaël Salaün3-7/+43
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flagsMickaël Salaün5-12/+63
2025-03-26landlock: Log scoped denialsMickaël Salaün5-18/+97
2025-03-26landlock: Log TCP bind and connect denialsMickaël Salaün3-4/+60
2025-03-26landlock: Log truncate and IOCTL denialsMickaël Salaün7-6/+307
2025-03-26landlock: Factor out IOCTL hooksMickaël Salaün1-21/+11
2025-03-26landlock: Log file-related denialsMickaël Salaün3-16/+233
2025-03-26landlock: Log mount-related denialsMickaël Salaün4-41/+74
2025-03-26landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain statusMickaël Salaün6-4/+285
2025-03-26landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denialsMickaël Salaün7-24/+336
2025-03-26landlock: Identify domain execution crossingMickaël Salaün3-6/+59
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün3-21/+39
2025-03-26landlock: Prepare to use credential instead of domain for scopeMickaël Salaün1-24/+28
2025-03-26landlock: Prepare to use credential instead of domain for networkMickaël Salaün1-15/+12
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün2-30/+92
2025-03-26landlock: Move domain hierarchy managementMickaël Salaün4-34/+53
2025-03-26landlock: Add unique ID generatorMickaël Salaün5-0/+282
2025-03-26lsm: Add audit_log_lsm_data() helperMickaël Salaün1-9/+18
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün3-6/+64
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-25 08:06:33 +0000