summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
36 hoursapparmor: fix race between freeing data and fs accessing itJohn Johansen7-101/+153
36 hoursapparmor: fix race on rawdata dereferenceJohn Johansen4-57/+93
36 hoursapparmor: fix differential encoding verificationJohn Johansen2-4/+20
36 hoursapparmor: fix unprivileged local user can do privileged policy managementJohn Johansen3-9/+43
36 hoursapparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen1-0/+1
36 hoursapparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer1-2/+3
36 hoursapparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer1-10/+20
36 hoursapparmor: fix: limit the number of levels of policy namespacesJohn Johansen2-0/+4
36 hoursapparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer1-3/+27
36 hoursapparmor: fix memory leak in verify_headerMassimiliano Pellizzer1-1/+0
36 hoursapparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer1-1/+11
11 daysima: verify the previous kernel's IMA buffer lies in addressable RAMHarshit Mogalapalli1-0/+35
2026-02-26apparmor: fix aa_label to return state from compount and component matchJohn Johansen1-6/+6
2026-02-26apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia1-0/+9
2026-02-26apparmor: avoid per-cpu hold underflow in aa_get_bufferZhengmian Hu1-1/+2
2026-02-26apparmor: make label_match return a consistent valueJohn Johansen1-11/+9
2026-02-26apparmor: remove apply_modes_to_perms from label_matchJohn Johansen1-3/+0
2026-02-26apparmor: fix rlimit for posix cpu timersJohn Johansen1-0/+5
2026-02-26apparmor: move check for aa_null file to cover all casesJohn Johansen2-6/+10
2026-02-26apparmor: account for in_atomic removal in common_file_permRyan Lee1-3/+2
2026-02-26apparmor: drop in_atomic flag in common_mmap, and common_file_permJohn Johansen1-12/+9
2026-02-26apparmor: fix boolean argument in apparmor_mmap_fileRyan Lee1-1/+1
2026-02-26apparmor: return -ENOMEM in unpack_perms_table upon alloc failureRyan Lee1-2/+4
2026-02-26apparmor: Fix & Optimize table creation from possibly unaligned memoryHelge Deller2-9/+10
2026-02-26AppArmor: Allow apparmor to handle unaligned dfa tablesHelge Deller1-7/+8
2026-02-26apparmor: fix NULL sock in aa_sock_file_permJohn Johansen1-2/+4
2026-02-26apparmor: fix NULL pointer dereference in __unix_needs_revalidationSystem Administrator1-0/+3
2026-02-26evm: Use ordered xattrs list to calculate HMAC in evm_init_hmac()Roberto Sassu1-4/+10
2026-02-26smack: /smack/doi: accept previously used valuesKonstantin Andreev1-26/+45
2026-02-26smack: /smack/doi must be > 0Konstantin Andreev1-5/+7
2026-02-26ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()Chris J Arges3-24/+20
2026-01-29lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITYPaul Moore3-18/+3
2026-01-25keys/trusted_keys: fix handle passed to tpm_buf_append_name during unsealSrish Srinivasan1-2/+2
2026-01-18Merge tag 'landlock-6.19-rc6' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds7-64/+87
2025-12-29landlock: Improve the comment for domain_is_scopedTingmao Wang1-4/+4
2025-12-29landlock: Optimize stack usage when !CONFIG_AUDITMickaël Salaün1-2/+9
2025-12-26landlock: Fix spellingMickaël Salaün1-1/+1
2025-12-26landlock: Clean up hook_ptrace_access_check()Mickaël Salaün1-2/+2
2025-12-26landlock: Improve erratum documentationMickaël Salaün1-1/+1
2025-12-26landlock: Remove useless includeMickaël Salaün1-1/+0
2025-12-26landlock: Fix wrong type usageTingmao Wang1-1/+1
2025-12-26landlock: Fix TCP handling of short AF_UNSPEC addressesMatthieu Buffet1-51/+67
2025-12-26landlock: Fix formattingMickaël Salaün1-1/+2
2025-12-23kernel/kexec: change the prototype of kimage_map_segment()Pingfan Liu1-3/+1
2025-12-14Merge tag 'tomoyo-pr-20251212' of git://git.code.sf.net/p/tomoyo/tomoyoLinus Torvalds1-7/+2
2025-12-06Merge tag 'landlock-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds4-17/+59
2025-12-05Merge tag 'tpmdd-sessions-next-6.19-rc1' of git://git.kernel.org/pub/scm/linu...Linus Torvalds1-8/+33
2025-12-05Merge tag 'pull-persistency' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds4-134/+101
2025-12-05tpm2-sessions: Open code tpm_buf_append_hmac_session()Jarkko Sakkinen1-2/+10
2025-12-05tpm2-sessions: Fix out of range indexing in name_sizeJarkko Sakkinen1-6/+23