summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
23 hoursMerge branch 'headers' of git://git.infradead.org/users/willy/pagecache.gitMark Brown
23 hoursMerge branch 'for-next-tpm' of https://git.kernel.org/pub/scm/linux/kernel/gi...Mark Brown
3 daysMerge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
3 daysapparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen
4 dayssecurity: Remove pagemap.h includesMatthew Wilcox (Oracle)
4 daystpm-buf: Memory-safe allocationsJarkko Sakkinen
4 daystpm-buf: Merge TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOWJarkko Sakkinen
4 daystpm: Initial step to reorganize TPM public headersRoss Philipson
6 daysMerge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
8 daysMerge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
8 daysKEYS: trusted: Fix TPM teardown orderingChengfeng Ye
9 daysMerge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
10 daysMerge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds
10 daysMerge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
10 daysMerge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
12 dayslandlock: Add tracepoints for ptrace and scope denialsMickaël Salaün
12 dayslandlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün
12 dayslandlock: Add tracepoints for rule checkingMickaël Salaün
12 dayslandlock: Add landlock_enforce_domain tracepointMickaël Salaün
12 dayslandlock: Add create_domain and free_domain tracepointsMickaël Salaün
12 dayslandlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün
12 dayslandlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün
12 dayslandlock: Consolidate access-right and scope names in a shared headerMickaël Salaün
12 dayslandlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün
12 dayslandlock: Split denial logging from audit into common frameworkMickaël Salaün
12 dayslandlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün
12 dayslandlock: Move domain query functions to domain.cMickaël Salaün
12 dayslandlock: Prepare ruleset and domain type splitMickaël Salaün
13 daysapparmor: fix deadlock in complain-mode change_hatJohn Johansen
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün
2026-08-10apparmor: constify aa_label parameters on read-only query helpersJohn Johansen
2026-08-10apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_perms parameters that are read-onlyJohn Johansen
2026-08-10apparmor: drop use of _confined variant for iterationJohn Johansen
2026-08-10apparmor: refactory mount to use check_permsJohn Johansen
2026-08-10apparmor: fix auditing of mount binary dataJohn Johansen
2026-08-10apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen
2026-08-10apparmor: mark static tables and structs as read onlyJohn Johansen
2026-08-10apparmor: fix error debug output in fn_label_buildJohn Johansen
2026-08-10apparmor: make table entry count last enum for static tablesJohn Johansen
2026-08-10apparmor: fix race condition in label replacementJohn Johansen
2026-08-10apparmor: refactor xattr attachment, to take the file pathJohn Johansen
2026-08-10apparmor: fix unconfined user namespace restriction forced stackJohn Johansen
2026-08-10apparmor: reserve mediation class for packet mediationJohn Johansen
2026-08-10apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen
2026-08-10apparmor: move netfilter functions next to the LSM network operationsJohn Johansen