summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
4 daysMerge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
4 daysapparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen
7 daysMerge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
9 daysMerge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
10 daysKEYS: trusted: Fix TPM teardown orderingChengfeng Ye
11 daysMerge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
11 daysMerge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds
11 daysMerge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
11 daysMerge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
13 dayslandlock: Add tracepoints for ptrace and scope denialsMickaël Salaün
13 dayslandlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün
13 dayslandlock: Add tracepoints for rule checkingMickaël Salaün
13 dayslandlock: Add landlock_enforce_domain tracepointMickaël Salaün
13 dayslandlock: Add create_domain and free_domain tracepointsMickaël Salaün
13 dayslandlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün
13 dayslandlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün
13 dayslandlock: Consolidate access-right and scope names in a shared headerMickaël Salaün
13 dayslandlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün
13 dayslandlock: Split denial logging from audit into common frameworkMickaël Salaün
13 dayslandlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün
13 dayslandlock: Move domain query functions to domain.cMickaël Salaün
13 dayslandlock: Prepare ruleset and domain type splitMickaël Salaün
2026-08-15apparmor: fix deadlock in complain-mode change_hatJohn Johansen
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün
2026-08-10apparmor: constify aa_label parameters on read-only query helpersJohn Johansen
2026-08-10apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_perms parameters that are read-onlyJohn Johansen
2026-08-10apparmor: drop use of _confined variant for iterationJohn Johansen
2026-08-10apparmor: refactory mount to use check_permsJohn Johansen
2026-08-10apparmor: fix auditing of mount binary dataJohn Johansen
2026-08-10apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen
2026-08-10apparmor: mark static tables and structs as read onlyJohn Johansen
2026-08-10apparmor: fix error debug output in fn_label_buildJohn Johansen
2026-08-10apparmor: make table entry count last enum for static tablesJohn Johansen
2026-08-10apparmor: fix race condition in label replacementJohn Johansen
2026-08-10apparmor: refactor xattr attachment, to take the file pathJohn Johansen
2026-08-10apparmor: fix unconfined user namespace restriction forced stackJohn Johansen
2026-08-10apparmor: reserve mediation class for packet mediationJohn Johansen
2026-08-10apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen
2026-08-10apparmor: move netfilter functions next to the LSM network operationsJohn Johansen
2026-08-10apparmor: refactor network socket mediation to support compatibilityJohn Johansen
2026-08-10apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen
2026-08-10apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen
2026-08-10apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen
2026-08-10apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen
2026-08-10apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim