summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
29 hoursMerge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
3 daysMerge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
4 daysKEYS: trusted: Fix TPM teardown orderingChengfeng Ye
5 daysMerge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/z...Linus Torvalds
5 daysMerge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds
5 daysMerge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
5 daysMerge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
7 dayslandlock: Add tracepoints for ptrace and scope denialsMickaël Salaün
7 dayslandlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün
7 dayslandlock: Add tracepoints for rule checkingMickaël Salaün
7 dayslandlock: Add landlock_enforce_domain tracepointMickaël Salaün
7 dayslandlock: Add create_domain and free_domain tracepointsMickaël Salaün
7 dayslandlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün
7 dayslandlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün
7 dayslandlock: Consolidate access-right and scope names in a shared headerMickaël Salaün
7 dayslandlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün
7 dayslandlock: Split denial logging from audit into common frameworkMickaël Salaün
7 dayslandlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün
7 dayslandlock: Move domain query functions to domain.cMickaël Salaün
7 dayslandlock: Prepare ruleset and domain type splitMickaël Salaün
10 dayslandlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess
10 dayslandlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess
10 dayslandlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack
10 dayslandlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün
2026-08-08smack: fix cred UAF in smack_file_send_sigiotask()Jann Horn
2026-08-05Merge tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-08-04ima: measure userspace policy writes before parsingEnrico Bravi
2026-08-04ima: add critical data measurement for loaded policyEnrico Bravi
2026-08-04ima: Instantiate file_truncate and path_truncate hooksMimi Zohar
2026-08-04security: ima: rename boot_aggregate when ima is initialised at late_syncJonathan McDowell
2026-08-04ima: fix out-of-bounds read in xattr_verify()Lincoln Wallace
2026-08-04security: ima: introduce IMA_INIT_LATE_SYNC optionYeoreum Yun
2026-08-04security: lsm: allow LSMs to register for late_initcall_sync initYeoreum Yun
2026-08-04selinux: check level category sets once at load timeStephen Smalley
2026-08-03selinux: require every boolean value to be definedBryam Vargas
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley
2026-07-23keys: make keyring key-chunk byte order agree with keyring_diff_objects()Michael Bommarito
2026-07-23keys: fix out-of-bounds read in keyring_get_key_chunk()Michael Bommarito
2026-07-23KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return typeFabrice Derepas
2026-07-17Merge tag 'selinux-pr-20260717' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-07-16Merge tag 'landlock-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges