summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2024-12-24ima: kexec: silence RCU list traversal warningBreno Leitao1-1/+2
2024-12-22vfs: support caching symlink lengths in inodesMateusz Guzik1-1/+1
2024-12-18ima: instantiate the bprm_creds_for_exec() hookMimi Zohar2-2/+54
2024-12-18security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebitsMickaël Salaün1-6/+23
2024-12-18exec: Add a new AT_EXECVE_CHECK flag to execveat(2)Mickaël Salaün1-0/+10
2024-12-18Merge tag 'selinux-pr-20241217' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+6
2024-12-17tomoyo: use realpath if symlink's pathname refers to procfsTetsuo Handa1-2/+9
2024-12-16bpf: lsm: Remove hook to bpf_task_storage_freeSong Liu1-1/+0
2024-12-16tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa1-1/+1
2024-12-15selinux: ignore unknown extended permissionsThiébaud Weksteen1-2/+6
2024-12-15selinux: add netlink nlmsg_type audit messageThiébaud Weksteen2-2/+5
2024-12-13selinux: add support for xperms in conditional policiesChristian Göttsche6-9/+26
2024-12-11selinux: Fix SCTP error inconsistency in selinux_socket_bind()Mikhail Ivanov1-1/+1
2024-12-11selinux: use native iterator typesChristian Göttsche3-4/+4
2024-12-11selinux: add generated av_permissions.h to targetsThomas Weißschuh1-4/+3
2024-12-11ima: Suspend PCR extends and log appends when rebootingStefan Berger3-0/+47
2024-12-10fsnotify: introduce pre-content permission eventsAmir Goldstein1-1/+2
2024-12-06smack: deduplicate access to string conversionKonstantin Andreev4-40/+15
2024-12-05Merge tag 'net-6.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-1/+1
2024-12-04security: add trace event for cap_capableJordan Rome1-13/+41
2024-12-04capabilities: remove cap_mmap_file()Paul Moore1-7/+0
2024-12-04lsm: secctx provider check on releaseCasey Schaufler2-16/+10
2024-12-04lsm: lsm_context in security_dentry_init_securityCasey Schaufler2-9/+8
2024-12-04lsm: use lsm_context in security_inode_getsecctxCasey Schaufler3-13/+16
2024-12-04lsm: replace context+len with lsm_contextCasey Schaufler5-59/+74
2024-12-04lsm: ensure the correct LSM context releaserCasey Schaufler4-9/+23
2024-12-02module: Convert symbol namespace to string literalPeter Zijlstra1-1/+1
2024-11-30Merge tag 'lsm-pr-20241129' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-4/+5
2024-11-30selinux: use sk_to_full_sk() in selinux_ip_output()Eric Dumazet1-1/+1
2024-11-26ima: uncover hidden variable in ima_match_rules()Casey Schaufler1-4/+5
2024-11-26apparmor: lift new_profile declaration to remove C23 extension warningJohn Johansen1-2/+1
2024-11-26apparmor: replace misleading 'scrubbing environment' phrase in debug printRyan Lee1-8/+8
2024-11-26parser: drop dead code for XXX_comb macrosJohn Johansen1-24/+0
2024-11-26apparmor: Remove unused parameter L1 in macro next_combJinjie Ruan1-2/+2
2024-11-26apparmor: audit_cap dedup based on subj_cred instead of profileRyan Lee1-6/+4
2024-11-26apparmor: add a cache entry expiration time aging out capability audit cacheRyan Lee1-3/+8
2024-11-26apparmor: document capability.c:profile_capable ad ptr not being NULLRyan Lee1-1/+1
2024-11-26apparmor: fix 'Do simple duplicate message elimination'chao liu1-0/+2
2024-11-26apparmor: document first entry is in packed perms struct is reservedJohn Johansen1-1/+4
2024-11-26apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan1-0/+6
2024-11-26apparmor: Remove deadcodeDr. David Alan Gilbert9-146/+0
2024-11-26apparmor: Remove unnecessary NULL check before kvfree()Thorsten Blum1-2/+1
2024-11-26apparmor: domain: clean up duplicated parts of handle_onexec()Leesoo Ahn1-26/+12
2024-11-26apparmor: Use IS_ERR_OR_NULL() helper functionHongbo Li1-1/+1
2024-11-26apparmor: add support for 2^24 states to the dfa state machine.John Johansen3-25/+83
2024-11-26apparmor: properly handle cx/px lookup failure for complainRyan Lee1-2/+7
2024-11-26apparmor: allocate xmatch for nullpdb inside aa_alloc_nullRyan Lee1-0/+1
2024-11-25Merge tag 'mm-nonmm-stable-2024-11-24-02-05' of git://git.kernel.org/pub/scm/...Linus Torvalds2-3/+3
2024-11-21Merge tag 'fsnotify_for_v6.13-rc1' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-8/+1
2024-11-19Merge tag 'v6.13-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds1-3/+3