aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2019-10-08Merge tag 'selinux-pr-20191007' of git://git.kernel.org/pub/scm/linux/kernel/...Gravatar Linus Torvalds 1-1/+8
2019-10-05integrity: remove pointless subdir-$(CONFIG_...)Gravatar Masahiro Yamada 1-2/+0
2019-10-05integrity: remove unneeded, broken attempt to add -fshort-wcharGravatar Masahiro Yamada 1-1/+0
2019-10-03selinux: fix context string corruption in convert_context()Gravatar Ondrej Mosnacek 1-1/+8
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Gravatar Linus Torvalds 10-16/+350
2019-09-27Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Gravatar Linus Torvalds 15-105/+627
2019-09-25KEYS: trusted: correctly initialize digests and fix locking issueGravatar Roberto Sassu 1-0/+5
2019-09-23Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-nextGravatar Linus Torvalds 2-23/+23
2019-09-23Merge tag 'safesetid-bugfix-5.4' of git://github.com/micah-morton/linuxGravatar Linus Torvalds 1-1/+2
2019-09-23Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/...Gravatar Linus Torvalds 12-296/+346
2019-09-17LSM: SafeSetID: Stop releasing uninitialized rulesetGravatar Micah Morton 1-1/+2
2019-09-10security: constify some arrays in lockdown LSMGravatar Matthew Garrett 1-2/+2
2019-09-05keys: Fix missing null pointer check in request_key_auth_describe()Gravatar Hillf Danton 1-0/+6
2019-09-04selinux: fix residual uses of current_security() for the SELinux blobGravatar Stephen Smalley 2-11/+11
2019-09-04smack: use GFP_NOFS while holding inode_smack::smk_lockGravatar Eric Biggers 2-4/+4
2019-09-04security: smack: Fix possible null-pointer dereferences in smack_socket_sock_...Gravatar Jia-Ju Bai 1-0/+2
2019-09-04smack: fix some kernel-doc notationsGravatar luanshi 1-18/+15
2019-09-04Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is setGravatar Jann Horn 1-1/+2
2019-08-30keys: ensure that ->match_free() is called in request_key_and_link()Gravatar Eric Biggers 1-1/+1
2019-08-29ima: ima_api: Use struct_size() in kzalloc()Gravatar Gustavo A. R. Silva 1-2/+2
2019-08-29ima: use struct_size() in kzalloc()Gravatar Gustavo A. R. Silva 1-3/+2
2019-08-28ima: Fix use after free in ima_read_modsig()Gravatar Thiago Jung Bauermann 1-1/+2
2019-08-27selinux: avoid atomic_t usage in sidtabGravatar Ondrej Mosnacek 2-32/+35
2019-08-19lockdown: Print current->comm in restriction messagesGravatar Matthew Garrett 1-2/+6
2019-08-19tracefs: Restrict tracefs when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19debugfs: Restrict debugfs when the kernel is locked downGravatar David Howells 1-0/+1
2019-08-19kexec: Allow kexec_file() with appropriate IMA policy when locked downGravatar Matthew Garrett 3-1/+53
2019-08-19lockdown: Lock down perf when in confidentiality modeGravatar David Howells 1-0/+1
2019-08-19bpf: Restrict bpf when kernel lockdown is in confidentiality modeGravatar David Howells 1-0/+1
2019-08-19lockdown: Lock down tracing and perf kprobes when in confidentiality modeGravatar David Howells 1-0/+1
2019-08-19lockdown: Lock down /proc/kcoreGravatar David Howells 1-0/+1
2019-08-19x86/mmiotrace: Lock down the testmmiotrace moduleGravatar David Howells 1-0/+1
2019-08-19lockdown: Lock down module params that specify hardware parameters (eg. ioport)Gravatar David Howells 1-0/+1
2019-08-19lockdown: Lock down TIOCSSERIALGravatar David Howells 1-0/+1
2019-08-19lockdown: Prohibit PCMCIA CIS storage when the kernel is locked downGravatar David Howells 1-0/+1
2019-08-19ACPI: Limit access to custom_method when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19x86/msr: Restrict MSR access when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19x86: Lock down IO port access when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19PCI: Lock down BAR access when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19hibernate: Disable when the kernel is locked downGravatar Josh Boyer 1-0/+1
2019-08-19kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEGravatar Jiri Bohac 2-2/+2
2019-08-19kexec_load: Disable at runtime if the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked downGravatar Matthew Garrett 1-0/+1
2019-08-19lockdown: Enforce module signatures if the kernel is locked downGravatar David Howells 2-0/+2
2019-08-19security: Add a static lockdown policy LSMGravatar Matthew Garrett 5-5/+224
2019-08-19security: Add a "locked down" LSM hookGravatar Matthew Garrett 1-0/+6
2019-08-19security: Support early LSMsGravatar Matthew Garrett 1-8/+42
2019-08-13KEYS: trusted: allow module init if TPM is inactive or deactivatedGravatar Roberto Sassu 1-13/+0
2019-08-12fanotify, inotify, dnotify, security: add security hook for fs notificationsGravatar Aaron Goidel 3-2/+56
2019-08-05ima: fix freeing ongoing ahash_requestGravatar Sascha Hauer 1-0/+5