summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2021-02-16KEYS: trusted: Reserve TPM for seal and unseal operationsJarkko Sakkinen
2021-02-16KEYS: trusted: Fix migratable=1 failingJarkko Sakkinen
2021-02-16KEYS: trusted: Fix incorrect handling of tpm_get_random()Jarkko Sakkinen
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun
2021-02-10Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar
2021-02-10ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian
2021-02-10ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian
2021-02-02smackfs: restrict bytes count in smackfs write functionsSabyrzhan Tasbolatov
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa
2021-01-28cap: fix conversions on getxattrMiklos Szeredi
2021-01-26IMA: Measure kernel version in early bootRaphael Gianotti
2021-01-24ima: handle idmapped mountsChristian Brauner
2021-01-24apparmor: handle idmapped mountsChristian Brauner
2021-01-24fs: make helpers idmap mount awareChristian Brauner
2021-01-24commoncap: handle idmapped mountsChristian Brauner
2021-01-24xattr: handle idmapped mountsTycho Andersen
2021-01-24acl: handle idmapped mountsChristian Brauner
2021-01-24inode: make init and permission helpers idmapped mount awareChristian Brauner
2021-01-24capability: handle idmapped mountsChristian Brauner
2021-01-21certs: Fix blacklist flag type confusionDavid Howells
2021-01-21KEYS: remove redundant memsetTom Rix
2021-01-21security: keys: delete repeated words in commentsRandy Dunlap
2021-01-21security/keys: use kvfree_sensitive()Denis Efremov
2021-01-21watch_queue: Drop references to /dev/watch_queueGabriel Krisman Bertazi
2021-01-21keys: Remove outdated __user annotationsJann Horn
2021-01-21security: keys: Fix fall-through warnings for ClangGustavo A. R. Silva
2021-01-16make dump_common_audit_data() safe to be called from RCU pathwalkAl Viro
2021-01-16dump_common_audit_data(): fix racy accesses to ->d_nameAl Viro
2021-01-14selinux: include a consumer of the new IMA critical data hookLakshmi Ramasubramanian
2021-01-14IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian
2021-01-14IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi
2021-01-14IMA: limit critical data measurement based on a labelTushar Sugandhi
2021-01-14IMA: add policy rule to measure critical dataTushar Sugandhi
2021-01-14IMA: define a hook to measure kernel integrity critical dataTushar Sugandhi
2021-01-14IMA: add support to measure buffer data hashTushar Sugandhi
2021-01-14IMA: generalize keyring specific measurement constructsTushar Sugandhi
2021-01-14selinux: teach SELinux about anonymous inodesDaniel Colascione
2021-01-14security: add inode_init_security_anon() LSM hookLokesh Gidra
2021-01-13selinux: fall back to SECURITY_FS_USE_GENFS if no xattr supportOndrej Mosnacek
2021-01-13evm: Fix memleak in init_descDinghao Liu
2021-01-12selinux: mark selinux_xfrm_refcount as __read_mostlyOndrej Mosnacek
2021-01-12selinux: mark some global variables __ro_after_initOndrej Mosnacek
2021-01-12selinux: make selinuxfs_mount staticOndrej Mosnacek
2021-01-12selinux: drop the unnecessary aurule_callback variableOndrej Mosnacek
2021-01-12selinux: remove unused global variablesOndrej Mosnacek
2021-01-04selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein
2021-01-04selinux: handle MPTCP consistently with TCPPaolo Abeni
2020-12-29capabilities: Don't allow writing ambiguous v3 file capabilitiesEric W. Biederman
2020-12-24Merge tag 'Smack-for-5.11-io_uring-fix' of git://github.com/cschaufler/smack-...Linus Torvalds