Age | Commit message (Expand) | Author |
2019-10-05 | integrity: remove pointless subdir-$(CONFIG_...) | Masahiro Yamada |
2019-10-05 | integrity: remove unneeded, broken attempt to add -fshort-wchar | Masahiro Yamada |
2019-09-28 | Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git... | Linus Torvalds |
2019-09-27 | Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds |
2019-09-25 | KEYS: trusted: correctly initialize digests and fix locking issue | Roberto Sassu |
2019-09-23 | Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-next | Linus Torvalds |
2019-09-23 | Merge tag 'safesetid-bugfix-5.4' of git://github.com/micah-morton/linux | Linus Torvalds |
2019-09-23 | Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/... | Linus Torvalds |
2019-09-17 | LSM: SafeSetID: Stop releasing uninitialized ruleset | Micah Morton |
2019-09-10 | security: constify some arrays in lockdown LSM | Matthew Garrett |
2019-09-05 | keys: Fix missing null pointer check in request_key_auth_describe() | Hillf Danton |
2019-09-04 | selinux: fix residual uses of current_security() for the SELinux blob | Stephen Smalley |
2019-09-04 | smack: use GFP_NOFS while holding inode_smack::smk_lock | Eric Biggers |
2019-09-04 | security: smack: Fix possible null-pointer dereferences in smack_socket_sock_... | Jia-Ju Bai |
2019-09-04 | smack: fix some kernel-doc notations | luanshi |
2019-09-04 | Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set | Jann Horn |
2019-08-30 | keys: ensure that ->match_free() is called in request_key_and_link() | Eric Biggers |
2019-08-29 | ima: ima_api: Use struct_size() in kzalloc() | Gustavo A. R. Silva |
2019-08-29 | ima: use struct_size() in kzalloc() | Gustavo A. R. Silva |
2019-08-28 | ima: Fix use after free in ima_read_modsig() | Thiago Jung Bauermann |
2019-08-27 | selinux: avoid atomic_t usage in sidtab | Ondrej Mosnacek |
2019-08-19 | lockdown: Print current->comm in restriction messages | Matthew Garrett |
2019-08-19 | tracefs: Restrict tracefs when the kernel is locked down | Matthew Garrett |
2019-08-19 | debugfs: Restrict debugfs when the kernel is locked down | David Howells |
2019-08-19 | kexec: Allow kexec_file() with appropriate IMA policy when locked down | Matthew Garrett |
2019-08-19 | lockdown: Lock down perf when in confidentiality mode | David Howells |
2019-08-19 | bpf: Restrict bpf when kernel lockdown is in confidentiality mode | David Howells |
2019-08-19 | lockdown: Lock down tracing and perf kprobes when in confidentiality mode | David Howells |
2019-08-19 | lockdown: Lock down /proc/kcore | David Howells |
2019-08-19 | x86/mmiotrace: Lock down the testmmiotrace module | David Howells |
2019-08-19 | lockdown: Lock down module params that specify hardware parameters (eg. ioport) | David Howells |
2019-08-19 | lockdown: Lock down TIOCSSERIAL | David Howells |
2019-08-19 | lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down | David Howells |
2019-08-19 | ACPI: Limit access to custom_method when the kernel is locked down | Matthew Garrett |
2019-08-19 | x86/msr: Restrict MSR access when the kernel is locked down | Matthew Garrett |
2019-08-19 | x86: Lock down IO port access when the kernel is locked down | Matthew Garrett |
2019-08-19 | PCI: Lock down BAR access when the kernel is locked down | Matthew Garrett |
2019-08-19 | hibernate: Disable when the kernel is locked down | Josh Boyer |
2019-08-19 | kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE | Jiri Bohac |
2019-08-19 | kexec_load: Disable at runtime if the kernel is locked down | Matthew Garrett |
2019-08-19 | lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down | Matthew Garrett |
2019-08-19 | lockdown: Enforce module signatures if the kernel is locked down | David Howells |
2019-08-19 | security: Add a static lockdown policy LSM | Matthew Garrett |
2019-08-19 | security: Add a "locked down" LSM hook | Matthew Garrett |
2019-08-19 | security: Support early LSMs | Matthew Garrett |
2019-08-13 | KEYS: trusted: allow module init if TPM is inactive or deactivated | Roberto Sassu |
2019-08-12 | fanotify, inotify, dnotify, security: add security hook for fs notifications | Aaron Goidel |
2019-08-05 | ima: fix freeing ongoing ahash_request | Sascha Hauer |
2019-08-05 | ima: always return negative code for error | Sascha Hauer |
2019-08-05 | ima: Store the measurement again when appraising a modsig | Thiago Jung Bauermann |