summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2024-05-13landlock: Add IOCTL access right for character and block devicesGünther Noack
2024-05-10apparmor: fix possible NULL pointer dereferenceLeesoo Ahn
2024-05-10apparmor: fix typo in kernel docChristian Göttsche
2024-05-10apparmor: remove useless static inline function is_deletedColin Ian King
2024-05-10apparmor: use kvfree_sensitive to free data->dataFedor Pchelkin
2024-05-10apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang
2024-05-10kbuild: use $(src) instead of $(srctree)/$(src) for source directoryMasahiro Yamada
2024-05-09KEYS: trusted: Add session encryption protection to the seal/unseal pathJames Bottomley
2024-05-09KEYS: trusted: tpm2: Use struct tpm_buf for sized buffersJarkko Sakkinen
2024-05-09tpm: Store the length of the tpm_buf data separately.Jarkko Sakkinen
2024-05-09tpm: Remove tpm_send()Jarkko Sakkinen
2024-05-09docs: trusted-encrypted: add DCP as new trust sourceDavid Gstir
2024-05-09KEYS: trusted: Introduce NXP DCP-backed trusted keysDavid Gstir
2024-05-09KEYS: trusted: improve scalability of trust source configDavid Gstir
2024-05-09keys: Fix overwrite of key expiration on instantiationSilvio Gissi
2024-05-09keys: update key quotas in key_put()Luis Henriques
2024-04-30selinux: constify source policy in cond_policydb_dup()Christian Göttsche
2024-04-30selinux: avoid printk_ratelimit()Christian Göttsche
2024-04-30selinux: pre-allocate the status pageChristian Göttsche
2024-04-25mm: init_mlocked_on_free_v3York Jasper Niebuhr
2024-04-15lsm: remove the now superfluous sentinel element from ctl_table arrayJoel Granados
2024-04-12ima: add crypto agility support for template-hash algorithmEnrico Bravi
2024-04-09evm: Rename is_unsupported_fs to is_unsupported_hmac_fsStefan Berger
2024-04-09fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTEDStefan Berger
2024-04-09evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509Stefan Berger
2024-04-09ima: re-evaluate file integrity on file metadata changeStefan Berger
2024-04-09evm: Store and detect metadata inode attributes changesStefan Berger
2024-04-09ima: Move file-change detection variables into new structureStefan Berger
2024-04-09evm: Use the metadata inode to calculate metadata hashStefan Berger
2024-04-09evm: Implement per signature type decision in security_inode_copy_up_xattrStefan Berger
2024-04-09security: allow finer granularity in permitting copy-up of security xattrsStefan Berger
2024-04-09ima: Rename backing_inode to real_inodeStefan Berger
2024-04-08integrity: Avoid -Wflex-array-member-not-at-end warningsGustavo A. R. Silva
2024-04-08ima: define an init_module critical data recordMimi Zohar
2024-04-08ima: Fix use-after-free on a dentry's dname.nameStefan Berger
2024-04-04selinux: clarify return code in filename_trans_read_helper_compat()Ondrej Mosnacek
2024-04-03security: Place security_path_post_mknod() where the original IMA call wasRoberto Sassu
2024-04-01selinux: avoid dereference of garbage after mount failureChristian Göttsche
2024-03-27selinux: use u32 as bit position type in ebitmap codeChristian Göttsche
2024-03-27selinux: improve symtab string hashingChristian Göttsche
2024-03-27selinux: dump statistics for more hash tablesChristian Göttsche
2024-03-27selinux: make more use of current_sid()Christian Göttsche
2024-03-27selinux: update numeric format specifiers for ebitmapsChristian Göttsche
2024-03-26selinux: improve error checking in sel_write_load()Paul Moore
2024-03-26selinux: cleanup selinux_lsm_getattr()Paul Moore
2024-03-26selinux: reject invalid ebitmapsChristian Göttsche
2024-03-14Merge tag 'mm-nonmm-stable-2024-03-14-09-36' of git://git.kernel.org/pub/scm/...Linus Torvalds
2024-03-14Merge tag 'lsm-pr-20240314' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-03-14Merge tag 'landlock-6.9-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
2024-03-14lsm: handle the NULL buffer case in lsm_fill_user_ctx()Paul Moore