summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2026-04-18apparmor: fix race between freeing data and fs accessing itJohn Johansen
2026-04-18apparmor: fix race on rawdata dereferenceJohn Johansen
2026-04-18apparmor: fix differential encoding verificationJohn Johansen
2026-04-18apparmor: fix unprivileged local user can do privileged policy managementJohn Johansen
2026-04-18apparmor: Fix double free of ns_name in aa_replace_profiles()John Johansen
2026-04-18apparmor: fix missing bounds check on DEFAULT table in verify_dfa()Massimiliano Pellizzer
2026-04-18apparmor: fix side-effect bug in match_char() macro usageMassimiliano Pellizzer
2026-04-18apparmor: fix: limit the number of levels of policy namespacesJohn Johansen
2026-04-18apparmor: replace recursive profile removal with iterative approachMassimiliano Pellizzer
2026-04-18apparmor: fix memory leak in verify_headerMassimiliano Pellizzer
2026-04-18apparmor: validate DFA start states are in bounds in unpack_pdbMassimiliano Pellizzer
2026-04-18xen/privcmd: add boot control for restricted usage in domUJuergen Gross
2026-03-04apparmor: fix invalid deref of rawdata when export_binary is unsetGeorgia Garcia
2026-03-04apparmor: fix rlimit for posix cpu timersJohn Johansen
2026-03-04apparmor: fix NULL sock in aa_sock_file_permJohn Johansen
2026-03-04smack: /smack/doi: accept previously used valuesKonstantin Andreev
2026-03-04smack: /smack/doi must be > 0Konstantin Andreev
2026-01-19ima: Handle error code returned by ima_filter_rule_match()Zhao Yipeng
2026-01-19smack: fix bug: unprivileged task can create labelsKonstantin Andreev
2025-10-29KEYS: trusted_tpm1: Compare HMAC values in constant timeEric Biggers
2025-08-28securityfs: don't pin dentries twice, once is enough...Al Viro
2025-08-28apparmor: ensure WB_HISTORY_SIZE value is a power of 2Ryan Lee
2025-06-27selinux: fix selinux_xfrm_alloc_user() to set correct ctx_lenStephen Smalley
2025-06-04smack: recognize ipv4 CIPSO w/o categoriesKonstantin Andreev
2025-03-13ima: Fix use-after-free on a dentry's dname.nameStefan Berger
2025-03-13tomoyo: don't emit warning in tomoyo_write_control()Tetsuo Handa
2025-03-13safesetid: check size of policy writesLeo Stone
2025-01-09selinux: ignore unknown extended permissionsThiƩbaud Weksteen
2024-12-14apparmor: test: Fix memory leak for aa_unpack_strdup()Jinjie Ruan
2024-12-14apparmor: fix 'Do simple duplicate message elimination'chao liu
2024-11-17security/keys: fix slab-out-of-bounds in key_task_permissionChen Ridong
2024-11-08selinux: improve error checking in sel_write_load()Paul Moore
2024-10-17tomoyo: fallback to realpath if symlink's pathname does not existTetsuo Handa
2024-10-17proc: add config & param to block forcing mem writesAdrian Ratiu
2024-10-17selinux,smack: don't bypass permissions check in inode_setsecctx hookScott Mayhew
2024-10-17smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipsoJiawei Ye
2024-09-12smack: unix sockets: fix accept()ed socket labelKonstantin Andreev
2024-09-12smack: tcp: ipv4, fix incorrect labelingCasey Schaufler
2024-09-12apparmor: fix possible NULL pointer dereferenceLeesoo Ahn
2024-09-04apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck
2024-09-04selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei
2024-08-19apparmor: Fix null pointer deref when receiving skb during sock creationXiao Liang
2024-08-19task_work: s/task_work_cancel()/task_work_cancel_func()/Frederic Weisbecker
2024-08-19apparmor: use kvfree_sensitive to free data->dataFedor Pchelkin
2024-07-18ima: Avoid blocking in RCU read-side critical sectionGUO Zihua
2024-05-25ima: fix deadlock when traversing "ima_default_rules".liqiong
2024-05-17keys: Fix overwrite of key expiration on instantiationSilvio Gissi
2024-04-13smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()Roberto Sassu
2024-04-13smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()Roberto Sassu
2024-03-15lsm: fix default return value of the socket_getpeersec_*() hooksOndrej Mosnacek