summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
11 dayskernel/kexec: change the prototype of kimage_map_segment()Pingfan Liu
2026-01-02tpm2-sessions: Fix out of range indexing in name_sizeJarkko Sakkinen
2026-01-02KEYS: trusted: Fix a memory leak in tpm2_load_cmdJarkko Sakkinen
2025-12-18landlock: Fix handling of disconnected directoriesMickaël Salaün
2025-12-18ima: Handle error code returned by ima_filter_rule_match()Zhao Yipeng
2025-12-18ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hookRoberto Sassu
2025-12-18smack: fix bug: setting task label silently ignores input garbageKonstantin Andreev
2025-12-18smack: fix bug: unprivileged task can create labelsKonstantin Andreev
2025-12-18smack: fix bug: invalid label of unix socket fileKonstantin Andreev
2025-12-18smack: always "instantiate" inode in smack_inode_init_security()Konstantin Andreev
2025-12-18smack: deduplicate xattr setting in smack_inode_init_security()Konstantin Andreev
2025-12-18smack: deduplicate "does access rule request transmutation"Konstantin Andreev
2025-12-18smack: fix bug: SMACK64TRANSMUTE set on non-directoryKonstantin Andreev
2025-11-22Merge tag 'selinux-pr-20251121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-11-20selinux: rename the cred_security_struct variables to "crsec"Paul Moore
2025-11-20selinux: move avdcache to per-task security structStephen Smalley
2025-11-20selinux: rename task_security_struct to cred_security_structStephen Smalley
2025-11-12landlock: fix splats from iput() after it started calling might_sleep()Mateusz Guzik
2025-10-05Merge tag 'integrity-v6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2025-10-04Merge tag 'keys-next-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/j...Linus Torvalds
2025-10-04security: keys: use menuconfig for KEYS symbolRandy Dunlap
2025-10-04KEYS: encrypted: Use SHA-256 library instead of crypto_shashEric Biggers
2025-10-03Merge tag 'pull-f_path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds
2025-10-03Merge tag 'pull-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds
2025-10-03ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattrCoiby Xu
2025-10-03integrity: Select CRYPTO from INTEGRITY_ASYMMETRIC_KEYSEric Biggers
2025-10-02Merge tag 'bitmap-for-6.18' of https://github.com/norov/linuxLinus Torvalds
2025-09-30Merge tag 'lsm-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2025-09-30Merge tag 'selinux-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-09-30Merge tag 'audit-pr-20250926' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2025-09-29Merge tag 'kernel-6.18-rc1.clone3' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2025-09-27KEYS: trusted_tpm1: Move private functionality out of public headerEric Biggers
2025-09-27KEYS: trusted_tpm1: Use SHA-1 library instead of crypto_shashEric Biggers
2025-09-27KEYS: trusted_tpm1: Compare HMAC values in constant timeEric Biggers
2025-09-22rust: add bitmap API.Burak Emir
2025-09-15apparmor/af_unix: constify struct path * argumentsAl Viro
2025-09-15security_dentry_init_security(): constify qstr argumentAl Viro
2025-09-11lsm: CONFIG_LSM can depend on CONFIG_SECURITYRandy Dunlap
2025-09-07selinux: enable per-file labeling for functionfsNeill Kapron
2025-09-03selinux: fix sel_read_bool() allocation and error handlingStephen Smalley
2025-09-01copy_process: pass clone_flags as u64 across calltreeSimon Schuster
2025-09-01fs: add an icount_read helperJosef Bacik
2025-08-30audit: add record for multiple object contextsCasey Schaufler
2025-08-30audit: add record for multiple task security contextsCasey Schaufler
2025-08-30lsm: security_lsmblob_to_secctx module selectionCasey Schaufler
2025-08-18security: use umax() to improve codeQianfeng Rong
2025-08-12selinux: Remove redundant __GFP_NOWARNQianfeng Rong
2025-08-11lsm,selinux: Add LSM blob support for BPF objectsBlaise Boscaccy
2025-08-11lsm: use lsm_blob_alloc() in lsm_bdev_alloc()Paul Moore
2025-08-11selinux: use a consistent method to get full socket from skbTianjia Zhang