summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2025-01-22Merge tag 'keys-next-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2025-01-21Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-01-21Merge tag 'lsm-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2025-01-21Merge tag 'Smack-for-6.14' of https://github.com/cschaufler/smack-nextLinus Torvalds
2025-01-21Merge tag 'integrity-v6.14' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2025-01-21KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=yDavid Gstir
2025-01-20Merge tag 'vfs-6.14-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2025-01-18apparmor: fix dbus permission queries to v9 ABIJohn Johansen
2025-01-18apparmor: gate make fine grained unix mediation behind v9 abiJohn Johansen
2025-01-18apparmor: add fine grained af_unix mediationJohn Johansen
2025-01-18apparmor: in preparation for finer networking rules rework match_protJohn Johansen
2025-01-18apparmor: lift kernel socket check out of critical sectionJohn Johansen
2025-01-18apparmor: remove af_select macroJohn Johansen
2025-01-18apparmor: add ability to mediate caps with policy state machineJohn Johansen
2025-01-18apparmor: fix x_table_lookup when stacking is not the first entryJohn Johansen
2025-01-18apparmor: add support for profiles to define the kill signalJohn Johansen
2025-01-18apparmor: add additional flags to extended permission.John Johansen
2025-01-18apparmor: carry mediation check on labelJohn Johansen
2025-01-18apparmor: cleanup: refactor file_perm() to doc semantics of some checksJohn Johansen
2025-01-18apparmor: remove explicit restriction that unconfined cannot use change_hatJohn Johansen
2025-01-18apparmor: ensure labels with more than one entry have correct flagsJohn Johansen
2025-01-18apparmor: switch signal mediation to use RULE_MEDIATESJohn Johansen
2025-01-18apparmor: remove redundant unconfined check.John Johansen
2025-01-18apparmor: cleanup: attachment perm lookup to use lookup_perms()John Johansen
2025-01-18apparmor: Improve debug print infrastructureJohn Johansen
2025-01-18apparmor: Use str_yes_no() helper functionThorsten Blum
2025-01-17landlock: Optimize file path walks and prepare for audit supportMickaël Salaün
2025-01-17landlock: Align partial refer access checks with final onesMickaël Salaün
2025-01-17landlock: Simplify initially denied access rightsMickaël Salaün
2025-01-17landlock: Move access typesMickaël Salaün
2025-01-17landlock: Factor out check_access_path()Mickaël Salaün
2025-01-14landlock: Use scoped guards for ruleset in landlock_add_rule()Mickaël Salaün
2025-01-14landlock: Use scoped guards for rulesetMickaël Salaün
2025-01-14landlock: Constify get_mode_access()Mickaël Salaün
2025-01-14landlock: Handle weird filesMickaël Salaün
2025-01-12security: remove get_task_comm() and print task comm directlyYafang Shao
2025-01-08hardening: Document INIT_STACK_ALL_PATTERN behavior with GCCGeert Uytterhoeven
2025-01-07selinux: make more use of str_read() when loading the policyChristian Göttsche
2025-01-07selinux: avoid unnecessary indirection in struct level_datumChristian Göttsche
2025-01-07selinux: use known type instead of void pointerChristian Göttsche
2025-01-07selinux: rename comparison functions for clarityChristian Göttsche
2025-01-07selinux: rework match_ipv6_addrmask()Christian Göttsche
2025-01-07selinux: constify and reconcile function parameter namesChristian Göttsche
2025-01-07selinux: avoid using types indicating user space interactionChristian Göttsche
2025-01-07selinux: supply missing field initializersChristian Göttsche
2025-01-07Merge tag 'selinux-pr-20250107' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-01-06tomoyo: automatically use patterns for several situations in learning modeTetsuo Handa
2025-01-05lockdown: initialize local array before use to quiet static analysisTanya Agarwal
2025-01-04safesetid: check size of policy writesLeo Stone
2025-01-04lsm: rename variable to avoid shadowingChristian Göttsche