summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2024-08-28selinux: mark both IPv4 and IPv6 accepted connection sockets as labeledGuido Trentalancia
2024-08-28file: reclaim 24 bytes from f_ownerChristian Brauner
2024-08-27selinux: replace kmem_cache_create() with KMEM_CACHE()Eric Suen
2024-08-26lsm: remove LSM_COUNT and LSM_CONFIG_COUNTTetsuo Handa
2024-08-26selinux: annotate false positive data race to avoid KCSAN warningsStephen Smalley
2024-08-25apparmor: fix policy_unpack_test on big endian systemsGuenter Roeck
2024-08-22security: smack: Fix indentation in smack_netfilter.cGiSeong Ji
2024-08-22ipe: Remove duplicated include in ipe.cYang Li
2024-08-22lsm: replace indirect LSM hook calls with static callsKP Singh
2024-08-20ipe: kunit test for parserDeven Bowers
2024-08-20scripts: add boot policy generation programDeven Bowers
2024-08-20ipe: enable support for fs-verity as a trust providerFan Wu
2024-08-20lsm: add security_inode_setintegrity() hookFan Wu
2024-08-20ipe: add support for dm-verity as a trust providerDeven Bowers
2024-08-20block,lsm: add LSM blob and new LSM hooks for block devicesDeven Bowers
2024-08-20ipe: add permissive toggleDeven Bowers
2024-08-20audit,ipe: add IPE auditing supportDeven Bowers
2024-08-20ipe: add userspace interfaceDeven Bowers
2024-08-20lsm: add new securityfs delete functionFan Wu
2024-08-20ipe: introduce 'boot_verified' as a trust providerFan Wu
2024-08-20initramfs,lsm: add a security hook to do_populate_rootfs()Fan Wu
2024-08-20ipe: add LSM hooks on execution and kernel readDeven Bowers
2024-08-20ipe: add evaluation loopDeven Bowers
2024-08-20ipe: add policy parserDeven Bowers
2024-08-19lsm: add IPE lsmDeven Bowers
2024-08-15KEYS: trusted: dcp: fix leak of blob encryption keyDavid Gstir
2024-08-15KEYS: trusted: fix DCP blob payload length assignmentDavid Gstir
2024-08-15lockdown: Make lockdown_lsmid staticYue Haibing
2024-08-12introduce fd_file(), convert all accessors to it.Al Viro
2024-08-12lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore
2024-08-12lsm: cleanup lsm_hooks.hPaul Moore
2024-08-08selinux: revert our use of vma_is_initial_heap()Paul Moore
2024-08-07selinux: add the processing of the failure of avc_add_xperms_decision()Zhen Lei
2024-08-06selinux: fix potential counting error in avc_add_xperms_decision()Zhen Lei
2024-07-31lsm: Refactor return value of LSM hook inode_copy_up_xattrXu Kuohai
2024-07-31lsm: Refactor return value of LSM hook vm_enough_memoryXu Kuohai
2024-07-29lsm: infrastructure management of the perf_event security blobCasey Schaufler
2024-07-29lsm: infrastructure management of the infiniband blobCasey Schaufler
2024-07-29lsm: infrastructure management of the dev_tun blobCasey Schaufler
2024-07-29lsm: add helper for blob allocationsCasey Schaufler
2024-07-29lsm: infrastructure management of the key security blobCasey Schaufler
2024-07-29lsm: infrastructure management of the sock securityCasey Schaufler
2024-07-29selinux: refactor code to return ERR_PTR in selinux_netlbl_sock_genattrGaosheng Cui
2024-07-29selinux: Streamline type determination in security_compute_sidCanfeng Guo
2024-07-27Merge tag 'apparmor-pr-2024-07-25' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2024-07-27Merge tag 'landlock-6.11-rc1-houdini-fix' of git://git.kernel.org/pub/scm/lin...Linus Torvalds
2024-07-24sysctl: treewide: constify the ctl_table argument of proc_handlersJoel Granados
2024-07-24apparmor: unpack transition table if dfa is not presentGeorgia Garcia
2024-07-24apparmor: try to avoid refing the label in apparmor_file_openMateusz Guzik
2024-07-24apparmor: test: add MODULE_DESCRIPTION()Jeff Johnson