aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2021-02-07security: apparmor: delete repeated words in commentsRandy Dunlap2-2/+2
2021-02-07security: apparmor: file.h: delete duplicated wordRandy Dunlap1-1/+1
2021-02-07apparmor: switch to apparmor to internal capable check for policy managementJohn Johansen1-1/+17
2021-02-07apparmor: update policy capable checks to use a labelJohn Johansen5-23/+51
2021-02-02smackfs: restrict bytes count in smackfs write functionsSabyrzhan Tasbolatov1-2/+19
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa1-1/+1
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa3-24/+24
2021-01-28cap: fix conversions on getxattrMiklos Szeredi1-24/+43
2021-01-26IMA: Measure kernel version in early bootRaphael Gianotti1-0/+5
2021-01-24ima: handle idmapped mountsChristian Brauner7-40/+68
2021-01-24apparmor: handle idmapped mountsChristian Brauner3-10/+24
2021-01-24fs: make helpers idmap mount awareChristian Brauner2-2/+3
2021-01-24commoncap: handle idmapped mountsChristian Brauner4-37/+84
2021-01-24xattr: handle idmapped mountsTycho Andersen7-20/+24
2021-01-24acl: handle idmapped mountsChristian Brauner1-7/+38
2021-01-24inode: make init and permission helpers idmapped mount awareChristian Brauner1-2/+2
2021-01-24capability: handle idmapped mountsChristian Brauner1-2/+3
2021-01-21certs: Fix blacklist flag type confusionDavid Howells2-3/+4
2021-01-21KEYS: remove redundant memsetTom Rix1-2/+0
2021-01-21security: keys: delete repeated words in commentsRandy Dunlap2-3/+3
2021-01-21security/keys: use kvfree_sensitive()Denis Efremov1-6/+3
2021-01-21watch_queue: Drop references to /dev/watch_queueGabriel Krisman Bertazi1-4/+4
2021-01-21keys: Remove outdated __user annotationsJann Horn1-3/+3
2021-01-21security: keys: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+1
2021-01-16make dump_common_audit_data() safe to be called from RCU pathwalkAl Viro1-2/+3
2021-01-16dump_common_audit_data(): fix racy accesses to ->d_nameAl Viro1-2/+5
2021-01-14selinux: include a consumer of the new IMA critical data hookLakshmi Ramasubramanian5-10/+127
2021-01-14IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian1-0/+12
2021-01-14IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi1-3/+5
2021-01-14IMA: limit critical data measurement based on a labelTushar Sugandhi1-3/+34
2021-01-14IMA: add policy rule to measure critical dataTushar Sugandhi1-4/+25
2021-01-14IMA: define a hook to measure kernel integrity critical dataTushar Sugandhi3-1/+26
2021-01-14IMA: add support to measure buffer data hashTushar Sugandhi5-9/+30
2021-01-14IMA: generalize keyring specific measurement constructsTushar Sugandhi4-26/+35
2021-01-14selinux: teach SELinux about anonymous inodesDaniel Colascione2-0/+59
2021-01-14security: add inode_init_security_anon() LSM hookLokesh Gidra1-0/+8
2021-01-13selinux: fall back to SECURITY_FS_USE_GENFS if no xattr supportOndrej Mosnacek1-25/+52
2021-01-13evm: Fix memleak in init_descDinghao Liu1-2/+5
2021-01-12selinux: mark selinux_xfrm_refcount as __read_mostlyOndrej Mosnacek1-1/+1
2021-01-12selinux: mark some global variables __ro_after_initOndrej Mosnacek6-12/+12
2021-01-12selinux: make selinuxfs_mount staticOndrej Mosnacek2-2/+1
2021-01-12selinux: drop the unnecessary aurule_callback variableOndrej Mosnacek1-7/+3
2021-01-12selinux: remove unused global variablesOndrej Mosnacek4-4/+0
2021-01-04selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein1-0/+4
2021-01-04selinux: handle MPTCP consistently with TCPPaolo Abeni1-1/+2
2020-12-29capabilities: Don't allow writing ambiguous v3 file capabilitiesEric W. Biederman1-1/+11
2020-12-24Merge tag 'Smack-for-5.11-io_uring-fix' of git://github.com/cschaufler/smack-...Linus Torvalds1-2/+3
2020-12-24Merge tag 'efi_updates_for_v5.11' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-0/+77
2020-12-22Smack: Handle io_uring kernel thread privilegesCasey Schaufler1-2/+3
2020-12-17Merge tag 'ovl-update-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+1
Powered by cgit, Gruvboxed by Blaster4385.