aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2023-08-25LoadPin: Annotate struct dm_verity_loadpin_trusted_root_digest with __counted_byKees Cook1-2/+1
2023-08-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2023-08-22apparmor: fix invalid reference on profile->disconnectedGeorgia Garcia2-2/+4
2023-08-22Merge tag 'selinux-pr-20230821' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+1
2023-08-21selinux: use vma_is_initial_stack() and vma_is_initial_heap()Kefeng Wang1-5/+2
2023-08-18selinux: set next pointer before attaching to listChristian Göttsche1-1/+1
2023-08-18integrity: Annotate struct ima_rule_opt_list with __counted_byKees Cook1-2/+2
2023-08-18s390/ipl: fix virtual vs physical address confusionAlexander Gordeev1-2/+2
2023-08-18landlock: Annotate struct landlock_rule with __counted_byKees Cook1-1/+1
2023-08-17KEYS: Replace all non-returning strlcpy with strscpyAzeem Shaikh1-1/+1
2023-08-17integrity: PowerVM support for loading third party code signing keysNayna Jain3-0/+30
2023-08-17integrity: PowerVM machine keyring enablementNayna Jain1-1/+3
2023-08-17integrity: check whether imputed trust is enabledNayna Jain4-6/+22
2023-08-17integrity: remove global variable from machine_keyring.cNayna Jain1-2/+2
2023-08-17integrity: ignore keys failing CA restrictions on non-UEFI platformNayna Jain1-1/+1
2023-08-17integrity: PowerVM support for loading CA keys on machine keyringNayna Jain3-0/+30
2023-08-17integrity: Enforce digitalSignature usage in the ima and evm keyringsEric Snowberg3-4/+6
2023-08-15selinux: prevent KMSAN warning in selinux_inet_conn_request()Andrew Kanner1-0/+1
2023-08-15hardening: Move BUG_ON_DATA_CORRUPTION to hardening optionsMarco Elver1-0/+10
2023-08-15list: Introduce CONFIG_LIST_HARDENEDMarco Elver1-0/+13
2023-08-15lsm: constify the 'file' parameter in security_binder_transfer_file()Khadija Kamran2-5/+5
2023-08-15vfs, security: Fix automount superblock LSM init problem, preventing NFS sb s...David Howells3-0/+87
2023-08-13tomoyo: remove unused function declarationGONG, Ruiqi1-2/+0
2023-08-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2023-08-09selinux: use unsigned iterator in nlmsgtab codeChristian Göttsche1-1/+2
2023-08-09selinux: avoid implicit conversions in policydb codeChristian Göttsche1-32/+37
2023-08-09selinux: avoid implicit conversions in selinuxfs codeChristian Göttsche1-7/+7
2023-08-09selinux: make left shifts well definedChristian Göttsche1-6/+6
2023-08-09selinux: update type for number of class permissions in services codeChristian Göttsche2-2/+2
2023-08-09selinux: avoid implicit conversions in avtab codeChristian Göttsche1-12/+12
2023-08-09selinux: revert SECINITSID_INIT supportPaul Moore6-64/+1
2023-08-08lsm: constify the 'target' parameter in security_capget()Khadija Kamran4-4/+4
2023-08-08apparmor: remove unused PROF_* macrosGONG, Ruiqi1-3/+0
2023-08-08apparmor: cleanup unused functions in file.hXiu Jianfeng1-37/+0
2023-08-08apparmor: cleanup unused declarations in policy.hXiu Jianfeng1-6/+0
2023-08-08apparmor: fixup return comments for kernel doc cleanups by Gaosheng CuiJohn Johansen2-4/+4
2023-08-08selinux: use GFP_KERNEL while reading binary policyChristian Göttsche1-5/+5
2023-08-08selinux: update comment on selinux_hooks[]Xiu Jianfeng1-4/+0
2023-08-07smackfs: Prevent underflow in smk_set_cipso()Dan Carpenter1-1/+1
2023-08-07security: smack: smackfs: fix typo (lables->labels)Tóth János1-1/+1
2023-08-07sysctl: set variable key_sysctls storage-class-specifier to staticTom Rix1-1/+1
2023-08-07kexec_lock: Replace kexec_mutex() by kexec_lock() in two commentsWenyu Liu1-1/+1
2023-08-05tomoyo: refactor deprecated strncpyJustin Stitt1-3/+2
2023-08-03selinux: avoid implicit conversions in services codeChristian Göttsche3-16/+18
2023-08-03selinux: avoid implicit conversions in mls codeChristian Göttsche1-4/+6
2023-08-03selinux: use identical iterator type in hashtab_duplicate()Christian Göttsche1-1/+2
2023-08-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+8
2023-08-01ima: require signed IMA policy when UEFI secure boot is enabledCoiby Xu1-0/+3
2023-08-01integrity: Always reference the blacklist keyring with appraisalEric Snowberg2-17/+12
2023-08-01ima: Remove deprecated IMA_TRUSTED_KEYRING KconfigNayna Jain1-12/+0