aboutsummaryrefslogtreecommitdiffstats
path: root/security (follow)
AgeCommit message (Expand)AuthorFilesLines
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün3-21/+39
2025-03-26landlock: Prepare to use credential instead of domain for scopeMickaël Salaün1-24/+28
2025-03-26landlock: Prepare to use credential instead of domain for networkMickaël Salaün1-15/+12
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün2-30/+92
2025-03-26landlock: Move domain hierarchy managementMickaël Salaün4-34/+53
2025-03-26landlock: Add unique ID generatorMickaël Salaün5-0/+282
2025-03-26lsm: Add audit_log_lsm_data() helperMickaël Salaün1-9/+18
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün3-6/+64
2025-03-25Merge tag 'Smack-for-6.15' of https://github.com/cschaufler/smack-nextLinus Torvalds4-52/+43
2025-03-25Merge tag 'selinux-pr-20250323' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds7-16/+73
2025-03-25Merge tag 'lsm-pr-20250323' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds4-6/+31
2025-03-24Merge tag 'hardening-v6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linuxLinus Torvalds4-29/+36
2025-03-24ipe: policy_fs: fix kernel-doc warningsRandy Dunlap1-2/+6
2025-03-24Merge tag 'vfs-6.15-rc1.async.dir' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfsLinus Torvalds1-4/+4
2025-03-24Merge tag 'vfs-6.15-rc1.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfsLinus Torvalds2-1/+4
2025-03-24Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfsLinus Torvalds1-1/+1
2025-03-22keys: Fix UAF in key_put()David Howells2-1/+5
2025-03-21landlock: Prepare to add second errataMickaël Salaün1-0/+12
2025-03-21landlock: Add erratum for TCP fixMickaël Salaün1-0/+15
2025-03-21landlock: Add the errata interfaceMickaël Salaün4-4/+138
2025-03-21landlock: Move code to ease future backportsMickaël Salaün1-5/+5
2025-03-21crypto: lib/Kconfig - hide library optionsArnd Bergmann1-1/+1
2025-03-17selinux: get netif_wildcard policycap from policy instead of cacheChristian Göttsche1-2/+1
2025-03-15security: Propagate caller information in bpf hooksBlaise Boscaccy2-9/+12
2025-03-10lsm: remove old email address for Stephen SmalleyStephen Smalley1-1/+1
2025-03-10Merge 6.14-rc6 into driver-core-nextGreg Kroah-Hartman6-10/+15
2025-03-08hardening: Enable i386 FORTIFY_SOURCE on Clang 16+Kees Cook1-1/+1
2025-03-08vfs: Remove invalidate_inodes()Jan Kara1-1/+1
2025-03-07capability: Remove unused has_capabilityDr. David Alan Gilbert1-4/+5
2025-03-07yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()Oleg Nesterov1-7/+2
2025-03-07selinux: support wildcard network interface namesChristian Göttsche4-4/+22
2025-03-03loadpin: remove MODULE_COMPRESS_NONE as it is no longer supportedArulpandiyan Vadivel1-1/+1
2025-02-28fortify: Move FORTIFY_SOURCE under 'Kernel hardening options'Mel Gorman2-9/+9
2025-02-28mm: security: Allow default HARDENED_USERCOPY to be set at compile timeMel Gorman1-0/+8
2025-02-28mm: security: Move hardened usercopy under 'Kernel hardening options'Mel Gorman2-12/+16
2025-02-27Change inode_operations.mkdir to return struct dentry *NeilBrown1-4/+4
2025-02-27selinux: add FILE__WATCH_MOUNTNSMiklos Szeredi2-1/+4
2025-02-26selinux: add permission checks for loading other kinds of kernel files"Kipp N. Davis"2-11/+51
2025-02-26Merge tag 'landlock-6.14-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxLinus Torvalds2-3/+2
2025-02-26Merge tag 'integrity-v6.14-fix' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds4-7/+13
2025-02-26perf: Remove unnecessary parameter of security checkLuo Gengkun2-4/+3
2025-02-17Merge 6.14-rc3 into driver-core-nextGreg Kroah-Hartman4-41/+117
2025-02-16smack: recognize ipv4 CIPSO w/o categoriesKonstantin Andreev1-0/+4
2025-02-16smack: Revert "smackfs: Added check catlen"Konstantin Andreev1-14/+3
2025-02-15kernfs: Use RCU to access kernfs_node::name.Sebastian Andrzej Siewior1-2/+5
2025-02-14landlock: Fix non-TCP sockets restrictionMikhail Ivanov1-2/+1
2025-02-14landlock: Fix grammar errorTanya Agarwal1-1/+1
2025-02-13smack: remove /smack/logging if audit is not configuredKonstantin Andreev3-6/+14
2025-02-13smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket labelKonstantin Andreev1-24/+0
2025-02-12smack: dont compile ipv6 code unless ipv6 is configuredKonstantin Andreev2-1/+15
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.