aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security/landlock
AgeCommit message (Expand)AuthorFilesLines
2026-08-17landlock: Add tracepoints for ptrace and scope denialsMickaël Salaün3-7/+76
2026-08-17landlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün3-1/+136
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün4-65/+147
2026-08-17landlock: Add landlock_enforce_domain tracepointMickaël Salaün2-1/+29
2026-08-17landlock: Add create_domain and free_domain tracepointsMickaël Salaün6-17/+137
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün5-2/+80
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün6-1/+48
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün1-31/+53
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün3-95/+98
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün17-570/+681
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün13-480/+403
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün5-188/+201
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün5-60/+202
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess4-11/+30
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess1-4/+4
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack2-9/+55
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün1-0/+11
2026-07-10landlock: Update formattingMickaël Salaün1-6/+3
2026-07-10landlock: Fix kernel-doc for the nested quiet layer flagMickaël Salaün1-2/+2
2026-07-10landlock: Fix TCP Fast Open connection bypassMatthieu Buffet1-0/+8
2026-06-19Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxLinus Torvalds14-190/+788
2026-06-14landlock: Suppress logging when quiet flag is presentTingmao Wang7-16/+324
2026-06-14landlock: Add API support and docs for the quiet flagsTingmao Wang8-27/+89
2026-06-14landlock: Add a place for flags to layer rulesTingmao Wang10-112/+176
2026-06-13landlock: Add UDP send+connect access controlMatthieu Buffet3-18/+134
2026-06-13landlock: Add UDP bind() access controlMatthieu Buffet4-8/+15
2026-06-13landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet1-2/+9
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas3-0/+35
2026-06-13landlock: Account all audit data allocations to user spaceMickaël Salaün2-8/+6
2026-06-13landlock: Set audit_net.sk for socket access checksMickaël Salaün1-0/+1
2026-05-11fs: add icount_read_once() and stop open-coding ->i_count loadsMateusz Guzik1-1/+1
2026-04-07landlock: Clarify BUILD_BUG_ON check in scoping logicGünther Noack2-6/+12
2026-04-07landlock: Control pathname UNIX domain socket resolution by pathGünther Noack5-5/+134
2026-04-07landlock: Use mem_is_zero() in is_layer_masks_allowed()Günther Noack1-1/+1
2026-04-07landlock: Fix kernel-doc warning for pointer-to-array parametersMickaël Salaün1-2/+2
2026-04-07landlock: Fix formatting in tsync.cMickaël Salaün1-49/+58
2026-04-07landlock: Improve kernel-doc "Return:" section consistencyMickaël Salaün8-34/+25
2026-04-07landlock: Add missing kernel-doc "Return:" sectionsMickaël Salaün5-14/+24
2026-04-07landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1Mickaël Salaün1-5/+9
2026-04-07landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()Mickaël Salaün1-4/+2
2026-03-10landlock: Clean up interrupted thread logic in TSYNCYihan Ding1-7/+13
2026-03-10landlock: Serialize TSYNC thread restrictionYihan Ding1-1/+11
2026-03-04landlock: Improve TSYNC typesMickaël Salaün1-5/+8
2026-03-04landlock: Fully release unused TSYNC work entriesMickaël Salaün1-6/+41
2026-03-04landlock: Fix formattingMickaël Salaün2-7/+5
2026-02-21Convert 'alloc_flex' family to use the new default GFP_KERNEL argumentLinus Torvalds1-1/+1
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook4-9/+9
2026-02-10landlock: Transpose the layer masks data structureGünther Noack9-340/+271
2026-02-10landlock: Add access_mask_subset() helperGünther Noack2-2/+9
2026-02-06landlock: Add errata documentation sectionSamasth Norway Ananda4-1/+28