aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds7-61/+121
2026-08-04selinux: check level category sets once at load timeStephen Smalley2-17/+30
2026-08-03selinux: require every boolean value to be definedBryam Vargas1-0/+19
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas1-5/+19
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas1-5/+46
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas1-1/+3
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas1-4/+4
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas1-0/+12
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas1-0/+3
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley1-0/+35
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges3-8/+30
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek1-18/+24
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges1-27/+13
2026-07-13selinux: suppress warning flood for retired DCCP netlink messagesYafang Shao1-6/+12
2026-07-02selinux: tighten type validation during policy loadStephen Smalley1-3/+8
2026-07-01selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani1-9/+10
2026-07-01selinux: drop unnecessary goto and label from avc_alloc_node()Kalevi Kolttonen1-2/+1
2026-07-01selinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen1-9/+9
2026-07-01selinux: clean up selinuxfs resources on init failureHaoxiang Li1-6/+13
2026-07-01selinux: check connect-related permissions on TCP Fast OpenStephen Smalley1-1/+18
2026-06-30selinux: hooks: use kmalloc() to allocate path bufferMike Rapoport (Microsoft)1-3/+3
2026-06-17Merge tag 'selinux-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds17-155/+512
2026-06-17Merge tag 'lsm-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds1-7/+3
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-nextJakub Kicinski1-1/+2
2026-06-04xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migrationAntony Antony1-1/+2
2026-05-29selinux: revert use of __getname() in selinux_genfs_get_sid()Paul Moore1-2/+2
2026-05-27selinux: comment spelling fix in ibpkey.cKalevi Kolttonen1-1/+1
2026-05-27selinux: comment typo fix in selinuxfs.cKalevi Kolttonen1-1/+1
2026-05-27selinux: hooks: use __getname() to allocate path bufferMike Rapoport (Microsoft)1-2/+2
2026-05-27selinux: use k[mz]alloc() to allocate temporary buffersMike Rapoport (Microsoft)1-6/+6
2026-05-06selinux: check for simple typesChristian Göttsche3-2/+29
2026-05-06selinux: more strict bounds checkChristian Göttsche3-2/+31
2026-05-06selinux: beef up isvalid checksChristian Göttsche8-58/+83
2026-05-06selinux: reorder policydb_index()Christian Göttsche1-5/+6
2026-05-06selinux: check type attr map overflowsChristian Göttsche3-0/+33
2026-05-06selinux: check length fields in policiesChristian Göttsche4-0/+68
2026-05-06selinux: more strict policy parsingChristian Göttsche8-60/+233
2026-05-06selinux: use u16 for security classesChristian Göttsche3-8/+9
2026-05-06selinux: avoid nontransitive comparisonChristian Göttsche1-8/+9
2026-05-05selinux: shrink critical section in sel_write_load()Stephen Smalley1-10/+8
2026-05-05selinux: allow multiple opens of /sys/fs/selinux/policyStephen Smalley1-23/+4
2026-05-05selinux: prune /sys/fs/selinux/userStephen Smalley3-190/+5
2026-05-05selinux: prune /sys/fs/selinux/disableStephen Smalley1-29/+7
2026-05-05selinux: prune /sys/fs/selinux/checkreqprotStephen Smalley1-40/+7
2026-05-01security,fs,nfs,net: update security_inode_listsecurity() interfaceStephen Smalley1-7/+3
2026-04-29selinux: switch two allocations to use kzalloc_objs()Stephen Smalley1-2/+2
2026-04-29selinux: fix sel_kill_sb()Stephen Smalley1-5/+5
2026-04-28selinux: fix avdcache auditingStephen Smalley2-21/+14
2026-04-27selinux: don't reserve xattr slot when we won't fill itDavid Windsor1-1/+2
2026-04-27selinux: use sk blob accessor in socket permission helpersZongyao Chen1-2/+2
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.