aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security
AgeCommit message (Expand)AuthorFilesLines
7 daysMerge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds36-613/+1609
7 daysapparmor: policy_int make sure list heads are initialized before fail pathJohn Johansen1-2/+2
10 daysMerge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmddLinus Torvalds1-1/+1
12 daysMerge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxLinus Torvalds25-1427/+2276
13 daysKEYS: trusted: Fix TPM teardown orderingChengfeng Ye1-1/+1
14 daysMerge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds9-10/+168
14 daysMerge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-nextLinus Torvalds4-177/+129
14 daysMerge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds1-3/+2
14 daysMerge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds7-61/+121
2026-08-17landlock: Add tracepoints for ptrace and scope denialsMickaël Salaün3-7/+76
2026-08-17landlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün3-1/+136
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün4-65/+147
2026-08-17landlock: Add landlock_enforce_domain tracepointMickaël Salaün2-1/+29
2026-08-17landlock: Add create_domain and free_domain tracepointsMickaël Salaün6-17/+137
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün5-2/+80
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün6-1/+48
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün1-31/+53
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün3-95/+98
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün17-570/+681
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün13-480/+403
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün5-188/+201
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün5-60/+202
2026-08-15apparmor: fix deadlock in complain-mode change_hatJohn Johansen3-14/+37
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess4-11/+30
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess1-4/+4
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack2-9/+55
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün1-0/+11
2026-08-10apparmor: constify aa_label parameters on read-only query helpersJohn Johansen2-20/+23
2026-08-10apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen8-32/+37
2026-08-10apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen10-23/+25
2026-08-10apparmor: constify aa_perms parameters that are read-onlyJohn Johansen6-10/+11
2026-08-10apparmor: drop use of _confined variant for iterationJohn Johansen1-7/+7
2026-08-10apparmor: refactory mount to use check_permsJohn Johansen4-168/+144
2026-08-10apparmor: fix auditing of mount binary dataJohn Johansen1-2/+2
2026-08-10apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen4-10/+22
2026-08-10apparmor: mark static tables and structs as read onlyJohn Johansen8-20/+22
2026-08-10apparmor: fix error debug output in fn_label_buildJohn Johansen1-2/+2
2026-08-10apparmor: make table entry count last enum for static tablesJohn Johansen3-5/+5
2026-08-10apparmor: fix race condition in label replacementJohn Johansen1-12/+48
2026-08-10apparmor: refactor xattr attachment, to take the file pathJohn Johansen1-15/+19
2026-08-10apparmor: fix unconfined user namespace restriction forced stackJohn Johansen1-26/+54
2026-08-10apparmor: reserve mediation class for packet mediationJohn Johansen2-1/+2
2026-08-10apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen1-36/+33
2026-08-10apparmor: move netfilter functions next to the LSM network operationsJohn Johansen1-44/+46
2026-08-10apparmor: refactor network socket mediation to support compatibilityJohn Johansen1-8/+10
2026-08-10apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen2-13/+497
2026-08-10apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen6-22/+190
2026-08-10apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen3-9/+13
2026-08-10apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen1-3/+3
2026-08-10apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim1-3/+3