index
:
wireguard-linux
backport-5.4.y
davem/net
davem/net-next
devel
gregkh/stable-5.4.y
jd/bump-compilers
jd/deferred-aip-removal
jd/new-archs
jd/orphan-parallel
jd/rcu-barrier
jd/shorter-socket-lock
jd/unified-crypt-queue
jd/xdp-l3
stable
update-toolchain
WireGuard for the Linux kernel
Jason A. Donenfeld
about
summary
refs
log
tree
commit
diff
stats
homepage
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
Files
Lines
7 days
Merge tag 'apparmor-pr-2026-08-26' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
Linus Torvalds
36
-613
/
+1609
7 days
apparmor: policy_int make sure list heads are initialized before fail path
John Johansen
1
-2
/
+2
10 days
Merge tag 'for-next-keys-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd
Linus Torvalds
1
-1
/
+1
12 days
Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux
Linus Torvalds
25
-1427
/
+2276
13 days
KEYS: trusted: Fix TPM teardown ordering
Chengfeng Ye
1
-1
/
+1
14 days
Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity
Linus Torvalds
9
-10
/
+168
14 days
Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next
Linus Torvalds
4
-177
/
+129
14 days
Merge tag 'lsm-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm
Linus Torvalds
1
-3
/
+2
14 days
Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
Linus Torvalds
7
-61
/
+121
2026-08-17
landlock: Add tracepoints for ptrace and scope denials
Mickaël Salaün
3
-7
/
+76
2026-08-17
landlock: Add landlock_deny_access_fs and landlock_deny_access_net
Mickaël Salaün
3
-1
/
+136
2026-08-17
landlock: Add tracepoints for rule checking
Mickaël Salaün
4
-65
/
+147
2026-08-17
landlock: Add landlock_enforce_domain tracepoint
Mickaël Salaün
2
-1
/
+29
2026-08-17
landlock: Add create_domain and free_domain tracepoints
Mickaël Salaün
6
-17
/
+137
2026-08-17
landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
Mickaël Salaün
5
-2
/
+80
2026-08-17
landlock: Add create_ruleset and free_ruleset tracepoints
Mickaël Salaün
6
-1
/
+48
2026-08-17
landlock: Consolidate access-right and scope names in a shared header
Mickaël Salaün
1
-31
/
+53
2026-08-17
landlock: Decouple the per-denial logging decision from CONFIG_AUDIT
Mickaël Salaün
3
-95
/
+98
2026-08-17
landlock: Split denial logging from audit into common framework
Mickaël Salaün
17
-570
/
+681
2026-08-17
landlock: Split struct landlock_domain from struct landlock_ruleset
Mickaël Salaün
13
-480
/
+403
2026-08-17
landlock: Move domain query functions to domain.c
Mickaël Salaün
5
-188
/
+201
2026-08-17
landlock: Prepare ruleset and domain type split
Mickaël Salaün
5
-60
/
+202
2026-08-15
apparmor: fix deadlock in complain-mode change_hat
John Johansen
3
-14
/
+37
2026-08-15
landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
Justin Suess
4
-11
/
+30
2026-08-15
landlock: Check landlock_restrict_self(2)'s flags before privileges
Justin Suess
1
-4
/
+4
2026-08-15
landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
Günther Noack
2
-9
/
+55
2026-08-14
landlock: Harden sock_is_scoped() against file-less sockets
Mickaël Salaün
1
-0
/
+11
2026-08-10
apparmor: constify aa_label parameters on read-only query helpers
John Johansen
2
-20
/
+23
2026-08-10
apparmor: constify aa_dfa parameters on read-only compute paths
John Johansen
8
-32
/
+37
2026-08-10
apparmor: constify aa_profile parameters on read-only compute paths
John Johansen
10
-23
/
+25
2026-08-10
apparmor: constify aa_perms parameters that are read-only
John Johansen
6
-10
/
+11
2026-08-10
apparmor: drop use of _confined variant for iteration
John Johansen
1
-7
/
+7
2026-08-10
apparmor: refactory mount to use check_perms
John Johansen
4
-168
/
+144
2026-08-10
apparmor: fix auditing of mount binary data
John Johansen
1
-2
/
+2
2026-08-10
apparmor: add audit mode to provide a mechanism to silence complain messages
John Johansen
4
-10
/
+22
2026-08-10
apparmor: mark static tables and structs as read only
John Johansen
8
-20
/
+22
2026-08-10
apparmor: fix error debug output in fn_label_build
John Johansen
1
-2
/
+2
2026-08-10
apparmor: make table entry count last enum for static tables
John Johansen
3
-5
/
+5
2026-08-10
apparmor: fix race condition in label replacement
John Johansen
1
-12
/
+48
2026-08-10
apparmor: refactor xattr attachment, to take the file path
John Johansen
1
-15
/
+19
2026-08-10
apparmor: fix unconfined user namespace restriction forced stack
John Johansen
1
-26
/
+54
2026-08-10
apparmor: reserve mediation class for packet mediation
John Johansen
2
-1
/
+2
2026-08-10
apparmor: move sock_rcv_skb() next to inet_conn_request
John Johansen
1
-36
/
+33
2026-08-10
apparmor: move netfilter functions next to the LSM network operations
John Johansen
1
-44
/
+46
2026-08-10
apparmor: refactor network socket mediation to support compatibility
John Johansen
1
-8
/
+10
2026-08-10
apparmor: push inet mediation into profile callbacks, and improve auditing
John Johansen
2
-13
/
+497
2026-08-10
apparmor: refactor network sock mediation in preparation for inet mediation
John Johansen
6
-22
/
+190
2026-08-10
apparmor: make MEDIATES_AF_UNIX its own fn
John Johansen
3
-9
/
+13
2026-08-10
apparmor: fix error handling for copy_from_user in policy_update
John Johansen
1
-3
/
+3
2026-08-10
apparmor: fix out-of-bounds write when null terminating a label vec
Hyunwoo Kim
1
-3
/
+3
[next]