aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2026-08-03selinux: require every boolean value to be definedBryam Vargas1-0/+19
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas1-5/+19
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas1-5/+46
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas1-1/+3
2026-08-02apparmor: Fix warning: 'decompress_zstd' defined but not usedJohn Johansen1-10/+6
2026-08-01apparmor: fix implicit declaration of function 'decompress_zstd'John Johansen1-6/+15
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas1-4/+4
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas1-0/+12
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas1-0/+3
2026-07-30apparmor: Fix build failure when ZSTD_DECOMPRESS is not enabledJohn Johansen2-1/+26
2026-07-29apparmor: compressed_data not described in aa_get_data_from_compressedJohn Johansen1-1/+1
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley1-0/+35
2026-07-23apparmor: switch website link to httpsBaruch Siach1-1/+1
2026-07-23keys: make keyring key-chunk byte order agree with keyring_diff_objects()Michael Bommarito1-2/+3
2026-07-23keys: fix out-of-bounds read in keyring_get_key_chunk()Michael Bommarito1-4/+5
2026-07-23KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return typeFabrice Derepas1-4/+11
2026-07-20apparmor: leverage audit_log_n_untrustedstring() when possiblePaul Moore1-4/+1
2026-07-17Merge tag 'selinux-pr-20260717' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds1-18/+24
2026-07-16Merge tag 'landlock-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxLinus Torvalds3-8/+13
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges3-8/+30
2026-07-15apparmor: replace decompress_zstd() prototype with its entityTetsuo Handa1-36/+36
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek1-18/+24
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges1-27/+13
2026-07-13selinux: suppress warning flood for retired DCCP netlink messagesYafang Shao1-6/+12
2026-07-10Merge tag 'selinux-pr-20260710' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds1-10/+28
2026-07-10landlock: Update formattingMickaël Salaün1-6/+3
2026-07-10landlock: Fix kernel-doc for the nested quiet layer flagMickaël Salaün1-2/+2
2026-07-10landlock: Fix TCP Fast Open connection bypassMatthieu Buffet1-0/+8
2026-07-02lsm: clarify security_task_prctl() hook documentationBill Roberts1-3/+2
2026-07-02selinux: tighten type validation during policy loadStephen Smalley1-3/+8
2026-07-01selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani1-9/+10
2026-07-01selinux: drop unnecessary goto and label from avc_alloc_node()Kalevi Kolttonen1-2/+1
2026-07-01selinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen1-9/+9
2026-07-01selinux: clean up selinuxfs resources on init failureHaoxiang Li1-6/+13
2026-07-01selinux: check connect-related permissions on TCP Fast OpenStephen Smalley1-1/+18
2026-06-30selinux: hooks: use kmalloc() to allocate path bufferMike Rapoport (Microsoft)1-3/+3
2026-06-30bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedMatt Bobrowski1-0/+3
2026-06-29apparmor: fix alternate loaders ability to load compressed policyJohn Johansen1-3/+34
2026-06-29apparmor: Initial support for compressed policiesMaxime Bélair5-10/+123
2026-06-29apparmor: make include headers self-containedRyan Lee7-0/+16
2026-06-29apparmor: fix net.h and policy.h circular include patternRyan Lee5-1/+4
2026-06-24Merge tag 'apparmor-pr-2026-06-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmorLinus Torvalds17-150/+364
2026-06-23apparmor: advertise the tcp fast open fix is appliedJohn Johansen1-0/+2
2026-06-23apparmor: mediate the implicit connect of TCP fast open sendmsgBryam Vargas1-1/+15
2026-06-22smack: restrict smackfs/{direct,mapped} values to 0-255Konstantin Andreev2-13/+15
2026-06-22smack: deduplicate smackfs/{direct,mapped} file_operationsKonstantin Andreev2-96/+42
2026-06-22smack: show msgrcv() subject task in auditKonstantin Andreev3-0/+12
2026-06-22smack: fix incorrect task context in smack_msg_queue_msgrcvKonstantin Andreev1-18/+47
2026-06-22security: smack: fix spelling mistakeQingshuang Fu1-1/+1
2026-06-19Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linuxLinus Torvalds14-190/+788
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.