aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2026-06-13apparmor: fix NULL pointer dereference in unpack_pdbGeorgia Garcia1-1/+1
2026-06-13apparmor: make fn_label_build() capable of handling not supportedJohn Johansen1-5/+8
2026-06-13apparmor: change fn_label_build() call to not return NULLJohn Johansen3-35/+35
2026-06-13apparmor: fix potential UAF in aa_replace_profilesMaxime Bélair1-1/+3
2026-06-13apparmor: free rawdata as soon as possibleJohn Johansen1-0/+7
2026-06-13apparmor: grab ns lock and refresh when looking up changehat child profilesRyan Lee1-2/+31
2026-06-13apparmor: fix rawdata_f_data implicit flex arrayJohn Johansen1-4/+3
2026-06-13apparmor: use __label_make_stale in __aa_proxy_redirectRyan Lee1-1/+1
2026-06-13apparmor: propagate -ENOMEM correctly in unpack_tableMaxime Bélair1-9/+13
2026-06-13apparmor: enable differential encodingJohn Johansen1-0/+1
2026-06-13apparmor: aa_label_alloc use aa_label_free on alloc failureZygmunt Krynicki1-1/+1
2026-06-13apparmor: check label build before no_new_privs testRuoyu Wang1-10/+15
2026-06-13security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()Andrew Morton1-0/+2
2026-06-13apparmor: add a conditional version of get_newest_labelJohn Johansen2-11/+43
2026-06-13apparmor: fix refcount leak when updating the sk_ctxJohn Johansen1-2/+4
2026-06-13apparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen1-26/+32
2026-06-13apparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen1-2/+1
2026-06-13landlock: Add UDP send+connect access controlMatthieu Buffet3-18/+134
2026-06-13landlock: Add UDP bind() access controlMatthieu Buffet4-8/+15
2026-06-13landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet1-2/+9
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas3-0/+35
2026-06-13landlock: Account all audit data allocations to user spaceMickaël Salaün2-8/+6
2026-06-13landlock: Set audit_net.sk for socket access checksMickaël Salaün1-0/+1
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-nextJakub Kicinski1-1/+2
2026-06-08ima: Support staging and deleting N measurements recordsRoberto Sassu4-4/+98
2026-06-08ima: Add support for flushing the hash table when staging measurementsRoberto Sassu1-6/+35
2026-06-08ima: Add support for staging measurements with promptRoberto Sassu5-20/+333
2026-06-08ima: Introduce ima_dump_measurement()Roberto Sassu1-6/+13
2026-06-08ima: Use snprintf() in create_securityfs_measurement_listsRoberto Sassu1-8/+12
2026-06-08ima: Mediate open/release method of the measurements listRoberto Sassu1-4/+98
2026-06-08ima: Introduce _ima_measurements_start() and _ima_measurements_next()Roberto Sassu1-4/+16
2026-06-08ima: Introduce per binary measurements list type binary_runtime_size valueRoberto Sassu3-15/+32
2026-06-08ima: Introduce per binary measurements list type ima_num_records counterRoberto Sassu4-5/+14
2026-06-08ima: Replace static htable queue with dynamically allocated arrayRoberto Sassu3-6/+50
2026-06-08ima: Remove ima_h_table structureRoberto Sassu5-26/+24
2026-06-04xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migrationAntony Antony1-1/+2
2026-05-29selinux: revert use of __getname() in selinux_genfs_get_sid()Paul Moore1-2/+2
2026-05-28security/keys: fix missed RCU read section on lookupLinus Torvalds1-0/+1
2026-05-27selinux: comment spelling fix in ibpkey.cKalevi Kolttonen1-1/+1
2026-05-27selinux: comment typo fix in selinuxfs.cKalevi Kolttonen1-1/+1
2026-05-27selinux: hooks: use __getname() to allocate path bufferMike Rapoport (Microsoft)1-2/+2
2026-05-27selinux: use k[mz]alloc() to allocate temporary buffersMike Rapoport (Microsoft)1-6/+6
2026-05-27security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCTNathan Chancellor1-3/+0
2026-05-27security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCENathan Chancellor1-2/+0
2026-05-27security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGSNathan Chancellor1-3/+1
2026-05-19Merge tag 'lsm-pr-20260519' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds1-1/+8
2026-05-14lsm: hold cred_guard_mutex for lsm_set_self_attr()Stephen Smalley1-1/+8
2026-05-13evm: terminate and bound the evm_xattrs read bufferPengpeng Hou1-5/+11
2026-05-13integrity: Add support for sigv3 verification using ML-DSA keysStefan Berger1-5/+84
2026-05-13integrity: Refactor asymmetric_verify for reusabilityStefan Berger1-19/+43
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.