aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2026-06-13apparmor: fix refcount leak when updating the sk_ctxJohn Johansen1-2/+4
2026-06-13apparmor: fix race in unix socket mediation when peer_path is usedJohn Johansen1-26/+32
2026-06-13apparmor: fix shadowing of plabel that prevents cache from being updatedJohn Johansen1-2/+1
2026-06-13landlock: Add UDP send+connect access controlMatthieu Buffet3-18/+134
2026-06-13landlock: Add UDP bind() access controlMatthieu Buffet4-8/+15
2026-06-13landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet1-2/+9
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas3-0/+35
2026-06-13landlock: Account all audit data allocations to user spaceMickaël Salaün2-8/+6
2026-06-13landlock: Set audit_net.sk for socket access checksMickaël Salaün1-0/+1
2026-06-13Merge tag 'ipsec-next-2026-06-12' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-nextJakub Kicinski1-1/+2
2026-06-08ima: Support staging and deleting N measurements recordsRoberto Sassu4-4/+98
2026-06-08ima: Add support for flushing the hash table when staging measurementsRoberto Sassu1-6/+35
2026-06-08ima: Add support for staging measurements with promptRoberto Sassu5-20/+333
2026-06-08ima: Introduce ima_dump_measurement()Roberto Sassu1-6/+13
2026-06-08ima: Use snprintf() in create_securityfs_measurement_listsRoberto Sassu1-8/+12
2026-06-08ima: Mediate open/release method of the measurements listRoberto Sassu1-4/+98
2026-06-08ima: Introduce _ima_measurements_start() and _ima_measurements_next()Roberto Sassu1-4/+16
2026-06-08ima: Introduce per binary measurements list type binary_runtime_size valueRoberto Sassu3-15/+32
2026-06-08ima: Introduce per binary measurements list type ima_num_records counterRoberto Sassu4-5/+14
2026-06-08ima: Replace static htable queue with dynamically allocated arrayRoberto Sassu3-6/+50
2026-06-08ima: Remove ima_h_table structureRoberto Sassu5-26/+24
2026-06-04xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migrationAntony Antony1-1/+2
2026-05-29selinux: revert use of __getname() in selinux_genfs_get_sid()Paul Moore1-2/+2
2026-05-28security/keys: fix missed RCU read section on lookupLinus Torvalds1-0/+1
2026-05-27selinux: comment spelling fix in ibpkey.cKalevi Kolttonen1-1/+1
2026-05-27selinux: comment typo fix in selinuxfs.cKalevi Kolttonen1-1/+1
2026-05-27selinux: hooks: use __getname() to allocate path bufferMike Rapoport (Microsoft)1-2/+2
2026-05-27selinux: use k[mz]alloc() to allocate temporary buffersMike Rapoport (Microsoft)1-6/+6
2026-05-27security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCTNathan Chancellor1-3/+0
2026-05-27security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCENathan Chancellor1-2/+0
2026-05-27security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGSNathan Chancellor1-3/+1
2026-05-19Merge tag 'lsm-pr-20260519' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsmLinus Torvalds1-1/+8
2026-05-14lsm: hold cred_guard_mutex for lsm_set_self_attr()Stephen Smalley1-1/+8
2026-05-13evm: terminate and bound the evm_xattrs read bufferPengpeng Hou1-5/+11
2026-05-13integrity: Add support for sigv3 verification using ML-DSA keysStefan Berger1-5/+84
2026-05-13integrity: Refactor asymmetric_verify for reusabilityStefan Berger1-19/+43
2026-05-13integrity: Check that algo parameter is within valid rangeStefan Berger1-1/+4
2026-05-13integrity: Check for NULL returned by asymmetric_key_public_keyStefan Berger1-0/+4
2026-05-11fs: add icount_read_once() and stop open-coding ->i_count loadsMateusz Guzik1-1/+1
2026-05-06selinux: check for simple typesChristian Göttsche3-2/+29
2026-05-06selinux: more strict bounds checkChristian Göttsche3-2/+31
2026-05-06selinux: beef up isvalid checksChristian Göttsche8-58/+83
2026-05-06selinux: reorder policydb_index()Christian Göttsche1-5/+6
2026-05-06selinux: check type attr map overflowsChristian Göttsche3-0/+33
2026-05-06selinux: check length fields in policiesChristian Göttsche4-0/+68
2026-05-06selinux: more strict policy parsingChristian Göttsche8-60/+233
2026-05-06selinux: use u16 for security classesChristian Göttsche3-8/+9
2026-05-06selinux: avoid nontransitive comparisonChristian Göttsche1-8/+9
2026-05-05selinux: shrink critical section in sel_write_load()Stephen Smalley1-10/+8
2026-05-05selinux: allow multiple opens of /sys/fs/selinux/policyStephen Smalley1-23/+4
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.