wireguard-linux - WireGuard for the Linux kernel

Age	Commit message (Expand)	Author	Files	Lines
2026-08-17	landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints	Mickaël Salaün	5	-2/+80
2026-08-17	landlock: Add create_ruleset and free_ruleset tracepoints	Mickaël Salaün	6	-1/+48
2026-08-17	landlock: Consolidate access-right and scope names in a shared header	Mickaël Salaün	1	-31/+53
2026-08-17	landlock: Decouple the per-denial logging decision from CONFIG_AUDIT	Mickaël Salaün	3	-95/+98
2026-08-17	landlock: Split denial logging from audit into common framework	Mickaël Salaün	17	-570/+681
2026-08-17	landlock: Split struct landlock_domain from struct landlock_ruleset	Mickaël Salaün	13	-480/+403
2026-08-17	landlock: Move domain query functions to domain.c	Mickaël Salaün	5	-188/+201
2026-08-17	landlock: Prepare ruleset and domain type split	Mickaël Salaün	5	-60/+202
2026-08-15	apparmor: fix deadlock in complain-mode change_hat	John Johansen	3	-14/+37
2026-08-15	landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS	Justin Suess	4	-11/+30
2026-08-15	landlock: Check landlock_restrict_self(2)'s flags before privileges	Justin Suess	1	-4/+4
2026-08-15	landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation	Günther Noack	2	-9/+55
2026-08-14	landlock: Harden sock_is_scoped() against file-less sockets	Mickaël Salaün	1	-0/+11
2026-08-10	apparmor: constify aa_label parameters on read-only query helpers	John Johansen	2	-20/+23
2026-08-10	apparmor: constify aa_dfa parameters on read-only compute paths	John Johansen	8	-32/+37
2026-08-10	apparmor: constify aa_profile parameters on read-only compute paths	John Johansen	10	-23/+25
2026-08-10	apparmor: constify aa_perms parameters that are read-only	John Johansen	6	-10/+11
2026-08-10	apparmor: drop use of _confined variant for iteration	John Johansen	1	-7/+7
2026-08-10	apparmor: refactory mount to use check_perms	John Johansen	4	-168/+144
2026-08-10	apparmor: fix auditing of mount binary data	John Johansen	1	-2/+2
2026-08-10	apparmor: add audit mode to provide a mechanism to silence complain messages	John Johansen	4	-10/+22
2026-08-10	apparmor: mark static tables and structs as read only	John Johansen	8	-20/+22
2026-08-10	apparmor: fix error debug output in fn_label_build	John Johansen	1	-2/+2
2026-08-10	apparmor: make table entry count last enum for static tables	John Johansen	3	-5/+5
2026-08-10	apparmor: fix race condition in label replacement	John Johansen	1	-12/+48
2026-08-10	apparmor: refactor xattr attachment, to take the file path	John Johansen	1	-15/+19
2026-08-10	apparmor: fix unconfined user namespace restriction forced stack	John Johansen	1	-26/+54
2026-08-10	apparmor: reserve mediation class for packet mediation	John Johansen	2	-1/+2
2026-08-10	apparmor: move sock_rcv_skb() next to inet_conn_request	John Johansen	1	-36/+33
2026-08-10	apparmor: move netfilter functions next to the LSM network operations	John Johansen	1	-44/+46
2026-08-10	apparmor: refactor network socket mediation to support compatibility	John Johansen	1	-8/+10
2026-08-10	apparmor: push inet mediation into profile callbacks, and improve auditing	John Johansen	2	-13/+497
2026-08-10	apparmor: refactor network sock mediation in preparation for inet mediation	John Johansen	6	-22/+190
2026-08-10	apparmor: make MEDIATES_AF_UNIX its own fn	John Johansen	3	-9/+13
2026-08-10	apparmor: fix error handling for copy_from_user in policy_update	John Johansen	1	-3/+3
2026-08-10	apparmor: fix out-of-bounds write when null terminating a label vec	Hyunwoo Kim	1	-3/+3
2026-08-09	apparmor: fix integer overflow in verify_tags() bounds check	Fabrice Derepas	1	-1/+1
2026-08-08	smack: fix cred UAF in smack_file_send_sigiotask()	Jann Horn	1	-1/+1
2026-08-07	apparmor: optimize current_label_crit_section() with needput	John Johansen	5	-58/+84
2026-08-06	apparmor: fix cred UAF caused by begin_current_label_crit_section()	Jann Horn	3	-9/+39
2026-08-06	apparmor: use SEND_SIG_NOINFO instead of NULL in aa_audit()	Oleg Nesterov	1	-1/+1
2026-08-05	Merge tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux	Linus Torvalds	4	-32/+136
2026-08-04	ima: measure userspace policy writes before parsing	Enrico Bravi	4	-0/+30
2026-08-04	ima: add critical data measurement for loaded policy	Enrico Bravi	4	-3/+99
2026-08-04	ima: Instantiate file_truncate and path_truncate hooks	Mimi Zohar	1	-0/+39
2026-08-04	security: ima: rename boot_aggregate when ima is initialised at late_sync	Jonathan McDowell	3	-5/+14
2026-08-04	ima: fix out-of-bounds read in xattr_verify()	Lincoln Wallace	1	-2/+7
2026-08-04	security: ima: introduce IMA_INIT_LATE_SYNC option	Yeoreum Yun	2	-0/+14
2026-08-04	security: lsm: allow LSMs to register for late_initcall_sync init	Yeoreum Yun	1	-2/+11
2026-08-04	selinux: check level category sets once at load time	Stephen Smalley	2	-17/+30