index
:
BMC/Intel-BMC/linux.git
dev
dev-4.10
dev-4.13
dev-4.17
dev-4.18
dev-4.19
dev-4.3
dev-4.4
dev-4.6
dev-4.7
dev-5.0
dev-5.1
dev-5.10-intel
dev-5.10.46-intel
dev-5.10.49-intel
dev-5.14-intel
dev-5.15-intel
dev-5.2
dev-5.3
dev-5.4
dev-5.7
dev-5.8
dev-5.8-intel
master
Intel OpenBMC Linux kernel source tree (mirror)
Andrey V.Kosteltsev
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
Files
Lines
2019-09-10
security: constify some arrays in lockdown LSM
Matthew Garrett
1
-2
/
+2
2019-08-20
lockdown: Print current->comm in restriction messages
Matthew Garrett
1
-2
/
+6
2019-08-20
tracefs: Restrict tracefs when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
debugfs: Restrict debugfs when the kernel is locked down
David Howells
1
-0
/
+1
2019-08-20
kexec: Allow kexec_file() with appropriate IMA policy when locked down
Matthew Garrett
3
-1
/
+53
2019-08-20
lockdown: Lock down perf when in confidentiality mode
David Howells
1
-0
/
+1
2019-08-20
bpf: Restrict bpf when kernel lockdown is in confidentiality mode
David Howells
1
-0
/
+1
2019-08-20
lockdown: Lock down tracing and perf kprobes when in confidentiality mode
David Howells
1
-0
/
+1
2019-08-20
lockdown: Lock down /proc/kcore
David Howells
1
-0
/
+1
2019-08-20
x86/mmiotrace: Lock down the testmmiotrace module
David Howells
1
-0
/
+1
2019-08-20
lockdown: Lock down module params that specify hardware parameters (eg. ioport)
David Howells
1
-0
/
+1
2019-08-20
lockdown: Lock down TIOCSSERIAL
David Howells
1
-0
/
+1
2019-08-20
lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down
David Howells
1
-0
/
+1
2019-08-20
ACPI: Limit access to custom_method when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
x86/msr: Restrict MSR access when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
x86: Lock down IO port access when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
PCI: Lock down BAR access when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
hibernate: Disable when the kernel is locked down
Josh Boyer
1
-0
/
+1
2019-08-20
kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE
Jiri Bohac
2
-2
/
+2
2019-08-20
kexec_load: Disable at runtime if the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down
Matthew Garrett
1
-0
/
+1
2019-08-20
lockdown: Enforce module signatures if the kernel is locked down
David Howells
2
-0
/
+2
2019-08-20
security: Add a static lockdown policy LSM
Matthew Garrett
5
-5
/
+224
2019-08-20
security: Add a "locked down" LSM hook
Matthew Garrett
1
-0
/
+6
2019-08-20
security: Support early LSMs
Matthew Garrett
1
-8
/
+42
2019-06-21
Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...
Linus Torvalds
15
-61
/
+15
2019-06-19
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
Thomas Gleixner
15
-61
/
+15
2019-06-19
apparmor: reset pos on failure to unpack for various functions
Mike Salvatore
1
-8
/
+39
2019-06-19
apparmor: enforce nullbyte at end of tag string
Jann Horn
1
-1
/
+1
2019-06-19
apparmor: fix PROFILE_MEDIATES for untrusted input
John Johansen
1
-1
/
+10
2019-06-15
Smack: Restore the smackfsdef mount option and add missing prefixes
Casey Schaufler
1
-5
/
+7
2019-06-13
Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...
Linus Torvalds
2
-13
/
+36
2019-06-12
selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
Gen Zhang
1
-6
/
+14
2019-06-12
selinux: fix a missing-check bug in selinux_add_mnt_opt( )
Gen Zhang
1
-5
/
+14
2019-06-12
selinux: log raw contexts as untrusted strings
Ondrej Mosnacek
1
-2
/
+8
2019-06-05
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
Thomas Gleixner
72
-352
/
+72
2019-06-05
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372
Thomas Gleixner
11
-39
/
+11
2019-06-05
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295
Thomas Gleixner
6
-66
/
+6
2019-06-05
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282
Thomas Gleixner
1
-9
/
+1
2019-05-31
Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...
Linus Torvalds
2
-12
/
+19
2019-05-30
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
Thomas Gleixner
16
-81
/
+16
2019-05-30
ima: show rules with IMA_INMASK correctly
Roberto Sassu
1
-9
/
+12
2019-05-30
evm: check hash algorithm passed to init_desc()
Roberto Sassu
1
-0
/
+3
2019-05-25
Merge tag 'spdx-5.2-rc2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/g...
Linus Torvalds
5
-25
/
+5
2019-05-24
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36
Thomas Gleixner
5
-25
/
+5
2019-05-21
Merge tag 'selinux-pr-20190521' of git://git.kernel.org/pub/scm/linux/kernel/...
Linus Torvalds
1
-2
/
+8
2019-05-21
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13
Thomas Gleixner
2
-30
/
+2
2019-05-21
treewide: Add SPDX license identifier - Makefile/Kconfig
Thomas Gleixner
17
-0
/
+17
2019-05-21
selinux: do not report error on connect(AF_UNSPEC)
Paolo Abeni
1
-2
/
+8
2019-05-20
ima: fix wrong signed policy requirement when not appraising
Petr Vorel
1
-3
/
+4
[next]