index
:
kernel/linux.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-rockchip-6.1.y
linux-rockchip-6.5.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree (mirror)
Andrey V.Kosteltsev
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
Files
Lines
2022-07-29
lockdown: Fix kexec lockdown bypass with ima policy
Eric Snowberg
1
-0
/
+4
2022-07-21
ima: Fix a potential integer overflow in ima_appraise_measurement
Huaxin Lu
1
-1
/
+2
2022-07-21
Revert "evm: Fix memleak in init_desc"
Xiu Jianfeng
1
-5
/
+2
2022-06-14
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
Aditya Garg
2
-0
/
+41
2022-06-06
lockdown: also lock down previous kgdb use
Daniel Thompson
1
-0
/
+2
2022-04-15
Fix incorrect type in assignment of ipv6 port for audit
Casey Schaufler
1
-1
/
+1
2022-04-15
selinux: use correct type for context length
Christian Göttsche
1
-1
/
+1
2022-04-15
LSM: general protection fault in legacy_parse_param
Casey Schaufler
2
-5
/
+17
2022-04-15
TOMOYO: fix __setup handlers return values
Randy Dunlap
1
-2
/
+2
2022-04-15
KEYS: fix length validation in keyctl_pkey_params_get_2()
Eric Biggers
1
-3
/
+11
2022-02-16
ima: Do not print policy rule with inactive LSM labels
Stefan Berger
1
-0
/
+8
2022-02-16
ima: Allow template selection with ima_template[_fmt]= after ima_hash=
Roberto Sassu
1
-3
/
+7
2022-02-16
ima: Remove ima_policy file before directory
Stefan Berger
1
-1
/
+1
2022-02-16
integrity: check the return value of audit_log_start()
Xiaoke Wang
1
-0
/
+2
2022-01-27
selinux: fix potential memleak in selinux_add_opt()
Bernard Zhao
1
-2
/
+10
2022-01-05
selinux: initialize proto variable in selinux_ip_postroute_compat()
Tom Rix
1
-1
/
+1
2022-01-05
tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
Dmitry Vyukov
1
-7
/
+7
2021-12-17
selinux: fix race condition when computing ocontext SIDs
Ondrej Mosnacek
1
-72
/
+87
2021-11-21
fortify: Explicitly disable Clang support
Kees Cook
1
-0
/
+3
2021-11-17
apparmor: fix error check
Tom Rix
1
-2
/
+2
2021-11-17
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Tetsuo Handa
1
-1
/
+1
2021-11-17
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Tetsuo Handa
1
-3
/
+1
2021-11-17
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pawan Gupta
1
-1
/
+4
2021-11-17
evm: mark evm_fixmode as __ro_after_init
Austin Kim
1
-1
/
+1
2021-11-17
binder: use cred instead of task for selinux checks
Todd Kjos
2
-28
/
+22
2021-09-26
apparmor: remove duplicate macro list_entry_is_head()
Andy Shevchenko
1
-3
/
+0
2021-09-22
Smack: Fix wrong semantics in smk_access_entry()
Tianjia Zhang
1
-9
/
+8
2021-09-15
IMA: remove the dependency on CRYPTO_MD5
THOBY Simon
1
-1
/
+0
2021-09-15
IMA: remove -Wmissing-prototypes warning
Austin Kim
1
-1
/
+1
2021-07-19
smackfs: restrict bytes count in smk_set_cipso()
Tetsuo Handa
1
-0
/
+2
2021-07-19
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
Minchan Kim
1
-6
/
+7
2021-07-14
evm: fix writing <securityfs>/evm overflow
Mimi Zohar
1
-2
/
+3
2021-07-14
evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
Roberto Sassu
1
-4
/
+4
2021-07-14
evm: Execute evm_inode_init_security() only when an HMAC key is loaded
Roberto Sassu
1
-2
/
+3
2021-07-07
x86/efi: remove unused variables
YueHaibing
1
-5
/
+0
2021-06-30
certs: Add EFI_CERT_X509_GUID support for dbx entries
Eric Snowberg
1
-0
/
+11
2021-06-30
x86/efi: move common keyring handler functions to new file
Nayna Jain
4
-67
/
+115
2021-05-11
security: commoncap: fix -Wstringop-overread warning
Arnd Bergmann
1
-1
/
+1
2021-03-30
integrity: double check iint_cache was initialized
Mimi Zohar
1
-0
/
+8
2021-03-17
Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file cap...
Eric W. Biederman
1
-11
/
+1
2021-03-07
smackfs: restrict bytes count in smackfs write functions
Sabyrzhan Tasbolatov
1
-2
/
+19
2021-03-04
KEYS: trusted: Fix migratable=1 failing
Jarkko Sakkinen
1
-1
/
+1
2021-03-04
certs: Fix blacklist flag type confusion
David Howells
2
-3
/
+4
2021-03-04
capabilities: Don't allow writing ambiguous v3 file capabilities
Eric W. Biederman
1
-1
/
+11
2021-03-04
ima: Free IMA measurement buffer after kexec syscall
Lakshmi Ramasubramanian
1
-0
/
+2
2021-03-04
ima: Free IMA measurement buffer on error
Lakshmi Ramasubramanian
1
-0
/
+1
2021-03-04
evm: Fix memleak in init_desc
Dinghao Liu
1
-2
/
+5
2021-02-17
cap: fix conversions on getxattr
Miklos Szeredi
1
-24
/
+43
2021-01-19
dump_common_audit_data(): fix racy accesses to ->d_name
Al Viro
1
-2
/
+5
2020-12-30
ima: Don't modify file descriptor mode on the fly
Roberto Sassu
1
-15
/
+5
[next]