summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2021-01-21watch_queue: Drop references to /dev/watch_queueGabriel Krisman Bertazi1-4/+4
2021-01-21keys: Remove outdated __user annotationsJann Horn1-3/+3
2021-01-21security: keys: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+1
2021-01-16make dump_common_audit_data() safe to be called from RCU pathwalkAl Viro1-2/+3
2021-01-16dump_common_audit_data(): fix racy accesses to ->d_nameAl Viro1-2/+5
2021-01-15selinux: include a consumer of the new IMA critical data hookLakshmi Ramasubramanian5-10/+127
2021-01-15IMA: define a builtin critical data measurement policyLakshmi Ramasubramanian1-0/+12
2021-01-15IMA: extend critical data hook to limit the measurement based on a labelTushar Sugandhi1-3/+5
2021-01-15IMA: limit critical data measurement based on a labelTushar Sugandhi1-3/+34
2021-01-15IMA: add policy rule to measure critical dataTushar Sugandhi1-4/+25
2021-01-15IMA: define a hook to measure kernel integrity critical dataTushar Sugandhi3-1/+26
2021-01-15IMA: add support to measure buffer data hashTushar Sugandhi5-9/+30
2021-01-15IMA: generalize keyring specific measurement constructsTushar Sugandhi4-26/+35
2021-01-15selinux: teach SELinux about anonymous inodesDaniel Colascione2-0/+59
2021-01-15security: add inode_init_security_anon() LSM hookLokesh Gidra1-0/+8
2021-01-13selinux: fall back to SECURITY_FS_USE_GENFS if no xattr supportOndrej Mosnacek1-25/+52
2021-01-13evm: Fix memleak in init_descDinghao Liu1-2/+5
2021-01-12selinux: mark selinux_xfrm_refcount as __read_mostlyOndrej Mosnacek1-1/+1
2021-01-12selinux: mark some global variables __ro_after_initOndrej Mosnacek6-12/+12
2021-01-12selinux: make selinuxfs_mount staticOndrej Mosnacek2-2/+1
2021-01-12selinux: drop the unnecessary aurule_callback variableOndrej Mosnacek1-7/+3
2021-01-12selinux: remove unused global variablesOndrej Mosnacek4-4/+0
2021-01-05selinux: fix inconsistency between inode_getxattr and inode_listsecurityAmir Goldstein1-0/+4
2021-01-05selinux: handle MPTCP consistently with TCPPaolo Abeni1-1/+2
2020-12-29capabilities: Don't allow writing ambiguous v3 file capabilitiesEric W. Biederman1-1/+11
2020-12-25Merge tag 'Smack-for-5.11-io_uring-fix' of git://github.com/cschaufler/smack-...Linus Torvalds1-2/+3
2020-12-24Merge tag 'efi_updates_for_v5.11' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds2-0/+77
2020-12-23Smack: Handle io_uring kernel thread privilegesCasey Schaufler1-2/+3
2020-12-17Merge tag 'ovl-update-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-2/+1
2020-12-16Merge tag 'Smack-for-5.11' of git://github.com/cschaufler/smack-nextLinus Torvalds2-5/+5
2020-12-16Merge tag 'integrity-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds6-37/+54
2020-12-16Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds6-28/+35
2020-12-16Merge tag 'audit-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-5/+0
2020-12-16apparmor: remove duplicate macro list_entry_is_head()Andy Shevchenko1-3/+0
2020-12-16Merge tag 'net-next-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ne...Linus Torvalds10-35/+70
2020-12-14Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds3-3/+3
2020-12-14Merge tag 'tomoyo-pr-20201214' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds8-41/+44
2020-12-14vfs: move cap_convert_nscap() call into vfs_setxattr()Miklos Szeredi1-2/+1
2020-12-12Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klasse...Jakub Kicinski1-0/+1
2020-12-06tomoyo: Fix typo in comments.Tetsuo Handa5-7/+7
2020-12-04Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-24/+54
2020-12-03security: add const qualifier to struct sock in various placesFlorian Westphal7-11/+11
2020-11-29ima: Don't modify file descriptor mode on the flyRoberto Sassu1-15/+5
2020-11-27tomoyo: Fix null pointer checkZheng Zengkai3-6/+4
2020-11-27xfrm: redact SA secret with lockdown confidentialityAntony Antony1-0/+1
2020-11-26ima: Implement ima_inode_hashKP Singh1-24/+54
2020-11-24lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore4-17/+19
2020-11-24selinux: Fix fall-through warnings for ClangGustavo A. R. Silva1-0/+1
2020-11-23keys: Provide the original description to the key preparserDavid Howells1-0/+2
2020-11-20ima: select ima-buf template for buffer measurementLakshmi Ramasubramanian4-16/+37