summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün
2026-08-15apparmor: fix deadlock in complain-mode change_hatJohn Johansen
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün
2026-08-10apparmor: constify aa_label parameters on read-only query helpersJohn Johansen
2026-08-10apparmor: constify aa_dfa parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_profile parameters on read-only compute pathsJohn Johansen
2026-08-10apparmor: constify aa_perms parameters that are read-onlyJohn Johansen
2026-08-10apparmor: drop use of _confined variant for iterationJohn Johansen
2026-08-10apparmor: refactory mount to use check_permsJohn Johansen
2026-08-10apparmor: fix auditing of mount binary dataJohn Johansen
2026-08-10apparmor: add audit mode to provide a mechanism to silence complain messagesJohn Johansen
2026-08-10apparmor: mark static tables and structs as read onlyJohn Johansen
2026-08-10apparmor: fix error debug output in fn_label_buildJohn Johansen
2026-08-10apparmor: make table entry count last enum for static tablesJohn Johansen
2026-08-10apparmor: fix race condition in label replacementJohn Johansen
2026-08-10apparmor: refactor xattr attachment, to take the file pathJohn Johansen
2026-08-10apparmor: fix unconfined user namespace restriction forced stackJohn Johansen
2026-08-10apparmor: reserve mediation class for packet mediationJohn Johansen
2026-08-10apparmor: move sock_rcv_skb() next to inet_conn_requestJohn Johansen
2026-08-10apparmor: move netfilter functions next to the LSM network operationsJohn Johansen
2026-08-10apparmor: refactor network socket mediation to support compatibilityJohn Johansen
2026-08-10apparmor: push inet mediation into profile callbacks, and improve auditingJohn Johansen
2026-08-10apparmor: refactor network sock mediation in preparation for inet mediationJohn Johansen
2026-08-10apparmor: make MEDIATES_AF_UNIX its own fnJohn Johansen
2026-08-10apparmor: fix error handling for copy_from_user in policy_updateJohn Johansen
2026-08-10apparmor: fix out-of-bounds write when null terminating a label vecHyunwoo Kim
2026-08-09apparmor: fix integer overflow in verify_tags() bounds checkFabrice Derepas
2026-08-08smack: fix cred UAF in smack_file_send_sigiotask()Jann Horn
2026-08-07apparmor: optimize current_label_crit_section() with needputJohn Johansen
2026-08-06apparmor: fix cred UAF caused by begin_current_label_crit_section()Jann Horn
2026-08-06apparmor: use SEND_SIG_NOINFO instead of NULL in aa_audit()Oleg Nesterov
2026-08-05Merge tag 'selinux-pr-20260805' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-08-04ima: measure userspace policy writes before parsingEnrico Bravi
2026-08-04ima: add critical data measurement for loaded policyEnrico Bravi
2026-08-04ima: Instantiate file_truncate and path_truncate hooksMimi Zohar
2026-08-04security: ima: rename boot_aggregate when ima is initialised at late_syncJonathan McDowell
2026-08-04ima: fix out-of-bounds read in xattr_verify()Lincoln Wallace
2026-08-04security: ima: introduce IMA_INIT_LATE_SYNC optionYeoreum Yun
2026-08-04security: lsm: allow LSMs to register for late_initcall_sync initYeoreum Yun
2026-08-04selinux: check level category sets once at load timeStephen Smalley
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-09 10:17:18 +0000