summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)Author
46 hoursMerge branch 'headers' of git://git.infradead.org/users/willy/pagecache.gitMark Brown
47 hoursMerge branch 'for-next' of https://git.kernel.org/pub/scm/linux/kernel/git/mm...Mark Brown
3 daysMerge https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable...David Hildenbrand (Arm)
4 daysMerge tag 'lsm-pr-20261016' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
4 daysMerge tag 'selinux-pr-20261015' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
4 daysselinux: reject writable opens of policy file, drop mmap shared/write checkLorenzo Stoakes (ARM)
5 daysMerge tag 'vfs-7.4-rc1.idmap' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
9 daysAutomated merge of 'lsm/dev' into 'stable-7.4'Paul Moore
2026-09-30selinux: validate permissive and neveraudit map types at loadChristian Göttsche
2026-09-30selinux: validate user MLS range and default level at loadChristian Göttsche
2026-09-30selinux: bounds-check role and user membership bitmaps at loadChristian Göttsche
2026-09-30selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optsStephen Smalley
2026-09-25selinux: fix data race on AVC latest_notifChristian Göttsche
2026-09-24selinux: check neveraudit in avc_xperms_audit_required()Christian Göttsche
2026-09-24selinux: bounds-check filename transition source types at loadChristian Göttsche
2026-09-24selinux: reject duplicate symbol values during policy loadChristian Göttsche
2026-09-24selinux: reject a policy that both rejects and allows unknown classesChristian Göttsche
2026-09-24selinux: constify avc function parametersChristian Göttsche
2026-09-23fs: port ->setattr() to pass const mnt_idmapChristian Brauner
2026-09-23fs: port xattr to const mnt_idmapChristian Brauner
2026-09-23fs: port ->permission() to pass const mnt_idmapChristian Brauner
2026-09-23fs: port acl to const mnt_idmapChristian Brauner
2026-09-15selinux: avoid 64-bit division of inode numbersPaul Moore
2026-09-15selinux: recheck intermediate backing files on mprotect()Karl Mehltretter
2026-09-15selinux: preserve user SID across nested backing filesKarl Mehltretter
2026-09-15selinux: always fill AVC decision in avc_has_perm_noaudit()Christian Göttsche
2026-09-15selinux: mark status and policy inodes as immutable, drop status mmap write c...Stephen Smalley
2026-09-14lsm: Preserve full ioctl commands in audit recordsMickaël Salaün
2026-09-11lsm: expose mount idmaps to inode hooksDaan De Meyer
2026-08-31selinux: remove unused mls_setup_user_range()Stephen Smalley
2026-08-31selinux: convert selinuxfs inode numbers from unsigned long to u64Paul Moore
2026-08-31selinux: tighten policydb_context_isvalid() checksStephen Smalley
2026-08-31selinux: fix BPF token permission checksPaul Moore
2026-08-25security: Remove pagemap.h includesMatthew Wilcox (Oracle)
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-08-04selinux: check level category sets once at load timeStephen Smalley
2026-08-03selinux: require every boolean value to be definedBryam Vargas
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges
2026-07-13selinux: suppress warning flood for retired DCCP netlink messagesYafang Shao
2026-07-02selinux: tighten type validation during policy loadStephen Smalley
2026-07-01selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani