summaryrefslogtreecommitdiff
path: root/security/selinux/ss
AgeCommit message (Expand)Author
6 daysselinux: tighten type validation during policy loadStephen Smalley
6 daysselinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen
2026-06-17Merge tag 'selinux-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-05-06selinux: check for simple typesChristian Göttsche
2026-05-06selinux: more strict bounds checkChristian Göttsche
2026-05-06selinux: beef up isvalid checksChristian Göttsche
2026-05-06selinux: reorder policydb_index()Christian Göttsche
2026-05-06selinux: check type attr map overflowsChristian Göttsche
2026-05-06selinux: check length fields in policiesChristian Göttsche
2026-05-06selinux: more strict policy parsingChristian Göttsche
2026-05-06selinux: use u16 for security classesChristian Göttsche
2026-05-06selinux: avoid nontransitive comparisonChristian Göttsche
2026-05-05selinux: prune /sys/fs/selinux/userStephen Smalley
2026-04-29selinux: switch two allocations to use kzalloc_objs()Stephen Smalley
2026-02-22Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL usesKees Cook
2026-02-21Convert more 'alloc_obj' cases to default GFP_KERNEL argumentsLinus Torvalds
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook
2025-12-03Merge tag 'selinux-pr-20251201' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-10-23selinux: improve bucket distribution uniformity of avc_hash()Hongru Zhang
2025-10-23selinux: Move avtab_hash() to a shared location for future reuseHongru Zhang
2025-10-22selinux: move initcalls to the LSM frameworkPaul Moore
2025-07-28Merge tag 'selinux-pr-20250725' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-06-19selinux: add __GFP_NOWARN to hashtab_init() allocationsPaul Moore
2025-06-19selinux: introduce neveraudit typesStephen Smalley
2025-06-19selinux: change security_compute_sid to return the ssid or tsid on matchStephen Smalley
2025-04-12selinux: remove a duplicated includePaul Moore
2025-04-11selinux: support wildcard match in genfsconTakaya Saeki
2025-04-11selinux: constify network address pointerChristian Göttsche
2025-03-17selinux: get netif_wildcard policycap from policy instead of cacheChristian Göttsche
2025-03-07selinux: support wildcard network interface namesChristian Göttsche
2025-01-21Merge tag 'selinux-pr-20250121' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2025-01-07selinux: make more use of str_read() when loading the policyChristian Göttsche
2025-01-07selinux: avoid unnecessary indirection in struct level_datumChristian Göttsche
2025-01-07selinux: use known type instead of void pointerChristian Göttsche
2025-01-07selinux: rename comparison functions for clarityChristian Göttsche
2025-01-07selinux: rework match_ipv6_addrmask()Christian Göttsche
2025-01-07selinux: constify and reconcile function parameter namesChristian Göttsche
2025-01-07selinux: avoid using types indicating user space interactionChristian Göttsche
2025-01-04selinux: match extended permissions to their base permissionsThiébaud Weksteen
2024-12-15selinux: ignore unknown extended permissionsThiébaud Weksteen
2024-12-13selinux: add support for xperms in conditional policiesChristian Göttsche
2024-12-11selinux: use native iterator typesChristian Göttsche
2024-11-18Merge tag 'lsm-pr-20241112' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2024-10-11lsm: remove lsm_prop scaffoldingCasey Schaufler
2024-10-11lsm: use lsm_prop in security_audit_rule_matchCasey Schaufler
2024-10-07selinux: Add netlink xperm supportThiébaud Weksteen
2024-08-27selinux: replace kmem_cache_create() with KMEM_CACHE()Eric Suen
2024-07-29selinux: Streamline type determination in security_compute_sidCanfeng Guo
2024-07-16Merge tag 'selinux-pr-20240715' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds