summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
9 daysfs: port i_{g,u}id_into_vfs{g,u}id() to const mnt_idmapChristian Brauner
9 daysfs: port vfs{g,u}id helpers to const mnt_idmapChristian Brauner
9 dayslandlock: Widen ruleset versions to 64 bitsMickaël Salaün
9 dayslandlock: Add counted_by in landlock_domainTingmao Wang
10 daysumh, treewide: Explicitly include linux/umh.h where neededPetr Pavlu
11 daysMerge tag 'selinux-pr-20260919' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
12 dayslandlock: Report the effective signal numberMickaël Salaün
12 dayslandlock: Report the actual ptrace tracerMickaël Salaün
12 dayslandlock: Fix network denial trace contextMickaël Salaün
12 dayslandlock: Fix rule tracepoint contextMickaël Salaün
12 dayslandlock: Fix filesystem denial blocker reportingMickaël Salaün
12 dayslandlock: Work around gcc-16 -Wuninitialized warningArnd Bergmann
12 daysbpf, lsm: Let BPF LSM provide xattrs at inode creationDavid Windsor
2026-09-15selinux: avoid 64-bit division of inode numbersPaul Moore
2026-09-15selinux: recheck intermediate backing files on mprotect()Karl Mehltretter
2026-09-15selinux: preserve user SID across nested backing filesKarl Mehltretter
2026-09-15selinux: always fill AVC decision in avc_has_perm_noaudit()Christian Göttsche
2026-09-15selinux: mark status and policy inodes as immutable, drop status mmap write c...Stephen Smalley
2026-09-15docs: landlock: fix ENOMSG condition in create_ruleset kernel-docIván Ezequiel Rodriguez
2026-09-14lsm: Preserve full ioctl commands in audit recordsMickaël Salaün
2026-09-12KEYS: encrypted: fix integer overflow of datablob_lenCen Zhang
2026-09-12KEYS: trusted: Fix tpm2_load_cmd() boundary checkJarkko Sakkinen
2026-09-12keys: translate request_key_auth pid for the reading procfs instanceMaoyi Xie
2026-09-12keys: fix lost wakeup when reaping a dead key typeKarl Mehltretter
2026-09-11lsm: expose mount idmaps to inode hooksDaan De Meyer
2026-09-10selinux: require PROCESS__PTRACE for FOLL_FORCE introspectionJann Horn
2026-09-10proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)Jann Horn
2026-09-08landlock: Test trace path output boundariesMickaël Salaün
2026-09-08landlock: Clean up ruleset validation checksMickaël Salaün
2026-09-07landlock: Fix use-after-free of the source's parent directoryNorbert Szetei
2026-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf 7.3-rc2Alexei Starovoitov
2026-09-05Merge tag 'kmalloc_obj-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds
2026-09-04treewide: refresh kmalloc_obj() conversionsKees Cook
2026-09-04Merge tag 'integrity-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2026-09-04ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDXJulian Braha
2026-09-03Merge tag 'selinux-pr-20260903' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-09-01ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()Bradley Morgan
2026-09-01ima: don't measure/appraise files on configfsFrederick Lawler
2026-09-01hardening: Default randstruct off with rust for better allmodconfig supportMark Brown
2026-08-31lsm: don't call security_backing_file_free() multiple timesCai Xinchen
2026-08-31lsm: delete duplicate assignment in lsm_prepare()Cai Xinchen
2026-08-31lsm: update the BUILD_BUG_ON() in audit_log_lsm_data()Paul Moore
2026-08-31lsm: add LSM_AUDIT_DATA_NS for namespace audit recordsMickaël Salaün
2026-08-31lsm: add LSM blob and hooks for namespacesChristian Brauner
2026-08-31cred: clarify that task_struct::cred is only for the current taskJann Horn
2026-08-31selinux: remove unused mls_setup_user_range()Stephen Smalley
2026-08-31selinux: convert selinuxfs inode numbers from unsigned long to u64Paul Moore
2026-08-31selinux: tighten policydb_context_isvalid() checksStephen Smalley
2026-08-31selinux: fix BPF token permission checksPaul Moore
2026-08-29bpf, keys: Add a bpf keyring for program signature validationDaniel Borkmann