summaryrefslogtreecommitdiff
path: root/security/landlock
AgeCommit message (Expand)Author
3 dayslandlock: Fix superblock use-after-free in release_inode()Günther Noack
3 dayslandlock: Enforce capability restrictionsMickaël Salaün
3 dayslandlock: Enforce namespace use restrictionsMickaël Salaün
3 dayslandlock: Wrap per-layer access masks in struct layer_configMickaël Salaün
3 dayslandlock: Rename quiet_masks to quiet_accessMickaël Salaün
12 dayslandlock: Drop __counted_by from landlock_domain.handled_masksNguyen Ngoc Thang
2026-09-22landlock: Widen ruleset versions to 64 bitsMickaël Salaün
2026-09-22landlock: Add counted_by in landlock_domainTingmao Wang
2026-09-20landlock: Report the effective signal numberMickaël Salaün
2026-09-20landlock: Report the actual ptrace tracerMickaël Salaün
2026-09-20landlock: Fix network denial trace contextMickaël Salaün
2026-09-20landlock: Fix rule tracepoint contextMickaël Salaün
2026-09-20landlock: Fix filesystem denial blocker reportingMickaël Salaün
2026-09-20landlock: Work around gcc-16 -Wuninitialized warningArnd Bergmann
2026-09-08landlock: Test trace path output boundariesMickaël Salaün
2026-09-08landlock: Clean up ruleset validation checksMickaël Salaün
2026-09-07landlock: Fix use-after-free of the source's parent directoryNorbert Szetei
2026-08-17landlock: Add tracepoints for ptrace and scope denialsMickaël Salaün
2026-08-17landlock: Add landlock_deny_access_fs and landlock_deny_access_netMickaël Salaün
2026-08-17landlock: Add tracepoints for rule checkingMickaël Salaün
2026-08-17landlock: Add landlock_enforce_domain tracepointMickaël Salaün
2026-08-17landlock: Add create_domain and free_domain tracepointsMickaël Salaün
2026-08-17landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepointsMickaël Salaün
2026-08-17landlock: Add create_ruleset and free_ruleset tracepointsMickaël Salaün
2026-08-17landlock: Consolidate access-right and scope names in a shared headerMickaël Salaün
2026-08-17landlock: Decouple the per-denial logging decision from CONFIG_AUDITMickaël Salaün
2026-08-17landlock: Split denial logging from audit into common frameworkMickaël Salaün
2026-08-17landlock: Split struct landlock_domain from struct landlock_rulesetMickaël Salaün
2026-08-17landlock: Move domain query functions to domain.cMickaël Salaün
2026-08-17landlock: Prepare ruleset and domain type splitMickaël Salaün
2026-08-15landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVSJustin Suess
2026-08-15landlock: Check landlock_restrict_self(2)'s flags before privilegesJustin Suess
2026-08-15landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creationGünther Noack
2026-08-14landlock: Harden sock_is_scoped() against file-less socketsMickaël Salaün
2026-07-10landlock: Update formattingMickaël Salaün
2026-07-10landlock: Fix kernel-doc for the nested quiet layer flagMickaël Salaün
2026-07-10landlock: Fix TCP Fast Open connection bypassMatthieu Buffet
2026-06-19Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
2026-06-14landlock: Suppress logging when quiet flag is presentTingmao Wang
2026-06-14landlock: Add API support and docs for the quiet flagsTingmao Wang
2026-06-14landlock: Add a place for flags to layer rulesTingmao Wang
2026-06-13landlock: Add UDP send+connect access controlMatthieu Buffet
2026-06-13landlock: Add UDP bind() access controlMatthieu Buffet
2026-06-13landlock: Fix unmarked concurrent access to socket familyMatthieu Buffet
2026-06-13landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO pathBryam Vargas
2026-06-13landlock: Account all audit data allocations to user spaceMickaël Salaün
2026-06-13landlock: Set audit_net.sk for socket access checksMickaël Salaün
2026-05-11fs: add icount_read_once() and stop open-coding ->i_count loadsMateusz Guzik
2026-04-07landlock: Clarify BUILD_BUG_ON check in scoping logicGünther Noack
2026-04-07landlock: Control pathname UNIX domain socket resolution by pathGünther Noack