summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2019-09-10security: constify some arrays in lockdown LSMMatthew Garrett
2019-08-19lockdown: Print current->comm in restriction messagesMatthew Garrett
2019-08-19tracefs: Restrict tracefs when the kernel is locked downMatthew Garrett
2019-08-19debugfs: Restrict debugfs when the kernel is locked downDavid Howells
2019-08-19kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett
2019-08-19lockdown: Lock down perf when in confidentiality modeDavid Howells
2019-08-19bpf: Restrict bpf when kernel lockdown is in confidentiality modeDavid Howells
2019-08-19lockdown: Lock down tracing and perf kprobes when in confidentiality modeDavid Howells
2019-08-19lockdown: Lock down /proc/kcoreDavid Howells
2019-08-19x86/mmiotrace: Lock down the testmmiotrace moduleDavid Howells
2019-08-19lockdown: Lock down module params that specify hardware parameters (eg. ioport)David Howells
2019-08-19lockdown: Lock down TIOCSSERIALDavid Howells
2019-08-19lockdown: Prohibit PCMCIA CIS storage when the kernel is locked downDavid Howells
2019-08-19ACPI: Limit access to custom_method when the kernel is locked downMatthew Garrett
2019-08-19x86/msr: Restrict MSR access when the kernel is locked downMatthew Garrett
2019-08-19x86: Lock down IO port access when the kernel is locked downMatthew Garrett
2019-08-19PCI: Lock down BAR access when the kernel is locked downMatthew Garrett
2019-08-19hibernate: Disable when the kernel is locked downJosh Boyer
2019-08-19kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac
2019-08-19kexec_load: Disable at runtime if the kernel is locked downMatthew Garrett
2019-08-19lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked downMatthew Garrett
2019-08-19lockdown: Enforce module signatures if the kernel is locked downDavid Howells
2019-08-19security: Add a static lockdown policy LSMMatthew Garrett
2019-08-19security: Add a "locked down" LSM hookMatthew Garrett
2019-08-19security: Support early LSMsMatthew Garrett
2019-06-21Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner
2019-06-18apparmor: reset pos on failure to unpack for various functionsMike Salvatore
2019-06-18apparmor: enforce nullbyte at end of tag stringJann Horn
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen
2019-06-14Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler
2019-06-12Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2019-06-12selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang
2019-06-12selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang
2019-06-11selinux: log raw contexts as untrusted stringsOndrej Mosnacek
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner
2019-05-31Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner
2019-05-29ima: show rules with IMA_INMASK correctlyRoberto Sassu
2019-05-29evm: check hash algorithm passed to init_desc()Roberto Sassu
2019-05-24Merge tag 'spdx-5.2-rc2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/g...Linus Torvalds
2019-05-24treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36Thomas Gleixner
2019-05-21Merge tag 'selinux-pr-20190521' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2019-05-21treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13Thomas Gleixner
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner
2019-05-20selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni
2019-05-19ima: fix wrong signed policy requirement when not appraisingPetr Vorel