aboutsummaryrefslogtreecommitdiff
path: root/security/landlock
AgeCommit message (Expand)Author
2024-03-08landlock: Use f_cred in security_file_open() hookMickaël Salaün
2024-03-08landlock: Rename "ptrace" files to "task"Mickaël Salaün
2024-03-08landlock: Simplify current_check_access_socket()Mickaël Salaün
2024-03-07landlock: Warn once if a Landlock action is requested while disabledMickaël Salaün
2024-02-27landlock: Add support for KUnit testsMickaël Salaün
2024-02-26landlock: Fix asymmetric private inodes referringMickaël Salaün
2024-01-09Merge tag 'landlock-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds
2024-01-03landlock: Optimize the number of calls to get_access_mask slightlyGünther Noack
2024-01-03landlock: Remove remaining "inline" modifiers in .c files [v6.6]Günther Noack
2024-01-03landlock: Remove remaining "inline" modifiers in .c files [v6.1]Günther Noack
2024-01-03landlock: Remove remaining "inline" modifiers in .c files [v5.15]Günther Noack
2023-11-12LSM: Identify modules by more than nameCasey Schaufler
2023-10-26landlock: Support network rules with TCP bind and connectKonstantin Meskhidze
2023-10-26landlock: Refactor landlock_add_rule() syscallKonstantin Meskhidze
2023-10-26landlock: Refactor layer helpersKonstantin Meskhidze
2023-10-26landlock: Move and rename layer helpersKonstantin Meskhidze
2023-10-26landlock: Refactor merge/inherit_ruleset helpersKonstantin Meskhidze
2023-10-26landlock: Refactor landlock_find_rule/insert_rule helpersKonstantin Meskhidze
2023-10-26landlock: Allow FS topology changes for domains without such rule typeMickaël Salaün
2023-10-26landlock: Make ruleset's access masks more genericKonstantin Meskhidze
2023-08-18landlock: Annotate struct landlock_rule with __counted_byKees Cook
2023-06-12hostfs: Fix ephemeral inodesMickaël Salaün
2023-03-20selinux: remove the runtime disable functionalityPaul Moore
2022-10-19landlock: Support file truncationGünther Noack
2022-10-19landlock: Document init_layer_masks() helperGünther Noack
2022-10-19landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed()Günther Noack
2022-09-29landlock: Fix documentation styleMickaël Salaün
2022-09-29landlock: Slightly improve documentation and fix spellingMickaël Salaün
2022-09-02landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün
2022-05-23landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün
2022-05-23landlock: Move filesystem helpers and add a new oneMickaël Salaün
2022-05-23landlock: Fix same-layer rule unionsMickaël Salaün
2022-05-23landlock: Create find_rule() from unmask_layers()Mickaël Salaün
2022-05-23landlock: Reduce the maximum number of layers to 16Mickaël Salaün
2022-05-23landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün
2022-05-23landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün
2022-05-23landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün
2022-05-23landlock: Fix landlock_add_rule(2) documentationMickaël Salaün
2022-05-09landlock: Format with clang-formatMickaël Salaün
2022-05-09landlock: Add clang-format exceptionsMickaël Salaün
2022-02-04landlock: Use square brackets around "landlock-ruleset"Christian Brauner
2021-04-22landlock: Enable user space to infer supported featuresMickaël Salaün
2021-04-22landlock: Add syscall implementationsMickaël Salaün
2021-04-22landlock: Support filesystem access-controlMickaël Salaün
2021-04-22landlock: Add ptrace restrictionsMickaël Salaün
2021-04-22landlock: Set up the security framework and manage credentialsMickaël Salaün
2021-04-22landlock: Add ruleset and domain managementMickaël Salaün
2021-04-22landlock: Add object managementMickaël Salaün