aboutsummaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2021-03-24apparmor:match_mn() - constify devpath argumentAl Viro
2021-03-24ima: Fix the error code for restoring the PCR valueLi Huafei
2021-03-22smack: differentiate between subjective and objective task credentialsPaul Moore
2021-03-22selinux: clarify task subjective and objective credentialsPaul Moore
2021-03-22lsm: separate security_task_getsecid() into subjective and objective variantsPaul Moore
2021-03-22ima: without an IMA policy loaded, return quicklyMimi Zohar
2021-03-22integrity: double check iint_cache was initializedMimi Zohar
2021-03-22lsm,selinux: add new hook to compare new mount to an existing mountOlga Kornievskaia
2021-03-22Merge tag 'selinux-pr-20210322' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-03-18selinuxfs: unify policy load error reportingOndrej Mosnacek
2021-03-18selinux: fix variable scope issue in live sidtab conversionOndrej Mosnacek
2021-03-18selinux: don't log MAC_POLICY_LOAD record on failed policy loadOndrej Mosnacek
2021-03-12Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file cap...Eric W. Biederman
2021-03-11nexthop: Add netlink defines and enumerators for resilient NH groupsIdo Schimmel
2021-03-11integrity: Load mokx variables into the blacklist keyringEric Snowberg
2021-03-11certs: Add EFI_CERT_X509_GUID support for dbx entriesEric Snowberg
2021-03-08selinux: fix misspellings using codespell toolXiong Zhenwu
2021-03-08selinux: fix misspellings using codespell toolXiong Zhenwu
2021-03-08selinux: measure state and policy capabilitiesLakshmi Ramasubramanian
2021-03-08selinux: Allow context mounts for unpriviliged overlayfsVivek Goyal
2021-03-08powerpc: Move arch independent ima kexec functions to drivers/of/kexec.cLakshmi Ramasubramanian
2021-03-08powerpc: Move ima buffer fields to struct kimageLakshmi Ramasubramanian
2021-02-23Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds
2021-02-23Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds
2021-02-22Merge branch 'userns-for-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-02-22Merge branch 'work.audit' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds
2021-02-21Merge tag 'tpmdd-next-v5.12-rc1-v2' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds
2021-02-21Merge tag 'Smack-for-v5.12' of git://github.com/cschaufler/smack-nextLinus Torvalds
2021-02-21Merge tag 'integrity-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2021-02-21Merge tag 'selinux-pr-20210215' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2021-02-21Merge tag 'tomoyo-pr-20210215' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds
2021-02-16KEYS: trusted: Reserve TPM for seal and unseal operationsJarkko Sakkinen
2021-02-16KEYS: trusted: Fix migratable=1 failingJarkko Sakkinen
2021-02-16KEYS: trusted: Fix incorrect handling of tpm_get_random()Jarkko Sakkinen
2021-02-12integrity: Make function integrity_add_key() staticWei Yongjun
2021-02-10Merge branch 'ima-kexec-fixes' into next-integrityMimi Zohar
2021-02-10ima: Free IMA measurement buffer after kexec syscallLakshmi Ramasubramanian
2021-02-10ima: Free IMA measurement buffer on errorLakshmi Ramasubramanian
2021-02-02smackfs: restrict bytes count in smackfs write functionsSabyrzhan Tasbolatov
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa
2021-01-28cap: fix conversions on getxattrMiklos Szeredi
2021-01-26IMA: Measure kernel version in early bootRaphael Gianotti
2021-01-24ima: handle idmapped mountsChristian Brauner
2021-01-24apparmor: handle idmapped mountsChristian Brauner
2021-01-24fs: make helpers idmap mount awareChristian Brauner
2021-01-24commoncap: handle idmapped mountsChristian Brauner
2021-01-24xattr: handle idmapped mountsTycho Andersen
2021-01-24acl: handle idmapped mountsChristian Brauner
2021-01-24inode: make init and permission helpers idmapped mount awareChristian Brauner