summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2022-10-03apparmor: verify permission table indexesJohn Johansen1-1/+34
2022-10-03apparmor: add the ability for policy to specify a permission tableJohn Johansen2-11/+98
2022-10-03apparmor: make unpack_array return a trianary valueJohn Johansen2-22/+33
2022-10-03apparmor: group dfa policydb unpackingJohn Johansen1-38/+63
2022-10-03apparmor: make transition table unpack generic so it can be reusedJohn Johansen1-10/+12
2022-10-03apparmor: add user mode flagJohn Johansen5-5/+9
2022-10-03apparmor: add mediation class information to auditingJohn Johansen14-13/+48
2022-10-03apparmor: extend permissions to support a label and tag stringJohn Johansen7-27/+32
2022-10-03apparmor: isolate policy backwards compatibility to its own fileJohn Johansen5-287/+359
2022-10-03apparmor: extend xindex sizeJohn Johansen3-17/+16
2022-10-03apparmor: move dfa perm macros into policy_unpackJohn Johansen2-51/+49
2022-10-03apparmor: extend policydb permission set by making use of the xbitsJohn Johansen1-4/+27
2022-10-03apparmor: fix apparmor mediating locking non-fs unix socketsJohn Johansen1-4/+9
2022-10-03apparmor: Fix abi check to include v8 abiJohn Johansen1-1/+1
2022-10-03apparmor: preparse for state being more than just an integerJohn Johansen15-102/+101
2022-10-03apparmor: convert policy lookup to use accept as an indexJohn Johansen7-24/+33
2022-10-03apparmor: cleanup shared permission structJohn Johansen2-12/+9
2022-10-03apparmor: convert xmatch lookup to use accept as an indexJohn Johansen2-4/+7
2022-10-03apparmor: convert fperm lookup to use accept as an indexJohn Johansen2-19/+44
2022-10-03apparmor: convert xmatch to using the new shared policydb structJohn Johansen6-29/+28
2022-10-03apparmor: combine file_rules and aa_policydb into a single shared structJohn Johansen7-59/+40
2022-10-03apparmor: compute policydb permission on profile loadJohn Johansen9-86/+90
2022-10-03apparmor: convert xmatch to use aa_perms structureJohn Johansen3-7/+13
2022-10-03apparmor: rework and cleanup fperm computationJohn Johansen1-32/+38
2022-10-03apparmor: move fperm computation into policy_unpackJohn Johansen3-98/+98
2022-10-03apparmor: compute xmatch permissions on profile loadMike Salvatore4-3/+26
2022-10-03apparmor: compute file permissions on profile loadMike Salvatore5-48/+110
2022-10-03apparmor: expose compression level limits in sysfsJon Tourville1-0/+16
2022-10-03apparmor: use zstd compression for profile dataJon Tourville4-102/+81
2022-10-03apparmor: reserve mediation classesJohn Johansen1-1/+8
2022-10-03apparmor: fix lockdep warning when removing a namespaceJohn Johansen1-1/+1
2022-10-03apparmor: fix a memleak in multi_transaction_new()Gaosheng Cui1-1/+3
2022-10-03security: kmsan: fix interoperability with auto-initializationAlexander Potapenko1-0/+4
2022-10-03Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-2/+0
2022-09-30efi: Correct Macmini DMI match in uefi cert quirkOrlando Chamberlain1-1/+1
2022-09-29hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zeroKees Cook1-4/+10
2022-09-29landlock: Fix documentation styleMickaël Salaün1-20/+20
2022-09-29landlock: Slightly improve documentation and fix spellingMickaël Salaün1-1/+1
2022-09-28powerpc/rtas: block error injection when locked downNathan Lynch1-0/+1
2022-09-28powerpc/pseries: block untrusted device tree changes when locked downNathan Lynch1-0/+1
2022-09-27smack: cleanup obsolete mount option flagsXiu Jianfeng1-9/+0
2022-09-27smack: lsm: remove the unneeded result variableXu Panda1-3/+1
2022-09-27SMACK: Add sk_clone_security LSM hookLontke Michael1-0/+16
2022-09-21KEYS: Move KEY_LOOKUP_ to include/linux/key.h and define KEY_LOOKUP_ALLRoberto Sassu1-2/+0
2022-09-14selinux: remove the unneeded result variableXu Panda1-15/+9
2022-09-14lockdown: ratelimit denial messagesNathan Lynch1-1/+1
2022-09-07LoadPin: Require file with verity root digests to have a headerMatthias Kaehlcke2-2/+21
2022-09-07LoadPin: Fix Kconfig doc about format of file with verity digestsMatthias Kaehlcke1-1/+1
2022-09-02Merge tag 'landlock-6.0-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-23/+25
2022-09-02landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFERMickaël Salaün1-23/+25