summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)Author
2020-04-21keys: Fix proc_keys_next to increase position indexVasily Averin
2020-04-17KEYS: reaching the keys quotas correctlyYang Xu
2020-02-24selinux: ensure we cleanup the internal AVC counters on error in avc_update()Jaihind Yadav
2020-02-24selinux: ensure we cleanup the internal AVC counters on error in avc_insert()Paul Moore
2020-02-24selinux: fall back to ref-walk if audit is requiredStephen Smalley
2020-02-05tomoyo: Use atomic_t for statistics counterTetsuo Handa
2020-01-27keys: Timestamp new keysDavid Howells
2020-01-27apparmor: don't try to replace stale label in ptrace access checkJann Horn
2020-01-27apparmor: Fix network performance issue in aa_label_sk_permTony Jones
2020-01-23LSM: generalize flag passing to security_capableMicah Morton
2020-01-09apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen
2020-01-04apparmor: fix unsigned len comparison with less than zeroColin Ian King
2019-12-05apparmor: delete the dentry in aafs_remove() to avoid a leakChris Coulson
2019-10-11ima: fix freeing ongoing ahash_requestSascha Hauer
2019-10-11ima: always return negative code for errorSascha Hauer
2019-10-07smack: use GFP_NOFS while holding inode_smack::smk_lockEric Biggers
2019-10-07Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is setJann Horn
2019-10-07security: smack: Fix possible null-pointer dereferences in smack_socket_sock_...Jia-Ju Bai
2019-09-21keys: Fix missing null pointer check in request_key_auth_describe()Hillf Danton
2019-09-16apparmor: reset pos on failure to unpack for various functionsMike Salvatore
2019-08-06selinux: fix memory leak in policydb_init()Ondrej Mosnacek
2019-07-26selinux: fix empty write to keycreate fileOndrej Mosnacek
2019-06-25apparmor: enforce nullbyte at end of tag stringJann Horn
2019-06-25apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen
2019-06-09evm: check hash algorithm passed to init_desc()Roberto Sassu
2019-06-09ima: show rules with IMA_INMASK correctlyRoberto Sassu
2019-05-31selinux: avoid uninitialized variable warningArnd Bergmann
2019-05-25apparmorfs: fix use-after-free on symlink traversalAl Viro
2019-05-25securityfs: fix use-after-free on symlink traversalAl Viro
2019-05-16selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni
2019-05-08selinux: never allow relabeling on context mountsOndrej Mosnacek
2019-05-08selinux: avoid silent denials in permissive mode under RCU walkStephen Smalley
2019-05-04selinux: use kernel linux/socket.h for genheaders and mdpPaulo Alcantara
2019-04-27device_cgroup: fix RCU imbalance in error caseJann Horn
2019-04-05selinux: do not override context on context mountsOndrej Mosnacek
2019-03-23security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblockJ. Bruce Fields
2019-03-23selinux: add the missing walk_size + len check in selinux_sctp_bind_connectXin Long
2019-03-23keys: Fix dependency loop between construction record and auth keyDavid Howells
2019-03-19missing barriers in some of unix_sock ->addr and ->path accessesAl Viro
2019-03-13apparmor: Fix aa_label_build() error handling for failed mergesJohn Johansen
2019-02-27KEYS: always initialize keyring_index_key::desc_lenEric Biggers
2019-02-27KEYS: allow reaching the keys quotas exactlyEric Biggers
2019-02-12smack: fix access permissions for keyringZoran Markovic
2019-01-26selinux: always allow mounting submountsOndrej Mosnacek
2019-01-22selinux: fix GPF on invalid policyStephen Smalley
2019-01-22LSM: Check for NULL cred-security on freeJames Morris
2019-01-22Yama: Check for pid death before checking ancestryKees Cook
2019-01-13selinux: policydb - fix byte order and alignment issuesOndrej Mosnacek
2018-12-08selinux: add support for RTM_NEWCHAIN, RTM_DELCHAIN, and RTM_GETCHAINPaul Moore
2018-12-01selinux: Add __GFP_NOWARN to allocation at str_read()Tetsuo Handa