summaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)Author
2020-06-04apparmor: Fix use-after-free in aa_audit_rule_initNavid Emamdoost
2020-06-04selinux: properly handle multiple messages in selinux_netlink_send()Paul Moore
2020-06-04selinux: remove redundant selinux_nlmsg_permHuaisheng Ye
2020-06-04KEYS: Avoid false positive ENOMEM error on key readWaiman Long
2020-06-01KEYS: Don't write out to userspace while holding key semaphoreWaiman Long
2020-06-01keys: Fix proc_keys_next to increase position indexVasily Averin
2020-06-01KEYS: reaching the keys quotas correctlyYang Xu
2020-05-21efi: Only print errors about failing to get certs if EFI vars are foundJavier Martinez Canillas
2020-05-15smack: avoid unused 'sip' variable warningArnd Bergmann
2020-05-15selinux: ensure we cleanup the internal AVC counters on error in avc_update()Jaihind Yadav
2020-05-15selinux: ensure we cleanup the internal AVC counters on error in avc_insert()Paul Moore
2020-05-04selinux: fall back to ref-walk if audit is requiredStephen Smalley
2020-05-04selinux: fix regression introduced by move_mount(2) syscallStephen Smalley
2020-05-04selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link"Stephen Smalley
2020-05-04broken ping to ipv6 linklocal addresses on debian busterCasey Schaufler
2020-04-16tomoyo: Use atomic_t for statistics counterTetsuo Handa
2020-03-20apparmor: fix aa_xattrs_match() may sleep while holding a RCU lockJohn Johansen
2020-03-07tomoyo: Don't use nifty names on sockets.Tetsuo Handa
2020-03-07apparmor: fix unsigned len comparison with less than zeroColin Ian King
2019-11-09selinux: fix context string corruption in convert_context()Ondrej Mosnacek
2019-11-09ima: fix freeing ongoing ahash_requestSascha Hauer
2019-11-09ima: always return negative code for errorSascha Hauer
2019-10-07smack: use GFP_NOFS while holding inode_smack::smk_lockEric Biggers
2019-10-07Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is setJann Horn
2019-10-07security: smack: Fix possible null-pointer dereferences in smack_socket_sock_...Jia-Ju Bai
2019-10-07selinux: fix residual uses of current_security() for the SELinux blobStephen Smalley
2019-10-05KEYS: trusted: correctly initialize digests and fix locking issueRoberto Sassu
2019-09-21keys: Fix missing null pointer check in request_key_auth_describe()Hillf Danton
2019-08-25KEYS: trusted: allow module init if TPM is inactive or deactivatedRoberto Sassu
2019-08-06selinux: fix memory leak in policydb_init()Ondrej Mosnacek
2019-07-31structleak: disable STRUCTLEAK_BYREF in combination with KASAN_STACKArnd Bergmann
2019-07-31selinux: check sidtab limit before adding a new entryOndrej Mosnacek
2019-07-26integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven
2019-07-26selinux: fix empty write to keycreate fileOndrej Mosnacek
2019-06-21Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner
2019-06-18apparmor: reset pos on failure to unpack for various functionsMike Salvatore
2019-06-18apparmor: enforce nullbyte at end of tag stringJann Horn
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen
2019-06-14Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler
2019-06-12Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2019-06-12selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang
2019-06-12selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang
2019-06-11selinux: log raw contexts as untrusted stringsOndrej Mosnacek
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295Thomas Gleixner
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner
2019-05-31Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner