summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Expand)Author
2022-07-20lockdown: Fix kexec lockdown bypass with ima policyEric Snowberg
2022-07-14Merge tag 'integrity-v5.19-fix' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2022-07-13ima: Fix potential memory leak in ima_init_crypto()Jianglei Nie
2022-07-13ima: force signature verification when CONFIG_KEXEC_SIG is configuredCoiby Xu
2022-07-07ima: Fix a potential integer overflow in ima_appraise_measurementHuaxin Lu
2022-07-06ima: fix violation measurement list recordMimi Zohar
2022-06-29x86/retbleed: Add fine grained Kconfig knobsPeter Zijlstra
2022-06-15selinux: free contexts previously transferred in selinux_add_opt()Christian Göttsche
2022-06-15Revert "evm: Fix memleak in init_desc"Xiu Jianfeng
2022-06-08KEYS: trusted: tpm2: Fix migratable logicDavid Safford
2022-06-04Merge tag 'pull-18-rc1-work.mount' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds
2022-05-25Merge tag 'linux-kselftest-kunit-5.19-rc1' of git://git.kernel.org/pub/scm/li...Linus Torvalds
2022-05-24Merge tag 'integrity-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2022-05-24Merge tag 'tpmdd-next-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds
2022-05-24Merge tag 'Smack-for-5.19' of https://github.com/cschaufler/smack-nextLinus Torvalds
2022-05-24Merge tag 'landlock-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2022-05-24Merge tag 'selinux-pr-20220523' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2022-05-24Merge tag 'kernel-hardening-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds
2022-05-24lockdown: also lock down previous kgdb useDaniel Thompson
2022-05-23smack: Remove redundant assignmentsMichal Orzel
2022-05-23KEYS: trusted: Introduce support for NXP CAAM-based trusted keysAhmad Fatoum
2022-05-23KEYS: trusted: allow use of kernel RNG for key materialAhmad Fatoum
2022-05-23KEYS: trusted: allow use of TEE as backend without TCG_TPM supportAhmad Fatoum
2022-05-23certs: Factor out the blacklist hash creationMickaël Salaün
2022-05-23landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFERMickaël Salaün
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün
2022-05-23landlock: Move filesystem helpers and add a new oneMickaël Salaün
2022-05-23landlock: Fix same-layer rule unionsMickaël Salaün
2022-05-23landlock: Create find_rule() from unmask_layers()Mickaël Salaün
2022-05-23landlock: Reduce the maximum number of layers to 16Mickaël Salaün
2022-05-23landlock: Define access_mask_t to enforce a consistent access mask sizeMickaël Salaün
2022-05-23landlock: Change landlock_restrict_self(2) check orderingMickaël Salaün
2022-05-23landlock: Change landlock_add_rule(2) argument check orderingMickaël Salaün
2022-05-23landlock: Fix landlock_add_rule(2) documentationMickaël Salaün
2022-05-19move mount-related externs from fs.h to mount.hAl Viro
2022-05-17selinux: fix bad cleanup on error in hashtab_duplicate()Ondrej Mosnacek
2022-05-16loadpin: stop using bdevnameChristoph Hellwig
2022-05-16big_keys: Use struct for internal payloadKees Cook
2022-05-16integrity: Fix sparse warnings in keyring_handlerStefan Berger
2022-05-16evm: Clean up some variablesStefan Berger
2022-05-16evm: Return INTEGRITY_PASS for enum integrity_status value '0'Stefan Berger
2022-05-15efi: Do not import certificates from UEFI Secure Boot for T2 MacsAditya Garg
2022-05-13security: declare member holding string literal constChristian Göttsche
2022-05-09landlock: Format with clang-formatMickaël Salaün
2022-05-09landlock: Add clang-format exceptionsMickaël Salaün
2022-05-08randstruct: Enable Clang supportKees Cook
2022-05-08randstruct: Move seed generation into scripts/basic/Kees Cook
2022-05-08randstruct: Reorganize Kconfigs and attribute macrosKees Cook
2022-05-05ima: support fs-verity file digest based version 3 signaturesMimi Zohar
2022-05-05ima: permit fsverity's file digests in the IMA measurement listMimi Zohar