summaryrefslogtreecommitdiffstats
path: root/security (follow)
Commit message (Expand)AuthorAgeFilesLines
* lockdown: Lock down tracing and perf kprobes when in confidentiality modeDavid Howells2019-08-201-0/+1
* lockdown: Lock down /proc/kcoreDavid Howells2019-08-201-0/+1
* x86/mmiotrace: Lock down the testmmiotrace moduleDavid Howells2019-08-201-0/+1
* lockdown: Lock down module params that specify hardware parameters (eg. ioport)David Howells2019-08-201-0/+1
* lockdown: Lock down TIOCSSERIALDavid Howells2019-08-201-0/+1
* lockdown: Prohibit PCMCIA CIS storage when the kernel is locked downDavid Howells2019-08-201-0/+1
* ACPI: Limit access to custom_method when the kernel is locked downMatthew Garrett2019-08-201-0/+1
* x86/msr: Restrict MSR access when the kernel is locked downMatthew Garrett2019-08-201-0/+1
* x86: Lock down IO port access when the kernel is locked downMatthew Garrett2019-08-201-0/+1
* PCI: Lock down BAR access when the kernel is locked downMatthew Garrett2019-08-201-0/+1
* hibernate: Disable when the kernel is locked downJosh Boyer2019-08-201-0/+1
* kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac2019-08-202-2/+2
* kexec_load: Disable at runtime if the kernel is locked downMatthew Garrett2019-08-201-0/+1
* lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked downMatthew Garrett2019-08-201-0/+1
* lockdown: Enforce module signatures if the kernel is locked downDavid Howells2019-08-202-0/+2
* security: Add a static lockdown policy LSMMatthew Garrett2019-08-205-5/+224
* security: Add a "locked down" LSM hookMatthew Garrett2019-08-201-0/+6
* security: Support early LSMsMatthew Garrett2019-08-201-8/+42
* Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds2019-06-2115-61/+15
|\
| * treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2019-06-1915-61/+15
* | apparmor: reset pos on failure to unpack for various functionsMike Salvatore2019-06-191-8/+39
* | apparmor: enforce nullbyte at end of tag stringJann Horn2019-06-191-1/+1
* | apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen2019-06-191-1/+10
|/
* Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler2019-06-151-5/+7
* Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-06-132-13/+36
|\
| * selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang2019-06-121-6/+14
| * selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang2019-06-121-5/+14
| * selinux: log raw contexts as untrusted stringsOndrej Mosnacek2019-06-121-2/+8
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner2019-06-0572-352/+72
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372Thomas Gleixner2019-06-0511-39/+11
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295Thomas Gleixner2019-06-056-66/+6
* | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner2019-06-051-9/+1
* | Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2019-05-312-12/+19
|\ \
| * | ima: show rules with IMA_INMASK correctlyRoberto Sassu2019-05-301-9/+12
| * | evm: check hash algorithm passed to init_desc()Roberto Sassu2019-05-301-0/+3
| * | ima: fix wrong signed policy requirement when not appraisingPetr Vorel2019-05-201-3/+4
* | | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner2019-05-3016-81/+16
* | | Merge tag 'spdx-5.2-rc2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/g...Linus Torvalds2019-05-245-25/+5
|\ \ \
| * | | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36Thomas Gleixner2019-05-245-25/+5
* | | | Merge tag 'selinux-pr-20190521' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2019-05-211-2/+8
|\ \ \ \ | |/ / / |/| | / | | |/ | |/|
| * | selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni2019-05-211-2/+8
* | | treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13Thomas Gleixner2019-05-212-30/+2
* | | treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner2019-05-2117-0/+17
| |/ |/|
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2019-05-141-4/+4
|\ \
| * | Revert "selinux: do not report error on connect(AF_UNSPEC)"Paolo Abeni2019-05-101-4/+4
* | | tomoyo: Don't emit WARNING: string while fuzzing testing.Tetsuo Handa2019-05-101-0/+2
* | | tomoyo: Change pathname calculation for read-only filesystems.Tetsuo Handa2019-05-101-1/+2
* | | tomoyo: Check address length before reading address familyTetsuo Handa2019-05-101-0/+4
* | | tomoyo: Add a kernel config option for fuzzing testing.Tetsuo Handa2019-05-102-1/+22
|/ /
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2019-05-101-4/+4
|\ \
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-19 17:17:30 +0100