- d8c3859 bpf: Add lockdown check for probe_write_user helper by Daniel Borkmann · 3 years, 5 months ago
- 197c61c Merge tag 'fixes-v5.10a' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 4 years, 1 month ago
- ed9b25d [SECURITY] fix namespaced fscaps when !CONFIG_SECURITY by Serge Hallyn · 4 years, 2 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 4 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 4 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 4 months ago
- 4a87b19 Merge tag 'LSM-add-setgid-hook-5.8-author-fix' of git://github.com/micah-morton/linux by Linus Torvalds · 4 years, 7 months ago
- 39030e1 security: Add LSM hooks to set*gid syscalls by Thomas Cedeno · 4 years, 7 months ago
- 6c32978 Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 4 years, 7 months ago
- 15a2bc4 Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 4 years, 8 months ago
- 56305aa exec: Compute file based creds only once by Eric W. Biederman · 4 years, 8 months ago
- 112b714 exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds by Eric W. Biederman · 4 years, 8 months ago
- b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 4 years, 10 months ago
- 8c0637e keys: Make the KEY_NEED_* perms an enum rather than a mask by David Howells · 4 years, 8 months ago
- 998f504 security: Add hooks to rule on setting a watch by David Howells · 5 years ago
- 344fa64 security: Add a hook for the point of notification insertion by David Howells · 5 years ago
- 3292739 sysctl: pass kernel pointers to ->proc_handler by Christoph Hellwig · 4 years, 9 months ago
- a162984 Merge branch 'next-general' of git://git.kernel.org:/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 4 years, 10 months ago
- 3e27a33 security: remove duplicated include from security.h by YueHaibing · 5 years ago
- 59438b46 security,lockdown,selinux: implement SELinux lockdown by Stephen Smalley · 5 years ago
- 7794b1d Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux by Linus Torvalds · 5 years ago
- 1ca7feb Merge tag 'v5.4-rc7' into perf/core, to pick up fixes by Ingo Molnar · 5 years ago
- 359efcc efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN by Javier Martinez Canillas · 5 years ago
- 69393cb powerpc/xmon: Restrict when kernel is locked down by Christopher M. Riedl · 5 years ago
- ae79d55 perf/core: Fix !CONFIG_PERF_EVENTS build warnings and failures by Ingo Molnar · 5 years ago
- da97e18 perf_event: Add support for LSM and SELinux checks by Joel Fernandes (Google) · 5 years ago
- aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 5825a95 Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 5 years ago
- ccbd54f tracefs: Restrict tracefs when the kernel is locked down by Matthew Garrett · 5 years ago
- 5496197 debugfs: Restrict debugfs when the kernel is locked down by David Howells · 5 years ago
- b0c8fdc lockdown: Lock down perf when in confidentiality mode by David Howells · 5 years ago
- 9d1f8be5 bpf: Restrict bpf when kernel lockdown is in confidentiality mode by David Howells · 5 years ago
- a94549d lockdown: Lock down tracing and perf kprobes when in confidentiality mode by David Howells · 5 years ago
- 02e935b lockdown: Lock down /proc/kcore by David Howells · 5 years ago
- 906357f x86/mmiotrace: Lock down the testmmiotrace module by David Howells · 5 years ago
- 20657f6 lockdown: Lock down module params that specify hardware parameters (eg. ioport) by David Howells · 5 years ago
- 794edf3 lockdown: Lock down TIOCSSERIAL by David Howells · 5 years ago
- 3f19cad lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down by David Howells · 5 years ago
- f474e14 ACPI: Limit access to custom_method when the kernel is locked down by Matthew Garrett · 5 years ago
- 95f5e95 x86/msr: Restrict MSR access when the kernel is locked down by Matthew Garrett · 5 years ago
- 96c4f67 x86: Lock down IO port access when the kernel is locked down by Matthew Garrett · 5 years ago
- eb627e1 PCI: Lock down BAR access when the kernel is locked down by Matthew Garrett · 5 years ago
- 38bd94b hibernate: Disable when the kernel is locked down by Josh Boyer · 5 years ago
- 7d31f46 kexec_load: Disable at runtime if the kernel is locked down by Matthew Garrett · 5 years ago
- 9b9d8dd lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down by Matthew Garrett · 5 years ago
- 49fcf73 lockdown: Enforce module signatures if the kernel is locked down by David Howells · 5 years ago
- 000d388 security: Add a static lockdown policy LSM by Matthew Garrett · 5 years ago
- 9e47d31 security: Add a "locked down" LSM hook by Matthew Garrett · 5 years ago
- e6b1db9 security: Support early LSMs by Matthew Garrett · 5 years ago
- ac5656d fanotify, inotify, dnotify, security: add security hook for fs notifications by Aaron Goidel · 5 years ago
- 42df744 LSM: switch to blocking policy update notifiers by Janne Karhunen · 6 years ago
- 4009132 Merge branch 'work.mount-syscalls' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- b230d5a LSM: add new hook for kernfs node initialization by Ondrej Mosnacek · 6 years ago
- 2db154b vfs: syscall: Add move_mount(2) to move mounts around by David Howells · 6 years ago
- 7b47a9e Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 0b52075 introduce cloning of fs_context by Al Viro · 6 years ago
- 846e566 vfs: Put security flags into the fs_context struct by David Howells · 6 years ago
- da2441f vfs: Add LSM hooks for the new mount API by David Howells · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
- 6d9c939 procfs: add smack subdir to attrs by Casey Schaufler · 6 years ago
- 757cbe5 LSM: new method: ->sb_add_mnt_opt() by Al Viro · 6 years ago
- 84d8c4a LSM: bury struct security_mnt_opts by Al Viro · 6 years ago
- 204cc0c LSM: hide struct security_mnt_opts from any generic code by Al Viro · 6 years ago
- a10d7c2 LSM: split ->sb_set_mnt_opts() out of ->sb_kern_mount() by Al Viro · 6 years ago
- f5c0c26 new helper: security_sb_eat_lsm_opts() by Al Viro · 6 years ago
- c039bc3 LSM: lift extracting and parsing LSM options into the caller of ->sb_remount() by Al Viro · 6 years ago
- 6be8750 LSM: lift parsing LSM options into the caller of ->sb_kern_mount() by Al Viro · 6 years ago
- ae7795b signal: Distinguish between kernel_siginfo and siginfo by Eric W. Biederman · 6 years ago
- 92d4a03 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
- 377179c security: define new LSM hook named security_kernel_load_data by Mimi Zohar · 7 years ago
- e3f20ae security_file_open(): lose cred argument by Al Viro · 7 years ago
- aae7cfc security: add hook for socketpair() by David Herrmann · 7 years ago
- b393a70 Merge tag 'v4.17-rc2' into next-general by James Morris · 7 years ago
- e59644b security: remove security_settime by Sargun Dhillon · 7 years ago
- f8cf2f1 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- 3612605 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- 9eda2d2 Merge tag 'selinux-pr-20180403' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
- 3ec3011 security: Add a cred_getsecid hook by Matthew Garrett · 7 years ago
- d8c6e85 msg/security: Pass kern_ipc_perm not msg_queue into the msg_queue security hooks by Eric W. Biederman · 7 years ago
- 7191adf shm/security: Pass kern_ipc_perm not shmid_kernel into the shm security hooks by Eric W. Biederman · 7 years ago
- aefad95 sem/security: Pass kern_ipc_perm not sem_array into the sem security hooks by Eric W. Biederman · 7 years ago
- 6b4f3d0 usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as_cred and security_task_kill by Stephen Smalley · 7 years ago
- 72e89f5 security: Add support for SCTP security hooks by Richard Haines · 7 years ago
- 1495dc9 security: bpf: replace include of linux/bpf.h with forward declarations by Jakub Kicinski · 7 years ago
- afdb09c security: bpf: Add LSM hooks for bpf object related syscall by Chenbo Feng · 7 years ago
- 7f85565 Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
- dd198ce Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 7 years ago
- 8db6c34 Introduce v3 namespaced file capabilities by Serge E. Hallyn · 8 years ago
- 2af6228 LSM: drop bprm_secureexec hook by Kees Cook · 8 years ago
- 46d98eb commoncap: Refactor to remove bprm_secureexec hook by Kees Cook · 8 years ago
- 3cf2993 LSM: Remove security_task_create() hook. by Tetsuo Handa · 8 years ago
- 5965453 Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- 0b4d345 security/selinux: allow security_sb_clone_mnt_opts to enable/disable native labeling behavior by Scott Mayhew · 8 years ago
- 6623ec7 securityfs: add the ability to support symlinks by John Johansen · 8 years ago
- 47a2b33 IB/core: Enforce security on management datagrams by Daniel Jurgens · 8 years ago
- 8f408ab selinux lsm IB/core: Implement LSM notification system by Daniel Jurgens · 8 years ago
- d291f1a IB/core: Enforce PKey security on QPs by Daniel Jurgens · 8 years ago
- e4e55b4 LSM: Revive security_task_alloc() hook and per "struct task_struct" security blob. by Tetsuo Handa · 8 years ago