Gitiles
Code Review Sign In
review.shift-gmbh.com / SHIFTPHONES / kernel / common / refs/heads/android12-5.10-lts / security
  1. c194212 Merge 5.10.101 into android12-5.10-lts by Greg Kroah-Hartman · 2 years, 10 months ago android12-5.10-lts axolotl/android12-5.10-lts
  2. 8027ba4 ima: Do not print policy rule with inactive LSM labels by Stefan Berger · 2 years, 11 months ago
  3. 8171c8a ima: Allow template selection with ima_template[_fmt]= after ima_hash= by Roberto Sassu · 2 years, 11 months ago
  4. 0795b71 ima: Remove ima_policy file before directory by Stefan Berger · 3 years ago
  5. 7fea2e5 integrity: check the return value of audit_log_start() by Xiaoke Wang · 3 years ago
  6. c3b53fc Merge 5.10.99 into android12-5.10-lts by Greg Kroah-Hartman · 2 years, 11 months ago
  7. f446089 selinux: fix double free of cond_list on error paths by Vratislav Bendel · 2 years, 11 months ago
  8. 4ec3c2e Merge 5.10.94 into android12-5.10-lts by Greg Kroah-Hartman · 2 years, 11 months ago
  9. b2b1b49 selinux: fix potential memleak in selinux_add_opt() by Bernard Zhao · 3 years, 1 month ago
  10. a1bb214 Merge 5.10.90 into android12-5.10-lts by Greg Kroah-Hartman · 3 years ago
  11. 4833ad4 selinux: initialize proto variable in selinux_ip_postroute_compat() by Tom Rix · 3 years ago
  12. 0643d91 tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() by Tetsuo Handa · 3 years ago
  13. e2048a1 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). by Dmitry Vyukov · 3 years ago
  14. 8d21bcc Merge 5.10.82 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 1 month ago
  15. b17dd53 selinux: fix NULL-pointer dereference when hashtab allocation fails by Ondrej Mosnacek · 3 years, 1 month ago
  16. 94097f9 Merge 5.10.81 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 1 month ago
  17. eaafc59 fortify: Explicitly disable Clang support by Kees Cook · 3 years, 8 months ago
  18. c553d9a Merge 5.10.80 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 1 month ago
  19. 706ebf1 Merge branch 'android12-5.10' into `android12-5.10-lts` by Greg Kroah-Hartman · 3 years, 1 month ago
  20. 851b622 apparmor: fix error check by Tom Rix · 4 years, 3 months ago
  21. d337537 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi by Tetsuo Handa · 3 years, 2 months ago
  22. c11aecb smackfs: use __GFP_NOFAIL for smk_cipso_doi() by Tetsuo Handa · 3 years, 2 months ago
  23. 3fac6fe smackfs: Fix use-after-free in netlbl_catmap_walk() by Pawan Gupta · 3 years, 4 months ago
  24. c7400e2 evm: mark evm_fixmode as __ro_after_init by Austin Kim · 3 years, 2 months ago
  25. db04fb4 selinux: fix race condition when computing ocontext SIDs by Ondrej Mosnacek · 3 years, 5 months ago
  26. 0d9f4ae binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 2 months ago
  27. 3af7a2f BACKPORT: binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
  28. 08ed4cb Merge 5.10.67 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 3 months ago
  29. df19d95 Smack: Fix wrong semantics in smk_access_entry() by Tianjia Zhang · 3 years, 5 months ago
  30. 2300418 Merge 5.10.65 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 3 months ago
  31. 34d099a IMA: remove the dependency on CRYPTO_MD5 by THOBY Simon · 3 years, 4 months ago
  32. 5cc1ee3 IMA: remove -Wmissing-prototypes warning by Austin Kim · 3 years, 6 months ago
  33. 46f161a Merge 5.10.59 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 4 months ago
  34. d8c3859 bpf: Add lockdown check for probe_write_user helper by Daniel Borkmann · 3 years, 5 months ago
  35. af3bdb4 Merge 5.10.58 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 5 months ago
  36. f4984f6 selinux: correct the return value when loads initial sids by Xiu Jianfeng · 3 years, 5 months ago
  37. 8db62be Merge 5.10.51 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 5 months ago
  38. 3780348 smackfs: restrict bytes count in smk_set_cipso() by Tetsuo Handa · 3 years, 9 months ago
  39. f383718 selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC by Minchan Kim · 3 years, 7 months ago
  40. 2df0fb4 Merge 5.10.50 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 6 months ago
  41. 912d16a evm: fix writing <securityfs>/evm overflow by Mimi Zohar · 3 years, 8 months ago
  42. 5312426 evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
  43. 7b84c7d evm: Execute evm_inode_init_security() only when an HMAC key is loaded by Roberto Sassu · 3 years, 8 months ago
  44. 194be71 Merge 5.10.47 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 6 months ago
  45. 1573d59 integrity: Load mokx variables into the blacklist keyring by Eric Snowberg · 4 years ago
  46. 4510906 certs: Add EFI_CERT_X509_GUID support for dbx entries by Eric Snowberg · 4 years ago
  47. 9d55580 ANDROID: selinux: modify RTM_GETNEIGH{TBL} by Bram Bonné · 3 years, 8 months ago
  48. 46e5797 FROMGIT: selinux: use __GFP_NOWARN with GFP_NOWAIT by Minchan Kim · 3 years, 7 months ago
  49. 76002c2 Merge 5.10.38 into android12-5.10 by Greg Kroah-Hartman · 3 years, 7 months ago
  50. 31c9a4b KEYS: trusted: Fix memory leak on object td by Colin Ian King · 3 years, 8 months ago
  51. e054456 Merge 5.10.37 into android12-5.10 by Greg Kroah-Hartman · 3 years, 8 months ago
  52. 6b4b3b8 ima: Fix the error code for restoring the PCR value by Li Huafei · 3 years, 10 months ago
  53. 09a119a security: keys: trusted: fix TPM2 authorizations by James Bottomley · 4 years ago
  54. 4c0ddc8 selinux: add proper NULL termination to the secclass_map permissions by Paul Moore · 3 years, 8 months ago
  55. a1ac3f3 Merge 5.10.36 into android12-5.10 by Greg Kroah-Hartman · 3 years, 8 months ago
  56. f37b9c142 security: commoncap: fix -Wstringop-overread warning by Arnd Bergmann · 3 years, 9 months ago
  57. 0907114 Merge 5.10.33 into android12-5.10 by Greg Kroah-Hartman · 3 years, 8 months ago
  58. bf84ef2 KEYS: trusted: Fix TPM reservation for seal/unseal by James Bottomley · 3 years, 8 months ago
  59. 546252f ANDROID: selinux: add vendor hook in selinux by Kuan-Ying Lee · 3 years, 8 months ago
  60. 9a705f0 Merge 5.10.30 into android12-5.10 by Greg Kroah-Hartman · 3 years, 9 months ago
  61. a28124e selinux: fix race between old and new sidtab by Ondrej Mosnacek · 3 years, 9 months ago
  62. fd75d73 selinux: fix cond_list corruption when changing booleans by Ondrej Mosnacek · 3 years, 9 months ago
  63. 4f29b08 selinux: make nslot handling in avtab more robust by Ondrej Mosnacek · 3 years, 9 months ago
  64. b9a61f9 Merge 5.10.27 into android12-5.10 by Greg Kroah-Hartman · 3 years, 9 months ago
  65. 546f7fc integrity: double check iint_cache was initialized by Mimi Zohar · 3 years, 9 months ago
  66. 19c9967 selinux: fix variable scope issue in live sidtab conversion by Ondrej Mosnacek · 3 years, 9 months ago
  67. 9731e08 selinux: don't log MAC_POLICY_LOAD record on failed policy load by Ondrej Mosnacek · 3 years, 9 months ago
  68. 99941e2 Merge branch 'android12-5.10-lts' into 'android12-5.10' by Greg Kroah-Hartman · 3 years, 9 months ago
  69. 86a1ff2 BACKPORT: kasan: remove redundant config option by Walter Wu · 3 years, 9 months ago
  70. e8f79d9 Merge branch 'android12-5.10' into branch 'android12-5.10-lts' by Greg Kroah-Hartman · 3 years, 9 months ago
  71. 3ccfc59 Merge 5.10.24 into android12-5.10-lts by Greg Kroah-Hartman · 3 years, 9 months ago
  72. 5d5422a Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") by Eric W. Biederman · 3 years, 10 months ago
  73. 0a3b407 ANDROID: security: selinux: Add vendor hook in avc by Kuan-Ying Lee · 3 years, 10 months ago
  74. 6bd3d02 Merge 5.10.22 into android12-5.10 by Greg Kroah-Hartman · 3 years, 10 months ago
  75. aa40f5e tomoyo: recognize kernel threads correctly by Tetsuo Handa · 3 years, 11 months ago
  76. 28454baf Merge 5.10.21 into android12-5.10 by Greg Kroah-Hartman · 3 years, 10 months ago
  77. e004209 tomoyo: ignore data race while checking quota by Tetsuo Handa · 3 years, 11 months ago
  78. fa5b656 smackfs: restrict bytes count in smackfs write functions by Sabyrzhan Tasbolatov · 4 years ago
  79. d8c7f0a Merge 5.10.20 into android12-5.10 by Greg Kroah-Hartman · 3 years, 10 months ago
  80. 67118bb KEYS: trusted: Reserve TPM for seal and unseal operations by Jarkko Sakkinen · 4 years ago
  81. 54c527c KEYS: trusted: Fix migratable=1 failing by Jarkko Sakkinen · 4 years ago
  82. 9d83cc1 KEYS: trusted: Fix incorrect handling of tpm_get_random() by Jarkko Sakkinen · 4 years ago
  83. 2fe9215 selinux: fix inconsistency between inode_getxattr and inode_listsecurity by Amir Goldstein · 4 years ago
  84. d7b0efa certs: Fix blacklist flag type confusion by David Howells · 4 years, 1 month ago
  85. 6e223a3 watch_queue: Drop references to /dev/watch_queue by Gabriel Krisman Bertazi · 4 years, 1 month ago
  86. 54b4e5d capabilities: Don't allow writing ambiguous v3 file capabilities by Eric W. Biederman · 4 years ago
  87. c365d33 ima: Free IMA measurement buffer after kexec syscall by Lakshmi Ramasubramanian · 3 years, 11 months ago
  88. 1facf24 ima: Free IMA measurement buffer on error by Lakshmi Ramasubramanian · 3 years, 11 months ago
  89. 494e9ec evm: Fix memleak in init_desc by Dinghao Liu · 4 years ago
  90. b129c98 Merge 5.10.17 into android12-5.10 by Greg Kroah-Hartman · 3 years, 10 months ago
  91. 02dee03 cap: fix conversions on getxattr by Miklos Szeredi · 4 years ago
  92. 924b494 BACKPORT: selinux: teach SELinux about anonymous inodes by Daniel Colascione · 4 years ago
  93. 4e8b674 UPSTREAM: security: add inode_init_security_anon() LSM hook by Lokesh Gidra · 4 years ago
  94. 88e2d5f Merge 5.10.9 into android12-5.10 by Greg Kroah-Hartman · 4 years ago
  95. a3fddad dump_common_audit_data(): fix racy accesses to ->d_name by Al Viro · 4 years ago
  96. 19057a6 Merge 5.10.4 into android12-5.10 by Greg Kroah-Hartman · 4 years ago
  97. 0f2206e ima: Don't modify file descriptor mode on the fly by Roberto Sassu · 4 years, 1 month ago
  98. 8f939ab Smack: Handle io_uring kernel thread privileges by Casey Schaufler · 4 years ago
  99. 6e5ea34 selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling by Paul Moore · 4 years, 2 months ago
  100. f0d7de0 selinux: fix error initialization in inode_doinit_with_dentry() by Tianyue Ren · 4 years, 3 months ago