- 59438b46 security,lockdown,selinux: implement SELinux lockdown by Stephen Smalley · 5 years ago
- 7794b1d Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux by Linus Torvalds · 5 years ago
- 1ca7feb Merge tag 'v5.4-rc7' into perf/core, to pick up fixes by Ingo Molnar · 5 years ago
- 359efcc efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN by Javier Martinez Canillas · 5 years ago
- 69393cb powerpc/xmon: Restrict when kernel is locked down by Christopher M. Riedl · 5 years ago
- ae79d55 perf/core: Fix !CONFIG_PERF_EVENTS build warnings and failures by Ingo Molnar · 5 years ago
- da97e18 perf_event: Add support for LSM and SELinux checks by Joel Fernandes (Google) · 5 years ago
- aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 5825a95 Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 5 years ago
- ccbd54f tracefs: Restrict tracefs when the kernel is locked down by Matthew Garrett · 5 years ago
- 5496197 debugfs: Restrict debugfs when the kernel is locked down by David Howells · 5 years ago
- b0c8fdc lockdown: Lock down perf when in confidentiality mode by David Howells · 5 years ago
- 9d1f8be5 bpf: Restrict bpf when kernel lockdown is in confidentiality mode by David Howells · 5 years ago
- a94549d lockdown: Lock down tracing and perf kprobes when in confidentiality mode by David Howells · 5 years ago
- 02e935b lockdown: Lock down /proc/kcore by David Howells · 5 years ago
- 906357f x86/mmiotrace: Lock down the testmmiotrace module by David Howells · 5 years ago
- 20657f6 lockdown: Lock down module params that specify hardware parameters (eg. ioport) by David Howells · 5 years ago
- 794edf3 lockdown: Lock down TIOCSSERIAL by David Howells · 5 years ago
- 3f19cad lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down by David Howells · 5 years ago
- f474e14 ACPI: Limit access to custom_method when the kernel is locked down by Matthew Garrett · 5 years ago
- 95f5e95 x86/msr: Restrict MSR access when the kernel is locked down by Matthew Garrett · 5 years ago
- 96c4f67 x86: Lock down IO port access when the kernel is locked down by Matthew Garrett · 5 years ago
- eb627e1 PCI: Lock down BAR access when the kernel is locked down by Matthew Garrett · 5 years ago
- 38bd94b hibernate: Disable when the kernel is locked down by Josh Boyer · 5 years ago
- 7d31f46 kexec_load: Disable at runtime if the kernel is locked down by Matthew Garrett · 5 years ago
- 9b9d8dd lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down by Matthew Garrett · 5 years ago
- 49fcf73 lockdown: Enforce module signatures if the kernel is locked down by David Howells · 5 years ago
- 000d388 security: Add a static lockdown policy LSM by Matthew Garrett · 5 years ago
- 9e47d31 security: Add a "locked down" LSM hook by Matthew Garrett · 5 years ago
- e6b1db9 security: Support early LSMs by Matthew Garrett · 5 years ago
- ac5656d fanotify, inotify, dnotify, security: add security hook for fs notifications by Aaron Goidel · 5 years ago
- 42df744 LSM: switch to blocking policy update notifiers by Janne Karhunen · 6 years ago
- 4009132 Merge branch 'work.mount-syscalls' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- b230d5a LSM: add new hook for kernfs node initialization by Ondrej Mosnacek · 6 years ago
- 2db154b vfs: syscall: Add move_mount(2) to move mounts around by David Howells · 6 years ago
- 7b47a9e Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 0b52075 introduce cloning of fs_context by Al Viro · 6 years ago
- 846e566 vfs: Put security flags into the fs_context struct by David Howells · 6 years ago
- da2441f vfs: Add LSM hooks for the new mount API by David Howells · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
- 6d9c939 procfs: add smack subdir to attrs by Casey Schaufler · 6 years ago
- 757cbe5 LSM: new method: ->sb_add_mnt_opt() by Al Viro · 6 years ago
- 84d8c4a LSM: bury struct security_mnt_opts by Al Viro · 6 years ago
- 204cc0c LSM: hide struct security_mnt_opts from any generic code by Al Viro · 6 years ago
- a10d7c2 LSM: split ->sb_set_mnt_opts() out of ->sb_kern_mount() by Al Viro · 6 years ago
- f5c0c26 new helper: security_sb_eat_lsm_opts() by Al Viro · 6 years ago
- c039bc3 LSM: lift extracting and parsing LSM options into the caller of ->sb_remount() by Al Viro · 6 years ago
- 6be8750 LSM: lift parsing LSM options into the caller of ->sb_kern_mount() by Al Viro · 6 years ago
- ae7795b signal: Distinguish between kernel_siginfo and siginfo by Eric W. Biederman · 6 years ago
- 92d4a03 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
- 377179c security: define new LSM hook named security_kernel_load_data by Mimi Zohar · 6 years ago
- e3f20ae security_file_open(): lose cred argument by Al Viro · 6 years ago
- aae7cfc security: add hook for socketpair() by David Herrmann · 7 years ago
- b393a70 Merge tag 'v4.17-rc2' into next-general by James Morris · 7 years ago
- e59644b security: remove security_settime by Sargun Dhillon · 7 years ago
- f8cf2f1 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- 3612605 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
- 9eda2d2 Merge tag 'selinux-pr-20180403' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
- 3ec3011 security: Add a cred_getsecid hook by Matthew Garrett · 7 years ago
- d8c6e85 msg/security: Pass kern_ipc_perm not msg_queue into the msg_queue security hooks by Eric W. Biederman · 7 years ago
- 7191adf shm/security: Pass kern_ipc_perm not shmid_kernel into the shm security hooks by Eric W. Biederman · 7 years ago
- aefad95 sem/security: Pass kern_ipc_perm not sem_array into the sem security hooks by Eric W. Biederman · 7 years ago
- 6b4f3d0 usb, signal, security: only pass the cred, not the secid, to kill_pid_info_as_cred and security_task_kill by Stephen Smalley · 7 years ago
- 72e89f5 security: Add support for SCTP security hooks by Richard Haines · 7 years ago
- 1495dc9 security: bpf: replace include of linux/bpf.h with forward declarations by Jakub Kicinski · 7 years ago
- afdb09c security: bpf: Add LSM hooks for bpf object related syscall by Chenbo Feng · 7 years ago
- 7f85565 Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
- dd198ce Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 7 years ago
- 8db6c34 Introduce v3 namespaced file capabilities by Serge E. Hallyn · 8 years ago
- 2af6228 LSM: drop bprm_secureexec hook by Kees Cook · 7 years ago
- 46d98eb commoncap: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
- 3cf2993 LSM: Remove security_task_create() hook. by Tetsuo Handa · 7 years ago
- 5965453 Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- 0b4d345 security/selinux: allow security_sb_clone_mnt_opts to enable/disable native labeling behavior by Scott Mayhew · 8 years ago
- 6623ec7 securityfs: add the ability to support symlinks by John Johansen · 8 years ago
- 47a2b33 IB/core: Enforce security on management datagrams by Daniel Jurgens · 8 years ago
- 8f408ab selinux lsm IB/core: Implement LSM notification system by Daniel Jurgens · 8 years ago
- d291f1a IB/core: Enforce PKey security on QPs by Daniel Jurgens · 8 years ago
- e4e55b4 LSM: Revive security_task_alloc() hook and per "struct task_struct" security blob. by Tetsuo Handa · 8 years ago
- 791ec49 prlimit,security,selinux: add a security hook for prlimit by Stephen Smalley · 8 years ago
- f1ef09f Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
- 9227dd2 exec: Remove LSM_UNSAFE_PTRACE_CAP by Eric W. Biederman · 8 years ago
- 3a2f5a5 security,selinux,smack: kill security_task_wait hook by Stephen Smalley · 8 years ago
- b21507e proc,security: move restriction on writing /proc/pid/attr nodes to proc by Stephen Smalley · 8 years ago
- de2f4b3 Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
- a4f4528 module: Fully remove the kernel_module_from_file hook by Mickaël Salaün · 9 years ago
- 2602625 security, overlayfs: Provide hook to correctly label newly created files by Vivek Goyal · 8 years ago
- 121ab82 security,overlayfs: Provide security hook for copy up of xattrs for overlay file by Vivek Goyal · 8 years ago
- d8ad8b4 security, overlayfs: provide copy up security hook for unioned files by Vivek Goyal · 8 years ago
- 4f3ccd7 qstr: constify dentry_init_security by Al Viro · 8 years ago
- c52b761 Merge branch 'work.const-path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 9 years ago
- 457db29 security: Introduce security_settime64() by Baolin Wang · 9 years ago
- 3b73b68 constify security_sb_pivotroot() by Al Viro · 9 years ago
- 77b286c constify security_path_chroot() by Al Viro · 9 years ago
- 3ccee46 constify security_path_{link,rename} by Al Viro · 9 years ago
- d360775 constify security_path_{mkdir,mknod,symlink} by Al Viro · 9 years ago
- 989f74e constify security_path_{unlink,rmdir} by Al Viro · 9 years ago
- be01f9f constify chmod_common/security_path_chmod by Al Viro · 9 years ago