Gitiles
Code Review
Sign In
review.shift-gmbh.com
/
SHIFTPHONES
/
mainline
/
linux
/
671c450b6fe0680ea1cb1cf1526d764fdd5a3d3f
/
security
a125bcd
Merge tag 'apparmor-pr-2020-01-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 5 years ago
8c62ed2
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
by John Johansen
· 5 years ago
20d4e80
apparmor: only get a label reference if the fast path check fails
by John Johansen
· 5 years ago
9c95a27
apparmor: fix bind mounts aborting with -ENOMEM
by Patrick Steinhardt
· 5 years ago
c5c928c
Merge tag 'tomoyo-fixes-for-5.5' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1
by Linus Torvalds
· 5 years ago
4a94c43
Merge tag 'tpmdd-next-20191219' of git://git.infradead.org/users/jjs/linux-tpmdd
by Linus Torvalds
· 5 years ago
45477b3
security: keys: trusted: fix lost handle flush
by James Bottomley
· 5 years ago
6bd5ce6
tomoyo: Suppress RCU warning at list_for_each_entry_rcu().
by Tetsuo Handa
· 5 years ago
601f009
KEYS: remove CONFIG_KEYS_COMPAT
by Eric Biggers
· 5 years ago
6f7c413
tomoyo: Don't use nifty names on sockets.
by Tetsuo Handa
· 5 years ago
c593642
treewide: Use sizeof_field() macro
by Pankaj Bharadiya
· 5 years ago
79e178a
Merge tag 'apparmor-pr-2019-12-03' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 5 years ago
ceb3074
Merge tag 'y2038-cleanups-5.5' of git://git.kernel.org:/pub/scm/linux/kernel/git/arnd/playground
by Linus Torvalds
· 5 years ago
ba75082
Merge tag 'selinux-pr-20191126' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 5 years ago
7794b1d
Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux
by Linus Torvalds
· 5 years ago
6a96566
Merge tag 'notifications-pipe-prep-20191115' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs
by Linus Torvalds
· 5 years ago
6f09019
x86/efi: remove unused variables
by YueHaibing
· 5 years ago
a6ed68d
Merge tag 'drm-next-2019-11-27' of git://anongit.freedesktop.org/drm/drm
by Linus Torvalds
· 5 years ago
8c39f71
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
by Linus Torvalds
· 5 years ago
1ae7878
Merge branch 'core-rcu-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
by Linus Torvalds
· 5 years ago
3f59dbc
Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
by Linus Torvalds
· 5 years ago
82f31eb
net: port < inet_prot_sock(net) --> inet_port_requires_bind_service(net, port)
by Maciej Żenczykowski
· 5 years ago
386403a
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
by Linus Torvalds
· 5 years ago
341c1fd
apparmor: make it so work buffers can be allocated from atomic context
by John Johansen
· 5 years ago
bce4e7e
apparmor: reduce rcu_read_lock scope for aa_file_perm mediation
by John Johansen
· 5 years ago
8f21a62
apparmor: fix wrong buffer allocation in aa_new_mount
by John Johansen
· 5 years ago
00e0590
apparmor: fix unsigned len comparison with less than zero
by Colin Ian King
· 6 years ago
ddbc7d0
y2038: move itimer reset into itimer.c
by Arnd Bergmann
· 5 years ago
77e0723
Merge v5.4-rc7 into drm-next
by Dave Airlie
· 5 years ago
d34a570
Merge branch 'topic/secureboot' into next
by Michael Ellerman
· 5 years ago
0b40dbc
KEYS: trusted: Remove set but not used variable 'keyhndl'
by zhengbin
· 5 years ago
2e19e10
KEYS: trusted: Move TPM2 trusted keys code
by Sumit Garg
· 5 years ago
47f9c27
KEYS: trusted: Create trusted keys subsystem
by Sumit Garg
· 5 years ago
c6f61e5
KEYS: Use common tpm_buf for trusted and asymmetric keys
by Sumit Garg
· 5 years ago
74edff2
tpm: Move tpm_buf code to include/linux/
by Sumit Garg
· 5 years ago
8220e22
powerpc: Load firmware trusted keys/hashes into kernel keyring
by Nayna Jain
· 5 years ago
ad72367
x86/efi: move common keyring handler functions to new file
by Nayna Jain
· 5 years ago
273df86
ima: Check against blacklisted hashes for files with modsig
by Nayna Jain
· 5 years ago
e14555e
ima: Make process_buffer_measurement() generic
by Nayna Jain
· 5 years ago
1ca7feb
Merge tag 'v5.4-rc7' into perf/core, to pick up fixes
by Ingo Molnar
· 5 years ago
d31e955
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
by David S. Miller
· 5 years ago
359efcc
efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
by Javier Martinez Canillas
· 5 years ago
43e0ae7
Merge branch 'for-mingo' of git://git.kernel.org/pub/scm/linux/kernel/git/paulmck/linux-rcu into core/rcu
by Ingo Molnar
· 5 years ago
a60a574
security/safesetid: Replace rcu_swap_protected() with rcu_replace_pointer()
by Paul E. McKenney
· 5 years ago
69393cb
powerpc/xmon: Restrict when kernel is locked down
by Christopher M. Riedl
· 5 years ago
3275a71
Merge tag 'drm-next-5.5-2019-10-09' of git://people.freedesktop.org/~agd5f/linux into drm-next
by Dave Airlie
· 5 years ago
d055b4f
pipe: Reduce #inclusion of pipe_fs_i.h
by David Howells
· 5 years ago
2f18439
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
by David S. Miller
· 5 years ago
da97e18
perf_event: Add support for LSM and SELinux checks
by Joel Fernandes (Google)
· 5 years ago
2ef4591
Merge tag 'selinux-pr-20191007' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 5 years ago
42345b6
selinux: default_range glblub implementation
by Joshua Brindle
· 5 years ago
4b7d4d4
device_cgroup: Export devcgroup_check_permission
by Harish Kasiviswanathan
· 6 years ago
6f4c930
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
by David S. Miller
· 5 years ago
7a8beb7
integrity: remove pointless subdir-$(CONFIG_...)
by Masahiro Yamada
· 5 years ago
6b190d3
integrity: remove unneeded, broken attempt to add -fshort-wchar
by Masahiro Yamada
· 5 years ago
2a52439
selinux: fix context string corruption in convert_context()
by Ondrej Mosnacek
· 5 years ago
36fbf1e
net: rtnetlink: add linkprop commands to add and delete alternative ifnames
by Jiri Pirko
· 5 years ago
3e3e24b
selinux: allow labeling before policy is loaded
by Jonathan Lebon
· 5 years ago
e40642d
selinux: remove load size limit
by zhanglin
· 5 years ago
aefcf2f
Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 5 years ago
f1f2f61
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity
by Linus Torvalds
· 5 years ago
9f75c82
KEYS: trusted: correctly initialize digests and fix locking issue
by Roberto Sassu
· 5 years ago
e94f8cc
Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-next
by Linus Torvalds
· 5 years ago
1b5fb41
Merge tag 'safesetid-bugfix-5.4' of git://github.com/micah-morton/linux
by Linus Torvalds
· 5 years ago
5825a95
Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 5 years ago
21ab858
LSM: SafeSetID: Stop releasing uninitialized ruleset
by Micah Morton
· 5 years ago
f8a9bc6
security: constify some arrays in lockdown LSM
by Matthew Garrett
· 5 years ago
d41a3ef
keys: Fix missing null pointer check in request_key_auth_describe()
by Hillf Danton
· 5 years ago
169ce0c
selinux: fix residual uses of current_security() for the SELinux blob
by Stephen Smalley
· 5 years ago
e5bfad3
smack: use GFP_NOFS while holding inode_smack::smk_lock
by Eric Biggers
· 5 years ago
3f4287e
security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()
by Jia-Ju Bai
· 5 years ago
a1a07f2
smack: fix some kernel-doc notations
by luanshi
· 5 years ago
3675f05
Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
by Jann Horn
· 5 years ago
846d2db
keys: ensure that ->match_free() is called in request_key_and_link()
by Eric Biggers
· 5 years ago
2a7f0e5
ima: ima_api: Use struct_size() in kzalloc()
by Gustavo A. R. Silva
· 5 years ago
fa5b571
ima: use struct_size() in kzalloc()
by Gustavo A. R. Silva
· 6 years ago
556d971
ima: Fix use after free in ima_read_modsig()
by Thiago Jung Bauermann
· 5 years ago
116f21b
selinux: avoid atomic_t usage in sidtab
by Ondrej Mosnacek
· 5 years ago
b602614
lockdown: Print current->comm in restriction messages
by Matthew Garrett
· 5 years ago
ccbd54f
tracefs: Restrict tracefs when the kernel is locked down
by Matthew Garrett
· 5 years ago
5496197
debugfs: Restrict debugfs when the kernel is locked down
by David Howells
· 5 years ago
29d3c1c
kexec: Allow kexec_file() with appropriate IMA policy when locked down
by Matthew Garrett
· 5 years ago
b0c8fdc
lockdown: Lock down perf when in confidentiality mode
by David Howells
· 5 years ago
9d1f8be5
bpf: Restrict bpf when kernel lockdown is in confidentiality mode
by David Howells
· 5 years ago
a94549d
lockdown: Lock down tracing and perf kprobes when in confidentiality mode
by David Howells
· 5 years ago
02e935b
lockdown: Lock down /proc/kcore
by David Howells
· 5 years ago
906357f
x86/mmiotrace: Lock down the testmmiotrace module
by David Howells
· 5 years ago
20657f6
lockdown: Lock down module params that specify hardware parameters (eg. ioport)
by David Howells
· 5 years ago
794edf3
lockdown: Lock down TIOCSSERIAL
by David Howells
· 5 years ago
3f19cad
lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down
by David Howells
· 5 years ago
f474e14
ACPI: Limit access to custom_method when the kernel is locked down
by Matthew Garrett
· 5 years ago
95f5e95
x86/msr: Restrict MSR access when the kernel is locked down
by Matthew Garrett
· 5 years ago
96c4f67
x86: Lock down IO port access when the kernel is locked down
by Matthew Garrett
· 5 years ago
eb627e1
PCI: Lock down BAR access when the kernel is locked down
by Matthew Garrett
· 5 years ago
38bd94b
hibernate: Disable when the kernel is locked down
by Josh Boyer
· 5 years ago
99d5cadf
kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE
by Jiri Bohac
· 5 years ago
7d31f46
kexec_load: Disable at runtime if the kernel is locked down
by Matthew Garrett
· 5 years ago
9b9d8dd
lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down
by Matthew Garrett
· 5 years ago
49fcf73
lockdown: Enforce module signatures if the kernel is locked down
by David Howells
· 5 years ago
000d388
security: Add a static lockdown policy LSM
by Matthew Garrett
· 5 years ago
Next »