1. 57e7ba0 lsm: fix smack_inode_removexattr and xattr_getsecurity memleak by Casey Schaufler · 7 years ago
  2. 2569e7e Merge commit 'keys-fixes-20170927' into fixes-v4.14-rc3 by James Morris · 7 years ago
  3. 428490e security/keys: rewrite all of big_key crypto by Jason A. Donenfeld · 7 years ago
  4. 9108018 security/keys: properly zero out sensitive key material in big_key by Jason A. Donenfeld · 7 years ago
  5. e007ce9 KEYS: use kmemdup() in request_key_auth_new() by Eric Biggers · 7 years ago
  6. 4aa68e0 KEYS: restrict /proc/keys by credentials at open time by Eric Biggers · 7 years ago
  7. 8f67456 KEYS: reset parent each time before searching key_user_tree by Eric Biggers · 7 years ago
  8. 37863c4 KEYS: prevent KEYCTL_READ on negative key by Eric Biggers · 7 years ago
  9. 237bbd2 KEYS: prevent creating a different user's keyrings by Eric Biggers · 7 years ago
  10. e645016 KEYS: fix writing past end of user-supplied buffer in keyring_read() by Eric Biggers · 7 years ago
  11. 7fc0786 KEYS: fix key refcount leak in keyctl_read_key() by Eric Biggers · 7 years ago
  12. 884bee0 KEYS: fix key refcount leak in keyctl_assume_authority() by Eric Biggers · 7 years ago
  13. f7b48cf KEYS: don't revoke uninstantiated key in request_key_auth_new() by Eric Biggers · 7 years ago
  14. 44d8143 KEYS: fix cred refcount leak in request_key_auth_new() by Eric Biggers · 7 years ago
  15. a302824 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
  16. ab5348c security: fix description of values returned by cap_inode_need_killpriv by Stefan Berger · 7 years ago
  17. 79444df Merge tag 'apparmor-pr-2017-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 7 years ago
  18. bf81100 apparmor: fix apparmorfs DAC access permissions by John Johansen · 7 years ago
  19. b1545db apparmor: fix build failure on sparc caused by undeclared signals by John Johansen · 7 years ago
  20. bc4d82f apparmor: fix incorrect type assignment when freeing proxies by John Johansen · 7 years ago
  21. 15372b9 apparmor: ensure unconfined profiles have dfas initialized by John Johansen · 7 years ago
  22. 290638a apparmor: fix race condition in null profile creation by John Johansen · 7 years ago
  23. d07881d apparmor: move new_null_profile to after profile lookup fns() by John Johansen · 7 years ago
  24. 651e28c apparmor: add base infastructure for socket mediation by John Johansen · 7 years ago
  25. cbf2d0e apparmor: add more debug asserts to apparmorfs by John Johansen · 7 years ago
  26. 2410aa9 apparmor: make policy_unpack able to audit different info messages by John Johansen · 7 years ago
  27. 26b7899 apparmor: add support for absolute root view based labels by John Johansen · 7 years ago
  28. f872af75 apparmor: cleanup conditional check for label in label_print by John Johansen · 7 years ago
  29. 2ea3ffb apparmor: add mount mediation by John Johansen · 7 years ago
  30. cd1dbf7 apparmor: add the ability to mediate signals by John Johansen · 7 years ago
  31. c556170 apparmor: Redundant condition: prev_ns. in [label.c:1498] by John Johansen · 7 years ago
  32. 5d314a8 apparmor: Fix an error code in aafs_create() by Dan Carpenter · 7 years ago
  33. 86aea56 apparmor: Fix logical error in verify_header() by Christos Gkekas · 7 years ago
  34. 19fe43a apparmor: Fix shadowed local variable in unpack_trans_table() by Geert Uytterhoeven · 7 years ago
  35. 581bfce9 Merge branch 'work.set_fs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 7 years ago
  36. 7f85565 Merge tag 'selinux-pr-20170831' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 7 years ago
  37. dd198ce Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 7 years ago
  38. 0fb02e71 Merge tag 'audit-pr-20170907' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 7 years ago
  39. 828f425 Merge tag 'secureexec-v4.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 7 years ago
  40. 1912834 selinux: remove AVC init audit log message by Richard Guy Briggs · 7 years ago
  41. e13ec93 fs: fix kernel_write prototype by Christoph Hellwig · 7 years ago
  42. bdd1d2d fs: fix kernel_read prototype by Christoph Hellwig · 7 years ago
  43. 8db6c34 Introduce v3 namespaced file capabilities by Serge E. Hallyn · 8 years ago
  44. 0c3014f selinux: constify nf_hook_ops by Arvind Yadav · 7 years ago
  45. 901ef84 selinux: allow per-file labeling for cgroupfs by Antonio Murdaca · 8 years ago
  46. 5d72801 lsm_audit: update my email address by Stephen Smalley · 7 years ago
  47. 7efbb60 selinux: update my email address by Stephen Smalley · 7 years ago
  48. 476accb selinux: use GFP_NOWAIT in the AVC kmem_caches by Michal Hocko · 7 years ago
  49. af63f41 selinux: Generalize support for NNP/nosuid SELinux domain transitions by Stephen Smalley · 7 years ago
  50. 35b372b smack: Remove redundant pdeath_signal clearing by Kees Cook · 7 years ago
  51. 2af6228 LSM: drop bprm_secureexec hook by Kees Cook · 7 years ago
  52. ee67ae7 commoncap: Move cap_elevated calculation into bprm_set_creds by Kees Cook · 7 years ago
  53. 46d98eb commoncap: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
  54. ccbb6e1 smack: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
  55. 62874c3 selinux: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
  56. 993b3ab apparmor: Refactor to remove bprm_secureexec hook by Kees Cook · 7 years ago
  57. ddb4a14 exec: Rename bprm->cred_prepared to called_set_creds by Kees Cook · 7 years ago
  58. 591bb27 netfilter: nf_hook_ops structs can be const by Florian Westphal · 7 years ago
  59. 2a764b5 selinux: Assign proper class to PF_UNIX/SOCK_RAW sockets by Luis Ressel · 7 years ago
  60. 53a2eba sync to Linus v4.13-rc2 for subsystem developers to work against by James Morris · 7 years ago
  61. 7a68ada Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 7 years ago
  62. 64db4c7 security: Use user_namespace::level to avoid redundant iterations in cap_capable() by Kirill Tkhai · 8 years ago
  63. e06fdaf Merge tag 'gcc-plugins-v4.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 7 years ago
  64. 09c7570 xfrm: remove flow cache by Florian Westphal · 7 years ago
  65. 3cf2993 LSM: Remove security_task_create() hook. by Tetsuo Handa · 7 years ago
  66. 4f9dabf KEYS: DH: validate __spare field by Eric Biggers · 7 years ago
  67. 6974f0c include/linux/string.h: add the option of fortified string.h functions by Daniel Micay · 7 years ago
  68. 7114f51 Merge branch 'work.memdup_user' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 7 years ago
  69. 5518b69 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 7 years ago
  70. e24dd9e Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 7 years ago
  71. 650fc87 Merge tag 'docs-4.13' of git://git.lwn.net/linux by Linus Torvalds · 7 years ago
  72. 9bd4218 Merge branch 'sched-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 7 years ago
  73. 81e3e04 Merge tag 'uuid-for-4.13' of git://git.infradead.org/users/hch/uuid by Linus Torvalds · 7 years ago
  74. 3859a27 randstruct: Mark various structs for randomization by Kees Cook · 8 years ago
  75. 02412e9 ima_write_policy(): don't open-code memdup_user_nul() by Al Viro · 8 years ago
  76. c4758fa apparmor: put back designators in struct initialisers by Stephen Rothwell · 8 years ago
  77. 5965453 Merge branch 'stable-4.13' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  78. 3d09198 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 8 years ago
  79. 915d9d2 ima: Log the same audit cause whenever a file has no signature by Thiago Jung Bauermann · 8 years ago
  80. 2663218 ima: Simplify policy_func_show. by Thiago Jung Bauermann · 8 years ago
  81. bb543e3 integrity: Small code improvements by Thiago Jung Bauermann · 8 years ago
  82. e4586c79 ima: fix get_binary_runtime_size() by Roberto Sassu · 8 years ago
  83. 28a8dc4 ima: use ima_parse_buf() to parse template data by Roberto Sassu · 8 years ago
  84. 47fdee6 ima: use ima_parse_buf() to parse measurements headers by Roberto Sassu · 8 years ago
  85. b17fd9e ima: introduce ima_parse_buf() by Roberto Sassu · 8 years ago
  86. 82e3bb4 ima: Add cgroups2 to the defaults list by Laura Abbott · 8 years ago
  87. b4e2803 ima: use memdup_user_nul by Geliang Tang · 8 years ago
  88. 5d659f2 ima: fix up #endif comments by Tycho Andersen · 8 years ago
  89. 38d1926 IMA: Correct Kconfig dependencies for hash selection by Ben Hutchings · 8 years ago
  90. 6f6723e ima: define is_ima_appraise_enabled() by Mimi Zohar · 8 years ago
  91. e1f5e01 ima: define Kconfig IMA_APPRAISE_BOOTPARAM option by Mimi Zohar · 8 years ago
  92. 503ceae ima: define a set of appraisal rules requiring file signatures by Mimi Zohar · 8 years ago
  93. 33ce954 ima: extend the "ima_policy" boot command line to support multiple policies by Mimi Zohar · 8 years ago
  94. 94df30a rtnetlink: add NEWCACHEREPORT message type by Julien Gomes · 8 years ago
  95. cdac74d Merge branch 'smack-for-4.13' of git://github.com/cschaufler/smack-next into next by James Morris · 8 years ago
  96. 6a39118 selinux: enable genfscon labeling for tracefs by Jeff Vander Stoep · 8 years ago
  97. 5dd43ce sched/wait: Split out the wait_bit*() APIs from <linux/wait.h> into <linux/wait_bit.h> by Ingo Molnar · 8 years ago
  98. 023f108 selinux: fix double free in selinux_parse_opts_str() by Paul Moore · 8 years ago
  99. 33f2ead apparmor: export that basic profile namespaces are supported by John Johansen · 8 years ago
  100. 6c5fc8f apparmor: add stacked domain labels interface by John Johansen · 8 years ago