- 17ae69a Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 3 years, 8 months ago
- 1aea780 LSM: Infrastructure management of the superblock by Casey Schaufler · 3 years, 8 months ago
- 1fb057d smack: differentiate between subjective and objective task credentials by Paul Moore · 3 years, 10 months ago
- 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 10 months ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 10 months ago
- 7ef4c19 smackfs: restrict bytes count in smackfs write functions by Sabyrzhan Tasbolatov · 4 years ago
- 71bc356 commoncap: handle idmapped mounts by Christian Brauner · 4 years ago
- c7c7a1a1 xattr: handle idmapped mounts by Tycho Andersen · 4 years ago
- 2f2fce3 Merge tag 'Smack-for-5.11-io_uring-fix' of git://github.com/cschaufler/smack-next by Linus Torvalds · 4 years ago
- 942cb35 Smack: Handle io_uring kernel thread privileges by Casey Schaufler · 4 years ago
- 8bda68d Merge tag 'Smack-for-5.11' of git://github.com/cschaufler/smack-next by Linus Torvalds · 4 years ago
- 41dd959 security: add const qualifier to struct sock in various places by Florian Westphal · 4 years, 1 month ago
- 9b0072e security/smack: remove unused varible 'rc' by Alex Shi · 4 years, 2 months ago
- 7da31b8 Smack: fix kernel-doc interface on functions by Alex Shi · 4 years, 2 months ago
- 99a6740 Merge tag 'Smack-for-5.10' of git://github.com/cschaufler/smack-next by Linus Torvalds · 4 years, 3 months ago
- edd6153 Smack: Remove unnecessary variable initialization by Casey Schaufler · 4 years, 3 months ago
- bf0afe6 Smack: Fix build when NETWORK_SECMARK is not set by Casey Schaufler · 4 years, 3 months ago
- 322dd63 Smack: Use the netlabel cache by Casey Schaufler · 4 years, 5 months ago
- a2af031 Smack: Set socket labels only once by Casey Schaufler · 4 years, 5 months ago
- 36be812 Smack: Consolidate uses of secmark into a function by Casey Schaufler · 4 years, 5 months ago
- df561f66 treewide: Use fallthrough pseudo-keyword by Gustavo A. R. Silva · 4 years, 4 months ago
- 42a2df3 Smack: prevent underflow in smk_set_cipso() by Dan Carpenter · 4 years, 5 months ago
- a6bd4f6 Smack: fix another vsscanf out of bounds by Dan Carpenter · 4 years, 5 months ago
- beb4ee6 Smack: fix use-after-free in smk_write_relabel_self() by Eric Biggers · 4 years, 6 months ago
- 6c32978 Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 4 years, 7 months ago
- 15a2bc4 Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 4 years, 7 months ago
- b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 4 years, 9 months ago
- a8478a6 smack: Implement the watch_key and post_notification hooks by David Howells · 5 years ago
- 8c0637e keys: Make the KEY_NEED_* perms an enum rather than a mask by David Howells · 4 years, 8 months ago
- ef26650 Smack: Remove unused inline function smk_ad_setfield_u_fs_path_mnt by YueHaibing · 4 years, 8 months ago
- 4ca7528 Smack:- Remove redundant inode_smack cache by Casey Schaufler · 4 years, 8 months ago
- 921bb1c Smack:- Remove mutex lock "smk_lock" from inode_smack by Casey Schaufler · 4 years, 8 months ago
- 84e99e5 Smack: slab-out-of-bounds in vsscanf by Casey Schaufler · 4 years, 9 months ago
- 092c94a smack: remove redundant structure variable from header. by Maninder Singh · 4 years, 9 months ago
- 00720f0 smack: avoid unused 'sip' variable warning by Arnd Bergmann · 4 years, 9 months ago
- c9d35ee Merge branch 'merge.nfs-fs_parse.1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 5 years ago
- d7167b1 fs_parse: fold fs_parameter_desc/fs_parameter_spec by Al Viro · 5 years ago
- 96cafb9 fs_parser: remove fs_parameter_description name field by Eric Sandeen · 5 years ago
- 87fbfff broken ping to ipv6 linklocal addresses on debian buster by Casey Schaufler · 5 years ago
- d055b4f pipe: Reduce #inclusion of pipe_fs_i.h by David Howells · 5 years ago
- e94f8cc Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-next by Linus Torvalds · 5 years ago
- e5bfad3 smack: use GFP_NOFS while holding inode_smack::smk_lock by Eric Biggers · 5 years ago
- 3f4287e security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb() by Jia-Ju Bai · 5 years ago
- a1a07f2 smack: fix some kernel-doc notations by luanshi · 5 years ago
- 3675f05 Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set by Jann Horn · 5 years ago
- 933a90b Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 5 years ago
- 028db3e Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs" by Linus Torvalds · 5 years ago
- 0f75ef6 Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 5 years ago
- 5afdd0f vfs: Convert smackfs to use the new mount API by David Howells · 6 years ago
- 2e12256 keys: Replace uid/gid/perm permissions checking with an ACL by David Howells · 6 years ago
- d2912cb treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 by Thomas Gleixner · 6 years ago
- 6e7739f Smack: Restore the smackfsdef mount option and add missing prefixes by Casey Schaufler · 6 years ago
- a10e763 treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372 by Thomas Gleixner · 6 years ago
- ec8f24b treewide: Add SPDX license identifier - Makefile/Kconfig by Thomas Gleixner · 6 years ago
- 619ae03 Smack: Fix kbuild reported build error by Casey Schaufler · 6 years ago
- b9ef551 smack: Check address length before reading address family by Tetsuo Handa · 6 years ago
- f7450bc Smack: Fix IPv6 handling of 0 secmark by Casey Schaufler · 6 years ago
- 4e328b0 Smack: Create smack_rule cache to optimize memory usage by Casey Schaufler · 6 years ago
- 460d95a smack: removal of global rule list by Vishal Goel · 6 years ago
- 7b47a9e Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 0b52075 introduce cloning of fs_context by Al Viro · 6 years ago
- 2febd25 smack: Implement filesystem context security hooks by David Howells · 6 years ago
- 09186e5 security: mark expected switch fall-throughs and add a missing break by Gustavo A. R. Silva · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- 1cfb2a5 LSM: Make lsm_early_cred() and lsm_early_task() local functions. by Tetsuo Handa · 6 years ago
- c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
- ecd5f82 LSM: Infrastructure management of the ipc security blob by Casey Schaufler · 6 years ago
- 019bcca Smack: Abstract use of ipc security blobs by Casey Schaufler · 6 years ago
- afb1cbe3 LSM: Infrastructure management of the inode security by Casey Schaufler · 6 years ago
- fb4021b Smack: Abstract use of inode security blob by Casey Schaufler · 6 years ago
- 33bf60c LSM: Infrastructure management of the file security by Casey Schaufler · 6 years ago
- f28952a Smack: Abstract use of file security blob by Casey Schaufler · 6 years ago
- bbd3662 Infrastructure management of the cred security blob by Casey Schaufler · 6 years ago
- b17103a Smack: Abstract use of cred security blob by Casey Schaufler · 6 years ago
- 14bd99c LSM: Separate idea of "major" LSM from "exclusive" LSM by Kees Cook · 6 years ago
- f4941d7 LSM: Lift LSM selection out of individual LSMs by Kees Cook · 6 years ago
- 47008e5 LSM: Introduce LSM_FLAG_LEGACY_MAJOR by Kees Cook · 6 years ago
- 505b050 Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- d2497e1 smack: rewrite smack_sb_eat_lsm_opts() by Al Viro · 6 years ago
- c3300aa smack: get rid of match_token() by Al Viro · 6 years ago
- 55c0e5b smack: take the guts of smack_parse_opts_str() into a new helper by Al Viro · 6 years ago
- 757cbe5 LSM: new method: ->sb_add_mnt_opt() by Al Viro · 6 years ago
- 12085b1 smack: switch to private smack_mnt_opts by Al Viro · 6 years ago
- 204cc0c LSM: hide struct security_mnt_opts from any generic code by Al Viro · 6 years ago
- 5b40023 LSM: turn sb_eat_lsm_opts() into a method by Al Viro · 6 years ago
- a10d7c2 LSM: split ->sb_set_mnt_opts() out of ->sb_kern_mount() by Al Viro · 6 years ago
- 6be8750 LSM: lift parsing LSM options into the caller of ->sb_kern_mount() by Al Viro · 6 years ago
- 6466f3d smack: make smack_parse_opts_str() clean up on failure by Al Viro · 6 years ago
- 5b841bf smack: fix access permissions for keyring by Zoran Markovic · 6 years ago
- e80bc22 Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
- 638820d Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
- 07aed2f LSM: Record LSM name in struct lsm_info by Kees Cook · 6 years ago
- 3d6e5f6 LSM: Convert security_initcall() into DEFINE_LSM() by Kees Cook · 6 years ago
- ae7795b signal: Distinguish between kernel_siginfo and siginfo by Eric W. Biederman · 6 years ago
- b1fed3e Smack: Mark expected switch fall-through by Gustavo A. R. Silva · 6 years ago
- dcb569c Smack: ptrace capability use fixes by Casey Schaufler · 6 years ago
- 76c9805 Smack: remove set but not used variable 'root_inode' by YueHaibing · 6 years ago
- 04743f8 Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
- a66b4cd Merge branch 'work.open3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago