- 5dfbfe7 Merge tag 'fs.idmapped.v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years ago
- 84bfcc0 Merge tag 'integrity-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years ago
- a135ce4 Merge tag 'selinux-pr-20220110' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years ago
- 5c947d0 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 3 years ago
- 520451e ima: silence measurement list hexdump during kexec by Bruno Meneguele · 3 years ago
- e63a023 Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next by David S. Miller · 3 years ago
- e7c124b Merge tag 'selinux-pr-20211228' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years ago
- 732bc2f selinux: initialize proto variable in selinux_ip_postroute_compat() by Tom Rix · 3 years ago
- 92ad195 integrity: Do not load MOK and MOKx when secure boot be disabled by Lee, Chun-Yi · 3 years ago
- c9ea870 Merge tag 'tomoyo-pr-20211222' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1 by Linus Torvalds · 3 years ago
- 6cd9d4b selinux: minor tweaks to selinux_add_opt() by Paul Moore · 3 years ago
- 2e08df3 selinux: fix potential memleak in selinux_add_opt() by Bernard Zhao · 3 years, 1 month ago
- aef2fed add missing bpf-cgroup.h includes by Jakub Kicinski · 3 years ago
- cc274ae selinux: fix sleeping function called from invalid context by Scott Mayhew · 3 years ago
- f702e11 tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() by Tetsuo Handa · 3 years ago
- 04e57a2 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). by Dmitry Vyukov · 3 years ago
- 52f982f security,selinux: remove security_add_mnt_opt() by Ondrej Mosnacek · 3 years, 1 month ago
- 5fe3757 selinux: Use struct_size() helper in kmalloc() by Xiu Jianfeng · 3 years, 1 month ago
- bd30336 fs: support mapped mounts of mapped filesystems by Christian Brauner · 3 years, 1 month ago
- 4472071 fs: use low-level mapping helpers by Christian Brauner · 3 years, 1 month ago
- a793d79 fs: move mapping helpers by Christian Brauner · 3 years, 1 month ago
- d3b04a4 security: DH - use KDF implementation from crypto API by Stephan Müller · 3 years, 1 month ago
- d792134 security: DH - remove dead code for zero padding by Stephan Müller · 3 years, 1 month ago
- 6326948 lsm: security_task_getsecid_subj() -> security_current_getsecid_subj() by Paul Moore · 3 years, 3 months ago
- dc27f3c selinux: fix NULL-pointer dereference when hashtab allocation fails by Ondrej Mosnacek · 3 years, 1 month ago
- 32a370a net,lsm,selinux: revert the security_sctp_assoc_established() hook by Paul Moore · 3 years, 1 month ago
- 5593a73 Merge tag 'apparmor-pr-2021-11-10' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 3 years, 2 months ago
- f54ca91 Merge tag 'net-5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Linus Torvalds · 3 years, 2 months ago
- 512b7931 Merge branch 'akpm' (patches from Andrew) by Linus Torvalds · 3 years, 2 months ago
- 53944f1 mm: remove HARDENED_USERCOPY_FALLBACK by Stephen Kitt · 3 years, 2 months ago
- 582122f apparmor: remove duplicated 'Returns:' comments by Austin Kim · 3 years, 2 months ago
- 7b72112 apparmor: remove unneeded one-line hook wrappers by Florian Westphal · 3 years, 3 months ago
- f4a2d28 apparmor: Use struct_size() helper in kzalloc() by Gustavo A. R. Silva · 3 years, 3 months ago
- e7310c9 security: implement sctp_assoc_established hook in selinux by Xin Long · 3 years, 2 months ago
- 7c2ef02 security: add sctp_assoc_established hook by Xin Long · 3 years, 2 months ago
- c081d53 security: pass asoc to sctp_assoc_request and sctp_sk_clone by Xin Long · 3 years, 2 months ago
- 4d47fbb apparmor: fix zero-length compiler warning in AA_BUG() by John Johansen · 3 years, 4 months ago
- d0d845a apparmor: use per file locks for transactional queries by Hamza Mahfooz · 3 years, 5 months ago
- aa4ceed apparmor: fix doc warning by ChenXiaoSong · 3 years, 7 months ago
- 7e50e9f apparmor: Remove the repeated declaration by Shaokun Zhang · 3 years, 7 months ago
- c75ea02 apparmor: avoid -Wempty-body warning by Arnd Bergmann · 3 years, 9 months ago
- c150d66 Merge tag 'integrity-v5.16' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 2 months ago
- d2fac0a Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 2 months ago
- cdab10b Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 2 months ago
- 6f2b76a Merge tag 'Smack-for-5.16' of https://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 2 months ago
- 2dc26d9 Merge tag 'overflow-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
- f594e28 Merge tag 'hardening-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
- dc15561 apparmor: Fix internal policy capable check for policy management by John Johansen · 3 years, 9 months ago
- 32ba540 evm: mark evm_fixmode as __ro_after_init by Austin Kim · 3 years, 2 months ago
- 0934ad4 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi by Tetsuo Handa · 3 years, 2 months ago
- f91488e smackfs: use __GFP_NOFAIL for smk_cipso_doi() by Tetsuo Handa · 3 years, 2 months ago
- 9d235ac Merge branch 'ucount-fixes-for-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 3 years, 2 months ago
- 8bd51a2 gcc-plugins: Explicitly document purpose and deprecation schedule by Kees Cook · 3 years, 2 months ago
- 5ebcbe3 ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring by Eric W. Biederman · 3 years, 2 months ago
- 15bf323 security: Return xattr name from security_dentry_init_security() by Vivek Goyal · 3 years, 3 months ago
- 1c73213 selinux: fix a sock regression in selinux_ip_postroute_compat() by Paul Moore · 3 years, 2 months ago
- 52f8869 binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
- 86dd9fd LSM: Avoid warnings about potentially unused hook variables by Kees Cook · 3 years, 2 months ago
- b57d020 Smack: fix W=1 build warnings by Casey Schaufler · 3 years, 2 months ago
- e9fd729 selinux: fix all of the W=1 build warnings by Paul Moore · 4 years, 1 month ago
- 1d1e1de selinux: make better use of the nf_hook_state passed to the NF hooks by Paul Moore · 3 years, 3 months ago
- f8de49e smack: remove duplicated hook function by Florian Westphal · 3 years, 3 months ago
- cbfcd13 selinux: fix race condition when computing ocontext SIDs by Ondrej Mosnacek · 3 years, 5 months ago
- 4342f70 selinux: remove unneeded ipv6 hook wrappers by Florian Westphal · 3 years, 3 months ago
- cc4299e ima: Use strscpy instead of strlcpy by Petr Vorel · 3 years, 3 months ago
- 61868ac ima_policy: Remove duplicate 'the' in docs comment by Petr Vorel · 3 years, 3 months ago
- 40224c4 ima: add gid support by Curtis Veit · 3 years, 3 months ago
- 30d8764 ima: fix uid code style problems by Alex Henrie · 3 years, 3 months ago
- eb0782b ima: fix deadlock when traversing "ima_default_rules". by liqiong · 3 years, 3 months ago
- 578f393 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ by David S. Miller · 3 years, 3 months ago
- f5d0e5e selinux: remove the SELinux lockdown implementation by Paul Moore · 3 years, 3 months ago
- 8a764ef selinux: enable genfscon labeling for securityfs by Christian Göttsche · 3 years, 3 months ago
- 387ef96 Smack:- Use overlay inode label in smack_inode_copy_up() by Vishal Goel · 3 years, 3 months ago
- f02003c hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO by Kees Cook · 3 years, 3 months ago
- a52f8a5 fortify: Explicitly disable Clang support by Kees Cook · 3 years, 8 months ago
- 222a96b smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block by Sebastian Andrzej Siewior · 3 years, 3 months ago
- a3727a8 selinux,smack: fix subjective/objective credential use mixups by Paul Moore · 3 years, 3 months ago
- 8e71168 lsm_audit: avoid overloading the "key" audit field by Ondrej Mosnacek · 3 years, 3 months ago
- d9d8c93 Smack: Brutalist io_uring support by Casey Schaufler · 3 years, 7 months ago
- 740b034 selinux: add support for the io_uring access controls by Paul Moore · 3 years, 10 months ago
- cdc1404 lsm,io_uring: add LSM hooks to io_uring by Paul Moore · 3 years, 11 months ago
- 0817534 smackfs: Fix use-after-free in netlbl_catmap_walk() by Pawan Gupta · 3 years, 4 months ago
- 844f7ea include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage by Eugene Syromiatnikov · 3 years, 4 months ago
- b250e6d1 Merge tag 'kbuild-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild by Linus Torvalds · 3 years, 4 months ago
- 1472690 Merge branch 'akpm' (patches from Andrew) by Linus Torvalds · 3 years, 4 months ago
- 5b78ed2 mm/pagemap: add mmap_assert_locked() annotations to find_vma*() by Luigi Rizzo · 3 years, 4 months ago
- e052826 security: remove unneeded subdir-$(CONFIG_...) by Masahiro Yamada · 3 years, 7 months ago
- aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 4 months ago
- b55060d Merge tag 'hardening-v5.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 4 months ago
- 9e9fb76 Merge tag 'net-next-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 4 months ago
- efa916a Merge tag 'for-5.15/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm by Linus Torvalds · 3 years, 4 months ago
- 9b2eacd Merge tag 'Smack-for-5.15' of git://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 4 months ago
- befa491 Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 4 months ago
- 46f4945 Merge tag 'efi-core-2021-08-30' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 3 years, 4 months ago
- b31eea2 efi: Don't use knowledge about efi_guid_t internals by Andy Shevchenko · 3 years, 11 months ago
- cb181da IMA: reject unknown hash algorithms in ima_get_hash_algo by THOBY Simon · 3 years, 4 months ago
- 8ecd39c IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms by THOBY Simon · 3 years, 4 months ago
- 4f2946a IMA: introduce a new policy option func=SETXATTR_CHECK by THOBY Simon · 3 years, 4 months ago
- 583a80a IMA: add a policy option to restrict xattr hash algorithms on appraisal by THOBY Simon · 3 years, 4 months ago
- 1624dc0 IMA: add support to restrict the hash algorithms used for file appraisal by THOBY Simon · 3 years, 4 months ago