- e7310c9 security: implement sctp_assoc_established hook in selinux by Xin Long · 3 years, 2 months ago
- 7c2ef02 security: add sctp_assoc_established hook by Xin Long · 3 years, 2 months ago
- c081d53 security: pass asoc to sctp_assoc_request and sctp_sk_clone by Xin Long · 3 years, 2 months ago
- d2fac0a Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 2 months ago
- cdab10b Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 2 months ago
- 6f2b76a Merge tag 'Smack-for-5.16' of https://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 2 months ago
- 2dc26d9 Merge tag 'overflow-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
- f594e28 Merge tag 'hardening-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
- 0934ad4 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi by Tetsuo Handa · 3 years, 2 months ago
- f91488e smackfs: use __GFP_NOFAIL for smk_cipso_doi() by Tetsuo Handa · 3 years, 2 months ago
- 9d235ac Merge branch 'ucount-fixes-for-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 3 years, 2 months ago
- 8bd51a2 gcc-plugins: Explicitly document purpose and deprecation schedule by Kees Cook · 3 years, 2 months ago
- 5ebcbe3 ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring by Eric W. Biederman · 3 years, 2 months ago
- 15bf323 security: Return xattr name from security_dentry_init_security() by Vivek Goyal · 3 years, 3 months ago
- 1c73213 selinux: fix a sock regression in selinux_ip_postroute_compat() by Paul Moore · 3 years, 2 months ago
- 52f8869 binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
- 86dd9fd LSM: Avoid warnings about potentially unused hook variables by Kees Cook · 3 years, 3 months ago
- b57d020 Smack: fix W=1 build warnings by Casey Schaufler · 3 years, 3 months ago
- e9fd729 selinux: fix all of the W=1 build warnings by Paul Moore · 4 years, 1 month ago
- 1d1e1de selinux: make better use of the nf_hook_state passed to the NF hooks by Paul Moore · 3 years, 3 months ago
- f8de49e smack: remove duplicated hook function by Florian Westphal · 3 years, 3 months ago
- cbfcd13 selinux: fix race condition when computing ocontext SIDs by Ondrej Mosnacek · 3 years, 5 months ago
- 4342f70 selinux: remove unneeded ipv6 hook wrappers by Florian Westphal · 3 years, 3 months ago
- 578f393 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ by David S. Miller · 3 years, 3 months ago
- f5d0e5e selinux: remove the SELinux lockdown implementation by Paul Moore · 3 years, 3 months ago
- 8a764ef selinux: enable genfscon labeling for securityfs by Christian Göttsche · 3 years, 3 months ago
- 387ef96 Smack:- Use overlay inode label in smack_inode_copy_up() by Vishal Goel · 3 years, 3 months ago
- f02003c hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO by Kees Cook · 3 years, 4 months ago
- a52f8a5 fortify: Explicitly disable Clang support by Kees Cook · 3 years, 8 months ago
- 222a96b smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block by Sebastian Andrzej Siewior · 3 years, 3 months ago
- a3727a8 selinux,smack: fix subjective/objective credential use mixups by Paul Moore · 3 years, 3 months ago
- 8e71168 lsm_audit: avoid overloading the "key" audit field by Ondrej Mosnacek · 3 years, 4 months ago
- d9d8c93 Smack: Brutalist io_uring support by Casey Schaufler · 3 years, 7 months ago
- 740b034 selinux: add support for the io_uring access controls by Paul Moore · 3 years, 10 months ago
- cdc1404 lsm,io_uring: add LSM hooks to io_uring by Paul Moore · 4 years ago
- 0817534 smackfs: Fix use-after-free in netlbl_catmap_walk() by Pawan Gupta · 3 years, 4 months ago
- 844f7ea include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage by Eugene Syromiatnikov · 3 years, 4 months ago
- b250e6d1 Merge tag 'kbuild-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild by Linus Torvalds · 3 years, 4 months ago
- 1472690 Merge branch 'akpm' (patches from Andrew) by Linus Torvalds · 3 years, 4 months ago
- 5b78ed2 mm/pagemap: add mmap_assert_locked() annotations to find_vma*() by Luigi Rizzo · 3 years, 4 months ago
- e052826 security: remove unneeded subdir-$(CONFIG_...) by Masahiro Yamada · 3 years, 7 months ago
- aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 4 months ago
- b55060d Merge tag 'hardening-v5.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 4 months ago
- 9e9fb76 Merge tag 'net-next-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 4 months ago
- efa916a Merge tag 'for-5.15/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm by Linus Torvalds · 3 years, 4 months ago
- 9b2eacd Merge tag 'Smack-for-5.15' of git://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 4 months ago
- befa491 Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 4 months ago
- 46f4945 Merge tag 'efi-core-2021-08-30' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 3 years, 4 months ago
- b31eea2 efi: Don't use knowledge about efi_guid_t internals by Andy Shevchenko · 3 years, 11 months ago
- cb181da IMA: reject unknown hash algorithms in ima_get_hash_algo by THOBY Simon · 3 years, 4 months ago
- 8ecd39c IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms by THOBY Simon · 3 years, 5 months ago
- 4f2946a IMA: introduce a new policy option func=SETXATTR_CHECK by THOBY Simon · 3 years, 5 months ago
- 583a80a IMA: add a policy option to restrict xattr hash algorithms on appraisal by THOBY Simon · 3 years, 5 months ago
- 1624dc0 IMA: add support to restrict the hash algorithms used for file appraisal by THOBY Simon · 3 years, 5 months ago
- 50f742d IMA: block writes of the security.ima xattr with unsupported algorithms by THOBY Simon · 3 years, 5 months ago
- 8510505 IMA: remove the dependency on CRYPTO_MD5 by THOBY Simon · 3 years, 5 months ago
- f4083a7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 5 months ago
- 91ccbba dm ima: measure data on table load by Tushar Sugandhi · 3 years, 6 months ago
- 51e1bb9 bpf: Add lockdown check for probe_write_user helper by Daniel Borkmann · 3 years, 5 months ago
- 7133084 bpf: Add _kernel suffix to internal lockdown_bpf_read by Daniel Borkmann · 3 years, 5 months ago
- 0ca8d3c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 5 months ago
- 0b53abf Merge tag 'selinux-pr-20210805' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 5 months ago
- 4c15608 selinux: correct the return value when loads initial sids by Xiu Jianfeng · 3 years, 5 months ago
- bc49d81 mctp: Add MCTP base by Jeremy Kerr · 3 years, 5 months ago
- ca3c9bd ima: Add digest and digest_len params to the functions to measure a buffer by Roberto Sassu · 3 years, 5 months ago
- ce5bb5a ima: Return int in the functions to measure a buffer by Roberto Sassu · 3 years, 5 months ago
- 5d1ef2c ima: Introduce ima_get_current_hash_algo() by Roberto Sassu · 3 years, 5 months ago
- a32ad90 IMA: remove -Wmissing-prototypes warning by Austin Kim · 3 years, 6 months ago
- dcb7c0b hardening: Clarify Kconfig text for auto-var-init by Kees Cook · 3 years, 5 months ago
- a82adfd hardening: Introduce CONFIG_ZERO_CALL_USED_REGS by Kees Cook · 3 years, 9 months ago
- bfc3cac smack: mark 'smack_enabled' global variable as __initdata by Austin Kim · 3 years, 6 months ago
- 6d14f5c Smack: Fix wrong semantics in smk_access_entry() by Tianjia Zhang · 3 years, 6 months ago
- 893c47d selinux: return early for possible NULL audit buffers by Austin Kim · 3 years, 6 months ago
- 4cad671 Merge tag 'asm-generic-unaligned-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic by Linus Torvalds · 3 years, 6 months ago
- 9218313 Merge tag 'safesetid-5.14' of git://github.com/micah-morton/linux by Linus Torvalds · 3 years, 6 months ago
- 5c874a5 Merge tag 'Smack-for-5.14' of git://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 6 months ago
- 290fe0f Merge tag 'audit-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 6 months ago
- 6bd344e Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 6 months ago
- a60c538 Merge tag 'integrity-v5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 6 months ago
- 907a399 evm: Check xattr size discrepancy between kernel and user by Roberto Sassu · 3 years, 6 months ago
- 87ac3d0 evm: output EVM digest calculation info by Mimi Zohar · 3 years, 8 months ago
- 98eaa63 tomoyo: fix doc warnings by ChenXiaoSong · 3 years, 7 months ago
- 0ecc617 audit: remove unnecessary 'ret' initialization by Austin Kim · 3 years, 7 months ago
- d99cf13 selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit() by Al Viro · 4 years ago
- b17ec22 selinux: slow_avc_audit has become non-blocking by Al Viro · 4 years ago
- d0a8331 selinux: Fix kernel-doc by Yang Li · 3 years, 7 months ago
- 52c2083 IMA: support for duplicate measurement records by Tushar Sugandhi · 3 years, 8 months ago
- c679134 ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer' by Lakshmi Ramasubramanian · 3 years, 7 months ago
- 648f2c6 selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC by Minchan Kim · 3 years, 7 months ago
- 55748ac6 ima: differentiate between EVM failures in the audit log by Mimi Zohar · 3 years, 7 months ago
- 1b8b719 LSM: SafeSetID: Mark safesetid_initialized as __initdata by Austin Kim · 3 years, 7 months ago
- 7d2201d ima: Fix fall-through warning for Clang by Gustavo A. R. Silva · 3 years, 7 months ago
- 531bf6a ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect() by Roberto Sassu · 3 years, 7 months ago
- 8c55941 ima: Include header defining ima_post_key_create_or_update() by Roberto Sassu · 3 years, 7 months ago
- 6b26285 ima/evm: Fix type mismatch by Roberto Sassu · 3 years, 7 months ago
- 24c9ae2 ima: Set correct casting types by Roberto Sassu · 3 years, 7 months ago
- fe6bde7 Smack: fix doc warning by ChenXiaoSong · 3 years, 7 months ago
- d721c15 evm: Don't return an error in evm_write_xattrs() if audit is not enabled by Roberto Sassu · 3 years, 7 months ago
- 88016de ima: Define new template evm-sig by Roberto Sassu · 3 years, 7 months ago
- 8314b67 ima: Define new template fields xattrnames, xattrlengths and xattrvalues by Roberto Sassu · 3 years, 7 months ago