1. e7310c9 security: implement sctp_assoc_established hook in selinux by Xin Long · 3 years, 2 months ago
  2. 7c2ef02 security: add sctp_assoc_established hook by Xin Long · 3 years, 2 months ago
  3. c081d53 security: pass asoc to sctp_assoc_request and sctp_sk_clone by Xin Long · 3 years, 2 months ago
  4. d2fac0a Merge tag 'audit-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 2 months ago
  5. cdab10b Merge tag 'selinux-pr-20211101' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 2 months ago
  6. 6f2b76a Merge tag 'Smack-for-5.16' of https://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 2 months ago
  7. 2dc26d9 Merge tag 'overflow-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
  8. f594e28 Merge tag 'hardening-v5.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 2 months ago
  9. 0934ad4 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi by Tetsuo Handa · 3 years, 2 months ago
  10. f91488e smackfs: use __GFP_NOFAIL for smk_cipso_doi() by Tetsuo Handa · 3 years, 2 months ago
  11. 9d235ac Merge branch 'ucount-fixes-for-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 3 years, 2 months ago
  12. 8bd51a2 gcc-plugins: Explicitly document purpose and deprecation schedule by Kees Cook · 3 years, 2 months ago
  13. 5ebcbe3 ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring by Eric W. Biederman · 3 years, 2 months ago
  14. 15bf323 security: Return xattr name from security_dentry_init_security() by Vivek Goyal · 3 years, 3 months ago
  15. 1c73213 selinux: fix a sock regression in selinux_ip_postroute_compat() by Paul Moore · 3 years, 2 months ago
  16. 52f8869 binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
  17. 86dd9fd LSM: Avoid warnings about potentially unused hook variables by Kees Cook · 3 years, 3 months ago
  18. b57d020 Smack: fix W=1 build warnings by Casey Schaufler · 3 years, 3 months ago
  19. e9fd729 selinux: fix all of the W=1 build warnings by Paul Moore · 4 years, 1 month ago
  20. 1d1e1de selinux: make better use of the nf_hook_state passed to the NF hooks by Paul Moore · 3 years, 3 months ago
  21. f8de49e smack: remove duplicated hook function by Florian Westphal · 3 years, 3 months ago
  22. cbfcd13 selinux: fix race condition when computing ocontext SIDs by Ondrej Mosnacek · 3 years, 5 months ago
  23. 4342f70 selinux: remove unneeded ipv6 hook wrappers by Florian Westphal · 3 years, 3 months ago
  24. 578f393 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ by David S. Miller · 3 years, 3 months ago
  25. f5d0e5e selinux: remove the SELinux lockdown implementation by Paul Moore · 3 years, 3 months ago
  26. 8a764ef selinux: enable genfscon labeling for securityfs by Christian Göttsche · 3 years, 3 months ago
  27. 387ef96 Smack:- Use overlay inode label in smack_inode_copy_up() by Vishal Goel · 3 years, 3 months ago
  28. f02003c hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO by Kees Cook · 3 years, 4 months ago
  29. a52f8a5 fortify: Explicitly disable Clang support by Kees Cook · 3 years, 8 months ago
  30. 222a96b smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block by Sebastian Andrzej Siewior · 3 years, 3 months ago
  31. a3727a8 selinux,smack: fix subjective/objective credential use mixups by Paul Moore · 3 years, 3 months ago
  32. 8e71168 lsm_audit: avoid overloading the "key" audit field by Ondrej Mosnacek · 3 years, 4 months ago
  33. d9d8c93 Smack: Brutalist io_uring support by Casey Schaufler · 3 years, 7 months ago
  34. 740b034 selinux: add support for the io_uring access controls by Paul Moore · 3 years, 10 months ago
  35. cdc1404 lsm,io_uring: add LSM hooks to io_uring by Paul Moore · 4 years ago
  36. 0817534 smackfs: Fix use-after-free in netlbl_catmap_walk() by Pawan Gupta · 3 years, 4 months ago
  37. 844f7ea include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage by Eugene Syromiatnikov · 3 years, 4 months ago
  38. b250e6d1 Merge tag 'kbuild-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild by Linus Torvalds · 3 years, 4 months ago
  39. 1472690 Merge branch 'akpm' (patches from Andrew) by Linus Torvalds · 3 years, 4 months ago
  40. 5b78ed2 mm/pagemap: add mmap_assert_locked() annotations to find_vma*() by Luigi Rizzo · 3 years, 4 months ago
  41. e052826 security: remove unneeded subdir-$(CONFIG_...) by Masahiro Yamada · 3 years, 7 months ago
  42. aef4892 Merge tag 'integrity-v5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 4 months ago
  43. b55060d Merge tag 'hardening-v5.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 3 years, 4 months ago
  44. 9e9fb76 Merge tag 'net-next-5.15' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next by Linus Torvalds · 3 years, 4 months ago
  45. efa916a Merge tag 'for-5.15/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm by Linus Torvalds · 3 years, 4 months ago
  46. 9b2eacd Merge tag 'Smack-for-5.15' of git://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 4 months ago
  47. befa491 Merge tag 'selinux-pr-20210830' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 4 months ago
  48. 46f4945 Merge tag 'efi-core-2021-08-30' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 3 years, 4 months ago
  49. b31eea2 efi: Don't use knowledge about efi_guid_t internals by Andy Shevchenko · 3 years, 11 months ago
  50. cb181da IMA: reject unknown hash algorithms in ima_get_hash_algo by THOBY Simon · 3 years, 4 months ago
  51. 8ecd39c IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms by THOBY Simon · 3 years, 5 months ago
  52. 4f2946a IMA: introduce a new policy option func=SETXATTR_CHECK by THOBY Simon · 3 years, 5 months ago
  53. 583a80a IMA: add a policy option to restrict xattr hash algorithms on appraisal by THOBY Simon · 3 years, 5 months ago
  54. 1624dc0 IMA: add support to restrict the hash algorithms used for file appraisal by THOBY Simon · 3 years, 5 months ago
  55. 50f742d IMA: block writes of the security.ima xattr with unsupported algorithms by THOBY Simon · 3 years, 5 months ago
  56. 8510505 IMA: remove the dependency on CRYPTO_MD5 by THOBY Simon · 3 years, 5 months ago
  57. f4083a7 Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 5 months ago
  58. 91ccbba dm ima: measure data on table load by Tushar Sugandhi · 3 years, 6 months ago
  59. 51e1bb9 bpf: Add lockdown check for probe_write_user helper by Daniel Borkmann · 3 years, 5 months ago
  60. 7133084 bpf: Add _kernel suffix to internal lockdown_bpf_read by Daniel Borkmann · 3 years, 5 months ago
  61. 0ca8d3c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net by Jakub Kicinski · 3 years, 5 months ago
  62. 0b53abf Merge tag 'selinux-pr-20210805' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 5 months ago
  63. 4c15608 selinux: correct the return value when loads initial sids by Xiu Jianfeng · 3 years, 5 months ago
  64. bc49d81 mctp: Add MCTP base by Jeremy Kerr · 3 years, 5 months ago
  65. ca3c9bd ima: Add digest and digest_len params to the functions to measure a buffer by Roberto Sassu · 3 years, 5 months ago
  66. ce5bb5a ima: Return int in the functions to measure a buffer by Roberto Sassu · 3 years, 5 months ago
  67. 5d1ef2c ima: Introduce ima_get_current_hash_algo() by Roberto Sassu · 3 years, 5 months ago
  68. a32ad90 IMA: remove -Wmissing-prototypes warning by Austin Kim · 3 years, 6 months ago
  69. dcb7c0b hardening: Clarify Kconfig text for auto-var-init by Kees Cook · 3 years, 5 months ago
  70. a82adfd hardening: Introduce CONFIG_ZERO_CALL_USED_REGS by Kees Cook · 3 years, 9 months ago
  71. bfc3cac smack: mark 'smack_enabled' global variable as __initdata by Austin Kim · 3 years, 6 months ago
  72. 6d14f5c Smack: Fix wrong semantics in smk_access_entry() by Tianjia Zhang · 3 years, 6 months ago
  73. 893c47d selinux: return early for possible NULL audit buffers by Austin Kim · 3 years, 6 months ago
  74. 4cad671 Merge tag 'asm-generic-unaligned-5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic by Linus Torvalds · 3 years, 6 months ago
  75. 9218313 Merge tag 'safesetid-5.14' of git://github.com/micah-morton/linux by Linus Torvalds · 3 years, 6 months ago
  76. 5c874a5 Merge tag 'Smack-for-5.14' of git://github.com/cschaufler/smack-next by Linus Torvalds · 3 years, 6 months ago
  77. 290fe0f Merge tag 'audit-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 3 years, 6 months ago
  78. 6bd344e Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 6 months ago
  79. a60c538 Merge tag 'integrity-v5.14' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 3 years, 6 months ago
  80. 907a399 evm: Check xattr size discrepancy between kernel and user by Roberto Sassu · 3 years, 6 months ago
  81. 87ac3d0 evm: output EVM digest calculation info by Mimi Zohar · 3 years, 8 months ago
  82. 98eaa63 tomoyo: fix doc warnings by ChenXiaoSong · 3 years, 7 months ago
  83. 0ecc617 audit: remove unnecessary 'ret' initialization by Austin Kim · 3 years, 7 months ago
  84. d99cf13 selinux: kill 'flags' argument in avc_has_perm_flags() and avc_audit() by Al Viro · 4 years ago
  85. b17ec22 selinux: slow_avc_audit has become non-blocking by Al Viro · 4 years ago
  86. d0a8331 selinux: Fix kernel-doc by Yang Li · 3 years, 7 months ago
  87. 52c2083 IMA: support for duplicate measurement records by Tushar Sugandhi · 3 years, 8 months ago
  88. c679134 ima: Fix warning: no previous prototype for function 'ima_add_kexec_buffer' by Lakshmi Ramasubramanian · 3 years, 7 months ago
  89. 648f2c6 selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC by Minchan Kim · 3 years, 7 months ago
  90. 55748ac6 ima: differentiate between EVM failures in the audit log by Mimi Zohar · 3 years, 7 months ago
  91. 1b8b719 LSM: SafeSetID: Mark safesetid_initialized as __initdata by Austin Kim · 3 years, 7 months ago
  92. 7d2201d ima: Fix fall-through warning for Clang by Gustavo A. R. Silva · 3 years, 7 months ago
  93. 531bf6a ima: Pass NULL instead of 0 to ima_get_action() in ima_file_mprotect() by Roberto Sassu · 3 years, 7 months ago
  94. 8c55941 ima: Include header defining ima_post_key_create_or_update() by Roberto Sassu · 3 years, 7 months ago
  95. 6b26285 ima/evm: Fix type mismatch by Roberto Sassu · 3 years, 7 months ago
  96. 24c9ae2 ima: Set correct casting types by Roberto Sassu · 3 years, 7 months ago
  97. fe6bde7 Smack: fix doc warning by ChenXiaoSong · 3 years, 7 months ago
  98. d721c15 evm: Don't return an error in evm_write_xattrs() if audit is not enabled by Roberto Sassu · 3 years, 7 months ago
  99. 88016de ima: Define new template evm-sig by Roberto Sassu · 3 years, 7 months ago
  100. 8314b67 ima: Define new template fields xattrnames, xattrlengths and xattrvalues by Roberto Sassu · 3 years, 7 months ago