- 52f982f security,selinux: remove security_add_mnt_opt() by Ondrej Mosnacek · 3 years, 1 month ago
- 6326948 lsm: security_task_getsecid_subj() -> security_current_getsecid_subj() by Paul Moore · 3 years, 3 months ago
- 32a370a net,lsm,selinux: revert the security_sctp_assoc_established() hook by Paul Moore · 3 years, 1 month ago
- 7c2ef02 security: add sctp_assoc_established hook by Xin Long · 3 years, 2 months ago
- c081d53 security: pass asoc to sctp_assoc_request and sctp_sk_clone by Xin Long · 3 years, 2 months ago
- 15bf323 security: Return xattr name from security_dentry_init_security() by Vivek Goyal · 3 years, 3 months ago
- 52f8869 binder: use cred instead of task for selinux checks by Todd Kjos · 3 years, 3 months ago
- 86dd9fd LSM: Avoid warnings about potentially unused hook variables by Kees Cook · 3 years, 2 months ago
- cdc1404 lsm,io_uring: add LSM hooks to io_uring by Paul Moore · 3 years, 11 months ago
- 51e1bb9 bpf: Add lockdown check for probe_write_user helper by Daniel Borkmann · 3 years, 5 months ago
- 7133084 bpf: Add _kernel suffix to internal lockdown_bpf_read by Daniel Borkmann · 3 years, 5 months ago
- 6bd344e Merge tag 'selinux-pr-20210629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 3 years, 6 months ago
- 7e135dc evm: Pass user namespace to set/remove xattr hooks by Roberto Sassu · 3 years, 8 months ago
- 8a92280 selinux: delete selinux_xfrm_policy_lookup() useless argument by Zhongjun Tan · 3 years, 9 months ago
- 17ae69a Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 3 years, 8 months ago
- 83e804f fs,security: Add sb_delete hook by Mickaël Salaün · 3 years, 8 months ago
- 1aea780 LSM: Infrastructure management of the superblock by Casey Schaufler · 3 years, 8 months ago
- 4ebd765 lsm: separate security_task_getsecid() into subjective and objective variants by Paul Moore · 3 years, 10 months ago
- 69c4a42 lsm,selinux: add new hook to compare new mount to an existing mount by Olga Kornievskaia · 3 years, 10 months ago
- 7d6beb7 Merge tag 'idmapped-mounts-v5.12' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux by Linus Torvalds · 3 years, 10 months ago
- 71bc356 commoncap: handle idmapped mounts by Christian Brauner · 4 years ago
- 215b674b security: add inode_init_security_anon() LSM hook by Lokesh Gidra · 4 years ago
- ca5b877 Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 4 years ago
- e2437ac Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next by Jakub Kicinski · 4 years ago
- 41dd959 security: add const qualifier to struct sock in various places by Florian Westphal · 4 years, 1 month ago
- c7a5899 xfrm: redact SA secret with lockdown confidentiality by Antony Antony · 4 years, 1 month ago
- 3df98d7 lsm,selinux: pass flowi_common instead of flowi to the LSM hooks by Paul Moore · 4 years, 3 months ago
- 2039bda LSM: Add "contents" flag to kernel_read_file hook by Kees Cook · 4 years, 3 months ago
- b64fcae LSM: Introduce kernel_post_load_data() hook by Kees Cook · 4 years, 3 months ago
- b89999d0 fs/kernel_read_file: Split into separate include file by Scott Branden · 4 years, 3 months ago
- 23e390c security: Fix hook iteration and default value for inode_copy_up_xattr by KP Singh · 4 years, 6 months ago
- 4a87b19 Merge tag 'LSM-add-setgid-hook-5.8-author-fix' of git://github.com/micah-morton/linux by Linus Torvalds · 4 years, 7 months ago
- 39030e1 security: Add LSM hooks to set*gid syscalls by Thomas Cedeno · 4 years, 7 months ago
- 6c32978 Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs by Linus Torvalds · 4 years, 7 months ago
- 52435c8 Merge tag 'ovl-update-5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs by Linus Torvalds · 4 years, 7 months ago
- 3c0ad98 Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 4 years, 7 months ago
- 15a2bc4 Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 4 years, 7 months ago
- 292f902 ovl: call secutiry hook in ovl_real_ioctl() by Miklos Szeredi · 4 years, 7 months ago
- 56305aa exec: Compute file based creds only once by Eric W. Biederman · 4 years, 7 months ago
- 8eb613c ima: verify mprotect change is consistent with mmap policy by Mimi Zohar · 4 years, 8 months ago
- 112b714 exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds by Eric W. Biederman · 4 years, 8 months ago
- 0550cfe security: Fix hook iteration for secid_to_secctx by KP Singh · 4 years, 7 months ago
- b8bff59 exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds by Eric W. Biederman · 4 years, 9 months ago
- 8c0637e keys: Make the KEY_NEED_* perms an enum rather than a mask by David Howells · 4 years, 8 months ago
- 998f504 security: Add hooks to rule on setting a watch by David Howells · 4 years, 11 months ago
- 344fa64 security: Add a hook for the point of notification insertion by David Howells · 4 years, 11 months ago
- 98e828a security: Refactor declaration of LSM hooks by KP Singh · 4 years, 9 months ago
- b3a6082 Merge branch 'for-v5.6' of git://git.kernel.org:/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 10c2d11 security: remove EARLY_LSM_COUNT which never used by Alex Shi · 5 years ago
- 59438b46 security,lockdown,selinux: implement SELinux lockdown by Stephen Smalley · 5 years ago
- da97e18 perf_event: Add support for LSM and SELinux checks by Joel Fernandes (Google) · 5 years ago
- aefcf2f Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 5 years ago
- 5825a95 Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 5 years ago
- 9e47d31 security: Add a "locked down" LSM hook by Matthew Garrett · 5 years ago
- e6b1db9 security: Support early LSMs by Matthew Garrett · 5 years ago
- ac5656d fanotify, inotify, dnotify, security: add security hook for fs notifications by Aaron Goidel · 5 years ago
- 8b68150 Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity by Linus Torvalds · 5 years ago
- 42df744 LSM: switch to blocking policy update notifiers by Janne Karhunen · 6 years ago
- 2874c5f treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 by Thomas Gleixner · 6 years ago
- 4009132 Merge branch 'work.mount-syscalls' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- b230d5a LSM: add new hook for kernfs node initialization by Ondrej Mosnacek · 6 years ago
- 2db154b vfs: syscall: Add move_mount(2) to move mounts around by David Howells · 6 years ago
- 7b47a9e Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- be37f21 Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
- 0b52075 introduce cloning of fs_context by Al Viro · 6 years ago
- da2441f vfs: Add LSM hooks for the new mount API by David Howells · 6 years ago
- 89a9684 LSM: Ignore "security=" when "lsm=" is specified by Kees Cook · 6 years ago
- 90462a5 audit: remove unused actx param from audit_rule_match by Richard Guy Briggs · 6 years ago
- 9624d5c Merge tag 'v5.0-rc3' into next-general by James Morris · 6 years ago
- 3e8c736 LSM: Make some functions static by Wei Yongjun · 6 years ago
- 1cfb2a5 LSM: Make lsm_early_cred() and lsm_early_task() local functions. by Tetsuo Handa · 6 years ago
- a5795fd LSM: Check for NULL cred-security on free by James Morris · 6 years ago
- c1a85a0 LSM: generalize flag passing to security_capable by Micah Morton · 6 years ago
- ecd5f82 LSM: Infrastructure management of the ipc security blob by Casey Schaufler · 6 years ago
- f4ad8f2 LSM: Infrastructure management of the task security by Casey Schaufler · 6 years ago
- afb1cbe3 LSM: Infrastructure management of the inode security by Casey Schaufler · 6 years ago
- 33bf60c LSM: Infrastructure management of the file security by Casey Schaufler · 6 years ago
- bbd3662 Infrastructure management of the cred security blob by Casey Schaufler · 6 years ago
- 6d9c939 procfs: add smack subdir to attrs by Casey Schaufler · 6 years ago
- d117a15 capability: Initialize as LSM_ORDER_FIRST by Kees Cook · 6 years ago
- e2bc445 LSM: Introduce enum lsm_order by Kees Cook · 6 years ago
- d6aed64 Yama: Initialize as ordered LSM by Kees Cook · 6 years ago
- 70b62c2 LoadPin: Initialize as ordered LSM by Kees Cook · 6 years ago
- d8e9bbd4 LSM: Split LSM preparation from initialization by Kees Cook · 6 years ago
- c91d810 LSM: Add all exclusive LSMs to ordered initialization by Casey Schaufler · 6 years ago
- 14bd99c LSM: Separate idea of "major" LSM from "exclusive" LSM by Kees Cook · 6 years ago
- 7e61148 LSM: Refactor "security=" in terms of enable/disable by Kees Cook · 6 years ago
- 5ef4e41 LSM: Prepare for reorganizing "security=" logic by Kees Cook · 6 years ago
- a8027fb LSM: Tie enabling logic to presence in ordered list by Kees Cook · 6 years ago
- 79f7865 LSM: Introduce "lsm=" for boottime LSM selection by Kees Cook · 6 years ago
- 13e735c LSM: Introduce CONFIG_LSM by Kees Cook · 6 years ago
- 2d4d511 LSM: Build ordered list of LSMs to initialize by Kees Cook · 6 years ago
- f4941d7 LSM: Lift LSM selection out of individual LSMs by Kees Cook · 6 years ago
- 657d910 LSM: Provide separate ordered initialization by Kees Cook · 6 years ago
- 505b050 Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
- 757cbe5 LSM: new method: ->sb_add_mnt_opt() by Al Viro · 6 years ago
- 204cc0c LSM: hide struct security_mnt_opts from any generic code by Al Viro · 6 years ago
- 5b40023 LSM: turn sb_eat_lsm_opts() into a method by Al Viro · 6 years ago
- a65001e btrfs: sanitize security_mnt_opts use by Al Viro · 6 years ago
- a10d7c2 LSM: split ->sb_set_mnt_opts() out of ->sb_kern_mount() by Al Viro · 6 years ago