aboutsummaryrefslogtreecommitdiffstats
path: root/Documentation/security
AgeCommit message (Expand)AuthorFilesLines
2023-12-08Documentation: Destage TEE subsystem documentationSumit Garg1-1/+1
2023-09-23docs: security: Confidential computing intro and threat model for x86 virtual...Carlos Bilbao2-0/+254
2023-08-18Documentation: Fix typosBjorn Helgaas3-3/+3
2023-04-28lsm: move hook comments docs to security/security.cRandy Dunlap2-4/+4
2023-01-13landlock: Explain file descriptor access rightsMickaël Salaün1-3/+31
2022-10-19KEYS: encrypted: fix key instantiation with user-provided dataNikolaus Voss1-1/+2
2022-09-29landlock: Fix documentation styleMickaël Salaün1-2/+2
2022-09-29landlock: Slightly improve documentation and fix spellingMickaël Salaün1-2/+2
2022-07-13Documentation: siphash: Fix typo in the name of offsetofend macroDov Murik1-1/+1
2022-07-07Documentation: KVM: update amd-memory-encryption.rst referencesMauro Carvalho Chehab1-1/+1
2022-07-07Documentation: update watch_queue.rst referencesMauro Carvalho Chehab1-1/+1
2022-05-24Merge tag 'integrity-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-4/+7
2022-05-24Merge tag 'tpmdd-next-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-9/+51
2022-05-24Merge tag 'landlock-5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+16
2022-05-23Merge tag 'efi-next-for-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds3-0/+113
2022-05-23doc: trusted-encrypted: describe new CAAM trust sourceAhmad Fatoum1-1/+39
2022-05-23KEYS: trusted: allow use of kernel RNG for key materialAhmad Fatoum1-8/+12
2022-05-23landlock: Add design choices documentation for filesystem access rightsMickaël Salaün1-1/+16
2022-05-05ima: support fs-verity file digest based version 3 signaturesMimi Zohar1-2/+2
2022-05-05ima: permit fsverity's file digests in the IMA measurement listMimi Zohar1-1/+1
2022-05-05ima: define a new template field named 'd-ngv2' and templatesMimi Zohar1-0/+4
2022-05-01ima: fix 'd-ng' comments and documentationMimi Zohar1-2/+1
2022-04-25Documentation: siphash: disambiguate HalfSipHash algorithm from hsiphash func...Eric Biggers1-12/+22
2022-04-25Documentation: siphash: enclose HalfSipHash usage example in the literal blockBagas Sanjaya1-3/+3
2022-04-25Documentation: siphash: convert danger note to warning for HalfSipHashBagas Sanjaya1-6/+6
2022-04-13docs: security: Add secrets/coco documentationDov Murik3-0/+113
2022-03-21Merge tag 'selinux-pr-20220321' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-14/+12
2022-02-28docs: fix 'make htmldocs' warning in SCTP.rstWan Jiabing1-2/+2
2022-02-21KEYS: encrypted: Instantiate key with user-provided decrypted dataYael Tzur1-6/+19
2022-02-15security: add sctp_assoc_established hookOndrej Mosnacek1-12/+10
2021-12-10docs: update self-protection __ro_after_init statusShuah Khan1-2/+1
2021-11-12net,lsm,selinux: revert the security_sctp_assoc_established() hookPaul Moore1-10/+12
2021-11-03security: add sctp_assoc_established hookXin Long1-12/+10
2021-11-03security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ceXin Long1-6/+9
2021-11-03security: pass asoc to sctp_assoc_request and sctp_sk_cloneXin Long1-14/+14
2021-06-28Merge tag 'docs-5.14' of git://git.lwn.net/linuxLinus Torvalds1-1/+2
2021-06-17docs: security: landlock.rst: avoid using ReST :doc:`foo` markupMauro Carvalho Chehab1-1/+2
2021-06-08doc: Fix warning in Documentation/security/IMA-templates.rstRoberto Sassu1-1/+1
2021-06-03ima: Define new template evm-sigRoberto Sassu1-0/+1
2021-06-02ima: Define new template fields xattrnames, xattrlengths and xattrvaluesRoberto Sassu1-0/+4
2021-06-01ima: Define new template field imodeRoberto Sassu1-0/+1
2021-06-01ima: Define new template fields iuid and igidRoberto Sassu1-0/+2
2021-06-01ima: Introduce template field evmsig and write to field sig as fallbackRoberto Sassu1-1/+3
2021-05-10Documentation: drop optional BOMsRandy Dunlap1-1/+1
2021-05-01Merge tag 'landlock_v34' of git://git.kernel.org/pub/scm/linux/kernel/git/jmo...Linus Torvalds2-0/+86
2021-04-22landlock: Add user and kernel documentationMickaël Salaün2-0/+86
2021-04-14doc: trusted-encrypted: updates with TEE as a new trust sourceSumit Garg1-33/+138
2021-04-14security: keys: trusted: use ASN.1 TPM2 key format for the blobsJames Bottomley1-0/+58
2021-02-23Merge tag 'keys-misc-20210126' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-2/+2
2021-01-21watch_queue: Drop references to /dev/watch_queueGabriel Krisman Bertazi1-2/+2
2021-01-11Documentation: Replace lkml.org links with loreJoe Perches1-1/+1
2020-09-09Documentation: remove current_security() referenceDenis Efremov1-1/+0
2020-09-09docs: trusted-encrypted.rst: update parameters for command examplesColy Li1-3/+2
2020-07-13Documentation: security/keys: eliminate duplicated wordRandy Dunlap1-1/+1
2020-07-06Security: Documentation: Replace deprecated :c:func: UsagePuranjay Mohan1-3/+3
2020-07-05Documentation: Clarify f_cred vs current_cred() useKees Cook1-0/+4
2020-06-19docs: crypto: convert asymmetric-keys.txt to ReSTMauro Carvalho Chehab1-1/+1
2020-06-13Merge tag 'notifications-20200601' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-0/+57
2020-06-10Merge tag 'docs-5.8-2' of git://git.lwn.net/linuxLinus Torvalds1-1/+1
2020-06-08Replace HTTP links with HTTPS ones: documentationAlexander A. Klimov1-1/+1
2020-06-04Merge tag 'keys-next-20200602' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-2/+6
2020-06-02Documentation: security: core.rst: add missing argumentBen Boeckel1-2/+6
2020-06-01Merge tag 'docs-5.8' of git://git.lwn.net/linuxLinus Torvalds3-136/+168
2020-05-25Documentation: LSM: Correct the basic LSM descriptionCasey Schaufler1-136/+66
2020-05-19watch_queue: Add a key/keyring notification facilityDavid Howells1-0/+57
2020-05-15docs: move digsig docs to the security bookMauro Carvalho Chehab2-0/+102
2020-05-08crypto: lib/sha1 - rename "sha" to "sha1"Eric Biggers1-1/+1
2020-03-20docs: prevent warnings due to autosectionlabelMauro Carvalho Chehab1-4/+4
2019-11-22Documentation: security: core.rst: fix warningsDaniel W. S. Almeida1-1/+1
2019-10-01docs: security: fix section hyperlinkBrendan Jackman1-1/+1
2019-09-27Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-0/+3
2019-09-17Merge tag 'docs-5.4' of git://git.lwn.net/linuxLinus Torvalds2-0/+56
2019-09-02tpm/tpm_ftpm_tee: Document fTPM TEE driverSasha Levin2-0/+28
2019-08-05ima: Define ima-modsig templateThiago Jung Bauermann1-0/+3
2019-07-31tpm: Document UEFI event log quirksJarkko Sakkinen2-0/+56
2019-07-15docs: security: move some books to it and updateMauro Carvalho Chehab7-3/+486
2019-07-15docs: xen-tpmfront.txt: convert it to .rstMauro Carvalho Chehab1-47/+60
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds2-106/+31
2019-07-09Merge tag 'docs-5.3' of git://git.lwn.net/linuxLinus Torvalds2-7/+13
2019-07-08Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-3/+4
2019-06-30IMA: Define a new template field bufPrakhar Srivastava1-3/+4
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells2-31/+106
2019-06-27keys: Pass the network namespace into request_key mechanismDavid Howells2-14/+43
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells1-4/+6
2019-06-26keys: Kill off request_key_async{,_with_auxdata}David Howells2-53/+2
2019-06-19keys: Cache result of request_key*() temporarily in task_structDavid Howells1-1/+6
2019-06-19keys: Provide request_key_rcu()David Howells2-0/+19
2019-06-19keys: Move the RCU locks outwards from the keyring search functionsDavid Howells1-1/+1
2019-06-19keys: Fix request_key() lack of Link perm check on found keyDavid Howells1-0/+4
2019-06-08docs: security: core.rst: Fix several warningsMauro Carvalho Chehab1-6/+10
2019-06-08docs: security: trusted-encrypted.rst: fix code-block tagMauro Carvalho Chehab1-1/+3
2019-05-30keys: Add a keyctl to move a key between keyringsDavid Howells1-0/+21
2019-02-22doc: security: Add kern-doc for lsm_hooks.hKees Cook1-1/+4
2019-02-22doc: sctp: Merge and clean up rst filesKees Cook3-166/+175
2019-01-02Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+30
2018-12-29Merge tag 'docs-5.0' of git://git.lwn.net/linuxLinus Torvalds2-5/+5
2018-12-13keys-encrypted: add nvdimm key format type to encrypted keysDave Jiang1-1/+5
2018-12-11docs: Extend trusted keys documentation for TPM 2.0Stefan Berger1-1/+30
2018-11-20Documentation: Use "while" instead of "whilst"Will Deacon2-5/+5
2018-11-01Merge branch 'next-keys2' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds1-0/+217
2018-11-01Merge tag 'stackleak-v4.20-rc1' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-5/+5
2018-10-26KEYS: Provide keyctls to drive the new key type ops for asymmetric keys [ver #2]David Howells1-0/+111
2018-10-26KEYS: Provide key type operations for asymmetric key ops [ver #2]David Howells1-0/+106
2018-10-24Merge tag 'docs-4.20' of git://git.lwn.net/linuxLinus Torvalds1-4/+4
2018-10-09security: fix LSM description locationRandy Dunlap1-1/+1
2018-09-20doc: Fix acronym "FEKEK" in ecryptfsFelix Eckhofer1-4/+4
2018-09-04doc: self-protection: Add information about STACKLEAK featureAlexander Popov1-5/+5
2018-06-14Kbuild: rename CC_STACKPROTECTOR[_STRONG] config variablesLinus Torvalds1-1/+1
2018-05-08docs: */index.rst: Add newer documents to their respective index.rstMauro Carvalho Chehab1-0/+2
2018-03-20selinux: Update SELinux SCTP documentationRichard Haines1-5/+6
2018-02-26selinux: Add SCTP supportRichard Haines1-0/+157
2018-02-22security: Add support for SCTP security hooksRichard Haines1-0/+175
2018-01-08Documentation: security/credentials.rst: explain need to sort group_listNeilBrown1-0/+7
2017-12-21doc: add documentation on printing kernel addressesTobin C. Harding1-0/+15
2017-11-15KEYS: fix in-kernel documentation for keyctl_read()Eric Biggers1-5/+5
2017-10-12Documentation: fix security related doc refsTom Saeger3-3/+3
2017-08-30docs: ReSTify table of contents in core.rstJosh Holland1-11/+1
2017-08-24docs: Fix paths in security/keysJosh Holland3-4/+4
2017-07-14KEYS: Add documentation for asymmetric keyring restrictionsMat Martineau1-0/+6
2017-05-18docs: Fix some formatting issues in request-key.rstJonathan Corbet1-3/+3
2017-05-18doc: ReSTify keys-trusted-encrypted.txtKees Cook4-24/+21
2017-05-18doc: ReSTify keys-request-key.txtKees Cook3-38/+34
2017-05-18doc: ReSTify keys-ecryptfs.txtKees Cook3-9/+13
2017-05-18doc: ReSTify keys.txtKees Cook4-165/+160
2017-05-18doc: ReSTify Smack.txtKees Cook2-754/+0
2017-05-18doc: ReSTify LoadPin.txtKees Cook1-17/+0
2017-05-18doc: ReSTify Yama.txtKees Cook2-73/+0
2017-05-18doc: ReSTify tomoyo.txtKees Cook2-57/+0
2017-05-18doc: ReSTify apparmor.txtKees Cook2-41/+0
2017-05-18doc: ReSTify SELinux.txtKees Cook2-29/+0
2017-05-18doc: ReSTify and split LSM.txtKees Cook4-43/+15
2017-05-18doc: ReSTify self-protection.txtKees Cook2-36/+64
2017-05-18doc: ReSTify credentials.txtKees Cook3-153/+125
2017-05-18doc: ReSTify IMA-templates.txtKees Cook3-23/+29
2017-04-04KEYS: add SP800-56A KDF support for DHStephan Mueller1-8/+26
2017-04-04KEYS: Add KEYCTL_RESTRICT_KEYRINGMat Martineau1-0/+25
2017-04-04KEYS: Add an optional lookup_restriction hook to key_typeMat Martineau1-0/+9
2017-04-04KEYS: Use structure to capture key restriction function and dataMat Martineau1-9/+12
2017-04-03KEYS: Split role of the keyring pointer for keyring restrict functionsMat Martineau1-4/+4
2017-04-03KEYS: Use a typedef for restrict_link function pointersMat Martineau1-4/+1
2017-03-02KEYS: Differentiate uses of rcu_dereference_key() and user_key_payload()David Howells1-2/+15
2017-02-21Merge tag 'rodata-v4.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-2/+8
2017-02-07arch: Rename CONFIG_DEBUG_RODATA and CONFIG_DEBUG_MODULE_RONXLaura Abbott1-2/+2
2017-02-07arch: Move CONFIG_DEBUG_RODATA and CONFIG_SET_MODULE_RONX to be commonLaura Abbott1-0/+6
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-0/+7
2016-12-14Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-2/+0
2016-11-16docs: Add more manuals to the PDF buildJonathan Corbet1-0/+8
2016-11-13Doc: security: keys-trusted: drop duplicate blobauth entryBaruch Siach1-2/+0
2016-11-07tpm: move documentation under Documentation/securityJarkko Sakkinen4-0/+177
2016-07-26Merge tag 'docs-for-linus' of git://git.lwn.net/linuxLinus Torvalds1-10/+18
2016-06-09docs: self-protection: rename "leak" to "exposure"Kees Cook1-10/+18
2016-06-03KEYS: Add placeholder for KDF usage with DHStephan Mueller1-1/+4
2016-05-19Merge tag 'docs-for-linus' of git://git.lwn.net/linuxLinus Torvalds1-0/+261
2016-05-17doc: self-protection: provide initial detailsKees Cook1-0/+261
2016-05-06Merge tag 'keys-next-20160505' of git://git.kernel.org/pub/scm/linux/kernel/g...James Morris1-0/+52
2016-05-04Merge branch 'keys-trust' into keys-nextDavid Howells1-0/+22
2016-04-21LSM: LoadPin for kernel file loading restrictionsKees Cook1-0/+17
2016-04-12KEYS: Add KEYCTL_DH_COMPUTE commandMat Martineau1-0/+30
2016-04-11KEYS: Add a facility to restrict new links into a keyringDavid Howells1-0/+22
2015-12-20keys, trusted: seal with a TPM2 authorization policyJarkko Sakkinen1-14/+20
2015-12-20keys, trusted: select hash algorithm for TPM2 chipsJarkko Sakkinen1-0/+3
2015-10-21KEYS: Merge the type-specific data with the payload dataDavid Howells1-16/+25
2015-10-19Smack: limited capability for changing process labelZbigniew Jasinski1-0/+10
2015-08-11Merge branch 'smack-for-4.3' of https://github.com/cschaufler/smack-next into...James Morris1-1/+26
2015-07-28Smack: IPv6 host labelingCasey Schaufler1-1/+26
2015-07-28Yama: remove needless CONFIG_SECURITY_YAMA_STACKEDKees Cook1-6/+4
2015-06-02Smack: allow multiple labels in onlycapRafal Krypa1-3/+3
2015-03-31Smack: Updates for Smack documentationCasey Schaufler1-50/+79
2015-01-22KEYS: Make /proc/keys unconditional if CONFIG_KEYS=yDavid Howells1-2/+0
2014-11-19Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/li...James Morris1-15/+14
2014-11-19Merge commit 'v3.17' into nextJames Morris1-1/+1
2014-10-13ima: added support for new kernel cmdline parameter ima_template_fmtRoberto Sassu1-15/+14
2014-09-16KEYS: Update the keyrings documentation for match changesDavid Howells1-13/+52
2014-08-06Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-1/+1
2014-07-22KEYS: Call ->free_preparse() even after ->preparse() returns an errorDavid Howells1-1/+3
2014-07-22KEYS: Allow expiry time to be set when preparsing a keyDavid Howells1-3/+7
2014-06-19doc: LSM: update reference, kerneltrap.org no longer worksPranith Kumar1-1/+1
2014-06-10Merge branch 'serge-next-1' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-0/+10
2014-05-05doc: spelling error changesCarlos Garcia1-1/+1
2014-04-11Smack: adds smackfs/ptrace interfaceLukasz Pawelczyk1-0/+10
2014-03-21doc: fix double wordsMasanari Iida1-1/+1
2014-01-03ima: update IMA-templates.txt documentationMimi Zohar1-2/+4
2013-10-25ima: new templates management mechanismRoberto Sassu2-0/+89
2013-09-24KEYS: Define a __key_get() wrapper to use rather than atomic_inc()David Howells1-5/+8
2013-09-24KEYS: Use bool in make_key_ref() and is_key_possessed()David Howells1-4/+3
2013-03-19Smack: add support for modification of existing rulesRafal Krypa1-0/+11
2012-12-17Documentation: fix Documentation/security/00-INDEXJarkko Sakkinen1-0/+2
2012-10-02Merge branch 'modsign-keys-devel' into security-next-keysDavid Howells1-1/+49
2012-10-02KEYS: Use keyring_alloc() to create special keyringsDavid Howells1-0/+17
2012-09-26Documentation: Update git repository URL for Smack userland toolsDaniel Wagner1-4/+3
2012-09-18Smack: implement revoking all rules for a subject labelRafal Krypa1-0/+3
2012-09-13KEYS: Add payload preparsing opportunity prior to key instantiate or updateDavid Howells1-1/+49
2012-08-10Yama: higher restrictions should block PTRACE_TRACEMEKees Cook1-7/+7
2012-05-14Smack: allow for significantly longer Smack labels v4Casey Schaufler1-40/+164
2012-05-11KEYS: Add invalidation supportDavid Howells1-0/+17
2012-05-04Merge tag 'v3.4-rc5' into nextJames Morris1-1/+13
2012-04-25keys: update the documentation with info about "logon" keysJeff Layton1-1/+13
2012-04-19Yama: add additional ptrace scopesKees Cook1-1/+9
2012-03-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds3-0/+71
2012-03-07Documentation: Fix multiple typo in DocumentationMasanari Iida3-3/+3