aboutsummaryrefslogtreecommitdiffstats
path: root/security/tomoyo
AgeCommit message (Expand)AuthorFilesLines
2024-03-01tomoyo: fix UAF write bug in tomoyo_write_control()Tetsuo Handa1-1/+2
2024-01-24exec: Check __FMODE_EXEC instead of in_execve for LSMsKees Cook1-1/+2
2023-12-24lsm: new security_file_ioctl_compat() hookAlfred Piccioni1-0/+1
2023-11-12lsm: mark the lsm_id variables are marked as staticPaul Moore1-1/+1
2023-11-12LSM: Identify modules by more than nameCasey Schaufler1-1/+8
2023-09-14lsm: constify 'bprm' parameter in security_bprm_committed_creds()Khadija Kamran1-1/+1
2023-08-13tomoyo: remove unused function declarationGONG, Ruiqi1-2/+0
2023-08-05tomoyo: refactor deprecated strncpyJustin Stitt1-3/+2
2023-07-23tomoyo: add format attributes to functionsChristian Göttsche2-2/+3
2023-06-09mm/gup: remove vmas parameter from get_user_pages_remote()Lorenzo Stoakes1-1/+1
2023-04-24Merge tag 'tomoyo-pr-20230424' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds3-48/+4
2023-03-20selinux: remove the runtime disable functionalityPaul Moore1-3/+3
2023-03-01tomoyo: replace tomoyo_round2() with kmalloc_size_roundup()Vlastimil Babka3-48/+4
2023-01-13tomoyo: Update website linkTetsuo Handa1-1/+1
2023-01-13tomoyo: Remove "select SRCU"Paul E. McKenney1-1/+0
2023-01-09tomoyo: Omit use of bin2cMasahiro Yamada2-8/+8
2023-01-07tomoyo: avoid unneeded creation of builtin-policy.hMasahiro Yamada1-0/+2
2023-01-07tomoyo: fix broken dependency on *.conf.defaultMasahiro Yamada1-1/+1
2022-10-19security: Create file_truncate hook from path_truncate hookGünther Noack1-0/+13
2022-08-21tomoyo: struct path it might get from LSM callers won't have NULL dentry or mntAl Viro2-8/+3
2022-08-21tomoyo: use vsnprintf() properlyAl Viro2-2/+2
2022-05-23LSM: Remove double path_rename hook calls for RENAME_EXCHANGEMickaël Salaün1-1/+10
2022-03-24Merge tag 'drm-next-2022-03-24' of git://anongit.freedesktop.org/drm/drmLinus Torvalds3-16/+6
2022-02-24TOMOYO: fix __setup handlers return valuesRandy Dunlap1-2/+2
2022-02-07tomoyo: Use str_yes_no()Lucas De Marchi3-16/+6
2021-12-15tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()Tetsuo Handa1-10/+7
2021-12-15tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().Dmitry Vyukov1-7/+7
2021-09-03mm/pagemap: add mmap_assert_locked() annotations to find_vma*()Luigi Rizzo1-4/+9
2021-06-16tomoyo: fix doc warningsChenXiaoSong4-9/+9
2021-03-28tomoyo: don't special case PF_IO_WORKER for PF_KTHREADJens Axboe1-1/+1
2021-02-01tomoyo: recognize kernel threads correctlyTetsuo Handa1-1/+1
2021-02-01tomoyo: ignore data race while checking quotaTetsuo Handa3-24/+24
2020-12-06tomoyo: Fix typo in comments.Tetsuo Handa5-7/+7
2020-11-27tomoyo: Fix null pointer checkZheng Zengkai3-6/+4
2020-11-03tomoyo: Limit wildcard recursion depth.Tetsuo Handa1-25/+30
2020-10-28tomoyo: fix clang pointer arithmetic warningArnd Bergmann1-3/+3
2020-10-12tomoyo: Loosen pathname/domainname validation.Tetsuo Handa1-6/+23
2020-08-23treewide: Use fallthrough pseudo-keywordGustavo A. R. Silva2-10/+10
2020-08-12mm/gup: remove task_struct pointer for all gup codePeter Xu1-1/+1
2020-07-21exec: Implement kernel_execveEric W. Biederman3-5/+5
2020-06-14treewide: replace '---help---' in Kconfig files with 'help'Masahiro Yamada1-3/+3
2020-06-04Merge branch 'exec-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds1-9/+3
2020-06-04Merge branch 'proc-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/eb...Linus Torvalds1-1/+3
2020-06-02Merge tag 'tomoyo-pr-20200601' of git://git.osdn.net/gitroot/tomoyo/tomoyo-test1Linus Torvalds1-1/+1
2020-05-29tomoyo_write_control(): get rid of pointless access_ok()Al Viro1-2/+0
2020-05-20exec: Factor security_bprm_creds_for_exec out of security_bprm_set_credsEric W. Biederman1-9/+3
2020-05-19proc: proc_pid_ns takes super_block as an argumentAlexey Gladkov1-1/+1
2020-05-12tomoyo: use true for bool variableZou Wei1-1/+1
2020-04-24Use proc_pid_ns() to get pid_namespace from the proc superblockAlexey Gladkov1-1/+3
2020-03-25.gitignore: add SPDX License IdentifierMasahiro Yamada1-0/+1
2020-01-02tomoyo: Use atomic_t for statistics counterTetsuo Handa1-7/+4
2019-12-16tomoyo: Suppress RCU warning at list_for_each_entry_rcu().Tetsuo Handa4-13/+26
2019-12-11tomoyo: Don't use nifty names on sockets.Tetsuo Handa1-31/+1
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner1-0/+1
2019-05-10tomoyo: Don't emit WARNING: string while fuzzing testing.Tetsuo Handa1-0/+2
2019-05-10tomoyo: Change pathname calculation for read-only filesystems.Tetsuo Handa1-1/+2
2019-05-10tomoyo: Check address length before reading address familyTetsuo Handa1-0/+4
2019-05-10tomoyo: Add a kernel config option for fuzzing testing.Tetsuo Handa2-1/+22
2019-02-19tomoyo: Bump version.Tetsuo Handa2-8/+13
2019-01-24tomoyo: Allow multiple use_group lines.Tetsuo Handa3-22/+42
2019-01-24tomoyo: Coding style fix.Tetsuo Handa15-105/+309
2019-01-23tomoyo: Swicth from cred->security to task_struct->security.Tetsuo Handa5-122/+108
2019-01-18LSM: Make lsm_early_cred() and lsm_early_task() local functions.Tetsuo Handa1-1/+0
2019-01-08TOMOYO: Update LSM flags to no longer be exclusiveKees Cook1-1/+1
2019-01-08Infrastructure management of the cred security blobCasey Schaufler2-1/+8
2019-01-08TOMOYO: Abstract use of cred security blobCasey Schaufler4-16/+64
2019-01-08LSM: Separate idea of "major" LSM from "exclusive" LSMKees Cook1-1/+1
2019-01-08LSM: Lift LSM selection out of individual LSMsKees Cook1-2/+0
2019-01-08LSM: Introduce LSM_FLAG_LEGACY_MAJORKees Cook1-0/+1
2019-01-05Merge branch 'mount.part1' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds1-0/+1
2019-01-03Remove 'type' argument from access_ok() functionLinus Torvalds1-1/+1
2018-12-20vfs: Suppress MS_* flag defs within the kernel unless explicitly enabledDavid Howells1-0/+1
2018-11-05tomoyo: fix small typoYangtao Li1-1/+1
2018-10-10LSM: Record LSM name in struct lsm_infoKees Cook1-0/+1
2018-10-10LSM: Convert security_initcall() into DEFINE_LSM()Kees Cook1-1/+3
2018-09-04security: tomoyo: Fix obsolete functionDing Xiang1-1/+2
2018-08-15Merge tag 'kbuild-v4.19' of git://git.kernel.org/pub/scm/linux/kernel/git/mas...Linus Torvalds1-1/+1
2018-07-18kbuild: move bin2c back to scripts/ from scripts/basic/Masahiro Yamada1-1/+1
2018-07-12->file_open(): lose cred argumentAl Viro1-1/+1
2018-02-12net: make getname() functions return length rather than use int* parameterDenys Vlasenko1-2/+3
2018-02-11vfs: do bulk POLL* -> EPOLL* replacementLinus Torvalds3-12/+12
2017-11-27tomoyo: annotate ->poll() instancesAl Viro4-7/+7
2017-11-13Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds4-34/+13
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman18-0/+18
2017-10-21tomoyo: fix timestamping for y2038Arnd Bergmann4-34/+13
2017-08-01exec: Rename bprm->cred_prepared to called_set_credsKees Cook1-1/+1
2017-05-03Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds2-17/+17
2017-03-30TOMOYO: Use designated initializersKees Cook2-16/+16
2017-03-28new helper: uaccess_kernel()Al Viro1-1/+1
2017-03-06security: mark LSM hooks as __ro_after_initJames Morris1-1/+1
2017-03-02sched/headers: Prepare to use <linux/rcuupdate.h> instead of <linux/rculist.h...Ingo Molnar3-0/+6
2017-01-19LSM: Add /sys/kernel/security/lsmCasey Schaufler1-1/+1
2016-12-14mm: add locked parameter to get_user_pages_remote()Lorenzo Stoakes1-1/+1
2016-10-19mm: replace get_user_pages_remote() write/force parameters with gup_flagsLorenzo Stoakes1-1/+1
2016-09-27fs: rename "rename2" i_op to "rename"Miklos Szeredi1-2/+2
2016-09-27vfs: remove unused i_op->renameMiklos Szeredi1-2/+2
2016-07-29Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds1-7/+2
2016-06-10vfs: make the string hashes salt the hashLinus Torvalds2-2/+2
2016-06-06security: tomoyo: simplify the gc kthread creationMike Danese1-7/+2
2016-03-28constify security_sb_pivotroot()Al Viro1-1/+1
2016-03-28constify security_path_chroot()Al Viro1-1/+1
2016-03-28constify security_path_{link,rename}Al Viro1-3/+3
2016-03-28constify security_path_{mkdir,mknod,symlink}Al Viro1-3/+3
2016-03-28constify security_path_{unlink,rmdir}Al Viro1-2/+2
2016-03-28constify chmod_common/security_path_chmodAl Viro1-1/+1
2016-03-28constify security_sb_mount()Al Viro1-1/+1
2016-03-28constify chown_common/security_path_chownAl Viro1-1/+1
2016-03-28tomoyo: constify assorted struct path *Al Viro3-13/+13
2016-03-28constify security_path_truncate()Al Viro1-1/+1
2016-02-16mm/gup: Introduce get_user_pages_remote()Dave Hansen1-1/+8
2016-01-04convert a bunch of open-coded instances of memdup_user_nul()Al Viro1-8/+3
2015-05-12LSM: Switch to lists of hooksCasey Schaufler1-11/+3
2015-05-12LSM: Add security module hook list headsCasey Schaufler1-29/+29
2015-05-12LSM: Split security.hCasey Schaufler1-1/+1
2015-04-26Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds2-6/+6
2015-04-17tomoyo: reduce mmap_sem hold for mm->exe_fileDavidlohr Bueso1-5/+8
2015-04-15VFS: security/: d_backing_inode() annotationsDavid Howells2-6/+6
2015-04-15Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds4-45/+15
2015-04-11switch security_inode_getattr() to struct path *Al Viro3-6/+5
2015-04-11constify tomoyo_realpath_from_path()Al Viro2-4/+4
2015-04-07tomoyo: Do not generate empty policy filesMichal Marek3-29/+5
2015-04-07tomoyo: Use if_changed when generating builtin-policy.hMichal Marek1-18/+11
2015-04-07tomoyo: Use bin2c to generate builtin-policy.hMichal Marek2-10/+11
2015-02-22TOMOYO: Use d_is_dir() rather than d_inode and S_ISDIR()David Howells1-3/+1
2015-01-06rcu: Make SRCU optional by using CONFIG_SRCUPranith Kumar1-0/+1
2014-08-26tomoyo: Fix pathname calculation breakage.Tetsuo Handa1-2/+3
2014-06-12tomoyo: Use sensible time interfaceThomas Gleixner2-8/+4
2014-04-01get rid of pointless checks for NULL ->i_opAl Viro1-2/+2
2013-05-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds3-8/+4
2013-04-29tomoyo_close_control: don't bother with return valueAl Viro3-8/+4
2013-03-18tomoyo: use DEFINE_SRCU() to define tomoyo_ssLai Jiangshan1-3/+2
2013-02-22new helper: file_inode(file)Al Viro1-1/+1
2012-10-11consitify do_mount() argumentsAl Viro3-5/+6
2012-10-09mm: use mm->exe_file instead of first VM_EXECUTABLE vma->vm_fileKonstantin Khlebnikov1-7/+2
2012-09-21userns: Teach security_path_chown to take kuids and kgidsEric W. Biederman1-5/+7
2012-09-21userns: Convert tomoyo to use kuid and kgid where appropriateEric W. Biederman4-20/+31
2012-05-22Merge branch 'master' of git://git.infradead.org/users/eparis/selinux into nextJames Morris1-3/+3
2012-05-15TOMOYO: Accept manager programs which do not start with / .Tetsuo Handa2-21/+6
2012-04-09SELinux: rename dentry_open to file_openEric Paris1-3/+3
2012-03-23usermodehelper: use UMH_WAIT_PROC consistentlyOleg Nesterov1-1/+1
2012-03-21Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/...Linus Torvalds5-65/+51
2012-03-20tomoyo: remove the second argument of k[un]map_atomic()Cong Wang1-2/+2
2012-03-20TOMOYO: Return error if fails to delete a domainTetsuo Handa1-4/+5
2012-03-15TOMOYO: Return appropriate value to poll().Tetsuo Handa4-43/+26
2012-03-01TOMOYO: Fix mount flags checking order.Tetsuo Handa1-18/+20
2012-01-18TOMOYO: Accept \000 as a valid character.Tetsuo Handa1-3/+3
2012-01-10Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds2-1/+3
2012-01-09Merge branch 'next' into for-linusJames Morris2-1/+3
2012-01-06switch security_path_chmod() to struct path *Al Viro1-7/+4
2012-01-06Merge branches 'vfsmount-guts', 'umode_t' and 'partitions' into ZAl Viro4-7/+7
2012-01-03vfs: trim includes a bitAl Viro1-0/+1
2012-01-03switch ->path_mknod() to umode_tAl Viro1-1/+1
2012-01-03switch ->path_mkdir() to umode_tAl Viro1-1/+1
2012-01-03tomoyo_mini_stat: switch to umode_tAl Viro2-3/+3
2012-01-03switch securityfs_create_file() to umode_tAl Viro1-1/+1
2012-01-03switch security_path_chmod() to umode_tAl Viro1-1/+1
2012-01-03tomoyo: stop including hell knows whatAl Viro1-8/+0
2011-12-12Security: tomoyo: add .gitignore fileGreg Kroah-Hartman1-0/+2
2011-12-12tomoyo: add missing rcu_dereference()Kees Cook1-1/+1
2011-12-08TOMOYO: Fix pathname handling of disconnected paths.Tetsuo Handa1-1/+9
2011-12-06fix apparmor dereferencing potentially freed dentry, sanitize __d_path() APIAl Viro1-2/+1
2011-11-02Merge branch 'for-linus' of git://git.selinuxproject.org/~jmorris/linux-securityLinus Torvalds1-0/+30
2011-10-29TOMOYO: Fix interactive judgment functionality.Tetsuo Handa1-0/+30
2011-10-25Merge branch 'next' of git://selinuxproject.org/~jmorris/linux-securityLinus Torvalds17-454/+2128
2011-10-22TOMOYO: Fix incomplete read after seek.Tetsuo Handa1-0/+1
2011-10-19TOMOYO: Fix unused kernel config option.Tetsuo Handa1-2/+4
2011-10-12TOMOYO: Fix quota and garbage collector.Tetsuo Handa2-0/+18
2011-10-12TOMOYO: Remove redundant tasklist_lock.Tetsuo Handa1-4/+0
2011-09-28TOMOYO: Fix domain transition failure warning.Tetsuo Handa1-1/+2
2011-09-26TOMOYO: Remove tomoyo_policy_memory_lock spinlock.Tetsuo Handa3-27/+27
2011-09-26TOMOYO: Simplify garbage collector.Tetsuo Handa5-319/+186
2011-09-26TOMOYO: Fix make namespacecheck warnings.Tetsuo Handa5-7/+9
2011-09-19TOMOYO: Allow specifying domain transition preference.Tetsuo Handa5-12/+137
2011-09-15TOMOYO: Bump version.Tetsuo Handa3-9/+9
2011-09-14TOMOYO: Avoid race when retrying "file execute" permission check.Tetsuo Handa1-34/+22
2011-09-14TOMOYO: Allow domain transition without execve().Tetsuo Handa4-28/+210
2011-09-14TOMOYO: Allow controlling generation of access granted logs for per an entry ...Tetsuo Handa5-1/+38
2011-09-14TOMOYO: Add socket operation restriction support.Tetsuo Handa10-17/+1215
2011-09-14TOMOYO: Add environment variable name restriction support.Tetsuo Handa7-10/+266
2011-09-09TOMOYO: Fix incorrect enforce mode.Tetsuo Handa1-1/+2
2011-08-17tomoyo: remove tomoyo_gc_thread()->daemonize()Oleg Nesterov1-1/+1
2011-08-08TOMOYO: Fix incomplete read of /sys/kernel/security/tomoyo/profileTetsuo Handa1-1/+4
2011-07-14TOMOYO: Update kernel-doc.Tetsuo Handa13-62/+269
2011-07-11TOMOYO: Enable conditional ACL.Tetsuo Handa5-33/+80
2011-07-11TOMOYO: Allow using argv[]/envp[] of execve() as conditions.Tetsuo Handa6-10/+589
2011-07-11TOMOYO: Allow using executable's realpath and symlink's target as conditions.Tetsuo Handa5-4/+228
2011-07-11TOMOYO: Allow using owner/group etc. of file objects as conditions.Tetsuo Handa4-0/+457
2011-07-11TOMOYO: Allow using UID/GID etc. of current thread as conditions.Tetsuo Handa8-37/+651
2011-07-08TOMOYO: Remove /sys/kernel/security/tomoyo/.domain_status interface.Tetsuo Handa3-76/+0
2011-07-01TOMOYO: Fix wrong domainname in tomoyo_init_log().Tetsuo Handa1-1/+1
2011-06-30TOMOYO: Cleanup header file.Tetsuo Handa1-117/+96
2011-06-30TOMOYO: Fix build error with CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER=y .Tetsuo Handa1-0/+2
2011-06-30Merge branch 'linus' into nextJames Morris1-1/+1
2011-06-29TOMOYO: Make several options configurable.Tetsuo Handa3-23/+117
2011-06-29TOMOYO: Add built-in policy support.Tetsuo Handa4-10/+108
2011-06-29TOMOYO: Rename meminfo to stat and show more statistics.Tetsuo Handa6-143/+206
2011-06-29TOMOYO: Cleanup part 4.Tetsuo Handa6-121/+177
2011-06-29TOMOYO: Fix lockdep warning.Tetsuo Handa3-51/+276
2011-06-29TOMOYO: Change pathname for non-rename()able filesystems.Tetsuo Handa2-54/+180
2011-06-29TOMOYO: Add policy namespace support.Tetsuo Handa8-299/+669