aboutsummaryrefslogtreecommitdiffstats
path: root/security
AgeCommit message (Expand)AuthorFilesLines
2019-09-28Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds10-16/+350
2019-09-27Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds15-105/+627
2019-09-25KEYS: trusted: correctly initialize digests and fix locking issueRoberto Sassu1-0/+5
2019-09-23Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-nextLinus Torvalds2-23/+23
2019-09-23Merge tag 'safesetid-bugfix-5.4' of git://github.com/micah-morton/linuxLinus Torvalds1-1/+2
2019-09-23Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds12-296/+346
2019-09-17LSM: SafeSetID: Stop releasing uninitialized rulesetMicah Morton1-1/+2
2019-09-10security: constify some arrays in lockdown LSMMatthew Garrett1-2/+2
2019-09-05keys: Fix missing null pointer check in request_key_auth_describe()Hillf Danton1-0/+6
2019-09-04selinux: fix residual uses of current_security() for the SELinux blobStephen Smalley2-11/+11
2019-09-04smack: use GFP_NOFS while holding inode_smack::smk_lockEric Biggers2-4/+4
2019-09-04security: smack: Fix possible null-pointer dereferences in smack_socket_sock_...Jia-Ju Bai1-0/+2
2019-09-04smack: fix some kernel-doc notationsluanshi1-18/+15
2019-09-04Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is setJann Horn1-1/+2
2019-08-30keys: ensure that ->match_free() is called in request_key_and_link()Eric Biggers1-1/+1
2019-08-29ima: ima_api: Use struct_size() in kzalloc()Gustavo A. R. Silva1-2/+2
2019-08-29ima: use struct_size() in kzalloc()Gustavo A. R. Silva1-3/+2
2019-08-28ima: Fix use after free in ima_read_modsig()Thiago Jung Bauermann1-1/+2
2019-08-27selinux: avoid atomic_t usage in sidtabOndrej Mosnacek2-32/+35
2019-08-19lockdown: Print current->comm in restriction messagesMatthew Garrett1-2/+6
2019-08-19tracefs: Restrict tracefs when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19debugfs: Restrict debugfs when the kernel is locked downDavid Howells1-0/+1
2019-08-19kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett3-1/+53
2019-08-19lockdown: Lock down perf when in confidentiality modeDavid Howells1-0/+1
2019-08-19bpf: Restrict bpf when kernel lockdown is in confidentiality modeDavid Howells1-0/+1
2019-08-19lockdown: Lock down tracing and perf kprobes when in confidentiality modeDavid Howells1-0/+1
2019-08-19lockdown: Lock down /proc/kcoreDavid Howells1-0/+1
2019-08-19x86/mmiotrace: Lock down the testmmiotrace moduleDavid Howells1-0/+1
2019-08-19lockdown: Lock down module params that specify hardware parameters (eg. ioport)David Howells1-0/+1
2019-08-19lockdown: Lock down TIOCSSERIALDavid Howells1-0/+1
2019-08-19lockdown: Prohibit PCMCIA CIS storage when the kernel is locked downDavid Howells1-0/+1
2019-08-19ACPI: Limit access to custom_method when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19x86/msr: Restrict MSR access when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19x86: Lock down IO port access when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19PCI: Lock down BAR access when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19hibernate: Disable when the kernel is locked downJosh Boyer1-0/+1
2019-08-19kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCEJiri Bohac2-2/+2
2019-08-19kexec_load: Disable at runtime if the kernel is locked downMatthew Garrett1-0/+1
2019-08-19lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked downMatthew Garrett1-0/+1
2019-08-19lockdown: Enforce module signatures if the kernel is locked downDavid Howells2-0/+2
2019-08-19security: Add a static lockdown policy LSMMatthew Garrett5-5/+224
2019-08-19security: Add a "locked down" LSM hookMatthew Garrett1-0/+6
2019-08-19security: Support early LSMsMatthew Garrett1-8/+42
2019-08-13KEYS: trusted: allow module init if TPM is inactive or deactivatedRoberto Sassu1-13/+0
2019-08-12fanotify, inotify, dnotify, security: add security hook for fs notificationsAaron Goidel3-2/+56
2019-08-05ima: fix freeing ongoing ahash_requestSascha Hauer1-0/+5
2019-08-05ima: always return negative code for errorSascha Hauer1-1/+4
2019-08-05ima: Store the measurement again when appraising a modsigThiago Jung Bauermann4-7/+47
2019-08-05ima: Define ima-modsig templateThiago Jung Bauermann8-6/+156
2019-08-05ima: Collect modsigThiago Jung Bauermann5-5/+60
2019-08-05ima: Implement support for module-style appended signaturesThiago Jung Bauermann8-23/+209
2019-08-05ima: Factor xattr_verify() out of ima_appraise_measurement()Thiago Jung Bauermann1-60/+81
2019-08-05ima: Add modsig appraise_type option for module-style appended signaturesThiago Jung Bauermann6-2/+62
2019-08-05integrity: Select CONFIG_KEYS instead of depending on itThiago Jung Bauermann1-1/+1
2019-08-05selinux: always return a secid from the network caches if we find onePaul Moore3-47/+38
2019-08-05selinux: policydb - rename type_val_to_struct_arrayOndrej Mosnacek3-11/+11
2019-08-05selinux: policydb - fix some checkpatch.pl warningsOndrej Mosnacek1-4/+8
2019-08-05selinux: shuffle around policydb.c to get rid of forward declarationsPaul Moore1-189/+187
2019-08-02Merge tag 'selinux-pr-20190801' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-1/+5
2019-08-01ima: initialize the "template" field with the default templateMimi Zohar1-2/+4
2019-07-31selinux: fix memory leak in policydb_init()Ondrej Mosnacek1-1/+5
2019-07-28Merge tag 'meminit-v5.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-0/+7
2019-07-26Merge tag 'selinux-pr-20190726' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-0/+5
2019-07-25structleak: disable STRUCTLEAK_BYREF in combination with KASAN_STACKArnd Bergmann1-0/+7
2019-07-24selinux: check sidtab limit before adding a new entryOndrej Mosnacek1-0/+5
2019-07-19Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds4-28/+67
2019-07-18proc/sysctl: add shared variables for range checkMatteo Croce3-20/+15
2019-07-16Merge tag 'docs/v5.3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mche...Linus Torvalds2-2/+2
2019-07-15LSM: SafeSetID: fix use of literal -1 in capable hookJann Horn1-1/+1
2019-07-15LSM: SafeSetID: verify transitive constrainednessJann Horn1-1/+37
2019-07-15LSM: SafeSetID: add read handlerJann Horn2-4/+32
2019-07-15LSM: SafeSetID: rewrite userspace API to atomic updatesJann Horn3-158/+144
2019-07-15LSM: SafeSetID: fix userns handling in securityfsJann Horn1-3/+3
2019-07-15LSM: SafeSetID: refactor policy parsingJann Horn1-51/+33
2019-07-15LSM: SafeSetID: refactor safesetid_security_capable()Jann Horn1-15/+26
2019-07-15LSM: SafeSetID: refactor policy hash tableJann Horn2-44/+37
2019-07-15LSM: SafeSetID: fix check for setresuid(new1, new2, new3)Jann Horn1-90/+35
2019-07-15LSM: SafeSetID: fix pr_warn() to include newlineJann Horn1-2/+2
2019-07-15docs: cgroup-v1: add it to the admin-guide bookMauro Carvalho Chehab1-1/+1
2019-07-15docs: x86: move two x86-specific files to x86 arch dirMauro Carvalho Chehab1-1/+1
2019-07-12Merge branch 'akpm' (patches from Andrew)Linus Torvalds1-0/+29
2019-07-12mm: security: introduce init_on_alloc=1 and init_on_free=1 boot optionsAlexander Potapenko1-0/+29
2019-07-11Merge tag 'loadpin-v5.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-0/+48
2019-07-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+4
2019-07-10Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds22-629/+187
2019-07-09Merge tag 'docs-5.3' of git://git.lwn.net/linuxLinus Torvalds1-1/+1
2019-07-09Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmor...Linus Torvalds1-3/+3
2019-07-08Merge branch 'siginfo-linus' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-2/+2
2019-07-08Merge branch 'for-5.3' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cg...Linus Torvalds1-1/+1
2019-07-08Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds16-79/+378
2019-07-08Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds22-187/+629
2019-07-08Merge tag 'keys-namespace-20190627' of git://git.kernel.org/pub/scm/linux/ker...Linus Torvalds11-243/+389
2019-07-08Merge tag 'keys-request-20190626' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds8-106/+180
2019-07-08Merge tag 'keys-misc-20190619' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds8-78/+369
2019-07-08Merge tag 'selinux-pr-20190702' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds3-23/+31
2019-07-08Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/k...Linus Torvalds1-4/+4
2019-07-07security/commoncap: Use xattr security prefix lenCarmeli Tamir1-2/+2
2019-07-04vfs: Convert smackfs to use the new mount APIDavid Howells1-12/+22
2019-07-04vfs: Convert selinuxfs to use the new mount APIDavid Howells1-5/+15
2019-07-04vfs: Convert securityfs to use the new mount APIDavid Howells1-6/+15
2019-07-04vfs: Convert apparmorfs to use the new mount APIDavid Howells1-5/+15
2019-07-03keys: Provide KEYCTL_GRANT_PERMISSIONDavid Howells4-1/+133
2019-07-01selinux: format all invalid context as untrustedRichard Guy Briggs1-10/+19
2019-06-30integrity: Introduce struct evm_xattrThiago Jung Bauermann3-7/+14
2019-06-30ima: Update MAX_TEMPLATE_NAME_LEN to fit largest reasonable definitionThiago Jung Bauermann1-1/+7
2019-06-30IMA: Define a new template field bufPrakhar Srivastava5-1/+33
2019-06-27keys: Replace uid/gid/perm permissions checking with an ACLDavid Howells21-186/+496
2019-06-27keys: Pass the network namespace into request_key mechanismDavid Howells4-17/+36
2019-06-26keys: Network namespace domain tagDavid Howells1-1/+6
2019-06-26keys: Garbage collect keys for which the domain has been removedDavid Howells2-1/+17
2019-06-26keys: Include target namespace in match criteriaDavid Howells5-4/+39
2019-06-26keys: Move the user and user-session keyrings to the user_namespaceDavid Howells5-104/+187
2019-06-26keys: Namespace keyring namesDavid Howells2-57/+45
2019-06-26keys: Add a 'recurse' flag for keyring searchesDavid Howells8-9/+22
2019-06-26keys: Cache the hash value to avoid lots of recalculationDavid Howells3-16/+22
2019-06-26keys: Simplify key description managementDavid Howells4-49/+30
2019-06-26keys: Kill off request_key_async{,_with_auxdata}David Howells1-50/+0
2019-06-24IMA: Define a new hook to measure the kexec boot command line argumentsPrakhar Srivastava4-0/+81
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller17-71/+65
2019-06-21Merge tag 'spdx-5.2-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gre...Linus Torvalds15-61/+15
2019-06-19IMA: support for per policy rule template formatsMatthew Garrett7-27/+76
2019-06-19keys: Cache result of request_key*() temporarily in task_structDavid Howells2-0/+55
2019-06-19keys: Provide request_key_rcu()David Howells1-0/+44
2019-06-19keys: Move the RCU locks outwards from the keyring search functionsDavid Howells6-60/+75
2019-06-19keys: Invalidate used request_key authentication keysDavid Howells2-3/+3
2019-06-19keys: Fix request_key() lack of Link perm check on found keyDavid Howells1-0/+10
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner15-61/+15
2019-06-19keys: Add capability-checking keyctl functionDavid Howells3-0/+40
2019-06-18apparmor: reset pos on failure to unpack for various functionsMike Salvatore1-8/+39
2019-06-18apparmor: enforce nullbyte at end of tag stringJann Horn1-1/+1
2019-06-18apparmor: fix PROFILE_MEDIATES for untrusted inputJohn Johansen1-1/+10
2019-06-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller93-484/+133
2019-06-17integrity: Fix __integrity_init_keyring() section mismatchGeert Uytterhoeven1-2/+3
2019-06-17locking/lockdep: Rename lockdep_assert_held_exclusive() -> lockdep_assert_hel...Nikolay Borisov1-4/+4
2019-06-14Smack: Restore the smackfsdef mount option and add missing prefixesCasey Schaufler1-5/+7
2019-06-14docs: cgroup-v1: convert docs to ReST and rename to *.rstMauro Carvalho Chehab1-1/+1
2019-06-14Merge tag 'v5.2-rc4' into mauroJonathan Corbet131-616/+157
2019-06-14ima: Use designated initializers for struct ima_event_dataThiago Jung Bauermann2-6/+11
2019-06-14ima: use the lsm policy update notifierJanne Karhunen3-20/+106
2019-06-14LSM: switch to blocking policy update notifiersJanne Karhunen3-12/+15
2019-06-14x86/ima: fix the Kconfig dependency for IMA_ARCH_POLICYNayna Jain1-1/+2
2019-06-14ima: Make arch_policy_entry staticYueHaibing1-1/+1
2019-06-12Merge tag 'selinux-pr-20190612' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2-13/+36
2019-06-12selinux: fix empty write to keycreate fileOndrej Mosnacek1-5/+6
2019-06-12selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()Gen Zhang1-6/+14
2019-06-12selinux: fix a missing-check bug in selinux_add_mnt_opt( )Gen Zhang1-5/+14
2019-06-11selinux: log raw contexts as untrusted stringsOndrej Mosnacek1-2/+8
2019-06-11security: Make capability_hooks staticYueHaibing1-1/+1
2019-06-08docs: fix broken documentation linksMauro Carvalho Chehab1-1/+1
2019-06-07Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller18-93/+35
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441Thomas Gleixner72-352/+72
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 372Thomas Gleixner11-39/+11
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295Thomas Gleixner6-66/+6
2019-06-05treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282Thomas Gleixner1-9/+1
2019-06-04ima: prevent a file already mmap'ed write to be mmap'ed executeMimi Zohar1-2/+30
2019-05-31security/loadpin: Allow to exclude specific file typesKe Wu1-0/+48
2019-05-31Merge branch 'next-fixes-for-5.2-rc' of git://git.kernel.org/pub/scm/linux/ke...Linus Torvalds2-12/+19
2019-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller5-25/+5
2019-05-30keys: Reuse keyring_index_key::desc_len in lookup_user_key()Eric Biggers1-3/+1
2019-05-30keys: Grant Link permission to possessers of request_key auth keysDavid Howells1-1/+1
2019-05-30keys: Add a keyctl to move a key between keyringsDavid Howells4-0/+166
2019-05-30keys: Hoist locking out of __key_link_begin()David Howells4-38/+76
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner16-81/+16
2019-05-30keys: Break bits out of key_unlink()David Howells1-21/+67
2019-05-30keys: Change keyring_serialise_link_sem to a mutexDavid Howells1-6/+6
2019-05-29ima: show rules with IMA_INMASK correctlyRoberto Sassu1-9/+12
2019-05-29evm: check hash algorithm passed to init_desc()Roberto Sassu1-0/+3
2019-05-29keys: sparse: Fix kdoc mismatchesDavid Howells2-4/+8
2019-05-29keys: sparse: Fix incorrect RCU accessesDavid Howells2-2/+3
2019-05-28net: nexthop uapiDavid Ahern1-1/+4
2019-05-27signal: Remove task parameter from force_sigEric W. Biederman1-2/+2
2019-05-24Merge tag 'spdx-5.2-rc2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/g...Linus Torvalds5-25/+5
2019-05-24treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36Thomas Gleixner5-25/+5
2019-05-22keys: sparse: Fix key_fs[ug]id_changed()David Howells1-12/+10
2019-05-21selinux: remove some no-op BUG_ONsOndrej Mosnacek1-4/+0
2019-05-21Merge tag 'selinux-pr-20190521' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds1-2/+8
2019-05-21selinux: provide __le variables explicitlyNicholas Mc Guire1-4/+6
2019-05-21treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13Thomas Gleixner2-30/+2
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner17-0/+17
2019-05-20selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni1-2/+8
2019-05-19ima: fix wrong signed policy requirement when not appraisingPetr Vorel1-3/+4
2019-05-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-4/+4
2019-05-10tomoyo: Don't emit WARNING: string while fuzzing testing.Tetsuo Handa1-0/+2
2019-05-10tomoyo: Change pathname calculation for read-only filesystems.Tetsuo Handa1-1/+2
2019-05-10tomoyo: Check address length before reading address familyTetsuo Handa1-0/+4
2019-05-10tomoyo: Add a kernel config option for fuzzing testing.Tetsuo Handa2-1/+22
2019-05-10Revert "selinux: do not report error on connect(AF_UNSPEC)"Paolo Abeni1-4/+4
2019-05-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-4/+4
2019-05-09Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jm...Linus Torvalds3-45/+45
2019-05-08selinux: do not report error on connect(AF_UNSPEC)Paolo Abeni1-4/+4
2019-05-07Merge branch 'work.mount-syscalls' of git://git.kernel.org/pub/scm/linux/kern...Linus Torvalds1-0/+5
2019-05-07Merge tag 'audit-pr-20190507' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-5/+5
2019-05-07Merge tag 'selinux-pr-20190507' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds5-88/+169
2019-05-07Merge tag 'meminit-v5.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds2-0/+166
2019-05-07Merge branch 'work.icache' of git://git.kernel.org/pub/scm/linux/kernel/git/v...Linus Torvalds2-16/+4
2019-05-07Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2-30/+25
2019-05-06Merge branch 'smack-for-5.2-b' of https://github.com/cschaufler/next-smack in...James Morris1-0/+2
2019-05-06Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert...Linus Torvalds7-12/+9
2019-05-06Merge tag 's390-5.2-1' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/...Linus Torvalds3-5/+50
2019-05-05Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds2-8/+18
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-15 07:12:47 +0000