summaryrefslogtreecommitdiff
path: root/security (unfollow)
Commit message (Expand)Author
2024-10-17Merge remote-tracking branch 'msm8998/lineage-20' into lineage-20Raghuram Subramani
2024-01-02lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore
2023-11-02ICE, pfk: fix to set dio_inode preciselyJaegeuk Kim
2022-11-05ANDROID: selinux: modify RTM_GETNEIGH{TBL}Bram Bonné
2022-10-28BACKPORT: treewide: Fix function prototypes for module_param_call()Kees Cook
2022-10-28selinux: always allow mounting submountsOndrej Mosnacek
2022-04-19UPSTREAM: security: selinux: allow per-file labeling for bpffsConnor O'Brien
2022-04-19selinux: distinguish non-init user namespace capability checksStephen Smalley
2022-04-19selinux: check ss_initialized before revalidating an inode labelPaul Moore
2022-04-19selinux: delay inode label lookup as long as possiblePaul Moore
2022-04-19selinux: don't revalidate an inode's label when explicitly setting itPaul Moore
2022-04-19selinux: simply inode label states to INVALID and INITIALIZEDPaul Moore
2022-04-19selinux: Inode label revalidation performance fixAndreas Gruenbacher
2022-04-19selinux: Revalidate invalid inode security labelsAndreas Gruenbacher
2022-04-19security: Add hook to invalidate inode security labelsAndreas Gruenbacher
2022-04-19selinux: Add accessor functions for inode->i_securityAndreas Gruenbacher
2022-04-19security: Make inode argument of inode_getsecid non-constAndreas Gruenbacher
2022-04-19security: Make inode argument of inode_getsecurity non-constAndreas Gruenbacher
2022-04-19selinux: Remove unused variable in selinux_inode_init_securityAndreas Gruenbacher
2022-04-19UPSTREAM: selinux: bpf: Add addtional check for bpf object file receiveChenbo Feng
2022-04-19UPSTREAM: selinux: bpf: Add selinux check for eBPF syscall operationsChenbo Feng
2022-04-19BACKPORT: security: bpf: Add LSM hooks for bpf object related syscallChenbo Feng
2022-04-19fs: Limit file caps to the user namespace of the super blockSeth Forshee
2022-01-05selinux: initialize proto variable in selinux_ip_postroute_compat()Tom Rix
2021-11-26smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doiTetsuo Handa
2021-11-26smackfs: use __GFP_NOFAIL for smk_cipso_doi()Tetsuo Handa
2021-11-26smackfs: Fix use-after-free in netlbl_catmap_walk()Pawan Gupta
2021-11-26binder: use cred instead of task for selinux checksTodd Kjos
2021-11-22BACKPORT: binder: use cred instead of task for selinux checksTodd Kjos
2021-09-22Smack: Fix wrong semantics in smk_access_entry()Tianjia Zhang
2021-07-20selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVCMinchan Kim
2021-03-03KEYS: trusted: Fix migratable=1 failingJarkko Sakkinen
2021-01-23dump_common_audit_data(): fix racy accesses to ->d_nameAl Viro
2020-12-13ANDROID: selinux: modify RTM_GETLINK permissionJeff Vander Stoep
2020-10-29ima: Don't ignore errors from crypto_shash_update()Roberto Sassu
2020-10-01selinux: sel_avc_get_stat_idx should increase position indexVasily Averin
2020-08-21Smack: prevent underflow in smk_set_cipso()Dan Carpenter
2020-08-21Smack: fix another vsscanf out of boundsDan Carpenter
2020-08-21Smack: fix use-after-free in smk_write_relabel_self()Eric Biggers
2020-08-21nfs: Move call to security_inode_listsecurity into nfs_listxattrAndreas Gruenbacher
2020-06-29selinux: fix double freeTom Rix
2020-06-20ima: Directly assign the ima_default_policy pointer to ima_rulesRoberto Sassu
2020-06-20ima: Fix ima digest hash table key calculationKrzysztof Struczynski
2020-06-20Smack: slab-out-of-bounds in vsscanfCasey Schaufler
2020-06-03exec: Always set cap_ambient in cap_bprm_set_credsEric W. Biederman
2020-05-27evm: Check also if *tfm is an error pointer in init_desc()Roberto Sassu
2020-05-05selinux: properly handle multiple messages in selinux_netlink_send()Paul Moore
2020-04-24KEYS: reaching the keys quotas correctlyYang Xu
2020-02-28selinux: ensure we cleanup the internal AVC counters on error in avc_update()Jaihind Yadav
2020-01-23ANDROID: selinux: modify RTM_GETLINK permissionJeff Vander Stoep