1. 7f3ebcf apparmor: Check buffer bounds when mapping permissions mask by Tyler Hicks · 6 years ago
  2. 7757d60 x86/pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 by Joerg Roedel · 6 years ago
  3. 6eb864c integrity: prevent deadlock during digsig verification. by Mikhail Kurinnoi · 6 years ago
  4. 5feeb61 evm: Allow non-SHA1 digital signatures by Matthew Garrett · 6 years ago
  5. e2861fa evm: Don't deadlock if a crypto algorithm is unavailable by Matthew Garrett · 6 years ago
  6. ac2409a integrity: silence warning when CONFIG_SECURITYFS is not enabled by Sudeep Holla · 6 years ago
  7. dba31ee ima: Differentiate auditing policy rules from "audit" actions by Stefan Berger · 6 years ago
  8. 2afd020 ima: Do not audit if CONFIG_INTEGRITY_AUDIT is not set by Stefan Berger · 6 years ago
  9. 3d2859d ima: Use audit_log_format() rather than audit_log_string() by Stefan Berger · 6 years ago
  10. 8a3bcaf ima: Call audit_log_string() rather than logging it untrusted by Stefan Berger · 6 years ago
  11. 87ea584 security: check for kstrdup() failure in lsm_append() by Eric Biggers · 6 years ago
  12. 83a68a0 security: export security_kernel_load_data function by Arnd Bergmann · 6 years ago
  13. 631d2b4 selinux: constify write_op[] by Eric Biggers · 6 years ago
  14. c417fbc kbuild: move bin2c back to scripts/ from scripts/basic/ by Masahiro Yamada · 6 years ago
  15. 4f0496d ima: based on policy warn about loading firmware (pre-allocated buffer) by Mimi Zohar · 6 years ago
  16. c77b8cd module: replace the existing LSM hook in init_module by Mimi Zohar · 6 years ago
  17. ef96837 ima: add build time policy by Mimi Zohar · 6 years ago
  18. fed2512 ima: based on policy require signed firmware (sysfs fallback) by Mimi Zohar · 6 years ago
  19. 16c267a ima: based on policy require signed kexec kernel images by Mimi Zohar · 6 years ago
  20. 377179c security: define new LSM hook named security_kernel_load_data by Mimi Zohar · 6 years ago
  21. 6035a27 IMA: don't propagate opened through the entire thing by Al Viro · 6 years ago
  22. 9481769 ->file_open(): lose cred argument by Al Viro · 6 years ago
  23. e3f20ae security_file_open(): lose cred argument by Al Viro · 6 years ago
  24. 85d7311 crypto: remove redundant type flags from tfm allocation by Eric Biggers · 6 years ago
  25. 6aa56f4 usercopy: Do not select BUG with HARDENED_USERCOPY by Kamal Mostafa · 6 years ago
  26. 34a484d Merge tag 'selinux-pr-20180629' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
  27. 0da7412 selinux: move user accesses in selinuxfs out of locked regions by Jann Horn · 6 years ago
  28. 3619dec dh key: fix rounding up KDF output length by Eric Biggers · 6 years ago
  29. 7b4e884 Smack: Mark inode instant in smack_task_to_inode by Casey Schaufler · 6 years ago
  30. 67b0b4e selinux: Cleanup printk logging in netnode by peter enderborg · 6 years ago
  31. 07c81ac selinux: Cleanup printk logging in avc by peter enderborg · 6 years ago
  32. 0d3a115 selinux: Cleanup printk logging in netif by peter enderborg · 6 years ago
  33. d006469 selinux: Cleanup printk logging in netport by peter enderborg · 6 years ago
  34. b21a695 selinux: Cleanup printk logging in sidtab by peter enderborg · 6 years ago
  35. d85a783 selinux: Cleanup printk logging in netlink by peter enderborg · 6 years ago
  36. f8b69a5 selinux: Cleanup printk logging in selinuxfs by peter enderborg · 6 years ago
  37. b54c85c15 selinux: Cleanup printk logging in services by peter enderborg · 6 years ago
  38. c87a7e7 selinux: Cleanup printk logging in avtab by peter enderborg · 6 years ago
  39. c103a91 selinux: Cleanup printk logging in hooks by peter enderborg · 6 years ago
  40. 9ffdd49 selinux: Cleanup printk logging in policydb by peter enderborg · 6 years ago
  41. 180cfc5 selinux: Cleanup printk logging in ebitmap by peter enderborg · 6 years ago
  42. ab48576 selinux: Cleanup printk logging in conditional by peter enderborg · 6 years ago
  43. 5fb94e9 docs: Fix some broken references by Mauro Carvalho Chehab · 6 years ago
  44. ec15872 docs: fix broken references with multiple hints by Mauro Carvalho Chehab · 6 years ago
  45. 463f202 Merge tag 'apparmor-pr-2018-06-13' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor by Linus Torvalds · 6 years ago
  46. 6396bb2 treewide: kzalloc() -> kcalloc() by Kees Cook · 6 years ago
  47. 6da2ec5 treewide: kmalloc() -> kmalloc_array() by Kees Cook · 6 years ago
  48. ba1b730 Merge branch 'next-smack' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
  49. 00d535a Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
  50. 338d0be apparmor: fix ptrace read check by John Johansen · 6 years ago
  51. 3ddae98 apparmor: fix memory leak when deduping profile load by John Johansen · 6 years ago
  52. 11c92f1 apparmor: fix mediation of prlimit by John Johansen · 6 years ago
  53. a4c3f89 apparmor: fixup secid map conversion to using IDR by John Johansen · 6 years ago
  54. 99cc45e apparmor: Use an IDR to allocate apparmor secids by Matthew Wilcox · 6 years ago
  55. 52e8c38 apparmor: Fix memory leak of rule on error exit path by Tyler Hicks · 6 years ago
  56. 2ab47da apparmor: modify audit rule support to support profile stacks by John Johansen · 6 years ago
  57. e79c26d apparmor: Add support for audit rule filtering by Matthew Garrett · 6 years ago
  58. 5d8779a apparmor: Convert to use match_string() helper by Andy Shevchenko · 6 years ago
  59. 38125c2 apparmor: improve get_buffers macro by using get_cpu_ptr by John Johansen · 6 years ago
  60. 1c8c5a9 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next by Linus Torvalds · 6 years ago
  61. 8b5c6a3 Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit by Linus Torvalds · 6 years ago
  62. 8b70543 Merge tag 'selinux-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
  63. 10b1eb7 Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 6 years ago
  64. 2531a0c Merge branch 'smack-for-4.18' of https://github.com/cschaufler/next-smack into next-smack by James Morris · 6 years ago
  65. 0f8983c Smack: Fix memory leak in smack_inode_getsecctx by Casey Schaufler · 6 years ago
  66. d8aed84 Merge branch 'userns-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 6 years ago
  67. f956d08a Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
  68. cf626b0 Merge branch 'hch.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
  69. 9c54aeb Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 6 years ago
  70. b5c90a7 EVM: unlock on error path in evm_read_xattrs() by Dan Carpenter · 6 years ago
  71. a41d80a EVM: prevent array underflow in evm_write_xattrs() by Dan Carpenter · 6 years ago
  72. 72acd64 EVM: Fix null dereference on xattr when xattr fails to allocate by Colin Ian King · 6 years ago
  73. 825b865 EVM: fix memory leak of temporary buffer 'temp' by Colin Ian King · 6 years ago
  74. 53b626f IMA: use list_splice_tail_init_rcu() instead of its open coded variant by Petko Manolov · 6 years ago
  75. b4df860 ima: use match_string() helper by Yisheng Xie · 6 years ago
  76. 943cf9f Merge tag 'selinux-pr-20180530' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
  77. efe3de7 selinux: KASAN: slab-out-of-bounds in xattr_getsecurity by Sachin Grover · 6 years ago
  78. 5b79c2a Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 6 years ago
  79. b1d749c capabilities: Allow privileged user in s_user_ns to set security.* xattrs by Eric W. Biederman · 7 years ago
  80. 6f0911a ima: fix updating the ima_appraise flag by Mimi Zohar · 6 years ago
  81. fd90bc5 ima: based on policy verify firmware signatures (pre-allocated buffer) by Mimi Zohar · 6 years ago
  82. f1b08bb ima: define a new policy condition based on the filesystem name by Mimi Zohar · 7 years ago
  83. 6f6e434 Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net by David S. Miller · 6 years ago
  84. 5997aab Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 6 years ago
  85. fa516b6 EVM: Allow runtime modification of the set of verified xattrs by Matthew Garrett · 6 years ago
  86. 21af766 EVM: turn evm_config_xattrnames into a list by Matthew Garrett · 6 years ago
  87. 305bb55 Merge tag 'selinux-pr-20180516' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux by Linus Torvalds · 6 years ago
  88. 0c343af integrity: Add an integrity directory in securityfs by Matthew Garrett · 6 years ago
  89. 4ecd993 ima: Remove unused variable ima_initialized by Petr Vorel · 6 years ago
  90. de63676 ima: Unify logging by Petr Vorel · 6 years ago
  91. ffb122d ima: Reflect correct permissions for policy by Petr Vorel · 6 years ago
  92. fddda2b proc: introduce proc_create_seq{,_data} by Christoph Hellwig · 6 years ago
  93. cdfb6b3 audit: use inline function to get audit context by Richard Guy Briggs · 6 years ago
  94. 4152dc9 selinux: correctly handle sa_family cases in selinux_sctp_bind_connect() by Alexey Kodanev · 6 years ago
  95. 88b7d37 selinux: fix address family in bind() and connect() to match address/port by Alexey Kodanev · 6 years ago
  96. 0f8db8c selinux: add AF_UNSPEC and INADDR_ANY checks to selinux_socket_bind() by Alexey Kodanev · 6 years ago
  97. e919328 __inode_security_revalidate() never gets NULL opt_dentry by Al Viro · 6 years ago
  98. b127125 fix breakage caused by d_find_alias() semantics change by Al Viro · 6 years ago
  99. 890e2ab dh key: get rid of stack allocated array for zeroes by Tycho Andersen · 6 years ago
  100. 383203e dh key: get rid of stack allocated array by Tycho Andersen · 6 years ago