1. 0be72ae KEYS: return full count in keyring_read() if buffer is too small by Eric Biggers · 7 years ago
  2. 63c8e45 KEYS: Fix race between updating and finding a negative key by David Howells · 7 years ago
  3. da0c750 KEYS: don't let add_key() update an uninstantiated key by David Howells · 7 years ago
  4. fec442e KEYS: encrypted: fix dereference of NULL user_key_payload by Eric Biggers · 7 years ago
  5. 88c195d lsm: fix smack_inode_removexattr and xattr_getsecurity memleak by Casey Schaufler · 7 years ago
  6. dda70d2 KEYS: prevent KEYCTL_READ on negative key by Eric Biggers · 7 years ago
  7. bfe9d7b KEYS: prevent creating a different user's keyrings by Eric Biggers · 7 years ago
  8. 47e8bd1 KEYS: fix writing past end of user-supplied buffer in keyring_read() by Eric Biggers · 7 years ago
  9. 0c70fb8 security/keys: rewrite all of big_key crypto by Jason A. Donenfeld · 7 years ago
  10. 2f9be92 security/keys: properly zero out sensitive key material in big_key by Jason A. Donenfeld · 7 years ago
  11. 73a0a68 KEYS: Fix an error code in request_master_key() by Dan Carpenter · 7 years ago
  12. d24c1c1 KEYS: encrypted: avoid encrypting/decrypting stack buffers by Eric Biggers · 7 years ago
  13. 2436976 KEYS: fix freeing uninitialized memory in key_update() by Eric Biggers · 7 years ago
  14. 1b253e0 KEYS: fix dereferencing NULL payload with nonzero length by Eric Biggers · 7 years ago
  15. 91034255 ima: accept previously set IMA_NEW_FILE by Daniel Glöckner · 7 years ago
  16. 174a74d KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings by Eric Biggers · 7 years ago
  17. b2dd90e KEYS: Change the name of the dead type to ".dead" to prevent user access by David Howells · 7 years ago
  18. a5c6e0a KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings by David Howells · 7 years ago
  19. d9cc316 ima: fix ima_d_path() possible race with rename by Mimi Zohar · 7 years ago
  20. 6cbaf7b selinux: fix off-by-one in setprocattr by Stephen Smalley · 7 years ago
  21. 825e6a0 ima: fix memory leak in ima_release_policy by Eric Richter · 8 years ago
  22. 3d40658 apparmor: fix change_hat not finding hat after policy replacement by John Johansen · 8 years ago
  23. 31e6ec4 security/keys: make BIG_KEYS dependent on stdrng. by Artem Savkov · 8 years ago
  24. 7df3e59 KEYS: Sort out big_key initialisation by David Howells · 8 years ago
  25. 03dab86 KEYS: Fix short sprintf buffer in /proc/keys show function by David Howells · 8 years ago
  26. 86c5bf7 Merge branch 'mm-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip by Linus Torvalds · 8 years ago
  27. d17af50 mm: Change vm_is_stack_for_task() to vm_is_stack_for_current() by Andy Lutomirski · 8 years ago
  28. 9beae1e mm: replace get_user_pages_remote() write/force parameters with gup_flags by Lorenzo Stoakes · 8 years ago
  29. 101105b Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  30. 3873691 Merge remote-tracking branch 'ovl/rename2' into for-linus by Al Viro · 8 years ago
  31. 97d2116 Merge branch 'work.xattr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  32. abb5a14 Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  33. 5638733 Merge branch 'printk-cleanups' by Linus Torvalds · 8 years ago
  34. 4bcc595 printk: reinstate KERN_CONT for printing continuation lines by Linus Torvalds · 8 years ago
  35. f334bcd Merge remote-tracking branch 'ovl/misc' into work.misc by Al Viro · 8 years ago
  36. 5d6c319 xattr: Add __vfs_{get,set,remove}xattr helpers by Andreas Gruenbacher · 8 years ago
  37. 2ab704a Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial by Linus Torvalds · 8 years ago
  38. a3443cd Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  39. 3cd013a Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/audit by Linus Torvalds · 8 years ago
  40. 1b46065 securityfs: fix securityfs_create_dir comment by Laurent Georget · 8 years ago
  41. 078cd82 fs: Replace CURRENT_TIME with current_time() for inode timestamps by Deepa Dinamani · 8 years ago
  42. 2773bf0 fs: rename "rename2" i_op to "rename" by Miklos Szeredi · 8 years ago
  43. 18fc84d vfs: remove unused i_op->rename by Miklos Szeredi · 8 years ago
  44. 2ddfdd4 Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 8 years ago
  45. 456bee9 KEYS: Fix skcipher IV clobbering by Herbert Xu · 8 years ago
  46. 8a17ef9d Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  47. 43af5de lsm,audit,selinux: Introduce a new audit data type LSM_AUDIT_DATA_FILE by Vivek Goyal · 8 years ago
  48. de2f4b3 Merge branch 'stable-4.9' of git://git.infradead.org/users/pcmoore/selinux into next by James Morris · 8 years ago
  49. e71b9df ima: use file_dentry() by Miklos Szeredi · 8 years ago
  50. 9b6a9ec selinux: fix error return code in policydb_read() by Wei Yongjun · 8 years ago
  51. c60b906 Smack: Signal delivery as an append operation by Casey Schaufler · 8 years ago
  52. 80a7704 Merge tag 'usercopy-v4.8-rc6-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 8 years ago
  53. 8e1f74e usercopy: remove page-spanning test for now by Kees Cook · 8 years ago
  54. fa2bea2 audit: consistently record PIDs with task_tgid_nr() by Paul Moore · 8 years ago
  55. 7c686af selinux: fix overflow and 0 length allocations by William Roberts · 8 years ago
  56. 3bc7bcf selinux: initialize structures by William Roberts · 8 years ago
  57. 74d977b selinux: detect invalid ebitmap by William Roberts · 8 years ago
  58. 63e24c4 Smack: Use memdup_user() rather than duplicating its implementation by Markus Elfring · 8 years ago
  59. 6040e57 Make the hardened user-copy code depend on having a hardened allocator by Linus Torvalds · 8 years ago
  60. 348a0db selinux: drop SECURITY_SELINUX_POLICYDB_VERSION_MAX by William Roberts · 8 years ago
  61. a518b0a selinux: Implement dentry_create_files_as() hook by Vivek Goyal · 8 years ago
  62. 2602625 security, overlayfs: Provide hook to correctly label newly created files by Vivek Goyal · 8 years ago
  63. c957f6d selinux: Pass security pointer to determine_inode_label() by Vivek Goyal · 8 years ago
  64. 19472b6 selinux: Implementation for inode_copy_up_xattr() hook by Vivek Goyal · 8 years ago
  65. 121ab82 security,overlayfs: Provide security hook for copy up of xattrs for overlay file by Vivek Goyal · 8 years ago
  66. 56909eb selinux: Implementation for inode_copy_up() hook by Vivek Goyal · 8 years ago
  67. d8ad8b4 security, overlayfs: provide copy up security hook for unioned files by Vivek Goyal · 8 years ago
  68. 1eccfa0 Merge tag 'usercopy-v4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux by Linus Torvalds · 8 years ago
  69. 8b31f45 selinux: print leading 0x on ioctlcmd audits by William Roberts · 8 years ago
  70. 1a93a6e security: Use IS_ENABLED() instead of checking for built-in or module by Javier Martinez Canillas · 8 years ago
  71. 835c92d Merge branch 'work.const-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  72. 7a1e8b8 Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security by Linus Torvalds · 8 years ago
  73. a867d73 Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace by Linus Torvalds · 8 years ago
  74. 6784725 Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs by Linus Torvalds · 8 years ago
  75. 554828e Merge branch 'salted-string-hash' by Linus Torvalds · 8 years ago
  76. 7616ac7 apparmor: fix SECURITY_APPARMOR_HASH_DEFAULT parameter handling by Arnd Bergmann · 8 years ago
  77. f5509cc mm: Hardened usercopy by Kees Cook · 8 years ago
  78. bbce2ad Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 by Linus Torvalds · 8 years ago
  79. 4f3ccd7 qstr: constify dentry_init_security by Al Viro · 8 years ago
  80. d4d03f7 apparmor: fix arg_size computation for when setprocattr is null terminated by John Johansen · 8 years ago
  81. e89b808 apparmor: fix oops, validate buffer size in apparmor_setprocattr() by Vegard Nossum · 8 years ago
  82. f4ee2de apparmor: do not expose kernel stack by Heinrich Schuchardt · 8 years ago
  83. 58acf9d apparmor: fix module parameters can be changed after policy is locked by John Johansen · 8 years ago
  84. 5f20fdf apparmor: fix oops in profile_unpack() when policy_db is not present by John Johansen · 8 years ago
  85. 3197f5a apparmor: don't check for vmalloc_addr if kvzalloc() failed by John Johansen · 8 years ago
  86. 1575617 apparmor: add missing id bounds check on dfa verification by John Johansen · 8 years ago
  87. ff11847 apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task by Jeff Mahoney · 9 years ago
  88. 38dbd7d apparmor: use list_next_entry instead of list_entry_next by Geliang Tang · 9 years ago
  89. de7c4cc apparmor: fix refcount race when finding a child profile by John Johansen · 8 years ago
  90. 0b938a2 apparmor: fix ref count leak when profile sha1 hash is read by John Johansen · 9 years ago
  91. 23ca7b6 apparmor: check that xindex is in trans_table bounds by John Johansen · 8 years ago
  92. f7da2de apparmor: ensure the target profile name is always audited by John Johansen · 8 years ago
  93. 7ee6da2 apparmor: fix audit full profile hname on successful load by John Johansen · 8 years ago
  94. bf15cf0 apparmor: fix log failures for all profiles in a set by John Johansen · 8 years ago
  95. f351841 apparmor: fix put() parent ref after updating the active ref by John Johansen · 8 years ago
  96. 6059f71 apparmor: add parameter to control whether policy hashing is used by John Johansen · 10 years ago
  97. bd35db8 apparmor: internal paths should be treated as disconnected by John Johansen · 10 years ago
  98. f2e561d apparmor: fix disconnected bind mnts reconnection by John Johansen · 10 years ago
  99. d671e890 apparmor: fix update the mtime of the profile file on replacement by John Johansen · 10 years ago
  100. 9049a79 apparmor: exec should not be returning ENOENT when it denies by John Johansen · 10 years ago