Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
kernel
/
msm-5.4
/
4fa5ecda2bf96be7464eb406df8aba9d89260227
/
security
6a1afff
selinux: fix NULL dereference in policydb_destroy()
by Ondrej Mosnacek
· 6 years ago
fa3d493
Merge tag 'selinux-pr-20190312' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 6 years ago
8636b1d
Merge tag 'apparmor-pr-2019-03-12' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor
by Linus Torvalds
· 6 years ago
7b47a9e
Merge branch 'work.mount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
by Linus Torvalds
· 6 years ago
acdf52d
selinux: convert to kvmalloc
by Kent Overstreet
· 6 years ago
d8dbb58
apparmor: fix double free when unpack of secmark rules fails
by John Johansen
· 6 years ago
201218e
apparmor: delete the dentry in aafs_remove() to avoid a leak
by Chris Coulson
· 6 years ago
3815a24
security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
by J. Bruce Fields
· 6 years ago
292c997
selinux: add the missing walk_size + len check in selinux_sctp_bind_connect
by Xin Long
· 6 years ago
5af7f11
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
c3665a6
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
1a29e85
Merge tag 'docs-5.1' of git://git.lwn.net/linux
by Linus Torvalds
· 6 years ago
be37f21
Merge tag 'audit-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit
by Linus Torvalds
· 6 years ago
3ac96c3
Merge tag 'selinux-pr-20190305' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 6 years ago
ae5906c
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
468e91c
keys: fix missing __user in KEYCTL_PKEY_QUERY
by Ben Dooks
· 6 years ago
736706b
get rid of legacy 'get_ds()' function
by Linus Torvalds
· 6 years ago
b102c11
LSM: Update list of SECURITYFS users in Kconfig
by Petr Vorel
· 6 years ago
0b52075
introduce cloning of fs_context
by Al Viro
· 6 years ago
2febd25
smack: Implement filesystem context security hooks
by David Howells
· 6 years ago
442155c
selinux: Implement the new mount API LSM hooks
by David Howells
· 6 years ago
da2441f
vfs: Add LSM hooks for the new mount API
by David Howells
· 6 years ago
89a9684
LSM: Ignore "security=" when "lsm=" is specified
by Kees Cook
· 6 years ago
e88ed48
LSM: Update function documentation for cap_capable
by Micah Morton
· 6 years ago
c4eb1e1
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
by Linus Torvalds
· 6 years ago
ede0fa9
KEYS: always initialize keyring_index_key::desc_len
by Eric Biggers
· 6 years ago
09186e5
security: mark expected switch fall-throughs and add a missing break
by Gustavo A. R. Silva
· 6 years ago
d61330c
doc: sctp: Merge and clean up rst files
by Kees Cook
· 6 years ago
ae3b564
missing barriers in some of unix_sock ->addr and ->path accesses
by Al Viro
· 6 years ago
861f4bc
tomoyo: Bump version.
by Tetsuo Handa
· 6 years ago
7c1857b
keys: Timestamp new keys
by David Howells
· 6 years ago
822ad64
keys: Fix dependency loop between construction record and auth key
by David Howells
· 6 years ago
a08bf91
KEYS: allow reaching the keys quotas exactly
by Eric Biggers
· 6 years ago
2e884fc
Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity into next-integrity
by James Morris
· 6 years ago
5da1072
Merge tag 'tpmdd-next-20190213' of git://git.infradead.org/users/jjs/linux-tpmdd into next-tpm
by James Morris
· 6 years ago
0b6cf6b
tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()
by Roberto Sassu
· 6 years ago
2407304
KEYS: trusted: explicitly use tpm_chip structure from tpm_default_chip()
by Roberto Sassu
· 6 years ago
879b589
tpm: retrieve digest size of unknown algorithms with PCR read
by Roberto Sassu
· 6 years ago
e7a44cf
LSM: fix return value check in safesetid_init_securityfs()
by Wei Yongjun
· 6 years ago
45189a1
selinux: fix avc audit messages
by Stephen Smalley
· 6 years ago
e7fde07
evm: Use defined constant for UUID representation
by Andy Shevchenko
· 6 years ago
fdb2410
ima: define ima_post_create_tmpfile() hook and add missing call
by Mimi Zohar
· 6 years ago
c8b3752
evm: remove set but not used variable 'xattr'
by YueHaibing
· 6 years ago
107dfa2
encrypted-keys: fix Opt_err/Opt_error = -1
by Mimi Zohar
· 6 years ago
219a3e8
integrity, KEYS: add a reference to platform keyring
by Kairui Song
· 6 years ago
d6d478ae
apparmor: Fix aa_label_build() error handling for failed merges
by John Johansen
· 6 years ago
a1a0206
apparmor: Fix warning about unused function apparmor_ipv6_postroute
by Petr Vorel
· 6 years ago
90462a5
audit: remove unused actx param from audit_rule_match
by Richard Guy Briggs
· 6 years ago
2181e08
LSM: SafeSetID: remove unused include
by Micah Morton
· 6 years ago
2f87324
LSM: SafeSetID: 'depend' on CONFIG_SECURITY
by Micah Morton
· 6 years ago
e6f2f38
selinux: replace BUG_ONs with WARN_ONs in avc.c
by Ondrej Mosnacek
· 6 years ago
f67e20d
LSM: Add 'name' field for SafeSetID in DEFINE_LSM
by Micah Morton
· 6 years ago
fede148
selinux: log invalid contexts in AVCs
by Ondrej Mosnacek
· 6 years ago
994fb06
selinux: replace some BUG_ON()s with a WARN_ON()
by Ondrej Mosnacek
· 6 years ago
a2c5138
selinux: inline some AVC functions used only once
by Ondrej Mosnacek
· 6 years ago
aeca4e2
LSM: add SafeSetID module that gates setid calls
by Micah Morton
· 6 years ago
2fec30e
audit: add support for fcaps v3
by Richard Guy Briggs
· 6 years ago
4b42564
tomoyo: Allow multiple use_group lines.
by Tetsuo Handa
· 6 years ago
cdcf672
tomoyo: Coding style fix.
by Tetsuo Handa
· 6 years ago
8c6cb98
tomoyo: Swicth from cred->security to task_struct->security.
by Tetsuo Handa
· 6 years ago
23711df
security: keys: annotate implicit fall throughs
by Mathieu Malaterre
· 6 years ago
0f949bc
security: keys: annotate implicit fall throughs
by Mathieu Malaterre
· 6 years ago
5b73262
security: keys: annotate implicit fall through
by Mathieu Malaterre
· 6 years ago
6c2976b
apparmor: Adjust offset when accessing task blob.
by Tetsuo Handa
· 6 years ago
9624d5c
Merge tag 'v5.0-rc3' into next-general
by James Morris
· 6 years ago
3e8c736
LSM: Make some functions static
by Wei Yongjun
· 6 years ago
1cfb2a5
LSM: Make lsm_early_cred() and lsm_early_task() local functions.
by Tetsuo Handa
· 6 years ago
7fbfee7
Merge branch 'fixes-v5.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
by Linus Torvalds
· 6 years ago
a5795fd
LSM: Check for NULL cred-security on free
by James Morris
· 6 years ago
9474f4e
Yama: Check for pid death before checking ancestry
by Kees Cook
· 6 years ago
47bfa6d
Merge tag 'selinux-pr-20190115' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux
by Linus Torvalds
· 6 years ago
53e0c2a
selinux: do not override context on context mounts
by Ondrej Mosnacek
· 6 years ago
a83d6dd
selinux: never allow relabeling on context mounts
by Ondrej Mosnacek
· 6 years ago
e46e01e
selinux: stop passing MAY_NOT_BLOCK to the AVC upon follow_link
by Stephen Smalley
· 6 years ago
3a28cff
selinux: avoid silent denials in permissive mode under RCU walk
by Stephen Smalley
· 6 years ago
5b0e731
selinux: fix GPF on invalid policy
by Stephen Smalley
· 6 years ago
c1a85a0
LSM: generalize flag passing to security_capable
by Micah Morton
· 6 years ago
a5e2fe7
TOMOYO: Update LSM flags to no longer be exclusive
by Kees Cook
· 6 years ago
ecd5f82
LSM: Infrastructure management of the ipc security blob
by Casey Schaufler
· 6 years ago
019bcca
Smack: Abstract use of ipc security blobs
by Casey Schaufler
· 6 years ago
7c65382
SELinux: Abstract use of ipc security blobs
by Casey Schaufler
· 6 years ago
f4ad8f2
LSM: Infrastructure management of the task security
by Casey Schaufler
· 6 years ago
afb1cbe3
LSM: Infrastructure management of the inode security
by Casey Schaufler
· 6 years ago
fb4021b
Smack: Abstract use of inode security blob
by Casey Schaufler
· 6 years ago
80788c2
SELinux: Abstract use of inode security blob
by Casey Schaufler
· 6 years ago
33bf60c
LSM: Infrastructure management of the file security
by Casey Schaufler
· 6 years ago
f28952a
Smack: Abstract use of file security blob
by Casey Schaufler
· 6 years ago
bb6c6b0
SELinux: Abstract use of file security blob
by Casey Schaufler
· 6 years ago
bbd3662
Infrastructure management of the cred security blob
by Casey Schaufler
· 6 years ago
43fc460
TOMOYO: Abstract use of cred security blob
by Casey Schaufler
· 6 years ago
69b5a44
AppArmor: Abstract use of cred security blob
by Casey Schaufler
· 6 years ago
3d25252
SELinux: Remove unused selinux_is_enabled
by Casey Schaufler
· 6 years ago
98c8865
SELinux: Remove cred security blob poisoning
by Casey Schaufler
· 6 years ago
0c6cfa6
SELinux: Abstract use of cred security blob
by Casey Schaufler
· 6 years ago
b17103a
Smack: Abstract use of cred security blob
by Casey Schaufler
· 6 years ago
6d9c939
procfs: add smack subdir to attrs
by Casey Schaufler
· 6 years ago
d117a15
capability: Initialize as LSM_ORDER_FIRST
by Kees Cook
· 6 years ago
e2bc445
LSM: Introduce enum lsm_order
by Kees Cook
· 6 years ago
d6aed64
Yama: Initialize as ordered LSM
by Kees Cook
· 6 years ago
70b62c2
LoadPin: Initialize as ordered LSM
by Kees Cook
· 6 years ago
Next »