Commits · 708738376cadba3ed6cf635a13694951d96a6936 · jan.koester / Linux · GitLab

Oct 05, 2019
- integrity: remove pointless subdir-$(CONFIG_...) · 7a8beb7a
  Masahiro Yamada authored Jul 26, 2019
  7a8beb7a
- integrity: remove unneeded, broken attempt to add -fshort-wchar · 6b190d3c
  Masahiro Yamada authored Jul 26, 2019
  6b190d3c
Sep 24, 2019
- KEYS: trusted: correctly initialize digests and fix locking issue · 9f75c822
  Roberto Sassu authored Sep 13, 2019
  9f75c822
Sep 17, 2019
- LSM: SafeSetID: Stop releasing uninitialized ruleset · 21ab8580
  Micah Morton authored Sep 17, 2019
  21ab8580
Sep 10, 2019
- security: constify some arrays in lockdown LSM · f8a9bc62
  Matthew Garrett authored Sep 10, 2019
  f8a9bc62
Sep 05, 2019
- keys: Fix missing null pointer check in request_key_auth_describe() · d41a3eff
  Hillf Danton authored Sep 02, 2019
  d41a3eff
Sep 04, 2019
- selinux: fix residual uses of current_security() for the SELinux blob · 169ce0c0
  Stephen Smalley authored Sep 04, 2019
  169ce0c0
- smack: use GFP_NOFS while holding inode_smack::smk_lock · e5bfad3d
  Eric Biggers authored Aug 21, 2019
  e5bfad3d
- security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb() · 3f4287e7
  Jia-Ju Bai authored Jul 23, 2019
  3f4287e7
- smack: fix some kernel-doc notations · a1a07f22
  luanshi authored Jul 05, 2019
  a1a07f22
- Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set · 3675f052
  Jann Horn authored Jul 04, 2019
  3675f052
Aug 30, 2019
- keys: ensure that ->match_free() is called in request_key_and_link() · 846d2db3
  Eric Biggers authored Aug 30, 2019
  846d2db3
Aug 29, 2019
- ima: ima_api: Use struct_size() in kzalloc() · 2a7f0e53
  Gustavo A. R. Silva authored Aug 29, 2019
  2a7f0e53
- ima: use struct_size() in kzalloc() · fa5b5717
  Gustavo A. R. Silva authored May 29, 2019
  fa5b5717
Aug 28, 2019
- ima: Fix use after free in ima_read_modsig() · 556d971b
  Thiago Jung Bauermann authored Aug 07, 2019
  556d971b
Aug 27, 2019
- selinux: avoid atomic_t usage in sidtab · 116f21bb
  Ondrej Mosnacek authored Aug 14, 2019
  116f21bb
Aug 20, 2019
- lockdown: Print current->comm in restriction messages · b602614a
  Matthew Garrett authored Aug 19, 2019
  b602614a
- tracefs: Restrict tracefs when the kernel is locked down · ccbd54ff
  Matthew Garrett authored Aug 19, 2019
  ccbd54ff
- debugfs: Restrict debugfs when the kernel is locked down · 5496197f
  David Howells authored Aug 19, 2019
  5496197f
- kexec: Allow kexec_file() with appropriate IMA policy when locked down · 29d3c1c8
  Matthew Garrett authored Aug 19, 2019
  29d3c1c8
- lockdown: Lock down perf when in confidentiality mode · b0c8fdc7
  David Howells authored Aug 19, 2019
  b0c8fdc7
- bpf: Restrict bpf when kernel lockdown is in confidentiality mode · 9d1f8be5
  David Howells authored Aug 19, 2019
  9d1f8be5
- lockdown: Lock down tracing and perf kprobes when in confidentiality mode · a94549dd
  David Howells authored Aug 19, 2019
  a94549dd
- lockdown: Lock down /proc/kcore · 02e935bf
  David Howells authored Aug 19, 2019
  02e935bf
- x86/mmiotrace: Lock down the testmmiotrace module · 906357f7
  David Howells authored Aug 19, 2019
  906357f7
- lockdown: Lock down module params that specify hardware parameters (eg. ioport) · 20657f66
  David Howells authored Aug 19, 2019
  20657f66
- lockdown: Lock down TIOCSSERIAL · 794edf30
  David Howells authored Aug 19, 2019
  794edf30
- lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down · 3f19cad3
  David Howells authored Aug 19, 2019
  3f19cad3
- ACPI: Limit access to custom_method when the kernel is locked down · f474e148
  Matthew Garrett authored Aug 19, 2019
  f474e148
- x86/msr: Restrict MSR access when the kernel is locked down · 95f5e95f
  Matthew Garrett authored Aug 19, 2019
  95f5e95f
- x86: Lock down IO port access when the kernel is locked down · 96c4f672
  Matthew Garrett authored Aug 19, 2019
  96c4f672
- PCI: Lock down BAR access when the kernel is locked down · eb627e17
  Matthew Garrett authored Aug 19, 2019
  eb627e17
- hibernate: Disable when the kernel is locked down · 38bd94b8
  Josh Boyer authored Aug 19, 2019
  38bd94b8
- kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE · 99d5cadf
  Jiri Bohac authored Aug 19, 2019
  99d5cadf
- kexec_load: Disable at runtime if the kernel is locked down · 7d31f460
  Matthew Garrett authored Aug 19, 2019
  7d31f460
- lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down · 9b9d8dda
  Matthew Garrett authored Aug 19, 2019
  9b9d8dda
- lockdown: Enforce module signatures if the kernel is locked down · 49fcf732
  David Howells authored Aug 19, 2019
  49fcf732
- security: Add a static lockdown policy LSM · 000d388e
  Matthew Garrett authored Aug 19, 2019
  000d388e
- security: Add a "locked down" LSM hook · 9e47d31d
  Matthew Garrett authored Aug 19, 2019
  9e47d31d
- security: Support early LSMs · e6b1db98
  Matthew Garrett authored Aug 19, 2019
  e6b1db98