| .. |
| apparmor | apparmor: policy_int make sure list heads are initialized before fail path | 2 months ago |
| bpf | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | 4 months ago |
| integrity | Merge tag 'kmalloc_obj-v7.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux | 2 months ago |
| ipe | treewide: change inode->i_ino from unsigned long to u64 | 8 months ago |
| keys | tpm-buf: Memory-safe allocations | 4 months ago |
| landlock | landlock: Test trace path output boundaries | 2 months ago |
| loadpin | Convert 'alloc_flex' family to use the new default GFP_KERNEL argument | 8 months ago |
| lockdown | lockdown: move initcalls to the LSM framework | 1 year ago |
| safesetid | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| selinux | selinux: fix BPF token permission checks | 2 months ago |
| smack | Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next | 2 months ago |
| tomoyo | tomoyo: use u64 for holding inode->i_ino value | 7 months ago |
| yama | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| commoncap.c | security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns | 10 months ago |
| commoncap_test.c | security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns | 10 months ago |
| device_cgroup.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| inode.c | securityfs: use kstrdup_const() to manage symlink targets | 7 months ago |
| Kconfig | proc: make PROC_MEM_FORCE_PTRACE the Kconfig default | 7 months ago |
| Kconfig.hardening | hardening: Default randstruct off with rust for better allmodconfig support | 2 months ago |
| lsm.h | lsm: add backing_file LSM hooks | 10 months ago |
| lsm_audit.c | treewide: change inode->i_ino from unsigned long to u64 | 8 months ago |
| lsm_init.c | security: lsm: allow LSMs to register for late_initcall_sync init | 5 months ago |
| lsm_notifier.c | lsm: split the notifier code out into lsm_notifier.c | 1 year ago |
| lsm_syscalls.c | lsm: hold cred_guard_mutex for lsm_set_self_attr() | 6 months ago |
| Makefile | lsm: split the init code out into lsm_init.c | 1 year ago |
| min_addr.c | lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY | 9 months ago |
| security.c | lsm: clarify security_task_prctl() hook documentation | 4 months ago |