| .. |
| apparmor | apparmor: advertise the tcp fast open fix is applied | 4 months ago |
| bpf | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | 4 months ago |
| integrity | ima: Instantiate file_truncate and path_truncate hooks | 3 months ago |
| ipe | treewide: change inode->i_ino from unsigned long to u64 | 8 months ago |
| keys | keys: make keyring key-chunk byte order agree with keyring_diff_objects() | 3 months ago |
| landlock | landlock: Update formatting | 4 months ago |
| loadpin | Convert 'alloc_flex' family to use the new default GFP_KERNEL argument | 8 months ago |
| lockdown | lockdown: move initcalls to the LSM framework | 1 year ago |
| safesetid | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| selinux | selinux: check level category sets once at load time | 3 months ago |
| smack | security,fs,nfs,net: update security_inode_listsecurity() interface | 1 year ago |
| tomoyo | tomoyo: use u64 for holding inode->i_ino value | 7 months ago |
| yama | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| commoncap.c | security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns | 10 months ago |
| commoncap_test.c | security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns | 10 months ago |
| device_cgroup.c | Convert 'alloc_obj' family to use the new default GFP_KERNEL argument | 8 months ago |
| inode.c | securityfs: use kstrdup_const() to manage symlink targets | 7 months ago |
| Kconfig | proc: make PROC_MEM_FORCE_PTRACE the Kconfig default | 7 months ago |
| Kconfig.hardening | security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT | 5 months ago |
| lsm.h | lsm: add backing_file LSM hooks | 10 months ago |
| lsm_audit.c | treewide: change inode->i_ino from unsigned long to u64 | 8 months ago |
| lsm_init.c | lsm: add backing_file LSM hooks | 10 months ago |
| lsm_notifier.c | lsm: split the notifier code out into lsm_notifier.c | 1 year ago |
| lsm_syscalls.c | lsm: hold cred_guard_mutex for lsm_set_self_attr() | 6 months ago |
| Makefile | lsm: split the init code out into lsm_init.c | 1 year ago |
| min_addr.c | lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY | 9 months ago |
| security.c | security,fs,nfs,net: update security_inode_listsecurity() interface | 1 year ago |