Code

History

Commits on v5.4 to security35+
  1. efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMINJavier Martinez Canillas committed 7 years ago359efcc
  2. Merge tag 'selinux-pr-20191007' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds committed 7 years ago2ef4591
  3. integrity: remove pointless subdir-$(CONFIG_...)Masahiro Yamada committed 7 years ago7a8beb7
  4. integrity: remove unneeded, broken attempt to add -fshort-wcharMasahiro Yamada committed 7 years ago6b190d3
  5. selinux: fix context string corruption in convert_context()Ondrej Mosnacek committed 7 years ago2a52439
  6. Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-securityLinus Torvalds committed 7 years agoaefcf2f
  7. Merge branch 'next-integrity' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrityLinus Torvalds committed 7 years agof1f2f61
  8. KEYS: trusted: correctly initialize digests and fix locking issueRoberto Sassu committed 7 years ago9f75c82
  9. Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-nextLinus Torvalds committed 7 years agoe94f8cc
  10. Merge tag 'safesetid-bugfix-5.4' of git://github.com/micah-morton/linuxLinus Torvalds committed 7 years ago1b5fb41
  11. Merge tag 'selinux-pr-20190917' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinuxLinus Torvalds committed 7 years ago5825a95
  12. LSM: SafeSetID: Stop releasing uninitialized rulesetMicah Morton committed 7 years ago21ab858
  13. security: constify some arrays in lockdown LSMMatthew Garrett committed 7 years agof8a9bc6
  14. keys: Fix missing null pointer check in request_key_auth_describe()Hillf Danton committed 7 years agod41a3ef
  15. selinux: fix residual uses of current_security() for the SELinux blobStephen Smalley committed 7 years ago169ce0c
  16. smack: use GFP_NOFS while holding inode_smack::smk_lockEric Biggers committed 7 years agoe5bfad3
  17. security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()Jia-Ju Bai committed 7 years ago3f4287e
  18. smack: fix some kernel-doc notationsluanshi committed 7 years agoa1a07f2
  19. Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is setJann Horn committed 7 years ago3675f05
  20. keys: ensure that ->match_free() is called in request_key_and_link()Eric Biggers committed 7 years ago846d2db
  21. ima: ima_api: Use struct_size() in kzalloc()Gustavo A. R. Silva committed 7 years ago2a7f0e5
  22. ima: use struct_size() in kzalloc()Gustavo A. R. Silva committed 7 years agofa5b571
  23. ima: Fix use after free in ima_read_modsig()Thiago Jung Bauermann committed 7 years ago556d971
  24. selinux: avoid atomic_t usage in sidtabOndrej Mosnacek committed 7 years ago116f21b
  25. lockdown: Print current->comm in restriction messagesMatthew Garrett committed 7 years agob602614
  26. tracefs: Restrict tracefs when the kernel is locked downMatthew Garrett committed 7 years agoccbd54f
  27. debugfs: Restrict debugfs when the kernel is locked downDavid Howells committed 7 years ago5496197
  28. kexec: Allow kexec_file() with appropriate IMA policy when locked downMatthew Garrett committed 7 years ago29d3c1c
  29. lockdown: Lock down perf when in confidentiality modeDavid Howells committed 7 years agob0c8fdc
  30. bpf: Restrict bpf when kernel lockdown is in confidentiality modeDavid Howells committed 7 years ago9d1f8be
  31. lockdown: Lock down tracing and perf kprobes when in confidentiality modeDavid Howells committed 7 years agoa94549d
  32. lockdown: Lock down /proc/kcoreDavid Howells committed 7 years ago02e935b
  33. x86/mmiotrace: Lock down the testmmiotrace moduleDavid Howells committed 7 years ago906357f
  34. lockdown: Lock down module params that specify hardware parameters (eg. ioport)David Howells committed 7 years ago20657f6
  35. lockdown: Lock down TIOCSSERIALDavid Howells committed 7 years ago794edf3