]> git.itanic.dy.fi Git - linux-stable/history - security
parisc: Handle kgdb breakpoints only in kernel context
[linux-stable] / security /
2023-05-17 Paul Mooreselinux: ensure av_permissions.h is built when needed
2023-05-17 Ondrej Mosnacekselinux: fix Makefile dependencies of flask.h
2023-04-05 David Howellskeys: Do not cache key in task struct if key is request...
2023-03-11 Roberto Sassuima: Align ima_file_mmap() parameters with mmap_file...
2023-02-06 Masahiro Yamadatomoyo: fix broken dependency on *.conf.default
2023-01-18 Wang Weiyangdevice_cgroup: Roll back to original exceptions after...
2023-01-18 Huaxin Luima: Fix a potential NULL pointer access in ima_restore...
2023-01-18 Aditya Gargefi: Add iMac Pro 2017 to uefi skip cert quirk
2023-01-18 Xiu Jianfengapparmor: Use pointer to struct aa_label for lbs_cred
2023-01-18 John Johansenapparmor: Fix abi check to include v8 abi
2023-01-18 John Johansenapparmor: fix lockdep warning when removing a namespace
2023-01-18 Gaosheng Cuiapparmor: fix a memleak in multi_transaction_new()
2023-01-18 Xiu Jianfengima: Fix misuse of dereference of pointer in template_d...
2023-01-18 GUO Zihuaintegrity: Fix memory leakage in keyring allocation...
2023-01-18 GUO Zihuaima: Handle -ESTALE returned by ima_filter_rule_match()
2023-01-18 Gustavo A. R. Silvaima: Fix fall-through warnings for Clang
2023-01-18 Tyler Hicksima: Rename internal filter rule functions
2022-11-10 Gaosheng Cuicapabilities: fix potential memleak on error path from...
2022-10-15 Orlando Chamberlainefi: Correct Macmini DMI match in uefi cert quirk
2022-08-25 Xiu Jianfengapparmor: Fix memleak in aa_simple_write_to_buffer()
2022-08-25 Xin Xiongapparmor: fix reference count leak in aa_pivotroot()
2022-08-25 John Johansenapparmor: fix overlapping attachment computation
2022-08-25 Tom Rixapparmor: fix aa_label_asxprint return check
2022-08-25 John Johansenapparmor: Fix failed mount permission check error message
2022-08-25 John Johansenapparmor: fix absroot causing audited secids to begin...
2022-08-25 John Johansenapparmor: fix quiet_denied for file rules
2022-08-25 Xiu Jianfengselinux: Add boundary check in put_entry()
2022-07-29 GUO Zihuaima: remove the IMA_TEMPLATE Kconfig option
2022-07-29 Eric Snowberglockdown: Fix kexec lockdown bypass with ima policy
2022-07-21 Huaxin Luima: Fix a potential integer overflow in ima_appraise_m...
2022-07-21 Xiu JianfengRevert "evm: Fix memleak in init_desc"
2022-06-14 Aditya Gargefi: Do not import certificates from UEFI Secure Boot...
2022-06-06 Daniel Thompsonlockdown: also lock down previous kgdb use
2022-04-15 Casey SchauflerFix incorrect type in assignment of ipv6 port for audit
2022-04-15 Christian Göttscheselinux: use correct type for context length
2022-04-15 Casey SchauflerLSM: general protection fault in legacy_parse_param
2022-04-15 Randy DunlapTOMOYO: fix __setup handlers return values
2022-04-15 Eric BiggersKEYS: fix length validation in keyctl_pkey_params_get_2()
2022-02-16 Stefan Bergerima: Do not print policy rule with inactive LSM labels
2022-02-16 Roberto Sassuima: Allow template selection with ima_template[_fmt...
2022-02-16 Stefan Bergerima: Remove ima_policy file before directory
2022-02-16 Xiaoke Wangintegrity: check the return value of audit_log_start()
2022-01-27 Bernard Zhaoselinux: fix potential memleak in selinux_add_opt()
2022-01-05 Tom Rixselinux: initialize proto variable in selinux_ip_postro...
2022-01-05 Dmitry Vyukovtomoyo: Check exceeded quota early in tomoyo_domain_quo...
2021-12-17 Ondrej Mosnacekselinux: fix race condition when computing ocontext...
2021-11-21 Kees Cookfortify: Explicitly disable Clang support
2021-11-17 Tom Rixapparmor: fix error check
2021-11-17 Tetsuo Handasmackfs: use netlbl_cfg_cipsov4_del() for deleting...
2021-11-17 Tetsuo Handasmackfs: use __GFP_NOFAIL for smk_cipso_doi()
2021-11-17 Pawan Guptasmackfs: Fix use-after-free in netlbl_catmap_walk()
2021-11-17 Austin Kimevm: mark evm_fixmode as __ro_after_init
2021-11-17 Todd Kjosbinder: use cred instead of task for selinux checks
2021-09-26 Andy Shevchenkoapparmor: remove duplicate macro list_entry_is_head()
2021-09-22 Tianjia ZhangSmack: Fix wrong semantics in smk_access_entry()
2021-09-15 THOBY SimonIMA: remove the dependency on CRYPTO_MD5
2021-09-15 Austin KimIMA: remove -Wmissing-prototypes warning
2021-07-19 Tetsuo Handasmackfs: restrict bytes count in smk_set_cipso()
2021-07-19 Minchan Kimselinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
2021-07-14 Mimi Zoharevm: fix writing <securityfs>/evm overflow
2021-07-14 Roberto Sassuevm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC...
2021-07-14 Roberto Sassuevm: Execute evm_inode_init_security() only when an...
2021-07-07 YueHaibingx86/efi: remove unused variables
2021-06-30 Eric Snowbergcerts: Add EFI_CERT_X509_GUID support for dbx entries
2021-06-30 Nayna Jainx86/efi: move common keyring handler functions to new...
2021-05-11 Arnd Bergmannsecurity: commoncap: fix -Wstringop-overread warning
2021-03-30 Mimi Zoharintegrity: double check iint_cache was initialized
2021-03-17 Eric W. BiedermanRevert 95ebabde382c ("capabilities: Don't allow writing...
2021-03-07 Sabyrzhan Tasbolatovsmackfs: restrict bytes count in smackfs write functions
2021-03-04 Jarkko SakkinenKEYS: trusted: Fix migratable=1 failing
2021-03-04 David Howellscerts: Fix blacklist flag type confusion
2021-03-04 Eric W. Biedermancapabilities: Don't allow writing ambiguous v3 file...
2021-03-04 Lakshmi Ramasubram... ima: Free IMA measurement buffer after kexec syscall
2021-03-04 Lakshmi Ramasubram... ima: Free IMA measurement buffer on error
2021-03-04 Dinghao Liuevm: Fix memleak in init_desc
2021-02-17 Miklos Szeredicap: fix conversions on getxattr
2021-01-19 Al Virodump_common_audit_data(): fix racy accesses to ->d_name
2020-12-30 Roberto Sassuima: Don't modify file descriptor mode on the fly
2020-12-30 Paul Mooreselinux: fix inode_doinit_with_dentry() LABEL_INVALID...
2020-12-30 Tianyue Renselinux: fix error initialization in inode_doinit_with_...
2020-12-08 Maurizio Droccoima: extend boot_aggregate with kernel measurements
2020-11-18 Chen Zhouselinux: Fix error return code in sel_ib_pkey_sid_slow()
2020-11-01 Roberto Sassuevm: Check size of security.evm before using it
2020-10-29 Roberto Sassuima: Don't ignore errors from crypto_shash_update()
2020-10-01 Amol Groverdevice_cgroup: Fix RCU list debugging warning
2020-10-01 Vasily Averinselinux: sel_avc_get_stat_idx should increase position...
2020-10-01 Jonathan Lebonselinux: allow labeling before policy is loaded
2020-08-19 Dan CarpenterSmack: prevent underflow in smk_set_cipso()
2020-08-19 Dan CarpenterSmack: fix another vsscanf out of bounds
2020-08-19 Tyler Hicksima: Have the LSM free its audit rule
2020-08-11 Bruno Menegueleima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY...
2020-08-11 Eric BiggersSmack: fix use-after-free in smk_write_relabel_self()
2020-07-22 John Johansenapparmor: ensure that dfa state tables have entries
2020-06-24 Tom Rixselinux: fix double free
2020-06-24 John Johansenapparmor: fix nnp subset test for unconfined
2020-06-24 Mauricio Faria de... apparmor: check/put label on apparmor_sk_clone_security()
2020-06-24 John Johansenapparmor: fix introspection of of task mode for unconfi...
2020-06-22 Krzysztof Struczynskiima: Set again build_ima_appraise variable
2020-06-22 Krzysztof Struczynskiima: Remove redundant policy rule set in add_rules()
2020-06-22 Roberto Sassuevm: Fix possible memory leak in evm_calc_hmac_or_hash()
next