aboutsummaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)AuthorFilesLines
4 daysMerge tag 'lsm-pr-20261016' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds1-9/+16
4 daysMerge tag 'selinux-pr-20261015' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds7-101/+183
5 daysMerge tag 'vfs-7.4-rc1.idmap' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds2-8/+8
8 daysAutomated merge of 'lsm/dev' into 'stable-7.4'Paul Moore1-9/+16
2026-09-30selinux: validate permissive and neveraudit map types at loadChristian Göttsche1-1/+19
2026-09-30selinux: validate user MLS range and default level at loadChristian Göttsche1-0/+14
2026-09-30selinux: bounds-check role and user membership bitmaps at loadChristian Göttsche1-0/+52
2026-09-30selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optsStephen Smalley1-1/+8
2026-09-25selinux: fix data race on AVC latest_notifChristian Göttsche1-2/+3
2026-09-24selinux: check neveraudit in avc_xperms_audit_required()Christian Göttsche1-0/+3
2026-09-24selinux: bounds-check filename transition source types at loadChristian Göttsche1-0/+4
2026-09-24selinux: reject duplicate symbol values during policy loadChristian Göttsche1-2/+22
2026-09-24selinux: reject a policy that both rejects and allows unknown classesChristian Göttsche1-3/+9
2026-09-24selinux: constify avc function parametersChristian Göttsche2-19/+22
2026-09-23fs: port ->setattr() to pass const mnt_idmapChristian Brauner1-1/+1
2026-09-23fs: port xattr to const mnt_idmapChristian Brauner1-3/+3
2026-09-23fs: port ->permission() to pass const mnt_idmapChristian Brauner1-1/+1
2026-09-23fs: port acl to const mnt_idmapChristian Brauner1-3/+3
2026-09-15selinux: avoid 64-bit division of inode numbersPaul Moore1-2/+4
2026-09-15selinux: recheck intermediate backing files on mprotect()Karl Mehltretter2-16/+133
2026-09-15selinux: preserve user SID across nested backing filesKarl Mehltretter2-2/+9
2026-09-15selinux: always fill AVC decision in avc_has_perm_noaudit()Christian Göttsche1-1/+4
2026-09-15selinux: mark status and policy inodes as immutable, drop status mmap write c...Stephen Smalley1-5/+14
2026-09-14lsm: Preserve full ioctl commands in audit recordsMickaël Salaün1-3/+3
2026-09-11lsm: expose mount idmaps to inode hooksDaan De Meyer1-6/+13
2026-08-31selinux: remove unused mls_setup_user_range()Stephen Smalley3-44/+0
2026-08-31selinux: convert selinuxfs inode numbers from unsigned long to u64Paul Moore1-18/+16
2026-08-31selinux: tighten policydb_context_isvalid() checksStephen Smalley1-7/+4
2026-08-31selinux: fix BPF token permission checksPaul Moore1-26/+10
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds7-61/+121
2026-08-04selinux: check level category sets once at load timeStephen Smalley2-17/+30
2026-08-03selinux: require every boolean value to be definedBryam Vargas1-0/+19
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas1-5/+19
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas1-5/+46
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas1-1/+3
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas1-4/+4
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas1-0/+12
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas1-0/+3
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley1-0/+35
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges3-8/+30
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek1-18/+24
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges1-27/+13
2026-07-13selinux: suppress warning flood for retired DCCP netlink messagesYafang Shao1-6/+12
2026-07-02selinux: tighten type validation during policy loadStephen Smalley1-3/+8
2026-07-01selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani1-9/+10
2026-07-01selinux: drop unnecessary goto and label from avc_alloc_node()Kalevi Kolttonen1-2/+1
2026-07-01selinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen1-9/+9
2026-07-01selinux: clean up selinuxfs resources on init failureHaoxiang Li1-6/+13
2026-07-01selinux: check connect-related permissions on TCP Fast OpenStephen Smalley1-1/+18
2026-06-30selinux: hooks: use kmalloc() to allocate path bufferMike Rapoport (Microsoft)1-3/+3
generated by cgit