security · kernel2 · Tangled

Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

kernel2 security

13 folders · 14 files

Michael Bommarito · keys: make keyring key-chunk byte order agree with keyring_diff_objects() · 3mo ago

apparmor: advertise the tcp fast open fix is applied

bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

ima: Support staging and deleting N measurements records

treewide: change inode->i_ino from unsigned long to u64

keys: make keyring key-chunk byte order agree with keyring_diff_objects()

landlock: Update formatting

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

lockdown: move initcalls to the LSM framework

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

selinux: fix incorrect execmem checks on overlayfs

security,fs,nfs,net: update security_inode_listsecurity() interface

tomoyo: use u64 for holding inode->i_ino value

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

securityfs: use kstrdup_const() to manage symlink targets

proc: make PROC_MEM_FORCE_PTRACE the Kconfig default

Kconfig.hardening

security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT

treewide: change inode->i_ino from unsigned long to u64

lsm: add backing_file LSM hooks

lsm: split the notifier code out into lsm_notifier.c

lsm: hold cred_guard_mutex for lsm_set_self_attr()

lsm: add backing_file LSM hooks

lsm: split the init code out into lsm_init.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

security,fs,nfs,net: update security_inode_listsecurity() interface