summaryrefslogtreecommitdiff
path: root/security/selinux
AgeCommit message (Expand)Author
8 daysMerge tag 'mm-stable-2026-10-25-19-27' of git://git.kernel.org/pub/scm/linux/...Linus Torvalds
11 daysselinux: reject writable opens of policy file, drop mmap shared/write checkLorenzo Stoakes (ARM)
2026-10-20Merge tag 'lsm-pr-20261016' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds
2026-10-20Merge tag 'selinux-pr-20261015' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-10-19Merge tag 'vfs-7.4-rc1.idmap' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2026-10-16Automated merge of 'lsm/dev' into 'stable-7.4'Paul Moore
2026-09-30selinux: validate permissive and neveraudit map types at loadChristian Göttsche
2026-09-30selinux: validate user MLS range and default level at loadChristian Göttsche
2026-09-30selinux: bounds-check role and user membership bitmaps at loadChristian Göttsche
2026-09-30selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_optsStephen Smalley
2026-09-25selinux: fix data race on AVC latest_notifChristian Göttsche
2026-09-24selinux: check neveraudit in avc_xperms_audit_required()Christian Göttsche
2026-09-24selinux: bounds-check filename transition source types at loadChristian Göttsche
2026-09-24selinux: reject duplicate symbol values during policy loadChristian Göttsche
2026-09-24selinux: reject a policy that both rejects and allows unknown classesChristian Göttsche
2026-09-24selinux: constify avc function parametersChristian Göttsche
2026-09-23fs: port ->setattr() to pass const mnt_idmapChristian Brauner
2026-09-23fs: port xattr to const mnt_idmapChristian Brauner
2026-09-23fs: port ->permission() to pass const mnt_idmapChristian Brauner
2026-09-23fs: port acl to const mnt_idmapChristian Brauner
2026-09-15selinux: avoid 64-bit division of inode numbersPaul Moore
2026-09-15selinux: recheck intermediate backing files on mprotect()Karl Mehltretter
2026-09-15selinux: preserve user SID across nested backing filesKarl Mehltretter
2026-09-15selinux: always fill AVC decision in avc_has_perm_noaudit()Christian Göttsche
2026-09-15selinux: mark status and policy inodes as immutable, drop status mmap write c...Stephen Smalley
2026-09-14lsm: Preserve full ioctl commands in audit recordsMickaël Salaün
2026-09-11lsm: expose mount idmaps to inode hooksDaan De Meyer
2026-08-31selinux: remove unused mls_setup_user_range()Stephen Smalley
2026-08-31selinux: convert selinuxfs inode numbers from unsigned long to u64Paul Moore
2026-08-31selinux: tighten policydb_context_isvalid() checksStephen Smalley
2026-08-31selinux: fix BPF token permission checksPaul Moore
2026-08-19Merge tag 'selinux-pr-20260814' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds
2026-08-04selinux: check level category sets once at load timeStephen Smalley
2026-08-03selinux: require every boolean value to be definedBryam Vargas
2026-08-03selinux: reject an unclaimed class value in security_get_classes()Bryam Vargas
2026-08-03selinux: require a class's permission values to cover its permission countBryam Vargas
2026-08-03selinux: do not cancel a policy conversion that never startedBryam Vargas
2026-07-31selinux: bpf: check SBLABEL_MNT before isec initCarlos Llamas
2026-07-30selinux: reject a class permission count below its inherited commonBryam Vargas
2026-07-30selinux: reject a permission value exceeding the class permission countBryam Vargas
2026-07-27selinux: validate constraint expression attr and op at load timeStephen Smalley
2026-07-15selinux: compute the IMA configuration settings string length once at bootIan Bridges
2026-07-14selinux: fix incorrect execmem checks on overlayfsOndrej Mosnacek
2026-07-13selinux: replace strlcat() with seq_buf in selinux_ima_collect_state()Ian Bridges
2026-07-13selinux: suppress warning flood for retired DCCP netlink messagesYafang Shao
2026-07-02selinux: tighten type validation during policy loadStephen Smalley
2026-07-01selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()Tristan Madani
2026-07-01selinux: drop unnecessary goto and label from avc_alloc_node()Kalevi Kolttonen
2026-07-01selinux: convert int flags to bool flags in ss/services.cKalevi Kolttonen
2026-07-01selinux: clean up selinuxfs resources on init failureHaoxiang Li
generated by cgit v1.2.3 (git 2.0.4) at 2026-11-04 18:50:19 +0000