| Age | Commit message (Expand) | Author |
|---|
| 2018-08-24 | Smack: Mark inode instant in smack_task_to_inode | Casey Schaufler |
| 2018-06-06 | selinux: KASAN: slab-out-of-bounds in xattr_getsecurity | Sachin Grover |
| 2018-06-06 | Revert "ima: limit file hash setting by user to fix and log modes" | Mimi Zohar |
| 2018-05-30 | ima: Fallback to the builtin hash algorithm | Petr Vorel |
| 2018-05-30 | ima: Fix Kconfig to select TPM 2.0 CRB interface | Jiandi An |
| 2018-04-13 | selinux: do not check open permission on sockets | Stephen Smalley |
| 2018-04-08 | selinux: Remove redundant check for unknown labeling behavior | Matthias Kaehlcke |
| 2018-04-08 | selinux: Remove unnecessary check of array base in selinux_set_mapping() | Matthias Kaehlcke |
| 2018-03-22 | ima: relax requiring a file signature for new files with zero length | Mimi Zohar |
| 2018-03-22 | apparmor: Make path_max parameter readonly | John Johansen |
| 2018-03-22 | selinux: check for address length in selinux_socket_bind() | Alexander Potapenko |
| 2018-02-25 | selinux: skip bounded transition processing if the policy isn't loaded | Paul Moore |
| 2018-02-25 | selinux: ensure the context is NUL terminated in security_context_to_sid_core() | Paul Moore |
| 2018-02-16 | KEYS: encrypted: fix buffer overread in valid_master_desc() | Eric Biggers |
| 2018-02-03 | selinux: general protection fault in sock_has_perm | Mark Salyzyn |
| 2018-01-05 | KPTI: Rename to PAGE_TABLE_ISOLATION | Kees Cook |
| 2018-01-05 | x86/kaiser: Reenable PARAVIRT | Borislav Petkov |
| 2018-01-05 | kaiser: delete KAISER_REAL_SWITCH option | Hugh Dickins |
| 2018-01-05 | kaiser: KAISER depends on SMP | Hugh Dickins |
| 2018-01-05 | kaiser: merged update | Dave Hansen |
| 2018-01-05 | KAISER: Kernel Address Isolation | Richard Fellner |
| 2017-12-20 | KEYS: add missing permission check for request_key() destination | Eric Biggers |
| 2017-12-09 | ima: fix hash algorithm initialization | Boshi Wang |
| 2017-11-24 | ima: do not update security.ima if appraisal status is not INTEGRITY_PASS | Roberto Sassu |
| 2017-11-18 | security/keys: add CONFIG_KEYS_COMPAT to Kconfig | Bilal Amarni |
| 2017-11-15 | KEYS: trusted: fix writing past end of buffer in trusted_read() | Eric Biggers |
| 2017-11-15 | KEYS: trusted: sanitize all key material | Eric Biggers |
| 2017-11-08 | KEYS: return full count in keyring_read() if buffer is too small | Eric Biggers |
| 2017-10-27 | KEYS: Fix race between updating and finding a negative key | David Howells |
| 2017-10-27 | KEYS: don't let add_key() update an uninstantiated key | David Howells |
| 2017-10-27 | KEYS: encrypted: fix dereference of NULL user_key_payload | Eric Biggers |
| 2017-10-12 | lsm: fix smack_inode_removexattr and xattr_getsecurity memleak | Casey Schaufler |
| 2017-10-05 | KEYS: prevent KEYCTL_READ on negative key | Eric Biggers |
| 2017-10-05 | KEYS: prevent creating a different user's keyrings | Eric Biggers |
| 2017-10-05 | KEYS: fix writing past end of user-supplied buffer in keyring_read() | Eric Biggers |
| 2017-07-15 | KEYS: Fix an error code in request_master_key() | Dan Carpenter |
| 2017-06-14 | KEYS: fix freeing uninitialized memory in key_update() | Eric Biggers |
| 2017-06-14 | KEYS: fix dereferencing NULL payload with nonzero length | Eric Biggers |
| 2017-05-25 | ima: accept previously set IMA_NEW_FILE | Daniel Glöckner |
| 2017-04-27 | KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings | Eric Biggers |
| 2017-04-27 | KEYS: Change the name of the dead type to ".dead" to prevent user access | David Howells |
| 2017-04-27 | KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings | David Howells |
| 2017-02-14 | selinux: fix off-by-one in setprocattr | Stephen Smalley |
| 2016-12-02 | apparmor: fix change_hat not finding hat after policy replacement | John Johansen |
| 2016-11-10 | KEYS: Fix short sprintf buffer in /proc/keys show function | David Howells |
| 2016-10-16 | ima: use file_dentry() | Miklos Szeredi |
| 2016-08-16 | apparmor: fix ref count leak when profile sha1 hash is read | John Johansen |
| 2016-07-27 | KEYS: potential uninitialized variable | Dan Carpenter |
| 2016-03-03 | security: let security modules use PTRACE_MODE_* with bitmasks | Jann Horn |
| 2016-02-25 | ptrace: use fsuid, fsgid, effective creds for fs access checks | Jann Horn |
