linux.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Expand)	Author
2018-01-01	KEYS: add missing permission check for request_key() destination	Eric Biggers
2018-01-01	security: let security modules use PTRACE_MODE_* with bitmasks	Jann Horn
2018-01-01	KEYS: trusted: fix writing past end of buffer in trusted_read()	Eric Biggers
2018-01-01	KEYS: trusted: sanitize all key material	Eric Biggers
2018-01-01	KEYS: return full count in keyring_read() if buffer is too small	Eric Biggers
2018-01-01	KEYS: encrypted: fix dereference of NULL user_key_payload	Eric Biggers
2018-01-01	lsm: fix smack_inode_removexattr and xattr_getsecurity memleak	Casey Schaufler
2018-01-01	Smack: remove unneeded NULL-termination from securtity label	Konstantin Khlebnikov
2018-01-01	security/keys: properly zero out sensitive key material in big_key	Jason A. Donenfeld
2018-01-01	KEYS: prevent creating a different user's keyrings	Eric Biggers
2018-01-01	KEYS: fix writing past end of user-supplied buffer in keyring_read()	Eric Biggers
2018-01-01	KEYS: fix key refcount leak in keyctl_read_key()	Eric Biggers
2018-01-01	KEYS: fix key refcount leak in keyctl_assume_authority()	Eric Biggers
2018-01-01	KEYS: don't revoke uninstantiated key in request_key_auth_new()	Eric Biggers
2018-01-01	KEYS: fix cred refcount leak in request_key_auth_new()	Eric Biggers
2017-11-11	KEYS: don't let add_key() update an uninstantiated key	David Howells
2017-11-11	KEYS: prevent KEYCTL_READ on negative key	Eric Biggers
2017-10-12	sched: move no_new_privs into new atomic flags	Kees Cook
2017-09-15	ptrace: use fsuid, fsgid, effective creds for fs access checks	Jann Horn
2017-09-15	selinux: fix double free in selinux_parse_opts_str()	Paul Moore
2017-09-15	KEYS: fix dereferencing NULL payload with nonzero length	Eric Biggers
2017-08-26	ima: accept previously set IMA_NEW_FILE	Daniel Glöckner
2017-08-26	ima: pass 'opened' flag to identify newly created files	Dmitry Kasatkin
2017-07-18	KEYS: Change the name of the dead type to ".dead" to prevent user access	David Howells
2017-06-05	KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings	Eric Biggers
2017-06-05	KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings	David Howells
2017-06-05	KEYS: Reinstate EPERM for a key type name beginning with a '.'	David Howells
2017-06-05	KEYS: special dot prefixed keyring name bug fix	Mimi Zohar
2017-06-05	KEYS: Fix an error code in request_master_key()	Dan Carpenter
2017-04-04	keys: Guard against null match function in keyring_search_aux()	Ben Hutchings
2017-04-04	vfs: Commit to never having exectuables on proc and sysfs.	Eric W. Biederman
2017-02-26	selinux: fix off-by-one in setprocattr	Stephen Smalley
2017-02-23	apparmor: fix change_hat not finding hat after policy replacement	John Johansen
2016-11-20	KEYS: Fix short sprintf buffer in /proc/keys show function	David Howells
2016-08-22	KEYS: potential uninitialized variable	Dan Carpenter
2016-02-16	EVM: Use crypto_memneq() for digest comparisons	Ryan Ware
2016-01-25	KEYS: Fix keyring ref leak in join_session_keyring()	Yevgeny Pats
2016-01-05	KEYS: Fix race between read and revoke	David Howells
2015-10-28	KEYS: Don't permit request_key() to construct a new keyring	David Howells
2015-10-28	KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring	David Howells
2015-10-28	KEYS: Fix race between key destruction and finding a keyring by name	David Howells
2015-09-29	fs: create and use seq_show_option for escaping	Kees Cook
2015-08-27	ima: extend "mask" policy matching support	Mimi Zohar
2015-08-27	ima: add support for new "euid" policy condition	Mimi Zohar
2015-08-20	sysfs: Create mountpoints with sysfs_create_mount_point	Eric W. Biederman
2015-08-11	evm: labeling pseudo filesystems exception	Mimi Zohar
2015-08-11	KEYS: ensure we free the assoc array edit if edit is valid	Colin Ian King
2015-07-15	ima: fix ima_show_template_data_ascii()	Mimi Zohar
2015-07-15	selinux: fix setting of security labels on NFS	J. Bruce Fields
2015-04-10	selinux: fix sel_write_enforce broken return value	Joe Perches