index
:
linux.git
dev
master
v4.9.13
Unnamed repository; edit this file 'description' to name the repository.
Lucas Castro
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
security
Age
Commit message (
Expand
)
Author
2023-03-11
ima: Align ima_file_mmap() parameters with mmap_file LSM hook
Roberto Sassu
2023-02-06
tomoyo: fix broken dependency on *.conf.default
Masahiro Yamada
2023-01-18
device_cgroup: Roll back to original exceptions after copy failure
Wang Weiyang
2023-01-18
ima: Fix a potential NULL pointer access in ima_restore_measurement_list
Huaxin Lu
2023-01-18
apparmor: fix a memleak in multi_transaction_new()
Gaosheng Cui
2023-01-18
ima: Fix misuse of dereference of pointer in template_desc_init_fields()
Xiu Jianfeng
2022-11-10
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
Gaosheng Cui
2022-08-25
apparmor: fix reference count leak in aa_pivotroot()
Xin Xiong
2022-08-25
apparmor: fix aa_label_asxprint return check
Tom Rix
2022-08-25
apparmor: Fix failed mount permission check error message
John Johansen
2022-08-25
apparmor: fix quiet_denied for file rules
John Johansen
2022-08-25
selinux: Add boundary check in put_entry()
Xiu Jianfeng
2022-04-20
Fix incorrect type in assignment of ipv6 port for audit
Casey Schaufler
2022-04-20
selinux: use correct type for context length
Christian Göttsche
2022-04-20
TOMOYO: fix __setup handlers return values
Randy Dunlap
2022-02-16
ima: Allow template selection with ima_template[_fmt]= after ima_hash=
Roberto Sassu
2022-02-16
ima: Remove ima_policy file before directory
Stefan Berger
2022-02-16
integrity: check the return value of audit_log_start()
Xiaoke Wang
2022-01-05
selinux: initialize proto variable in selinux_ip_postroute_compat()
Tom Rix
2021-11-26
apparmor: fix error check
Tom Rix
2021-11-26
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Tetsuo Handa
2021-11-26
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
Tetsuo Handa
2021-11-26
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pawan Gupta
2021-11-26
evm: mark evm_fixmode as __ro_after_init
Austin Kim
2021-11-26
binder: use cred instead of task for selinux checks
Todd Kjos
2021-09-26
apparmor: remove duplicate macro list_entry_is_head()
Andy Shevchenko
2021-09-22
Smack: Fix wrong semantics in smk_access_entry()
Tianjia Zhang
2021-09-22
IMA: remove -Wmissing-prototypes warning
Austin Kim
2021-07-20
smackfs: restrict bytes count in smk_set_cipso()
Tetsuo Handa
2021-07-20
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
Minchan Kim
2021-05-22
security: commoncap: fix -Wstringop-overread warning
Arnd Bergmann
2021-03-17
Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file cap...
Eric W. Biederman
2021-03-07
smackfs: restrict bytes count in smackfs write functions
Sabyrzhan Tasbolatov
2021-03-03
KEYS: trusted: Fix migratable=1 failing
Jarkko Sakkinen
2021-03-03
certs: Fix blacklist flag type confusion
David Howells
2021-03-03
capabilities: Don't allow writing ambiguous v3 file capabilities
Eric W. Biederman
2021-03-03
ima: Free IMA measurement buffer after kexec syscall
Lakshmi Ramasubramanian
2021-03-03
ima: Free IMA measurement buffer on error
Lakshmi Ramasubramanian
2021-02-23
cap: fix conversions on getxattr
Miklos Szeredi
2021-01-23
dump_common_audit_data(): fix racy accesses to ->d_name
Al Viro
2020-12-29
ima: Don't modify file descriptor mode on the fly
Roberto Sassu
2020-12-29
selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
Paul Moore
2020-12-29
selinux: fix error initialization in inode_doinit_with_dentry()
Tianyue Ren
2020-11-18
selinux: Fix error return code in sel_ib_pkey_sid_slow()
Chen Zhou
2020-10-29
ima: Don't ignore errors from crypto_shash_update()
Roberto Sassu
2020-10-01
selinux: sel_avc_get_stat_idx should increase position index
Vasily Averin
2020-08-21
Smack: prevent underflow in smk_set_cipso()
Dan Carpenter
2020-08-21
Smack: fix another vsscanf out of bounds
Dan Carpenter
2020-08-21
Smack: fix use-after-free in smk_write_relabel_self()
Eric Biggers
2020-06-30
apparmor: don't try to replace stale label in ptraceme check
Jann Horn
[next]