..
apparmor
apparmor: ensure WB_HISTORY_SIZE value is a power of 2
2025-08-15 12:05:05 +02:00
bpf
bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
2024-10-17 15:21:27 +02:00
integrity
ima: fix buffer overrun in ima_eventdigest_init_common
2024-11-22 15:37:31 +01:00
keys
security/keys: fix slab-out-of-bounds in key_task_permission
2024-11-14 13:15:11 +01:00
landlock
landlock: Add the errata interface
2025-04-25 10:44:02 +02:00
loadpin
LoadPin: Ignore the "contents" argument of the LSM hooks
2022-12-31 13:33:07 +01:00
lockdown
lockdown: ratelimit denial messages
2022-09-14 07:37:50 -04:00
safesetid
safesetid: check size of policy writes
2025-02-21 13:49:31 +01:00
selinux
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
2025-06-27 11:07:37 +01:00
smack
smack: recognize ipv4 CIPSO w/o categories
2025-06-04 14:40:14 +02:00
tomoyo
tomoyo: don't emit warning in tomoyo_write_control()
2025-02-21 13:49:31 +01:00
yama
commoncap.c
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
2022-10-28 06:44:33 -04:00
device_cgroup.c
device_cgroup: Roll back to original exceptions after copy failure
2023-01-07 11:11:56 +01:00
inode.c
securityfs: don't pin dentries twice, once is enough...
2025-08-28 16:25:52 +02:00
Kconfig
proc: add config & param to block forcing mem writes
2024-10-17 15:21:39 +02:00
Kconfig.hardening
randstruct: disable Clang 15 support
2023-02-25 11:25:43 +01:00
lsm_audit.c
lsm: clean up redundant NULL pointer check
2022-08-15 22:44:01 -04:00
Makefile
min_addr.c
security.c
ima: Avoid blocking in RCU read-side critical section
2024-07-11 12:47:16 +02:00