..
apparmor
apparmor: policy_int make sure list heads are initialized before fail path
2026-08-26 00:03:13 -07:00
bpf
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
2026-06-30 16:31:56 +02:00
integrity
ima: measure userspace policy writes before parsing
2026-08-04 12:35:03 -04:00
ipe
treewide: change inode->i_ino from unsigned long to u64
2026-03-06 14:31:28 +01:00
keys
tpm-buf: Memory-safe allocations
2026-08-25 18:13:36 +03:00
landlock
landlock: Add tracepoints for ptrace and scope denials
2026-08-17 10:17:16 +02:00
loadpin
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
lockdown
lockdown: move initcalls to the LSM framework
2025-10-22 19:24:27 -04:00
safesetid
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
selinux
lsm: Preserve full ioctl commands in audit records
2026-09-14 16:41:53 -04:00
smack
lsm: expose mount idmaps to inode hooks
2026-09-11 14:15:19 -04:00
tomoyo
tomoyo: use u64 for holding inode->i_ino value
2026-04-15 00:00:10 +09:00
yama
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
commoncap_test.c
security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
2026-01-09 11:28:28 -06:00
commoncap.c
security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns
2026-01-09 11:28:28 -06:00
device_cgroup.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
inode.c
securityfs: use kstrdup_const() to manage symlink targets
2026-03-17 17:13:36 -04:00
Kconfig
proc: make PROC_MEM_FORCE_PTRACE the Kconfig default
2026-04-13 09:12:37 -07:00
Kconfig.hardening
security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT
2026-05-27 15:20:04 -07:00
lsm_audit.c
lsm: Preserve full ioctl commands in audit records
2026-09-14 16:41:53 -04:00
lsm_init.c
lsm: remove redundant NULL check in security_init()
2026-09-29 21:47:20 -04:00
lsm_notifier.c
lsm: split the notifier code out into lsm_notifier.c
2025-10-22 19:24:15 -04:00
lsm_syscalls.c
lsm: hold cred_guard_mutex for lsm_set_self_attr()
2026-05-14 16:47:59 -04:00
lsm.h
lsm: add backing_file LSM hooks
2026-04-03 16:53:50 -04:00
Makefile
lsm: split the init code out into lsm_init.c
2025-10-22 19:24:16 -04:00
min_addr.c
lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY
2026-01-29 13:56:53 -05:00
security.c
lsm: expose mount idmaps to inode hooks
2026-09-11 14:15:19 -04:00