linux/Documentation/security
Linus Torvalds 7199989f3f Landlock update for v7.3-rc1
-----BEGIN PGP SIGNATURE-----
 
 iIYEABYKAC4WIQSVyBthFV4iTW/VU1/l49DojIL20gUCaoa8/RAcbWljQGRpZ2lr
 b2QubmV0AAoJEOXj0OiMgvbSSjMBAIq+/dIjMVUddtyqRlWKMfBQqokU4Dl5JeHB
 Y4Jh61idAQCihXimNu+TOuX1zc80eBR+IzDYaAU8ZGcK079hmGO5Bw==
 =TKoa
 -----END PGP SIGNATURE-----

Merge tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

Pull Landlock update from Mickaël Salaün:
 "This improves observability with Landlock tracepoints support, which
  required some refactoring for dedicated domain types and common
  helpers shared with audit code.

  A LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS flag is also added to improve
  process-wide domain enforcement consistency.

  Whiteout files are now correctly handled and tested, and a few other
  fixes"

* tag 'landlock-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux: (34 commits)
  landlock: Document tracepoints
  selftests/landlock: Add landlock_enforce_domain trace tests
  selftests/landlock: Add scope and ptrace tracepoint tests
  selftests/landlock: Add network tracepoint tests
  selftests/landlock: Add filesystem tracepoint tests
  selftests/landlock: Add trace event test infrastructure and tests
  landlock: Add tracepoints for ptrace and scope denials
  landlock: Add landlock_deny_access_fs and landlock_deny_access_net
  landlock: Add tracepoints for rule checking
  landlock: Add landlock_enforce_domain tracepoint
  landlock: Add create_domain and free_domain tracepoints
  landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
  landlock: Add create_ruleset and free_ruleset tracepoints
  landlock: Consolidate access-right and scope names in a shared header
  landlock: Decouple the per-denial logging decision from CONFIG_AUDIT
  landlock: Split denial logging from audit into common framework
  landlock: Split struct landlock_domain from struct landlock_ruleset
  landlock: Move domain query functions to domain.c
  landlock: Prepare ruleset and domain type split
  samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler
  ...
2026-08-21 12:28:35 -07:00
..
keys docs: trusted-encryped: add PKWM as a new trust source 2026-01-30 09:27:27 +05:30
secrets Documentation: Fix typos 2023-08-18 11:29:03 -06:00
tpm Documentation: tpm: Add documentation for the CRB FF-A interface 2025-03-27 15:34:05 +02:00
credentials.rst cred: delete task_euid() 2026-07-07 15:10:48 -04:00
digsig.rst Documentation: Fix typos 2023-08-18 11:29:03 -06:00
IMA-export-delete.rst doc: security: Add documentation of exporting and deleting IMA measurements 2026-06-08 11:43:36 -04:00
IMA-templates.rst ima: support fs-verity file digest based version 3 signatures 2022-05-05 17:41:51 -04:00
index.rst doc: security: Add documentation of exporting and deleting IMA measurements 2026-06-08 11:43:36 -04:00
ipe.rst docs: security: ipe: fix typos and grammar 2026-04-13 15:58:49 -07:00
landlock.rst landlock: Document tracepoints 2026-08-17 10:17:19 +02:00
lsm-development.rst lsm: move hook comments docs to security/security.c 2023-04-28 11:58:34 -04:00
lsm.rst lsm: move hook comments docs to security/security.c 2023-04-28 11:58:34 -04:00
sak.rst docs: security: move some books to it and update 2019-07-15 11:03:01 -03:00
SCTP.rst Docs: typos/spelling 2024-05-02 10:02:29 -06:00
self-protection.rst stackleak: Rename STACKLEAK to KSTACK_ERASE 2025-07-21 21:35:01 -07:00
siphash.rst Documentation: siphash: Fix typo in the name of offsetofend macro 2022-07-13 14:01:22 -06:00
snp-tdx-threat-model.rst docs/MAINTAINERS: Update my email address 2024-04-26 07:42:47 -06:00