git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/history

]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/history - security

projects / mirror_ubuntu-focal-kernel.git / history

[mirror_ubuntu-focal-kernel.git] / security /

2022-05-20	Casey Schaufler	Fix incorrect type in assignment of ipv6 port for audit	tree \| commitdiff
2022-05-20	Christian Göttsche	selinux: use correct type for context length	tree \| commitdiff
2022-05-20	Casey Schaufler	LSM: general protection fault in legacy_parse_param	tree \| commitdiff
2022-05-20	Randy Dunlap	TOMOYO: fix __setup handlers return values	tree \| commitdiff
2022-05-20	Eric Biggers	KEYS: fix length validation in keyctl_pkey_params_get_2()	tree \| commitdiff
2022-04-14	Stefan Berger	ima: Do not print policy rule with inactive LSM labels	tree \| commitdiff
2022-04-14	Roberto Sassu	ima: Allow template selection with ima_template[_fmt...	tree \| commitdiff
2022-04-14	Stefan Berger	ima: Remove ima_policy file before directory	tree \| commitdiff
2022-04-14	Xiaoke Wang	integrity: check the return value of audit_log_start()	tree \| commitdiff
2022-03-07	Bernard Zhao	selinux: fix potential memleak in selinux_add_opt()	tree \| commitdiff
2022-03-07	Tom Rix	selinux: initialize proto variable in selinux_ip_postro...	tree \| commitdiff
2022-03-07	Dmitry Vyukov	tomoyo: Check exceeded quota early in tomoyo_domain_quo...	tree \| commitdiff
2022-03-07	Ondrej Mosnacek	selinux: fix race condition when computing ocontext...	tree \| commitdiff
2022-01-13	Kees Cook	fortify: Explicitly disable Clang support	tree \| commitdiff
2022-01-13	Tom Rix	apparmor: fix error check	tree \| commitdiff
2022-01-13	Tetsuo Handa	smackfs: use netlbl_cfg_cipsov4_del() for deleting...	tree \| commitdiff
2022-01-13	Tetsuo Handa	smackfs: use __GFP_NOFAIL for smk_cipso_doi()	tree \| commitdiff
2022-01-13	Pawan Gupta	smackfs: Fix use-after-free in netlbl_catmap_walk()	tree \| commitdiff
2022-01-13	Austin Kim	evm: mark evm_fixmode as __ro_after_init	tree \| commitdiff
2022-01-13	Todd Kjos	binder: use cred instead of task for selinux checks	tree \| commitdiff
2021-11-24	Dimitri John Ledkov	UBUNTU: SAUCE: integrity: add informational messages...	tree \| commitdiff
2021-11-24	Dimitri John Ledkov	UBUNTU: SAUCE: integrity: Load mokx certs from the...	tree \| commitdiff
2021-11-24	Eric Snowberg	integrity: Load mokx variables into the blacklist keyring	tree \| commitdiff
2021-11-24	Lenny Szubowicz	integrity: Load certs from the EFI MOK config table	tree \| commitdiff
2021-11-24	Lenny Szubowicz	integrity: Move import of MokListRT certs to a separate...	tree \| commitdiff
2021-11-24	Dimitri John Ledkov	Revert "UBUNTU: SAUCE: (lockdown) Make get_cert_list...	tree \| commitdiff
2021-10-27	Andy Shevchenko	apparmor: remove duplicate macro list_entry_is_head()	tree \| commitdiff
2021-10-12	Tianjia Zhang	Smack: Fix wrong semantics in smk_access_entry()	tree \| commitdiff
2021-10-11	THOBY Simon	IMA: remove the dependency on CRYPTO_MD5	tree \| commitdiff
2021-10-11	Austin Kim	IMA: remove -Wmissing-prototypes warning	tree \| commitdiff
2021-09-20	John Johansen	apparmor: Fix memory leak of profile proxy	tree \| commitdiff
2021-08-13	Tetsuo Handa	smackfs: restrict bytes count in smk_set_cipso()	tree \| commitdiff
2021-08-13	Minchan Kim	selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC	tree \| commitdiff
2021-08-13	Mimi Zohar	evm: fix writing <securityfs>/evm overflow	tree \| commitdiff
2021-08-13	Roberto Sassu	evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC...	tree \| commitdiff
2021-08-13	Roberto Sassu	evm: Execute evm_inode_init_security() only when an...	tree \| commitdiff
2021-08-13	Eric Snowberg	certs: Add EFI_CERT_X509_GUID support for dbx entries	tree \| commitdiff
2021-05-19	Arnd Bergmann	security: commoncap: fix -Wstringop-overread warning	tree \| commitdiff
2021-04-23	Mimi Zohar	integrity: double check iint_cache was initialized	tree \| commitdiff
2021-04-14	Eric W. Biederman	Revert 95ebabde382c ("capabilities: Don't allow writing...	tree \| commitdiff
2021-04-14	Sabyrzhan Tasbolatov	smackfs: restrict bytes count in smackfs write functions	tree \| commitdiff
2021-04-14	Jarkko Sakkinen	KEYS: trusted: Fix migratable=1 failing	tree \| commitdiff
2021-04-14	David Howells	certs: Fix blacklist flag type confusion	tree \| commitdiff
2021-04-14	Eric W. Biederman	capabilities: Don't allow writing ambiguous v3 file...	tree \| commitdiff
2021-04-14	Lakshmi Ramasubram...	ima: Free IMA measurement buffer after kexec syscall	tree \| commitdiff
2021-04-14	Lakshmi Ramasubram...	ima: Free IMA measurement buffer on error	tree \| commitdiff
2021-04-14	Dinghao Liu	evm: Fix memleak in init_desc	tree \| commitdiff
2021-04-12	Miklos Szeredi	vfs: move cap_convert_nscap() call into vfs_setxattr()	tree \| commitdiff
2021-03-24	Miklos Szeredi	cap: fix conversions on getxattr	tree \| commitdiff
2021-02-19	Al Viro	dump_common_audit_data(): fix racy accesses to ->d_name	tree \| commitdiff
2021-01-20	Roberto Sassu	ima: Don't modify file descriptor mode on the fly	tree \| commitdiff
2021-01-20	Paul Moore	selinux: fix inode_doinit_with_dentry() LABEL_INVALID...	tree \| commitdiff
2021-01-20	Tianyue Ren	selinux: fix error initialization in inode_doinit_with_...	tree \| commitdiff
2021-01-20	Maurizio Drocco	ima: extend boot_aggregate with kernel measurements	tree \| commitdiff
2020-12-10	Chen Zhou	selinux: Fix error return code in sel_ib_pkey_sid_slow()	tree \| commitdiff
2020-12-10	Roberto Sassu	evm: Check size of security.evm before using it	tree \| commitdiff
2020-11-09	Roberto Sassu	ima: Don't ignore errors from crypto_shash_update()	tree \| commitdiff
2020-11-09	Amol Grover	device_cgroup: Fix RCU list debugging warning	tree \| commitdiff
2020-11-09	Vasily Averin	selinux: sel_avc_get_stat_idx should increase position...	tree \| commitdiff
2020-11-09	Jonathan Lebon	selinux: allow labeling before policy is loaded	tree \| commitdiff
2020-09-30	Miklos Szeredi	ovl: call secutiry hook in ovl_real_ioctl()	tree \| commitdiff
2020-09-04	Dan Carpenter	Smack: prevent underflow in smk_set_cipso()	tree \| commitdiff
2020-09-04	Dan Carpenter	Smack: fix another vsscanf out of bounds	tree \| commitdiff
2020-09-04	Tyler Hicks	ima: Have the LSM free its audit rule	tree \| commitdiff
2020-09-04	Bruno Meneguele	ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY...	tree \| commitdiff
2020-09-04	Eric Biggers	Smack: fix use-after-free in smk_write_relabel_self()	tree \| commitdiff
2020-08-08	Tom Rix	selinux: fix double free	tree \| commitdiff
2020-08-08	John Johansen	apparmor: fix introspection of of task mode for unconfi...	tree \| commitdiff
2020-08-08	Krzysztof Struczynski	ima: Set again build_ima_appraise variable	tree \| commitdiff
2020-08-08	Krzysztof Struczynski	ima: Remove redundant policy rule set in add_rules()	tree \| commitdiff
2020-08-08	Roberto Sassu	evm: Fix possible memory leak in evm_calc_hmac_or_hash()	tree \| commitdiff
2020-08-08	Roberto Sassu	ima: Remove __init annotation from ima_pcrread()	tree \| commitdiff
2020-08-08	Roberto Sassu	ima: Call ima_calc_boot_aggregate() in ima_eventdigest_...	tree \| commitdiff
2020-08-08	Roberto Sassu	ima: Directly assign the ima_default_policy pointer...	tree \| commitdiff
2020-08-08	Roberto Sassu	ima: Evaluate error in init_ima()	tree \| commitdiff
2020-08-08	Roberto Sassu	ima: Switch to ima_hash_algo for boot aggregate	tree \| commitdiff
2020-08-08	Krzysztof Struczynski	ima: Fix ima digest hash table key calculation	tree \| commitdiff
2020-08-08	Wei Yongjun	selinux: fix error return code in policydb_read()	tree \| commitdiff
2020-08-08	Jeremy Cline	lockdown: Allow unprivileged users to see lockdown...	tree \| commitdiff
2020-08-08	Casey Schaufler	Smack: slab-out-of-bounds in vsscanf	tree \| commitdiff
2020-08-08	Waiman Long	mm: add kvfree_sensitive() for freeing sensitive data...	tree \| commitdiff
2020-08-08	Arnd Bergmann	smack: avoid unused 'sip' variable warning	tree \| commitdiff
2020-08-08	Mauricio Faria de...	apparmor: check/put label on apparmor_sk_clone_security()	tree \| commitdiff
2020-08-08	Madhuparna Bhowmik	evm: Fix RCU list related warnings	tree \| commitdiff
2020-06-22	Eric W. Biederman	exec: Always set cap_ambient in cap_bprm_set_creds	tree \| commitdiff
2020-06-22	Xiyu Yang	apparmor: Fix aa_label refcnt leak in policy_update	tree \| commitdiff
2020-06-22	Dan Carpenter	evm: Fix a small race in init_desc()	tree \| commitdiff
2020-06-22	Roberto Sassu	ima: Fix return value of ima_write_policy()	tree \| commitdiff
2020-06-22	Roberto Sassu	evm: Check also if *tfm is an error pointer in init_desc()	tree \| commitdiff
2020-06-22	Roberto Sassu	ima: Set file->f_mode instead of file->f_flags in ima_c...	tree \| commitdiff
2020-05-25	Paul Moore	selinux: properly handle multiple messages in selinux_n...	tree \| commitdiff
2020-05-25	Waiman Long	KEYS: Avoid false positive ENOMEM error on key read	tree \| commitdiff
2020-05-25	Waiman Long	KEYS: Don't write out to userspace while holding key...	tree \| commitdiff
2020-05-05	Vasily Averin	keys: Fix proc_keys_next to increase position index	tree \| commitdiff
2020-04-09	Mateusz Nosek	UBUNTU: SAUCE: security/apparmor/label.c: Clean code...	tree \| commitdiff
2020-04-09	Xiyu Yang	UBUNTU: SAUCE: apparmor: fix potential label refcnt...	tree \| commitdiff
2020-04-09	John Johansen	UBUNTU: SAUCE: apparmor: ensure that dfa state tables...	tree \| commitdiff
2020-04-09	John Johansen	UBUNTU: SAUCE: aapparmor: fail unpack if profile mode...	tree \| commitdiff
2020-04-09	John Johansen	UBUNTU: SAUCE: aapparmor: remove useless aafs_create_sy...	tree \| commitdiff
2020-04-09	John Johansen	UBUNTU: SAUCE: aapparmor: add consistency check between...	tree \| commitdiff
next

Ubuntu Focal Linux kernel mirror

RSS Atom