Kernel/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-01-17 18:56:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
linux-stable/security
History
Mickaël Salaün 385975dca5 landlock: Set up the security framework and manage credentials 
Process's credentials point to a Landlock domain, which is underneath
implemented with a ruleset.  In the following commits, this domain is
used to check and enforce the ptrace and filesystem security policies.
A domain is inherited from a parent to its child the same way a thread
inherits a seccomp policy.

Cc: James Morris <jmorris@namei.org>
Signed-off-by: Mickaël Salaün <mic@linux.microsoft.com>
Reviewed-by: Jann Horn <jannh@google.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20210422154123.13086-4-mic@digikod.net
Signed-off-by: James Morris <jamorris@linux.microsoft.com>
2021-04-22 12:22:10 -07:00
..
apparmor
apparmor: handle idmapped mounts
2021-01-24 14:27:20 +01:00
bpf
bpf: Implement task local storage
2020-11-06 08:08:37 -08:00
integrity
Keyrings miscellany
2021-02-23 16:09:23 -08:00
keys
Keyrings miscellany
2021-02-23 16:09:23 -08:00
landlock
landlock: Set up the security framework and manage credentials
2021-04-22 12:22:10 -07:00
loadpin
LSM: Add "contents" flag to kernel_read_file hook
2020-10-05 13:37:03 +02:00
lockdown
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2020-06-02 17:36:24 -07:00
safesetid
LSM: SafeSetID: Fix warnings reported by test bot
2020-10-13 09:17:36 -07:00
selinux
idmapped-mounts-v5.12
2021-02-23 13:39:45 -08:00
smack
idmapped-mounts-v5.12
2021-02-23 13:39:45 -08:00
tomoyo
tomoyo: recognize kernel threads correctly
2021-02-01 11:53:05 +09:00
yama
task_work: cleanup notification modes
2020-10-17 15:05:30 -06:00
commoncap.c
Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities")
2021-03-12 15:27:14 -06:00
device_cgroup.c
device_cgroup: Fix RCU list debugging warning
2020-08-20 11:25:03 -07:00
inode.c
Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2019-07-19 10:42:02 -07:00
Kconfig
landlock: Set up the security framework and manage credentials
2021-04-22 12:22:10 -07:00
Kconfig.hardening
security: allow using Clang's zero initialization for stack variables
2020-06-16 02:06:23 -07:00
lsm_audit.c
make dump_common_audit_data() safe to be called from RCU pathwalk
2021-01-16 15:12:08 -05:00
Makefile
landlock: Add object management
2021-04-22 12:22:10 -07:00
min_addr.c
sysctl: pass kernel pointers to ->proc_handler
2020-04-27 02:07:40 -04:00
security.c
idmapped-mounts-v5.12
2021-02-23 13:39:45 -08:00