Mickaël Salaün 03197e40a2

landlock: Optimize scope enforcement ...

Do not walk through the domain hierarchy when the required scope is not
supported by this domain.  This is the same approach as for filesystem
and network restrictions.

Cc: Mikhail Ivanov <ivanov.mikhail1@huawei-partners.com>
Cc: Tahera Fahimi <fahimitahera@gmail.com>
Reviewed-by: Günther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20241109110856.222842-4-mic@digikod.net
Signed-off-by: Mickaël Salaün <mic@digikod.net>

2024-11-09 19:52:13 +01:00

..

apparmor

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

bpf

bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0

2024-09-11 10:11:36 -07:00

integrity

struct fd layout change (and conversion to accessor helpers)

2024-09-23 09:35:36 -07:00

ipe

ipe: Add missing terminator to list of unit tests

2024-09-23 15:53:37 -04:00

keys

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

landlock

landlock: Optimize scope enforcement

2024-11-09 19:52:13 +01:00

loadpin

introduce fd_file(), convert all accessors to it.

2024-08-12 22:00:43 -04:00

lockdown

lockdown: Make lockdown_lsmid static

2024-08-15 12:11:42 -04:00

safesetid

lsm: mark the lsm_id variables are marked as static

2023-11-12 22:54:42 -05:00

selinux

bpf-next-6.12-struct-fd

2024-09-24 14:54:26 -07:00

smack

lsm/stable-6.12 PR 20240923

2024-09-24 10:18:15 -07:00

tomoyo

tomoyo: revert CONFIG_SECURITY_TOMOYO_LKM support

2024-10-04 11:41:22 -04:00

yama

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

commoncap.c

lsm: Refactor return value of LSM hook vm_enough_memory

2024-07-31 14:46:51 -04:00

device_cgroup.c

device_cgroup: Fix kernel-doc warnings in device_cgroup

2023-06-21 09:30:49 -04:00

inode.c

lsm: Use IS_ERR_OR_NULL() helper function

2024-08-29 11:12:13 -04:00

Kconfig

lsm/stable-6.12 PR 20240911

2024-09-16 18:19:47 +02:00

Kconfig.hardening

hardening: Adjust dependencies in selection of MODVERSIONS

2024-09-28 13:56:03 -07:00

lsm_audit.c

lsm: fix a number of misspellings

2023-05-25 17:52:15 -04:00

lsm_syscalls.c

lsm: use 32-bit compatible data types in LSM syscalls

2024-03-14 11:31:26 -04:00

Makefile

lsm: add IPE lsm

2024-08-19 22:36:26 -04:00

min_addr.c

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

security.c

bcachefs: do not use PF_MEMALLOC_NORECLAIM

2024-10-09 12:47:18 -07:00