summaryrefslogtreecommitdiff
path: root/security/landlock
AgeCommit message (Expand)Author
2025-03-28Merge tag 'landlock-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFFMickaël Salaün
2025-03-26landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flagsMickaël Salaün
2025-03-26landlock: Log scoped denialsMickaël Salaün
2025-03-26landlock: Log TCP bind and connect denialsMickaël Salaün
2025-03-26landlock: Log truncate and IOCTL denialsMickaël Salaün
2025-03-26landlock: Factor out IOCTL hooksMickaël Salaün
2025-03-26landlock: Log file-related denialsMickaël Salaün
2025-03-26landlock: Log mount-related denialsMickaël Salaün
2025-03-26landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain statusMickaël Salaün
2025-03-26landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denialsMickaël Salaün
2025-03-26landlock: Identify domain execution crossingMickaël Salaün
2025-03-26landlock: Prepare to use credential instead of domain for fownerMickaël Salaün
2025-03-26landlock: Prepare to use credential instead of domain for scopeMickaël Salaün
2025-03-26landlock: Prepare to use credential instead of domain for networkMickaël Salaün
2025-03-26landlock: Prepare to use credential instead of domain for filesystemMickaël Salaün
2025-03-26landlock: Move domain hierarchy managementMickaël Salaün
2025-03-26landlock: Add unique ID generatorMickaël Salaün
2025-03-26landlock: Always allow signals between threads of the same processMickaël Salaün
2025-03-24Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2025-03-21landlock: Prepare to add second errataMickaël Salaün
2025-03-21landlock: Add erratum for TCP fixMickaël Salaün
2025-03-21landlock: Add the errata interfaceMickaël Salaün
2025-03-21landlock: Move code to ease future backportsMickaël Salaün
2025-03-08vfs: Remove invalidate_inodes()Jan Kara
2025-02-14landlock: Fix non-TCP sockets restrictionMikhail Ivanov
2025-02-14landlock: Fix grammar errorTanya Agarwal
2025-01-17landlock: Optimize file path walks and prepare for audit supportMickaël Salaün
2025-01-17landlock: Align partial refer access checks with final onesMickaël Salaün
2025-01-17landlock: Simplify initially denied access rightsMickaël Salaün
2025-01-17landlock: Move access typesMickaël Salaün
2025-01-17landlock: Factor out check_access_path()Mickaël Salaün
2025-01-14landlock: Use scoped guards for ruleset in landlock_add_rule()Mickaël Salaün
2025-01-14landlock: Use scoped guards for rulesetMickaël Salaün
2025-01-14landlock: Constify get_mode_access()Mickaël Salaün
2025-01-14landlock: Handle weird filesMickaël Salaün
2024-11-18Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfsLinus Torvalds
2024-11-09landlock: Optimize scope enforcementMickaël Salaün
2024-11-09landlock: Refactor network access mask managementMickaël Salaün
2024-11-09landlock: Refactor filesystem access mask managementMickaël Salaün
2024-11-03fdget(), trivial conversionsAl Viro
2024-11-03fdget_raw() users: switch to CLASS(fd_raw)Al Viro
2024-09-24Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds
2024-09-23Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne...Linus Torvalds
2024-09-16landlock: Add signal scopingTahera Fahimi
2024-09-16landlock: Add abstract UNIX socket scopingTahera Fahimi
2024-08-12introduce fd_file(), convert all accessors to it.Al Viro
2024-08-12lsm: add the inode_free_security_rcu() LSM implementation hookPaul Moore
2024-07-27Merge tag 'landlock-6.11-rc1-houdini-fix' of git://git.kernel.org/pub/scm/lin...Linus Torvalds
2024-07-24landlock: Don't lose track of restrictions on cred_transferJann Horn