| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2025-04-17 | landlock: Fix documentation for landlock_restrict_self(2) | Mickaël Salaün | 1 | -6/+6 |
| 2025-04-17 | landlock: Fix documentation for landlock_create_ruleset(2) | Mickaël Salaün | 1 | -8/+7 |
| 2025-04-11 | landlock: Log the TGID of the domain creator | Mickaël Salaün | 1 | -2/+2 |
| 2025-04-08 | landlock: Remove incorrect warning | Mickaël Salaün | 1 | -1/+1 |
| 2025-03-28 | Merge tag 'landlock-6.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 24 | -254/+2264 |
| 2025-03-26 | landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF | Mickaël Salaün | 3 | -7/+43 |
| 2025-03-26 | landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags | Mickaël Salaün | 5 | -12/+63 |
| 2025-03-26 | landlock: Log scoped denials | Mickaël Salaün | 5 | -18/+97 |
| 2025-03-26 | landlock: Log TCP bind and connect denials | Mickaël Salaün | 3 | -4/+60 |
| 2025-03-26 | landlock: Log truncate and IOCTL denials | Mickaël Salaün | 7 | -6/+307 |
| 2025-03-26 | landlock: Factor out IOCTL hooks | Mickaël Salaün | 1 | -21/+11 |
| 2025-03-26 | landlock: Log file-related denials | Mickaël Salaün | 3 | -16/+233 |
| 2025-03-26 | landlock: Log mount-related denials | Mickaël Salaün | 4 | -41/+74 |
| 2025-03-26 | landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status | Mickaël Salaün | 6 | -4/+285 |
| 2025-03-26 | landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials | Mickaël Salaün | 7 | -24/+336 |
| 2025-03-26 | landlock: Identify domain execution crossing | Mickaël Salaün | 3 | -6/+59 |
| 2025-03-26 | landlock: Prepare to use credential instead of domain for fowner | Mickaël Salaün | 3 | -21/+39 |
| 2025-03-26 | landlock: Prepare to use credential instead of domain for scope | Mickaël Salaün | 1 | -24/+28 |
| 2025-03-26 | landlock: Prepare to use credential instead of domain for network | Mickaël Salaün | 1 | -15/+12 |
| 2025-03-26 | landlock: Prepare to use credential instead of domain for filesystem | Mickaël Salaün | 2 | -30/+92 |
| 2025-03-26 | landlock: Move domain hierarchy management | Mickaël Salaün | 4 | -34/+53 |
| 2025-03-26 | landlock: Add unique ID generator | Mickaël Salaün | 5 | -0/+282 |
| 2025-03-26 | landlock: Always allow signals between threads of the same process | Mickaël Salaün | 3 | -6/+64 |
| 2025-03-24 | Merge tag 'vfs-6.15-rc1.misc' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 1 | -1/+1 |
| 2025-03-21 | landlock: Prepare to add second errata | Mickaël Salaün | 1 | -0/+12 |
| 2025-03-21 | landlock: Add erratum for TCP fix | Mickaël Salaün | 1 | -0/+15 |
| 2025-03-21 | landlock: Add the errata interface | Mickaël Salaün | 4 | -4/+138 |
| 2025-03-21 | landlock: Move code to ease future backports | Mickaël Salaün | 1 | -5/+5 |
| 2025-03-08 | vfs: Remove invalidate_inodes() | Jan Kara | 1 | -1/+1 |
| 2025-02-14 | landlock: Fix non-TCP sockets restriction | Mikhail Ivanov | 1 | -2/+1 |
| 2025-02-14 | landlock: Fix grammar error | Tanya Agarwal | 1 | -1/+1 |
| 2025-01-17 | landlock: Optimize file path walks and prepare for audit support | Mickaël Salaün | 1 | -17/+27 |
| 2025-01-17 | landlock: Align partial refer access checks with final ones | Mickaël Salaün | 1 | -1/+13 |
| 2025-01-17 | landlock: Simplify initially denied access rights | Mickaël Salaün | 3 | -11/+19 |
| 2025-01-17 | landlock: Move access types | Mickaël Salaün | 5 | -46/+68 |
| 2025-01-17 | landlock: Factor out check_access_path() | Mickaël Salaün | 1 | -21/+11 |
| 2025-01-14 | landlock: Use scoped guards for ruleset in landlock_add_rule() | Mickaël Salaün | 1 | -10/+4 |
| 2025-01-14 | landlock: Use scoped guards for ruleset | Mickaël Salaün | 3 | -29/+23 |
| 2025-01-14 | landlock: Constify get_mode_access() | Mickaël Salaün | 1 | -1/+1 |
| 2025-01-14 | landlock: Handle weird files | Mickaël Salaün | 1 | -6/+5 |
| 2024-11-18 | Merge tag 'pull-fd' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs | Linus Torvalds | 1 | -31/+14 |
| 2024-11-09 | landlock: Optimize scope enforcement | Mickaël Salaün | 1 | -3/+15 |
| 2024-11-09 | landlock: Refactor network access mask management | Mickaël Salaün | 1 | -22/+6 |
| 2024-11-09 | landlock: Refactor filesystem access mask management | Mickaël Salaün | 3 | -32/+75 |
| 2024-11-03 | fdget(), trivial conversions | Al Viro | 1 | -18/+8 |
| 2024-11-03 | fdget_raw() users: switch to CLASS(fd_raw) | Al Viro | 1 | -13/+6 |
| 2024-09-24 | Merge tag 'landlock-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/gi... | Linus Torvalds | 8 | -9/+269 |
| 2024-09-23 | Merge tag 'pull-stable-struct_fd' of git://git.kernel.org/pub/scm/linux/kerne... | Linus Torvalds | 1 | -11/+11 |
| 2024-09-16 | landlock: Add signal scoping | Tahera Fahimi | 5 | -2/+90 |
| 2024-09-16 | landlock: Add abstract UNIX socket scoping | Tahera Fahimi | 5 | -8/+180 |
| 2024-08-12 | introduce fd_file(), convert all accessors to it. | Al Viro | 1 | -11/+11 |
| 2024-08-12 | lsm: add the inode_free_security_rcu() LSM implementation hook | Paul Moore | 1 | -3/+6 |
| 2024-07-27 | Merge tag 'landlock-6.11-rc1-houdini-fix' of git://git.kernel.org/pub/scm/lin... | Linus Torvalds | 1 | -2/+9 |
| 2024-07-24 | landlock: Don't lose track of restrictions on cred_transfer | Jann Horn | 1 | -2/+9 |
| 2024-07-18 | landlock: Various documentation improvements | Günther Noack | 1 | -8/+9 |
| 2024-07-08 | landlock: Use bit-fields for storing handled layer access masks | Günther Noack | 3 | -21/+9 |
| 2024-05-31 | landlock: Fix d_parent walk | Mickaël Salaün | 1 | -2/+11 |
| 2024-05-13 | landlock: Add IOCTL access right for character and block devices | Günther Noack | 3 | -5/+224 |
| 2024-03-08 | landlock: Use f_cred in security_file_open() hook | Mickaël Salaün | 1 | -7/+11 |
| 2024-03-08 | landlock: Rename "ptrace" files to "task" | Mickaël Salaün | 4 | -9/+9 |
| 2024-03-08 | landlock: Simplify current_check_access_socket() | Mickaël Salaün | 1 | -4/+3 |
| 2024-03-07 | landlock: Warn once if a Landlock action is requested while disabled | Mickaël Salaün | 1 | -3/+15 |
| 2024-02-27 | landlock: Add support for KUnit tests | Mickaël Salaün | 4 | -0/+255 |
| 2024-02-26 | landlock: Fix asymmetric private inodes referring | Mickaël Salaün | 1 | -2/+2 |
| 2024-01-09 | Merge tag 'landlock-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git... | Linus Torvalds | 2 | -16/+17 |
| 2024-01-03 | landlock: Optimize the number of calls to get_access_mask slightly | Günther Noack | 1 | -2/+3 |
| 2024-01-03 | landlock: Remove remaining "inline" modifiers in .c files [v6.6] | Günther Noack | 1 | -1/+1 |
| 2024-01-03 | landlock: Remove remaining "inline" modifiers in .c files [v6.1] | Günther Noack | 1 | -9/+9 |
| 2024-01-03 | landlock: Remove remaining "inline" modifiers in .c files [v5.15] | Günther Noack | 2 | -4/+4 |
| 2023-11-12 | LSM: Identify modules by more than name | Casey Schaufler | 6 | -4/+11 |
| 2023-10-26 | landlock: Support network rules with TCP bind and connect | Konstantin Meskhidze | 9 | -24/+414 |
| 2023-10-26 | landlock: Refactor landlock_add_rule() syscall | Konstantin Meskhidze | 1 | -44/+45 |
| 2023-10-26 | landlock: Refactor layer helpers | Konstantin Meskhidze | 3 | -42/+66 |
| 2023-10-26 | landlock: Move and rename layer helpers | Konstantin Meskhidze | 3 | -115/+129 |
| 2023-10-26 | landlock: Refactor merge/inherit_ruleset helpers | Konstantin Meskhidze | 1 | -42/+74 |
| 2023-10-26 | landlock: Refactor landlock_find_rule/insert_rule helpers | Konstantin Meskhidze | 3 | -54/+165 |
| 2023-10-26 | landlock: Allow FS topology changes for domains without such rule type | Mickaël Salaün | 3 | -40/+60 |
| 2023-10-26 | landlock: Make ruleset's access masks more generic | Konstantin Meskhidze | 5 | -20/+50 |
| 2023-08-18 | landlock: Annotate struct landlock_rule with __counted_by | Kees Cook | 1 | -1/+1 |
| 2023-06-12 | hostfs: Fix ephemeral inodes | Mickaël Salaün | 1 | -1/+1 |
| 2023-03-20 | selinux: remove the runtime disable functionality | Paul Moore | 4 | -5/+5 |
| 2022-10-19 | landlock: Support file truncation | Günther Noack | 5 | -7/+126 |
| 2022-10-19 | landlock: Document init_layer_masks() helper | Günther Noack | 1 | -0/+13 |
| 2022-10-19 | landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() | Günther Noack | 1 | -45/+44 |
| 2022-09-29 | landlock: Fix documentation style | Mickaël Salaün | 1 | -20/+20 |
| 2022-09-29 | landlock: Slightly improve documentation and fix spelling | Mickaël Salaün | 1 | -1/+1 |
| 2022-09-02 | landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER | Mickaël Salaün | 1 | -23/+25 |
| 2022-05-23 | landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER | Mickaël Salaün | 3 | -76/+528 |
| 2022-05-23 | LSM: Remove double path_rename hook calls for RENAME_EXCHANGE | Mickaël Salaün | 1 | -1/+10 |
| 2022-05-23 | landlock: Move filesystem helpers and add a new one | Mickaël Salaün | 1 | -41/+46 |
| 2022-05-23 | landlock: Fix same-layer rule unions | Mickaël Salaün | 2 | -26/+54 |
| 2022-05-23 | landlock: Create find_rule() from unmask_layers() | Mickaël Salaün | 1 | -13/+28 |
| 2022-05-23 | landlock: Reduce the maximum number of layers to 16 | Mickaël Salaün | 3 | -11/+12 |
| 2022-05-23 | landlock: Define access_mask_t to enforce a consistent access mask size | Mickaël Salaün | 5 | -15/+30 |
| 2022-05-23 | landlock: Change landlock_restrict_self(2) check ordering | Mickaël Salaün | 1 | -4/+4 |
| 2022-05-23 | landlock: Change landlock_add_rule(2) argument check ordering | Mickaël Salaün | 1 | -9/+13 |
| 2022-05-23 | landlock: Fix landlock_add_rule(2) documentation | Mickaël Salaün | 1 | -4/+3 |
| 2022-05-09 | landlock: Format with clang-format | Mickaël Salaün | 10 | -136/+142 |
| 2022-05-09 | landlock: Add clang-format exceptions | Mickaël Salaün | 2 | -0/+6 |
| 2022-02-04 | landlock: Use square brackets around "landlock-ruleset" | Christian Brauner | 1 | -1/+1 |
| 2021-04-22 | landlock: Enable user space to infer supported features | Mickaël Salaün | 1 | -4/+13 |
| 2021-04-22 | landlock: Add syscall implementations | Mickaël Salaün | 2 | -1/+443 |
| 2021-04-22 | landlock: Support filesystem access-control | Mickaël Salaün | 8 | -2/+781 |
| 2021-04-22 | landlock: Add ptrace restrictions | Mickaël Salaün | 4 | -1/+137 |
| 2021-04-22 | landlock: Set up the security framework and manage credentials | Mickaël Salaün | 6 | -1/+173 |
| 2021-04-22 | landlock: Add ruleset and domain management | Mickaël Salaün | 4 | -1/+652 |
| 2021-04-22 | landlock: Add object management | Mickaël Salaün | 4 | -0/+182 |
