John Johansen a3ed5d43f7 apparmor: mark static tables and structs as read only ...

static tables, and structs that are initialized as part of their
data section or during init should be read only to protect against
accidental or malicous changes.

Signed-off-by: John Johansen <john.johansen@canonical.com>

2026-08-10 22:49:42 -07:00

..

apparmor

apparmor: mark static tables and structs as read only

2026-08-10 22:49:42 -07:00

bpf

lsm: replace the name field with a pointer to the lsm_id struct

2025-10-22 19:24:18 -04:00

integrity

ima: Support staging and deleting N measurements records

2026-06-08 11:43:34 -04:00

ipe

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

keys

keys: keyctl_pkey: replace BUG with return -EOPNOTSUPP

2026-06-15 15:19:13 +03:00

landlock

Merge tag 'landlock-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mic/linux

2026-06-19 12:20:25 -07:00

loadpin

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lockdown

lockdown: move initcalls to the LSM framework

2025-10-22 19:24:27 -04:00

safesetid

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

selinux

Merge tag 'selinux-pr-20260615' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

2026-06-17 12:41:00 +01:00

smack

security,fs,nfs,net: update security_inode_listsecurity() interface

2026-05-01 11:29:33 -04:00

tomoyo

tomoyo: use u64 for holding inode->i_ino value

2026-04-15 00:00:10 +09:00

yama

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

commoncap_test.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

commoncap.c

security: Add KUnit tests for kuid_root_in_ns and vfsuid_root_in_currentns

2026-01-09 11:28:28 -06:00

device_cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

inode.c

securityfs: use kstrdup_const() to manage symlink targets

2026-03-17 17:13:36 -04:00

Kconfig

proc: make PROC_MEM_FORCE_PTRACE the Kconfig default

2026-04-13 09:12:37 -07:00

Kconfig.hardening

security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT

2026-05-27 15:20:04 -07:00

lsm_audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

lsm_init.c

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

lsm_notifier.c

lsm: split the notifier code out into lsm_notifier.c

2025-10-22 19:24:15 -04:00

lsm_syscalls.c

lsm: hold cred_guard_mutex for lsm_set_self_attr()

2026-05-14 16:47:59 -04:00

lsm.h

lsm: add backing_file LSM hooks

2026-04-03 16:53:50 -04:00

Makefile

lsm: split the init code out into lsm_init.c

2025-10-22 19:24:16 -04:00

min_addr.c

lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY

2026-01-29 13:56:53 -05:00

security.c

security,fs,nfs,net: update security_inode_listsecurity() interface

2026-05-01 11:29:33 -04:00