Matthew Garrett
4429a0e046
UPSTREAM: security: Add a "locked down" LSM hook
...
Add a mechanism to allow LSMs to make a policy decision around whether
kernel functionality that would allow tampering with or examining the
runtime state of the kernel should be permitted.
Change-Id: Ie70dc489691e2f8413fe593c633a00e6e97bd63a
Signed-off-by: Matthew Garrett <mjg59@google.com>
Acked-by: Kees Cook <keescook@chromium.org>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:59:06 +07:00
..
apparmor
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
integrity
ima: Fix misuse of dereference of pointer in template_desc_init_fields()
2023-01-07 12:07:16 +01:00
keys
This is the 4.9.259 stable release
2021-03-03 18:08:08 +01:00
loadpin
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
pfe
ICE, pfk: fix to set dio_inode precisely
2022-11-30 02:21:44 +02:00
selinux
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
smack
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
tomoyo
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
yama
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
commoncap.c
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
device_cgroup.c
device_cgroup: prepare code for bpf-based device controller
2026-05-15 17:55:40 +07:00
inode.c
UPSTREAM: LSM: Add /sys/kernel/security/lsm
2026-05-15 17:59:05 +07:00
Kconfig
Resolve merge conflict and enable HW FBE for ext4 fs
2018-05-22 12:58:05 +05:30
lsm_audit.c
dump_common_audit_data(): fix racy accesses to ->d_name
2021-01-23 15:38:17 +01:00
Makefile
Resolve merge conflict and enable HW FBE for ext4 fs
2018-05-22 12:58:05 +05:30
min_addr.c
security.c
UPSTREAM: security: Add a "locked down" LSM hook
2026-05-15 17:59:06 +07:00