summaryrefslogtreecommitdiff
path: root/security/lockdown
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds2020-06-021-1/+1
|\
| * lockdown: Allow unprivileged users to see lockdown statusJeremy Cline2020-05-141-1/+1
* | security,lockdown,selinux: implement SELinux lockdownStephen Smalley2019-12-091-27/+0
* | Merge tag 'powerpc-5.5-1' of git://git.kernel.org/pub/scm/linux/kernel/git/po...Linus Torvalds2019-11-301-0/+2
|\ \ | |/ |/|
| * powerpc/xmon: Restrict when kernel is locked downChristopher M. Riedl2019-10-281-0/+2
* | efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMINJavier Martinez Canillas2019-10-311-0/+1
|/
* security: constify some arrays in lockdown LSMMatthew Garrett2019-09-101-2/+2
* lockdown: Print current->comm in restriction messagesMatthew Garrett2019-08-191-2/+6
* tracefs: Restrict tracefs when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* debugfs: Restrict debugfs when the kernel is locked downDavid Howells2019-08-191-0/+1
* lockdown: Lock down perf when in confidentiality modeDavid Howells2019-08-191-0/+1
* bpf: Restrict bpf when kernel lockdown is in confidentiality modeDavid Howells2019-08-191-0/+1
* lockdown: Lock down tracing and perf kprobes when in confidentiality modeDavid Howells2019-08-191-0/+1
* lockdown: Lock down /proc/kcoreDavid Howells2019-08-191-0/+1
* x86/mmiotrace: Lock down the testmmiotrace moduleDavid Howells2019-08-191-0/+1
* lockdown: Lock down module params that specify hardware parameters (eg. ioport)David Howells2019-08-191-0/+1
* lockdown: Lock down TIOCSSERIALDavid Howells2019-08-191-0/+1
* lockdown: Prohibit PCMCIA CIS storage when the kernel is locked downDavid Howells2019-08-191-0/+1
* ACPI: Limit access to custom_method when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* x86/msr: Restrict MSR access when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* x86: Lock down IO port access when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* PCI: Lock down BAR access when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* hibernate: Disable when the kernel is locked downJosh Boyer2019-08-191-0/+1
* kexec_load: Disable at runtime if the kernel is locked downMatthew Garrett2019-08-191-0/+1
* lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked downMatthew Garrett2019-08-191-0/+1
* lockdown: Enforce module signatures if the kernel is locked downDavid Howells2019-08-192-0/+2
* security: Add a static lockdown policy LSMMatthew Garrett2019-08-193-0/+216