Matthew Garrett 79e03775e0 UPSTREAM: security: Add a "locked down" LSM hook ...

Add a mechanism to allow LSMs to make a policy decision around whether
kernel functionality that would allow tampering with or examining the
runtime state of the kernel should be permitted.

Change-Id: Ie70dc489691e2f8413fe593c633a00e6e97bd63a
Signed-off-by: Matthew Garrett <mjg59@google.com>
Acked-by: Kees Cook <keescook@chromium.org>
Acked-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: James Morris <jmorris@namei.org>

2025-08-28 03:25:42 +03:00

..

apparmor

apparmor: fix 'Do simple duplicate message elimination'

2024-12-05 10:59:38 +01:00

integrity

ima: detect changes to the backing overlay file

2023-12-08 08:43:26 +01:00

keys

Merge 4.19.324 into android-4.19-stable

2024-11-17 20:02:03 +00:00

loadpin

…

selinux

UPSTREAM: treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295

2025-08-28 03:24:29 +03:00

smack

smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso

2024-11-08 16:19:06 +01:00

tomoyo

tomoyo: fallback to realpath if symlink's pathname does not exist

2024-11-08 16:19:15 +01:00

yama

…

commoncap.c

ANDROID: fully revert ANDROID_PARANOID_NETWORK

2024-08-19 07:25:59 +00:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-18 11:30:44 +01:00

inode.c

…

Kconfig

…

Kconfig.hardening

UPSTREAM: hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero

2022-10-14 08:45:01 -07:00

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

UPSTREAM: security: Add a "locked down" LSM hook

2025-08-28 03:25:42 +03:00