2017-08-14 | Kees Cook | seccomp: Rename SECCOMP_RET_KILL to SECCOMP_RET_KILL_THREAD Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-08-14 | Kees Cook | seccomp: Provide matching filter for introspection Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-08-14 | Kees Cook | selftests/seccomp: Refactor RET_ERRNO tests Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-08-14 | Kees Cook | selftests/seccomp: Add simple seccomp overhead benchmark Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-08-14 | Kees Cook | selftests/seccomp: Add tests for basic ptrace actions Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | sh: mark end of BUG() implementation as unreachable Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | IB/rxe: do not copy extra stack memory to skb ...1497903987-21002-5-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | kexec_file: adjust declaration of kexec_purgatory ...1497903987-21002-4-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | efi: avoid fortify checks in EFI stub ...1497903987-21002-2-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/sem: drop __sem_free() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/msg: remove special msg_alloc/free Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/shm: remove special shm_alloc/free Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc: move atomic_set() to where it is needed Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/util: drop ipc_rcu_alloc() Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/msg: avoid ipc_rcu_alloc() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/shm: avoid ipc_rcu_alloc() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/sem: avoid ipc_rcu_alloc() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/util: drop ipc_rcu_free() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/msg: do not use ipc_rcu_free() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/shm: do not use ipc_rcu_free() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc/sem: do not use ipc_rcu_free() Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | ipc: drop non-RCU allocation Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-12 | Kees Cook | random: do not ignore early device randomness Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | binfmt_elf: safely increment argv pointers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | s390: reduce ELF_ET_DYN_BASE ...1498154792-49952-5-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB ...1498154792-49952-4-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | arm64: move ELF_ET_DYN_BASE to 4GB / 4MB ...1498251600-132458-4-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | arm: move ELF_ET_DYN_BASE to 4MB ...1498154792-49952-2-git-send-email-keescook@chromium.org Signed-off-by: Kees Cook <keescook@chromium.org> Cc: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-10 | Kees Cook | binfmt_elf: use ELF_ET_DYN_BASE only for PIE Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-08 | Kees Cook | exec: Limit arg stack to at most 75% of _STK_LIM Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-06 | Kees Cook | mm: allow slab_nomerge to be set at build time Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-07-05 | Kees Cook | Merge branch 'merge/randstruct' into for-next/gcc-plugins |
commit | commitdiff | tree |
2017-07-05 | Kees Cook | Merge branch 'for-next/gcc-plugin-infrastructure' into... |
commit | commitdiff | tree |
2017-07-02 | Kees Cook | locking/refcount: Remove the half-implemented refcount_sub... Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-30 | Kees Cook | randstruct: opt-out externally exposed function pointer... Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-30 | Kees Cook | task_struct: Allow randomized layout Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-30 | Kees Cook | randstruct: Mark various structs for randomization Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-30 | Kees Cook | fs: Reorder inode_owner_or_capable() to avoid needless Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-28 | Kees Cook | locking/refcount: Create unchecked atomic_t implementation Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-27 | Kees Cook | ACPICA: Use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-26 | Kees Cook | seccomp: Switch from atomic_t to recount_t Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-26 | Kees Cook | seccomp: Adjust selftests to avoid double-join Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-26 | Kees Cook | seccomp: Clean up core dump logic Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-23 | Kees Cook | fs/exec.c: account for argv/envp pointers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | randstruct: Whitelist NIU struct page overloading Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | randstruct: Whitelist big_key path struct overloading Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | randstruct: Whitelist UNIXCB cast Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | randstruct: Whitelist struct security_hook_heads cast Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | gcc-plugins: Add the randstruct plugin Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-22 | Kees Cook | x86/power/64: Use char arrays for asm function names Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-16 | Kees Cook | objtool: Add fortify_panic as __noreturn function Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-13 | Kees Cook | scsi: csiostor: Avoid content leaks and casts Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-06-06 | Kees Cook | arm64, vdso: Define vdso_{start,end} as array Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-31 | Kees Cook | pstore: Fix format string to use %u for record id Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-31 | Kees Cook | pstore: Populate pstore record->time field Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-31 | Kees Cook | pstore: Create common record initializer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-31 | Kees Cook | efi-pstore: Refactor erase routine Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-31 | Kees Cook | pstore: Avoid potential infinite loop Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | compiler: Add __designated_init annotation Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | mtk-vcodec: Use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | gcc-plugins: Detail c-common.h location for GCC 4.6 Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | drm/amd/powerplay: Use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | drm/amdgpu: Use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | sgi-xp: Use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | ocfs2: Use ERR_CAST() to avoid cross-structure cast Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | ntfs: Use ERR_CAST() to avoid cross-structure cast Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-28 | Kees Cook | NFS: Use ERR_CAST() to avoid cross-structure cast Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-24 | Kees Cook | libertas: Remove function entry/exit debugging Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-24 | Kees Cook | libertas: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-23 | Kees Cook | module: Add module name to modinfo Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-23 | Kees Cook | module: Pass struct load_info into symbol checks Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-22 | Kees Cook | efi-pstore: Fix write/erase id tracking Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-22 | Kees Cook | ray_cs: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify keys-trusted-encrypted.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify keys-request-key.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify keys-ecryptfs.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify keys.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify Smack.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify LoadPin.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify Yama.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify tomoyo.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify apparmor.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify SELinux.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify and split LSM.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: security: minor cleanups to build kernel-doc Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify self-protection.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify credentials.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify IMA-templates.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify no_new_privs.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-18 | Kees Cook | doc: ReSTify seccomp_filter.txt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-16 | Kees Cook | efi-pstore: Fix read iter after pstore API refactor Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-09 | Kees Cook | DECnet: Use container_of() for embedded struct Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-09 | Kees Cook | scsi: qedf: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-09 | Kees Cook | format-security: move static strings to const Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-09 | Kees Cook | reiserfs: use designated initializers Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-08 | Kees Cook | qlge: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-08 | Kees Cook | bna: ethtool: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-08 | Kees Cook | bna: Avoid reading past end of buffer Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-07 | Kees Cook | x86/boot: Declare error() as noreturn Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
2017-05-03 | Kees Cook | mm: remove rodata_test_data export, add pr_fmt Signed-off-by: Kees Cook <keescook@chromium.org> |
commit | commitdiff | tree |
next |