Commits · kunit-prototype2 · Isabella Bassoasso / linux · GitLab

Snippets Groups Projects

Due to an influx of spam, we have had to impose restrictions on new accounts. Please see this wiki page for instructions on how to get full permissions. Sorry for the inconvenience.

Our infrastructure migration is complete. Please remember to update your SSH remote to point to ssh.gitlab.freedesktop.org; SSH to the old hostname will time out. You should not see any problems apart from that. Please let us know if you do have any other issues.

May 14, 2020
- lockdown: Allow unprivileged users to see lockdown status · 60cf7c5e
  Jeremy Cline authored 4 years ago
  60cf7c5e
Dec 09, 2019
- security,lockdown,selinux: implement SELinux lockdown · 59438b46
  Stephen Smalley authored 5 years ago
  59438b46
Oct 31, 2019
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN · 359efcc2
  Javier Martinez Canillas authored 5 years ago and Ingo Molnar committed 5 years ago
  359efcc2
Oct 28, 2019
- powerpc/xmon: Restrict when kernel is locked down · 69393cb0
  Christopher M. Riedl authored 5 years ago
  69393cb0
Sep 10, 2019
- security: constify some arrays in lockdown LSM · f8a9bc62
  Matthew Garrett authored 5 years ago
  f8a9bc62
Aug 20, 2019
- lockdown: Print current->comm in restriction messages · b602614a
  Matthew Garrett authored 5 years ago
  b602614a
- tracefs: Restrict tracefs when the kernel is locked down · ccbd54ff
  Matthew Garrett authored 5 years ago
  ccbd54ff
- debugfs: Restrict debugfs when the kernel is locked down · 5496197f
  David Howells authored 5 years ago
  5496197f
- lockdown: Lock down perf when in confidentiality mode · b0c8fdc7
  David Howells authored 5 years ago
  b0c8fdc7
- bpf: Restrict bpf when kernel lockdown is in confidentiality mode · 9d1f8be5
  David Howells authored 5 years ago
  9d1f8be5
- lockdown: Lock down tracing and perf kprobes when in confidentiality mode · a94549dd
  David Howells authored 5 years ago
  a94549dd
- lockdown: Lock down /proc/kcore · 02e935bf
  David Howells authored 5 years ago
  02e935bf
- x86/mmiotrace: Lock down the testmmiotrace module · 906357f7
  David Howells authored 5 years ago
  906357f7
- lockdown: Lock down module params that specify hardware parameters (eg. ioport) · 20657f66
  David Howells authored 5 years ago
  20657f66
- lockdown: Lock down TIOCSSERIAL · 794edf30
  David Howells authored 5 years ago
  794edf30
- lockdown: Prohibit PCMCIA CIS storage when the kernel is locked down · 3f19cad3
  David Howells authored 5 years ago
  3f19cad3
- ACPI: Limit access to custom_method when the kernel is locked down · f474e148
  Matthew Garrett authored 5 years ago
  f474e148
- x86/msr: Restrict MSR access when the kernel is locked down · 95f5e95f
  Matthew Garrett authored 5 years ago
  95f5e95f
- x86: Lock down IO port access when the kernel is locked down · 96c4f672
  Matthew Garrett authored 5 years ago
  96c4f672
- PCI: Lock down BAR access when the kernel is locked down · eb627e17
  Matthew Garrett authored 5 years ago
  eb627e17
- hibernate: Disable when the kernel is locked down · 38bd94b8
  Josh Boyer authored 5 years ago
  38bd94b8
- kexec_load: Disable at runtime if the kernel is locked down · 7d31f460
  Matthew Garrett authored 5 years ago
  7d31f460
- lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down · 9b9d8dda
  Matthew Garrett authored 5 years ago
  9b9d8dda
- lockdown: Enforce module signatures if the kernel is locked down · 49fcf732
  David Howells authored 5 years ago
  49fcf732
- security: Add a static lockdown policy LSM · 000d388e
  Matthew Garrett authored 5 years ago
  000d388e