linux

mirror of https://github.com/hardkernel/linux.git synced 2026-04-10 06:58:08 +09:00

Files

Jeff Vander Stoep 934f4983c7 FROMLIST: security,perf: Allow further restriction of perf_event_open

When kernel.perf_event_open is set to 3 (or greater), disallow all
access to performance events by users without CAP_SYS_ADMIN.
Add a Kconfig symbol CONFIG_SECURITY_PERF_EVENTS_RESTRICT that
makes this value the default.

This is based on a similar feature in grsecurity
(CONFIG_GRKERNSEC_PERF_HARDEN).  This version doesn't include making
the variable read-only.  It also allows enabling further restriction
at run-time regardless of whether the default is changed.

https://lkml.org/lkml/2016/1/11/587

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

Bug: 29054680
Change-Id: Iff5bff4fc1042e85866df9faa01bce8d04335ab8

2016-06-16 13:44:10 +05:30

apparmor

apparmor: clarify CRYPTO dependency

2015-10-22 11:11:28 +11:00

integrity

EVM: Use crypto_memneq() for digest comparisons

2016-02-17 12:31:04 -08:00

keys

UPSTREAM: KEYS: Fix keyring ref leak in join_session_keyring()

2016-02-16 13:54:23 -08:00

selinux

quick selinux support for tracefs