Stephen Smalley 0efb1c6907 selinux: randomize layout of key structures ...

Randomize the layout of key selinux data structures.
Initially this is applied to the selinux_state, selinux_ss,
policydb, and task_security_struct data structures.

NB To test/use this mechanism, one must install the
necessary build-time dependencies, e.g. gcc-plugin-devel on Fedora,
and enable CONFIG_GCC_PLUGIN_RANDSTRUCT in the kernel configuration.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Reviewed-by: Kees Cook <keescook@chromium.org>
[PM: double semi-colon fixed]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Yaroslav Furman <yaro330@gmail.com>
Signed-off-by: UtsavBalar1231 <utsavbalar1231@gmail.com>

2020-08-15 21:16:38 +05:30

..

apparmor

Merge 4.14.187 into android-4.14-stable

2020-07-01 12:51:55 +02:00

integrity

evm: Fix possible memory leak in evm_calc_hmac_or_hash()

2020-06-20 10:25:15 +02:00

keys

Merge 4.14.185 into android-4.14-stable

2020-06-22 11:22:58 +02:00

loadpin

…

pfe

Merge tag 'LV.AU.0.1.0.r1-11000-gen3meta.0' into q

2020-07-23 13:40:08 +05:30

selinux

selinux: randomize layout of key structures

2020-08-15 21:16:38 +05:30

smack

Smack: slab-out-of-bounds in vsscanf

2020-06-20 10:25:05 +02:00

tomoyo

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

yama

Yama: Check for pid death before checking ancestry

2019-01-23 08:09:48 +01:00

commoncap.c

Merge remote-tracking branch 'kernel-common/android-4.14-stable' into LE.UM.4.2.1.r1.3

2020-06-14 13:43:25 +05:30

device_cgroup.c

device_cgroup: fix RCU imbalance in error case

2019-04-27 09:35:40 +02:00

inode.c

Merge 4.14.122 into android-4.14-q

2019-05-27 09:37:12 +02:00

Kconfig

Revert "Revert "ANDROID: security,perf: Allow further restriction of perf_event_open""

2020-07-11 20:18:24 +05:30

Kconfig.hardening

BACKPORT: mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options

2019-08-28 15:20:59 +02:00

lsm_audit.c

missing barriers in some of unix_sock ->addr and ->path accesses

2019-03-19 13:13:24 +01:00

Makefile

Enable hardware based FBE on f2fs and adapt ext4 fs

2018-08-22 10:56:07 -07:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

Merge remote-tracking branch 'kernel-common/android-4.14-stable' into LE.UM.4.2.1.r1.3

2020-06-14 13:43:25 +05:30