| 1f35c9c0ce38 ("x86/msr: Prevent userspace MSR access from dominating the console") |
| a7e1f67ed29f ("x86/msr: Filter MSR writes") |
| 95f5e95f41df ("x86/msr: Restrict MSR access when the kernel is locked down") |
| 96c4f67293e4 ("x86: Lock down IO port access when the kernel is locked down") |
| eb627e17727e ("PCI: Lock down BAR access when the kernel is locked down") |
| 38bd94b8a1bd ("hibernate: Disable when the kernel is locked down") |
| 7d31f4602f8d ("kexec_load: Disable at runtime if the kernel is locked down") |
| 9b9d8dda1ed7 ("lockdown: Restrict /dev/{mem,kmem,port} when the kernel is locked down") |
| 49fcf732bdae ("lockdown: Enforce module signatures if the kernel is locked down") |
| 000d388ed3bb ("security: Add a static lockdown policy LSM") |
| 9e47d31d6a57 ("security: Add a "locked down" LSM hook") |
| 2623c4fbe2ad ("LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make oldconfig"") |
| aeca4e2ca65c ("LSM: add SafeSetID module that gates setid calls") |
| d6aed64b74b7 ("Yama: Initialize as ordered LSM") |
| 70b62c25665f ("LoadPin: Initialize as ordered LSM") |
| 13e735c0e953 ("LSM: Introduce CONFIG_LSM") |
| 2d4d51198c73 ("LSM: Build ordered list of LSMs to initialize") |
| f4941d75b9cb ("LSM: Lift LSM selection out of individual LSMs") |
| 657d910b52a3 ("LSM: Provide separate ordered initialization") |
| 8636a1f9677d ("treewide: surround Kconfig file paths with double quotes") |
| 638820d8da8e ("Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security") |
