May 2017 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Mon May 1 09:41:19 UTC 2017
Ending: Wed May 31 22:56:18 UTC 2017
Messages: 616

• [GIT PULL] Security subsystem updates for v4.12   James Morris
• converting Documentation/security/* to .rst   Jonathan Corbet
  • converting Documentation/security/* to .rst   Kees Cook
    • converting Documentation/security/* to .rst   Jonathan Corbet
      • converting Documentation/security/* to .rst   Daniel Vetter
• [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   David Howells
• [PATCH 0/3] tpm_pcr_extend() code split   Roberto Sassu
  • [PATCH 1/3] tpm: use CPU native value for TPM_TAG_RQU_COMMAND   Roberto Sassu
  • [PATCH 2/3] tpm: move ordinals definition to include/linux/tpm_command.h   Roberto Sassu
    • [tpmdd-devel] [PATCH 2/3] tpm: move ordinals definition to include/linux/tpm_command.h   Jarkko Sakkinen
    • [tpmdd-devel] [PATCH 2/3] tpm: move ordinals definition to include/linux/tpm_command.h   Jarkko Sakkinen
      • [tpmdd-devel] [PATCH 2/3] tpm: move ordinals definition to include/linux/tpm_command.h   Roberto Sassu
      • [tpmdd-devel] [PATCH 2/3] tpm: move ordinals definition to include/linux/tpm_command.h   Jarkko Sakkinen
  • [PATCH 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Roberto Sassu
    • [PATCH 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Jarkko Sakkinen
• [PATCH RFC v2 5/6] proc: instantiate only pids that we can ptrace on 'limit_pids=1' mount option   Djalal Harouni
• [PATCH RFC v2 4/6] proc: support mounting private procfs instances inside same pid namespace   Djalal Harouni
  • [PATCH RFC v2 4/6] proc: support mounting private procfs instances inside same pid namespace   Andy Lutomirski
    • [PATCH RFC v2 4/6] proc: support mounting private procfs instances inside same pid namespace   Djalal Harouni
• [GIT PULL] Hardware module parameter annotation for secure boot   David Howells
• [PATCH trivial] security: Grammar s/allocates/allocated/   Geert Uytterhoeven
  • [PATCH trivial] security: Grammar s/allocates/allocated/   James Morris
• [PATCH 0/4] ima: builtin policy requiring file signatures   Mimi Zohar
  • [PATCH 1/4] ima: extend the "ima_policy" boot command line to support multiple policies   Mimi Zohar
  • [PATCH 2/4] ima: define a set of appraisal rules requiring file signatures   Mimi Zohar
  • [PATCH 3/4] ima: define Kconfig IMA_APPRAISE_BOOTPARAM option   Mimi Zohar
  • [PATCH 4/4] ima: define is_ima_appraise_enabled()   Mimi Zohar
• [PATCH 09/24] kexec_file: Disable at runtime if securelevel has been set   Mimi Zohar
•   H.A
• [PATCH v6 0/9] SELinux support for Infiniband RDMA   Paul Moore
  • [PATCH v6 0/9] SELinux support for Infiniband RDMA   Daniel Jurgens
    • [PATCH v6 0/9] SELinux support for Infiniband RDMA   Paul Moore
      • [PATCH v6 0/9] SELinux support for Infiniband RDMA   Paul Moore
• [PATCH v2 0/3] tpm_pcr_extend() code split   Roberto Sassu
  • [PATCH v2 1/3] tpm: move endianness conversion of TPM_TAG_RQU_COMMAND to tpm_input_header   Roberto Sassu
    • [tpmdd-devel] [PATCH v2 1/3] tpm: move endianness conversion of TPM_TAG_RQU_COMMAND to tpm_input_header   Jarkko Sakkinen
  • [PATCH v2 2/3] tpm: move endianness conversion of ordinals to tpm_input_header   Roberto Sassu
    • [PATCH v2 2/3] tpm: move endianness conversion of ordinals to tpm_input_header   Jarkko Sakkinen
  • [PATCH v2 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Roberto Sassu
    • [PATCH v2 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Jarkko Sakkinen
  • [PATCH v2 0/3] tpm_pcr_extend() code split   Jarkko Sakkinen
    • [PATCH v2 0/3] tpm_pcr_extend() code split   Roberto Sassu
    • [PATCH v2 0/3] tpm_pcr_extend() code split   Jarkko Sakkinen
  • [PATCH v2, RESEND 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Roberto Sassu
    • [PATCH v2, RESEND 3/3] tpm: move TPM 1.2 code of tpm_pcr_extend() to tpm1_pcr_extend()   Jarkko Sakkinen
• [PATCH v5 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Kees Cook
• [PATCH v4 1/2] tiocsti-restrict : Add owner user namespace to tty_struct   Kees Cook
  • [PATCH v4 1/2] tiocsti-restrict : Add owner user namespace to tty_struct   Greg KH
    • [PATCH v4 1/2] tiocsti-restrict : Add owner user namespace to tty_struct   Matt Brown
      • [PATCH v4 1/2] tiocsti-restrict : Add owner user namespace to tty_struct   Kees Cook
      • [kernel-hardening] Re: [PATCH v4 1/2] tiocsti-restrict : Add owner user namespace to tty_struct   Serge E. Hallyn
• [PATCH v2 1/3] tpm: vtpm_proxy: Add ioctl to get supported flags   Jarkko Sakkinen
• [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
  • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Stefan Berger
    • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Stefan Berger
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Stefan Berger
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Stefan Berger
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Stefan Berger
      • [PATCH v2 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command   Jarkko Sakkinen
• [PATCH v2 0/3] Extend the vTPM proxy driver to pass locality to emulator   Jarkko Sakkinen
  • [PATCH v2 0/3] Extend the vTPM proxy driver to pass locality to emulator   Stefan Berger
    • [PATCH v2 0/3] Extend the vTPM proxy driver to pass locality to emulator   Jarkko Sakkinen
• [PATCH v3 2/2] modules:capabilities: add a per-task modules autoload restriction   Djalal Harouni
  • [PATCH v3 2/2] modules:capabilities: add a per-task modules autoload restriction   Serge E. Hallyn
    • [PATCH v3 2/2] modules:capabilities: add a per-task modules autoload restriction   Djalal Harouni
  • [PATCH v3 2/2] modules:capabilities: add a per-task modules autoload restriction   Andy Lutomirski
• [PATCH v3 0/3] Extend the vTPM proxy driver to pass locality   Stefan Berger
  • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Stefan Berger
    • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Jason Gunthorpe
      • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Stefan Berger
      • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Jason Gunthorpe
      • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Stefan Berger
      • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Jason Gunthorpe
      • [PATCH v3 1/3] tpm: vtpm_proxy: Implement new ioctl to get supported flags   Stefan Berger
• [PATCH v3 2/3] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
• [PATCH v3 3/3] tpm: vtpm_proxy: Add flag for ioctl to request locality prepended to command   Stefan Berger
• [PATCH v2 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v2 2/2] selinux: expose policy brief via selinuxfs   Sebastien Buisson
  • [PATCH v2 1/2] selinux: add brief info to policydb   Casey Schaufler
    • [PATCH v2 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v2 1/2] selinux: add brief info to policydb   Stephen Smalley
• [PATCH v2 0/5] Updated API for TPM 2.0 PCR extend   Roberto Sassu
  • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Roberto Sassu
    • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Jarkko Sakkinen
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Roberto Sassu
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Roberto Sassu
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Jarkko Sakkinen
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Roberto Sassu
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Jarkko Sakkinen
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Roberto Sassu
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Jarkko Sakkinen
      • [PATCH v2 1/5] tpm: introduce tpm_pcr_algorithms()   Jarkko Sakkinen
  • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Roberto Sassu
    • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Jarkko Sakkinen
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Roberto Sassu
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Jarkko Sakkinen
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Roberto Sassu
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Jarkko Sakkinen
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Jarkko Sakkinen
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Roberto Sassu
      • [PATCH v2 2/5] tpm: introduce tpm_pcr_algo_to_crypto() and tpm_pcr_algo_from_crypto()   Jarkko Sakkinen
  • [PATCH v2 3/5] tpm: pass multiple digests to tpm_pcr_extend()   Roberto Sassu
    • [Linux-ima-devel] [PATCH v2 3/5] tpm: pass multiple digests to tpm_pcr_extend()   Mimi Zohar
      • [Linux-ima-devel] [PATCH v2 3/5] tpm: pass multiple digests to tpm_pcr_extend()   Roberto Sassu
      • [Linux-ima-devel] [PATCH v2 3/5] tpm: pass multiple digests to tpm_pcr_extend()   Mimi Zohar
      • [Linux-ima-devel] [PATCH v2 3/5] tpm: pass multiple digests to tpm_pcr_extend()   Roberto Sassu
  • [PATCH v2 4/5] keys, trusted: modify arguments of tpm_pcr_extend()   Roberto Sassu
    • [Linux-ima-devel] [PATCH v2 4/5] keys, trusted: modify arguments of tpm_pcr_extend()   Mimi Zohar
      • [Linux-ima-devel] [PATCH v2 4/5] keys, trusted: modify arguments of tpm_pcr_extend()   Roberto Sassu
      • [Linux-ima-devel] [PATCH v2 4/5] keys, trusted: modify arguments of tpm_pcr_extend()   Mimi Zohar
      • [Linux-ima-devel] [PATCH v2 4/5] keys, trusted: modify arguments of tpm_pcr_extend()   Roberto Sassu
  • [PATCH v2 5/5] ima: modify arguments of tpm_pcr_extend()   Roberto Sassu
• [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
  • [PATCH v6 1/2] security: tty: Add owner user namespace to tty_struct   Matt Brown
  • [PATCH v6 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
    • [PATCH v6 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Greg KH
      • [PATCH v6 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
  • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
    • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Daniel Micay
    • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Kees Cook
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Serge E. Hallyn
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Daniel Micay
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Kees Cook
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Serge E. Hallyn
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Serge E. Hallyn
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Peter Dolding
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v6 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Serge E. Hallyn
• [RFC 00/10] introduce crypto wait for async op function   Gilad Ben-Yossef
  • [RFC 01/10] crypto: factor async completion for general use   Gilad Ben-Yossef
    • [RFC 01/10] crypto: factor async completion for general use   Eric Biggers
      • [RFC 01/10] crypto: factor async completion for general use   Gilad Ben-Yossef
      • [RFC 01/10] crypto: factor async completion for general use   Eric Biggers
      • [RFC 01/10] crypto: factor async completion for general use   Gilad Ben-Yossef
  • [RFC 02/10] crypto: move pub key to generic async completion   Gilad Ben-Yossef
  • [RFC 03/10] crypto: move drbg to generic async completion   Gilad Ben-Yossef
  • [RFC 04/10] crypto: move gcm to generic async completion   Gilad Ben-Yossef
  • [RFC 05/10] crypto: move testmgr to generic async completion   Gilad Ben-Yossef
  • [RFC 06/10] dm: move dm-verity to generic async completion   Gilad Ben-Yossef
  • [RFC 07/10] fscrypt: move to generic async completion   Gilad Ben-Yossef
    • [RFC 07/10] fscrypt: move to generic async completion   Eric Biggers
  • [RFC 08/10] cifs: move to generic async completion   Gilad Ben-Yossef
    • [RFC 08/10] cifs: move to generic async completion   Pavel Shilovsky
  • [RFC 09/10] ima: move to generic async completion   Gilad Ben-Yossef
    • [RFC 09/10] ima: move to generic async completion   Mimi Zohar
  • [RFC 10/10] crypto: adapt api sample to use async. op wait   Gilad Ben-Yossef
• [PATCH] ima: use memdup_user_nul   Geliang Tang
  • [PATCH] ima: use memdup_user_nul   Mimi Zohar
• [PATCH 0/2] apparmorfs: Fine-tuning for three function implementations   SF Markus Elfring
  • [PATCH 1/2] apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()   SF Markus Elfring
  • [PATCH 2/2] apparmorfs: Use seq_putc() in two functions   SF Markus Elfring
• [PATCH 1/2] apparmorfs: Combine two function calls into one in aa_fs_seq_raw_abi_show()   John Johansen
• [PATCH 2/2] apparmorfs: Use seq_putc() in two functions   John Johansen
• [PATCH 0/3] IMA: Fine-tuning for three function implementations   SF Markus Elfring
  • [PATCH 1/3] ima: Use seq_putc() in ima_ascii_measurements_show()   SF Markus Elfring
  • [PATCH 3/3] ima: Replace nine seq_puts() calls by seq_putc()   SF Markus Elfring
  • [PATCH 0/3] IMA: Fine-tuning for three function implementations   Mimi Zohar
    • IMA: Fine-tuning for three function implementations   SF Markus Elfring
• [PATCH 2/3] ima: Combine two function calls into one in ima_policy_show()   SF Markus Elfring
• [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
  • [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
    • [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jason Gunthorpe
      • [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
      • [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Luc Van Oostenryck
      • [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
      • [tpmdd-devel] [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
      • [tpmdd-devel] [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jason Gunthorpe
      • [tpmdd-devel] [PATCH] tpm: fix byte order related arithmetic inconsistency in tpm_getcap()   Jarkko Sakkinen
• [PATCH v1] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Casey Schaufler
• [PATCH] key: Convert big_key payload.data to struct   Kees Cook
  • [PATCH] key: Convert big_key payload.data to struct   David Howells
    • [PATCH] key: Convert big_key payload.data to struct   Eric Biggers
      • [PATCH] key: Convert big_key payload.data to struct   David Howells
      • [PATCH] key: Convert big_key payload.data to struct   Eric Biggers
    • [PATCH] key: Convert big_key payload.data to struct   Kees Cook
      • [PATCH] key: Convert big_key payload.data to struct   David Howells
      • [PATCH] key: Convert big_key payload.data to struct   Kees Cook
• [PATCH] ima: Add cgroups2 to the defaults list   Laura Abbott
  • [PATCH] ima: Add cgroups2 to the defaults list   Mimi Zohar
• [PATCH v2] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Mickaël Salaün
  • [PATCH v2] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Kees Cook
• fix IMA deadlock   Christoph Hellwig
  • [PATCH] security/ima: use fs method to read integrity data   Christoph Hellwig
    • [PATCH] security/ima: use fs method to read integrity data   Boaz Harrosh
      • [PATCH] security/ima: use fs method to read integrity data   Christoph Hellwig
      • [PATCH] security/ima: use fs method to read integrity data   Boaz Harrosh
      • [PATCH] security/ima: use fs method to read integrity data   Mimi Zohar
      • [PATCH] security/ima: use fs method to read integrity data   Christoph Hellwig
      • [PATCH] security/ima: use fs method to read integrity data   Mimi Zohar
    • [PATCH] security/ima: use fs method to read integrity data   James Morris
    • [PATCH] security/ima: use fs method to read integrity data   Li Kun
      • [PATCH] security/ima: use fs method to read integrity data   Al Viro
      • [PATCH] security/ima: use fs method to read integrity data   Li Kun
• [PATCH v5 0/4] Certificate insertion support for x86 bzImages   Mehmet Kayaalp
  • [PATCH v5 1/4] KEYS: Insert incompressible bytes to reserve space in bzImage   Mehmet Kayaalp
  • [PATCH v5 2/4] KEYS: Add ELF class-independent certificate insertion support   Mehmet Kayaalp
  • [PATCH v5 3/4] KEYS: Support for inserting a certificate into x86 bzImage   Mehmet Kayaalp
  • [PATCH v5 4/4] KEYS: Print insert-sys-cert information to stdout instead of stderr   Mehmet Kayaalp
• [PATCH v3] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Mickaël Salaün
  • [PATCH v3] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Kees Cook
  • [PATCH v3] LSM: Enable multiple calls to security_add_hooks() for the same LSM   Casey Schaufler
  • [PATCH v3] LSM: Enable multiple calls to security_add_hooks() for the same LSM   James Morris
• [PATCH v4 0/2] Extend the vTPM proxy driver to pass locality   Stefan Berger
  • [PATCH v4 1/2] tpm: Refactor tpm_transmit pulling out tpm_transfer function   Stefan Berger
    • [PATCH v4 1/2] tpm: Refactor tpm_transmit pulling out tpm_transfer function   Stefan Berger
    • [PATCH v4 1/2] tpm: Refactor tpm_transmit pulling out tpm_transfer function   Jarkko Sakkinen
      • [PATCH v4 1/2] tpm: Refactor tpm_transmit pulling out tpm_transfer function   Stefan Berger
      • [PATCH v4 1/2] tpm: Refactor tpm_transmit pulling out tpm_transfer function   Stefan Berger
  • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
    • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
      • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
      • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
      • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
      • [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
    • [tpmdd-devel] [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Ken Goldman
      • [tpmdd-devel] [PATCH v4 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
• [RFC][Patch 0/3] securityfs: add the ability to support symlinks   John Johansen
  • [PATCH 1/3] securityfs: add the ability to support symlinks   John Johansen
    • [PATCH 1/3] securityfs: add the ability to support symlinks   Kees Cook
  • [PATCH 2/3] apparmor: move to per loaddata files, instead of replicating in profiles   John Johansen
    • [PATCH 2/3] apparmor: move to per loaddata files, instead of replicating in profiles   Kees Cook
  • [PATCH 3/3] apparmor: virtualize the policy/ directory   John Johansen
    • [PATCH 3/3] apparmor: virtualize the policy/ directory   Kees Cook
      • [PATCH 3/3] apparmor: virtualize the policy/ directory   John Johansen
• [PATCH v3 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v3 2/2] selinux: expose policy brief via selinuxfs   Sebastien Buisson
  • [PATCH v3 1/2] selinux: add brief info to policydb   Stephen Smalley
  • [PATCH v3 1/2] selinux: add brief info to policydb   Casey Schaufler
    • [PATCH v3 1/2] selinux: add brief info to policydb   Stephen Smalley
      • [PATCH v3 1/2] selinux: add brief info to policydb   Casey Schaufler
      • [PATCH v3 1/2] selinux: add brief info to policydb   Roberts, William C
      • [PATCH v3 1/2] selinux: add brief info to policydb   Paul Moore
      • [PATCH v3 1/2] selinux: add brief info to policydb   William Roberts
• [RFC 00/11] ima: namespace support for IMA policy   Guilherme Magalhaes
  • [RFC 01/11] ima: qualify pathname in audit info record   Guilherme Magalhaes
  • [RFC 02/11] ima: qualify pathname in audit measurement record   Guilherme Magalhaes
  • [RFC 03/11] ima: qualify pathname in measurement file   Guilherme Magalhaes
  • [RFC 04/11] ima: add support to namespace securityfs file   Guilherme Magalhaes
    • [RFC 04/11] ima: add support to namespace securityfs file   Tycho Andersen
    • [RFC 04/11] ima: add support to namespace securityfs file   Mimi Zohar
      • [RFC 04/11] ima: add support to namespace securityfs file   John Johansen
      • [RFC 04/11] ima: add support to namespace securityfs file   Mimi Zohar
      • [RFC 04/11] ima: add support to namespace securityfs file   Magalhaes, Guilherme (Brazil R&D-CL)
      • [RFC 04/11] ima: add support to namespace securityfs file   Mimi Zohar
      • [RFC 04/11] ima: add support to namespace securityfs file   Dr. Greg Wettstein
  • [RFC 05/11] ima: store new namespace policy structure in a radix tree   Guilherme Magalhaes
  • [RFC 06/11] ima, fs: release namespace policy resources   Guilherme Magalhaes
  • [RFC 07/11] ima: new namespace policy structure to track initial namespace policy data   Guilherme Magalhaes
  • [RFC 08/11] ima: block initial namespace id on the namespace policy interface   Guilherme Magalhaes
• [RFC 09/11] ima: delete namespace policy securityfs file in write-once mode   Guilherme Magalhaes
• [RFC 10/11] ima: handling all policy flags per namespace using ima_ns_policy structure   Guilherme Magalhaes
• [RFC 11/11] ima: appraise mode per namespace with new enforce_ns appraise mode   Guilherme Magalhaes
• [RFC 00/11] ima: namespace support for IMA policy   Magalhaes, Guilherme (Brazil R&D-CL)
• [RFC PATCH V2 0/4] capabilities: do not audit log BPRM_FCAPS on set*id   Richard Guy Briggs
  • [RFC PATCH V2 1/4] capabilities: use macros to make the logic easier to follow and verify   Richard Guy Briggs
    • [RFC PATCH V2 1/4] capabilities: use macros to make the logic easier to follow and verify   Serge E. Hallyn
      • [RFC PATCH V2 1/4] capabilities: use macros to make the logic easier to follow and verify   Richard Guy Briggs
    • [RFC PATCH V2 1/4] capabilities: use macros to make the logic easier to follow and verify   Serge E. Hallyn
  • [RFC PATCH V2 2/4] capabilities: invert logic for clarity   Richard Guy Briggs
  • [RFC PATCH V2 3/4] capabilities: fix logic for effective root or real root   Richard Guy Briggs
  • [RFC PATCH V2 4/4] capabilities: auit log other surprising conditions   Richard Guy Briggs
• setcap/getcap limitations   Richard Guy Briggs
  • setcap/getcap limitations   Serge E. Hallyn
• APPLY FOR YOUR URGENT LOAN AT 2%   Thomas Credit Firm
• [PATCH] KEYS: use memdup_user   Geliang Tang
• [PATCH 0/5] Convert more books to ReST   Mauro Carvalho Chehab
  • [PATCH 0/5] Convert more books to ReST   Boris Brezillon
    • [PATCH 0/5] Convert more books to ReST   Jonathan Corbet
      • [PATCH 0/5] Convert more books to ReST   Boris Brezillon
    • [PATCH 0/5] Convert more books to ReST   Mauro Carvalho Chehab
• [PATCH 00/17] convert/reorganize Documentation/security/   Kees Cook
  • [PATCH 01/17] doc: ReSTify seccomp_filter.txt   Kees Cook
  • [PATCH 02/17] doc: ReSTify no_new_privs.txt   Kees Cook
  • [PATCH 03/17] doc: ReSTify IMA-templates.txt   Kees Cook
  • [PATCH 04/17] doc: ReSTify credentials.txt   Kees Cook
  • [PATCH 05/17] doc: ReSTify self-protection.txt   Kees Cook
  • [PATCH 06/17] doc: security: minor cleanups to build kernel-doc   Kees Cook
    • [PATCH 06/17] doc: security: minor cleanups to build kernel-doc   James Morris
      • [PATCH 06/17] doc: security: minor cleanups to build kernel-doc   Jonathan Corbet
    • [PATCH 06/17] doc: security: minor cleanups to build kernel-doc   Casey Schaufler
      • [PATCH 06/17] doc: security: minor cleanups to build kernel-doc   Kees Cook
  • [PATCH 07/17] doc: ReSTify and split LSM.txt   Kees Cook
  • [PATCH 08/17] doc: ReSTify SELinux.txt   Kees Cook
    • [PATCH 08/17] doc: ReSTify SELinux.txt   Paul Moore
  • [PATCH 09/17] doc: ReSTify apparmor.txt   Kees Cook
    • [PATCH 09/17] doc: ReSTify apparmor.txt   John Johansen
  • [PATCH 10/17] doc: ReSTify tomoyo.txt   Kees Cook
    • [PATCH 10/17] doc: ReSTify tomoyo.txt   Tetsuo Handa
  • [PATCH 11/17] doc: ReSTify Yama.txt   Kees Cook
  • [PATCH 12/17] doc: ReSTify LoadPin.txt   Kees Cook
  • [PATCH 13/17] doc: ReSTify Smack.txt   Kees Cook
    • [PATCH 13/17] doc: ReSTify Smack.txt   Casey Schaufler
  • [PATCH 14/17] doc: ReSTify keys.txt   Kees Cook
  • [PATCH 15/17] doc: ReSTify keys-ecryptfs.txt   Kees Cook
  • [PATCH 16/17] doc: ReSTify keys-request-key.txt   Kees Cook
  • [PATCH 17/17] doc: ReSTify keys-trusted-encrypted.txt   Kees Cook
  • [PATCH 00/17] convert/reorganize Documentation/security/   Jonathan Corbet
    • [PATCH 00/17] convert/reorganize Documentation/security/   Kees Cook
  • [PATCH 00/17] convert/reorganize Documentation/security/   Jonathan Corbet
    • [PATCH 00/17] convert/reorganize Documentation/security/   Kees Cook
• [PATCH] tomoyo: Update URLs in Documentation/security/tomoyo.txt   Tetsuo Handa
• [PATCH v5 0/2] Extend the vTPM proxy driver to pass locality   Stefan Berger
  • [PATCH v5 1/2] tpm: Introduce flag TPM_TRANSMIT_RAW   Stefan Berger
    • [PATCH v5 1/2] tpm: Introduce flag TPM_TRANSMIT_RAW   Jarkko Sakkinen
  • [PATCH v5 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
    • [PATCH v5 2/2] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
      • [PATCH v5 2/2] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
      • [PATCH v5 2/2] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
• [PATCH v4 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v4 2/2] selinux: expose policy brief via selinuxfs   Sebastien Buisson
  • [PATCH v4 1/2] selinux: add brief info to policydb   Christoph Hellwig
  • [PATCH v4 1/2] selinux: add brief info to policydb   Stephen Smalley
• [PATCH v5 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v5 2/2] selinux: expose policy brief via selinuxfs   Sebastien Buisson
  • [PATCH v5 1/2] selinux: add brief info to policydb   Stephen Smalley
    • [PATCH v5 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v5 1/2] selinux: add brief info to policydb   William Roberts
      • [PATCH v5 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v5 1/2] selinux: add brief info to policydb   William Roberts
      • [PATCH v5 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v5 1/2] selinux: add brief info to policydb   William Roberts
      • [PATCH v5 1/2] selinux: add brief info to policydb   William Roberts
      • [PATCH v5 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v5 1/2] selinux: add brief info to policydb   William Roberts
      • [PATCH v5 1/2] selinux: add brief info to policydb   Stephen Smalley
• [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Roberto Sassu
  • [PATCH 1/7] ima: introduce ima_parse_buf()   Roberto Sassu
  • [PATCH 2/7] ima: use ima_parse_buf() to parse measurements headers   Roberto Sassu
  • [PATCH 3/7] ima: use ima_parse_buf() to parse template data   Roberto Sassu
  • [PATCH 4/7] ima: declare get_binary_runtime_size() as non-static   Roberto Sassu
  • [PATCH 5/7] ima: add securityfs interface to save a measurements list with kexec header   Roberto Sassu
  • [PATCH 6/7] ima: add securityfs interface to restore a measurements list   Roberto Sassu
  • [PATCH 7/7] ima: fix get_binary_runtime_size()   Roberto Sassu
  • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Ken Goldman
    • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Roberto Sassu
      • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Ken Goldman
      • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Roberto Sassu
      • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Ken Goldman
      • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Roberto Sassu
      • [Linux-ima-devel] [PATCH 0/7] IMA: new parser for ima_restore_measurement_list()   Ken Goldman
• [PATCH] selinux: Use task_alloc hook rather than task_create hook   Paul Moore
• [PATCH 1/3] selinux: Return directly after a failed memory allocation in policydb_index()   Paul Moore
• [PATCH 2/3] selinux: Return an error code only as a constant in sidtab_insert()   Paul Moore
• [PATCH 3/3] selinux: Use an other error code for an input validation failure in sidtab_insert()   Paul Moore
  • selinux: Use an other error code for an input validation failure in sidtab_insert()   SF Markus Elfring
• [PATCH v6 1/2] selinux: add brief info to policydb   Sebastien Buisson
  • [PATCH v6 2/2] selinux: expose policy brief via selinuxfs   Sebastien Buisson
  • [PATCH v6 1/2] selinux: add brief info to policydb   Stephen Smalley
    • [PATCH v6 1/2] selinux: add brief info to policydb   William Roberts
  • [PATCH v6 1/2] selinux: add brief info to policydb   Paul Moore
    • [PATCH v6 1/2] selinux: add brief info to policydb   Stephen Smalley
      • [PATCH v6 1/2] selinux: add brief info to policydb   Stephen Smalley
      • [PATCH v6 1/2] selinux: add brief info to policydb   Paul Moore
      • [PATCH v6 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v6 1/2] selinux: add brief info to policydb   Paul Moore
      • [PATCH v6 1/2] selinux: add brief info to policydb   Sebastien Buisson
      • [PATCH v6 1/2] selinux: add brief info to policydb   Stephen Smalley
      • [PATCH v6 1/2] selinux: add brief info to policydb   Sebastien Buisson
• [PATCH] selinux: Mark array 'labeling_behaviors' as __maybe_unused   Matthias Kaehlcke
  • [PATCH] selinux: Mark array 'labeling_behaviors' as __maybe_unused   Paul Moore
    • [PATCH] selinux: Mark array 'labeling_behaviors' as __maybe_unused   Stephen Smalley
      • [PATCH] selinux: Mark array 'labeling_behaviors' as __maybe_unused   Matthias Kaehlcke
• [PATCH v7 0/9] SELinux support for Infiniband RDMA   Dan Jurgens
  • [PATCH v7 2/9] IB/core: Enforce PKey security on QPs   Dan Jurgens
    • [PATCH v7 2/9] IB/core: Enforce PKey security on QPs   Paul Moore
    • [PATCH v7 2/9] IB/core: Enforce PKey security on QPs   James Morris
      • [PATCH v7 2/9] IB/core: Enforce PKey security on QPs   Daniel Jurgens
      • [PATCH v7 2/9] IB/core: Enforce PKey security on QPs   Paul Moore
  • [PATCH v7 3/9] selinux lsm IB/core: Implement LSM notification system   Dan Jurgens
    • [PATCH v7 3/9] selinux lsm IB/core: Implement LSM notification system   James Morris
  • [PATCH v7 4/9] IB/core: Enforce security on management datagrams   Dan Jurgens
    • [PATCH v7 4/9] IB/core: Enforce security on management datagrams   Paul Moore
      • [PATCH v7 4/9] IB/core: Enforce security on management datagrams   Daniel Jurgens
  • [PATCH v7 5/9] selinux: Create policydb version for Infiniband support   Dan Jurgens
    • [PATCH v7 5/9] selinux: Create policydb version for Infiniband support   James Morris
  • [PATCH v7 6/9] selinux: Allocate and free infiniband security hooks   Dan Jurgens
    • [PATCH v7 6/9] selinux: Allocate and free infiniband security hooks   James Morris
  • [PATCH v7 7/9] selinux: Implement Infiniband PKey "Access" access vector   Dan Jurgens
    • [PATCH v7 7/9] selinux: Implement Infiniband PKey "Access" access vector   James Morris
  • [PATCH v7 8/9] selinux: Add IB Port SMP access vector   Dan Jurgens
    • [PATCH v7 8/9] selinux: Add IB Port SMP access vector   James Morris
  • [PATCH v7 9/9] selinux: Add a cache for quicker retreival of PKey SIDs   Dan Jurgens
  • [PATCH v7 0/9] SELinux support for Infiniband RDMA   Daniel Jurgens
    • [PATCH v7 0/9] SELinux support for Infiniband RDMA   Paul Moore
      • [PATCH v7 0/9] SELinux support for Infiniband RDMA   Daniel Jurgens
  • [PATCH v7 0/9] SELinux support for Infiniband RDMA   James Morris
    • [PATCH v7 0/9] SELinux support for Infiniband RDMA   Daniel Jurgens
    • [PATCH v7 0/9] SELinux support for Infiniband RDMA   Paul Moore
• [PATCH v7 1/9] IB/core: IB cache enhancements to support Infiniband security   Dan Jurgens
  • [PATCH v7 1/9] IB/core: IB cache enhancements to support Infiniband security   James Morris
• [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   Ard Biesheuvel
  • [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   David Howells
    • [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   Ard Biesheuvel
• [PATCH] selinux: Remove redundant check for unknown labeling behavior   Matthias Kaehlcke
  • [PATCH] selinux: Remove redundant check for unknown labeling behavior   Stephen Smalley
  • [PATCH] selinux: Remove redundant check for unknown labeling behavior   Paul Moore
• [PATCH 0/8] CaitSith LSM module   Tetsuo Handa
  • [PATCH 0/8] CaitSith LSM module   John Johansen
    • [PATCH 0/8] CaitSith LSM module   Tetsuo Handa
• [PATCH] KEYS: Delete an error message for a failed memory allocation in get_derived_key()   SF Markus Elfring
• [PATCH] LSM: Make security_hook_heads a local variable.   Tetsuo Handa
  • [PATCH] LSM: Make security_hook_heads a local variable.   Christoph Hellwig
    • [PATCH] LSM: Make security_hook_heads a local variable.   Casey Schaufler
      • [PATCH] LSM: Make security_hook_heads a local variable.   Igor Stoppa
      • [PATCH] LSM: Make security_hook_heads a local variable.   Casey Schaufler
      • [PATCH] LSM: Make security_hook_heads a local variable.   Tetsuo Handa
• security-next merged to v4.12-rc2   James Morris
  • security-next merged to v4.12-rc2   Casey Schaufler
• [PATCH v4 next 0/3] modules: automatic module loading restrictions   Djalal Harouni
  • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Solar Designer
    • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Djalal Harouni
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Solar Designer
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Djalal Harouni
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Kees Cook
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Andy Lutomirski
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Kees Cook
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Djalal Harouni
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Solar Designer
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Kees Cook
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Andy Lutomirski
      • [kernel-hardening] [PATCH v4 next 0/3] modules: automatic module loading restrictions   Djalal Harouni
• [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Djalal Harouni
  • [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Kees Cook
    • [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Djalal Harouni
      • [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Kees Cook
      • [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Djalal Harouni
      • [PATCH v4 next 1/3] modules:capabilities: allow __request_module() to take a capability argument   Kees Cook
• [PATCH v4 next 2/3] modules:capabilities: automatic module loading restriction   Djalal Harouni
  • [PATCH v4 next 2/3] modules:capabilities: automatic module loading restriction   Kees Cook
• [PATCH v4 next 3/3] modules:capabilities: add a per-task modules auto-load mode   Djalal Harouni
  • [PATCH v4 next 3/3] modules:capabilities: add a per-task modules auto-load mode   kbuild test robot
• [PATCH v8 2/9] IB/core: Enforce PKey security on QPs   Dan Jurgens
  • [PATCH v8 2/9] IB/core: Enforce PKey security on QPs   Paul Moore
• [PATCH] apparmor: Fix error cod in __aa_fs_profile_mkdir()   Dan Carpenter
  • [PATCH] apparmor: Fix error cod in __aa_fs_profile_mkdir()   walter harms
    • [PATCH] apparmor: Fix error cod in __aa_fs_profile_mkdir()   John Johansen
  • [PATCH] apparmor: Fix error cod in __aa_fs_profile_mkdir()   John Johansen
• [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   David Howells
  • [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   Ard Biesheuvel
    • [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   David Howells
      • [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   Ard Biesheuvel
      • [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   David Howells
      • [PATCH 0/5] security, efi: Set lockdown if in secure boot mode   Ard Biesheuvel
• [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   David Howells
  • [PATCH 1/5] efi: Move the x86 secure boot switch to generic code   joeyli
• [PATCH 2/5] efi: Add EFI_SECURE_BOOT bit   David Howells
  • [PATCH 2/5] efi: Add EFI_SECURE_BOOT bit   joeyli
• [PATCH 3/5] Add the ability to lock down access to the running kernel image   David Howells
  • [PATCH 3/5] Add the ability to lock down access to the running kernel image   Casey Schaufler
    • [PATCH 3/5] Add the ability to lock down access to the running kernel image   David Howells
      • [PATCH 3/5] Add the ability to lock down access to the running kernel image   Casey Schaufler
      • [PATCH 3/5] Add the ability to lock down access to the running kernel image   David Howells
      • [PATCH 3/5] Add the ability to lock down access to the running kernel image   joeyli
  • [PATCH 3/5] Add the ability to lock down access to the running kernel image   joeyli
• [PATCH 4/5] efi: Lock down the kernel if booted in secure boot mode   David Howells
  • [PATCH 4/5] efi: Lock down the kernel if booted in secure boot mode   joeyli
• [PATCH 5/5] Add a sysrq option to exit secure boot mode   David Howells
  • [PATCH 5/5] Add a sysrq option to exit secure boot mode   joeyli
  • [PATCH 5/5] Add a sysrq option to exit secure boot mode   James Morris
• [PATCH] tpm, tpm_infineon: remove useless snprintf() calls   Jarkko Sakkinen
  • [PATCH] tpm, tpm_infineon: remove useless snprintf() calls   Jarkko Sakkinen
    • Aw: Re: [PATCH] tpm, tpm_infineon: remove useless snprintf() calls   Peter Huewe
      • [PATCH] tpm, tpm_infineon: remove useless snprintf() calls   Jarkko Sakkinen
• [PATCH v6 0/3] Extend the vTPM proxy driver to pass locality   Stefan Berger
  • [PATCH v6 1/3] tpm: Introduce flag TPM_TRANSMIT_RAW   Stefan Berger
    • [PATCH v6 1/3] tpm: Introduce flag TPM_TRANSMIT_RAW   Jarkko Sakkinen
      • [PATCH v6 1/3] tpm: Introduce flag TPM_TRANSMIT_RAW   Stefan Berger
  • [PATCH v6 2/3] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
    • [PATCH v6 2/3] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
      • [PATCH v6 2/3] tpm: vtpm_proxy: Implement request_locality function.   Stefan Berger
      • [PATCH v6 2/3] tpm: vtpm_proxy: Implement request_locality function.   Jarkko Sakkinen
  • [PATCH v6 3/3] tpm: vtpm_proxy: Prevent userspace from sending driver command   Stefan Berger
    • [PATCH v6 3/3] tpm: vtpm_proxy: Prevent userspace from sending driver command   Jarkko Sakkinen
      • [tpmdd-devel] [PATCH v6 3/3] tpm: vtpm_proxy: Prevent userspace from sending driver command   Jarkko Sakkinen
• [PATCH] tpm: remove struct tpm_pcrextend_in   Jarkko Sakkinen
  • [PATCH] tpm: remove struct tpm_pcrextend_in   Jarkko Sakkinen
    • Aw: Re: [PATCH] tpm: remove struct tpm_pcrextend_in   Peter Huewe
• [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Stefan Berger
  • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Jason Gunthorpe
    • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Stefan Berger
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Jason Gunthorpe
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Stefan Berger
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Jason Gunthorpe
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Stefan Berger
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Jason Gunthorpe
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Jarkko Sakkinen
      • [PATCH] tpm: vtpm_proxy: Do not run tpm2_shutdown   Stefan Berger
• [Patch v2 0/8] securityfs: add the ability to support symlinks   John Johansen
  • [PATCH 1/8] securityfs: add the ability to support symlinks   John Johansen
  • [PATCH 2/8] apparmor: move to per loaddata files, instead of replicating in profiles   John Johansen
  • [PATCH 3/8] apparmor: use macro template to simplify profile seq_files   John Johansen
  • [PATCH 4/8] apparmor: use macro template to simplify namespace seq_files   John Johansen
  • [PATCH 5/8] apparmor: add custom apparmorfs that will be used by policy namespace files   John Johansen
  • [PATCH 6/8] apparmor: rename apparmor file fns and data to indicate use   John Johansen
  • [PATCH 7/8] apparmor: allow specifying an already created dir to create ns entries in   John Johansen
  • [PATCH 8/8] apparmor: convert from securityfs to apparmorfs for policy ns files   John Johansen
• [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf   Jarkko Sakkinen
  • [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf   Jason Gunthorpe
    • [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf   Jarkko Sakkinen
      • [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf   Jason Gunthorpe
      • [PATCH RFC] tpm: migrate pubek_show to struct tpm_buf   Jarkko Sakkinen
• [PATCH v2] tpm: vtpm_proxy: Suppresse error logging when in closed state   Stefan Berger
  • [PATCH v2] tpm: vtpm_proxy: Suppresse error logging when in closed state   Joe Perches
  • [PATCH v2] tpm: vtpm_proxy: Suppresse error logging when in closed state   Jarkko Sakkinen
• [PATCH v3] tpm: vtpm_proxy: Suppress error logging when in closed state   Stefan Berger
  • [PATCH v3] tpm: vtpm_proxy: Suppress error logging when in closed state   Jarkko Sakkinen
• [PATCH] KEYS: fix refcount_inc() on zero   Mark Rutland
  • [PATCH] KEYS: fix refcount_inc() on zero   Kees Cook
  • [PATCH] KEYS: fix refcount_inc() on zero   David Howells
    • [PATCH] KEYS: fix refcount_inc() on zero   Mark Rutland
• [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
  • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Casey Schaufler
    • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
  • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Kees Cook
    • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Casey Schaufler
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   James Morris
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Alan Cox
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   James Morris
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   James Morris
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Alan Cox
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   Alan Cox
      • [PATCH] LSM: Convert security_hook_heads into explicit array of struct list_head   José Bollo
  • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   Tetsuo Handa
    • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   Kees Cook
    • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   Casey Schaufler
    • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   James Morris
      • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   Igor Stoppa
      • [PATCH v2] LSM: Convert security_hook_heads into explicit array of struct list_head   James Morris
• [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast   Kees Cook
  • [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast   Tetsuo Handa
    • [kernel-hardening] Re: [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast   Kees Cook
  • [PATCH v2 05/20] randstruct: Whitelist struct security_hook_heads cast   James Morris
• [PATCH v2 00/11] introduce crypto wait for async op   Gilad Ben-Yossef
• [PATCH v2 01/11] crypto: introduce crypto wait for async op   Gilad Ben-Yossef
• [PATCH v2 02/11] crypto: move algif to generic async completion   Gilad Ben-Yossef
• [PATCH v2 03/11] crypto: move pub key to generic async completion   Gilad Ben-Yossef
• [PATCH v2 04/11] crypto: move drbg to generic async completion   Gilad Ben-Yossef
• [PATCH v2 05/11] crypto: move gcm to generic async completion   Gilad Ben-Yossef
• [PATCH v2 06/11] crypto: move testmgr to generic async completion   Gilad Ben-Yossef
• [PATCH v2 07/11] dm: move dm-verity to generic async completion   Gilad Ben-Yossef
• [PATCH v2 08/11] fscrypt: move to generic async completion   Gilad Ben-Yossef
• [PATCH v2 09/11] cifs: move to generic async completion   Gilad Ben-Yossef
• [PATCH v2 10/11] ima: move to generic async completion   Gilad Ben-Yossef
• [PATCH v2 11/11] crypto: adapt api sample to use async. op wait   Gilad Ben-Yossef
• [PATCH v7 0/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
  • [PATCH v7 1/2] security: tty: Add owner user namespace to tty_struct   Matt Brown
  • [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
    • [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Boris Lukashev
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Casey Schaufler
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Casey Schaufler
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Daniel Micay
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Stephen Smalley
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Nick Kralevich
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Daniel Micay
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Daniel Micay
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Alan Cox
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Casey Schaufler
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   James Morris
      • [kernel-hardening] Re: [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
      • [PATCH v7 2/2] security: tty: make TIOCSTI ioctl require CAP_SYS_ADMIN   Matt Brown
• [RFC 0/3] WhiteEgret LSM module   Masanobu Koike
  • [RFC 0/3] WhiteEgret LSM module   Casey Schaufler
  • [RFC 0/3] WhiteEgret LSM module   Matthew Garrett
    • [RFC 0/3] WhiteEgret LSM module   Peter Dolding
      • [RFC 0/3] WhiteEgret LSM module   Casey Schaufler
      • [RFC 0/3] WhiteEgret LSM module   Serge E. Hallyn
      • [RFC 0/3] WhiteEgret LSM module   Mehmet Kayaalp
• [RFC 1/3] WhiteEgret: Add WhiteEgret core functions.   Masanobu Koike
  • [RFC 1/3] WhiteEgret: Add WhiteEgret core functions.   Serge E. Hallyn
  • [RFC 1/3] WhiteEgret: Add WhiteEgret core functions.   Casey Schaufler
• [RFC 2/3] WhiteEgret: Add device driver.   Masanobu Koike
• [RFC 3/3] WhiteEgret: Add an example of user application.   Masanobu Koike
• [RFC][PATCH] audit: add ambient capabilities to CAPSET and BPRM_FCAPS records   Paul Moore
• namespaces todo list?   Paul Moore
• namespaces todo list?   Jessica Frazelle
• namespaces todo list?   Jessica Frazelle
• [PATCH] Smack: Safer check for a socket in file_receive   Casey Schaufler
• namespaces todo list?   Jessica Frazelle
• namespaces todo list?   Jessica Frazelle
• namespaces todo list?   Jessica Frazelle
• [PATCH] KEYS: fix freeing uninitialized memory in key_update()   Eric Biggers
• [PATCH] KEYS: fix dereferencing NULL payload with nonzero length   Eric Biggers
• [PATCH] Smack: Use cap_capable in privilege check   Casey Schaufler

Last message date: Wed May 31 22:56:18 UTC 2017
Archived on: Wed May 31 22:57:25 UTC 2017

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...