November 2021 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Mon Nov 1 08:00:25 UTC 2021
Ending: Tue Nov 30 20:27:15 UTC 2021
Messages: 366

• [PATCH v4 4/5] crypto: caam - add in-kernel interface for blob generator   Ahmad Fatoum
  • [PATCH v4 4/5] crypto: caam - add in-kernel interface for blob generator   Ahmad Fatoum
• Hello Dear,   Aisha AG
• [GIT PULL] hardening updates for v5.16-rc1   Kees Cook
  • [GIT PULL] hardening updates for v5.16-rc1   pr-tracker-bot at kernel.org
• [PATCH RESEND] KEYS: trusted: Fix trusted key backends when building as module   andreas at rammhold.de
  • [PATCH RESEND] KEYS: trusted: Fix trusted key backends when building as module   Ahmad Fatoum
• [GIT PULL] Smack patches for v5.16   Casey Schaufler
  • [GIT PULL] Smack patches for v5.16   pr-tracker-bot at kernel.org
• [GIT PULL] SELinux patches for v5.16   Paul Moore
  • [GIT PULL] SELinux patches for v5.16   Linus Torvalds
    • [GIT PULL] SELinux patches for v5.16   Paul Moore
      • [GIT PULL] SELinux patches for v5.16   Linus Torvalds
      • [GIT PULL] SELinux patches for v5.16   Linus Torvalds
      • [GIT PULL] SELinux patches for v5.16   Paul Moore
  • [GIT PULL] SELinux patches for v5.16   pr-tracker-bot at kernel.org
• [PATCHv2 net 0/4] security: fixups for the security hooks in sctp   Xin Long
  • [PATCHv2 net 1/4] security: pass asoc to sctp_assoc_request and sctp_sk_clone   Xin Long
  • [PATCHv2 net 2/4] security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce   Xin Long
  • [PATCHv2 net 3/4] security: add sctp_assoc_established hook   Xin Long
  • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
    • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Ondrej Mosnacek
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Paul Moore
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Paul Moore
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Richard Haines
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Ondrej Mosnacek
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Paul Moore
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   David Miller
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Paul Moore
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Xin Long
      • [PATCHv2 net 4/4] security: implement sctp_assoc_established hook in selinux   Paul Moore
  • [PATCHv2 net 0/4] security: fixups for the security hooks in sctp   patchwork-bot+netdevbpf at kernel.org
• [PATCH v2 2/2] fuse: Send security context of inode on file creation   Miklos Szeredi
  • [PATCH v2 2/2] fuse: Send security context of inode on file creation   Vivek Goyal
    • [PATCH v2 2/2] fuse: Send security context of inode on file creation   Miklos Szeredi
      • [PATCH v2 2/2] fuse: Send security context of inode on file creation   Vivek Goyal
• [RFC PATCH v7 07/16] ipe: add auditing support   Steve Grubb
  • [RFC PATCH v7 07/16] ipe: add auditing support   Deven Bowers
• [PATCH] landlock: Initialize kernel stack variables properly   Austin Kim
  • [PATCH] landlock: Initialize kernel stack variables properly   Mickaël Salaün
    • [PATCH] landlock: Initialize kernel stack variables properly   Austin Kim
      • [PATCH] landlock: Initialize kernel stack variables properly   J Freyensee
• [PATCH] smack: clean up smack_enabled to be more readable   Austin Kim
  • [PATCH] smack: clean up smack_enabled to be more readable   Casey Schaufler
    • [PATCH] smack: clean up smack_enabled to be more readable   Austin Kim
• [PATCH] apparmor: remove duplicated 'Returns:' comments   Austin Kim
  • [PATCH] apparmor: remove duplicated 'Returns:' comments   John Johansen
• [RFC PATCH v7 04/16] ipe: add userspace interface   Roberto Sassu
  • [RFC PATCH v7 04/16] ipe: add userspace interface   Deven Bowers
• [PATCH v4 0/4] Add Landlock man pages   Mickaël Salaün
  • [PATCH v4 0/4] Add Landlock man pages   Alejandro Colomar (man-pages)
• [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature   Roberto Sassu
  • [RFC PATCH v7 12/16] fsverity|security: add security hooks to fsverity digest and signature   Deven Bowers
• [RFC PATCH v7 14/16] scripts: add boot policy generation program   Roberto Sassu
  • [RFC PATCH v7 14/16] scripts: add boot policy generation program   Roberto Sassu
    • [RFC PATCH v7 14/16] scripts: add boot policy generation program   Deven Bowers
• Disassociating ima_filter_rule* from security_audit_rule*   Casey Schaufler
  • Disassociating ima_filter_rule* from security_audit_rule*   Paul Moore
• [PATCH RFC] integrity: disassociate ima_filter_rule from security_audit_rule   Casey Schaufler
  • [PATCH RFC] integrity: disassociate ima_filter_rule from security_audit_rule   Mimi Zohar
• [PATCH 0/2] Additional appended signature cleanup   Michal Suchanek
  • [PATCH 1/2] module: Use key_being_used_for for log messages in verify_appended_signature   Michal Suchanek
  • [PATCH 2/2] module: Move duplicate mod_check_sig users code to mod_parse_sig   Michal Suchanek
• [PATCH v3] integrity: support including firmware ".platform" keys at build time   Dimitri John Ledkov
  • [PATCH v3] integrity: support including firmware ".platform" keys at build time   Nayna
• Dear Friend,   Mrs Aisha Al-Qaddafi
  • Dear Friend,   Mrs Aisha Al-Qaddafi
• No subject   Amadou Benjamin
• MY HEART CHOOSE YOU.   Maria Schaefler
• [PATCH AUTOSEL 5.15 018/146] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 5.15 021/146] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 5.14 016/138] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 5.14 019/138] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 5.10 015/101] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 5.10 017/101] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 5.4 13/74] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 5.4 14/74] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 4.19 09/47] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 4.19 10/47] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
  • [PATCH AUTOSEL 4.19 10/47] NET: IPV4: fix error "do not initialise globals to 0"   Joe Perches
    • [PATCH AUTOSEL 4.19 10/47] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 4.19 37/47] smackfs: use __GFP_NOFAIL for smk_cipso_doi()   Sasha Levin
• [PATCH AUTOSEL 4.14 07/39] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 4.14 08/39] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 4.14 32/39] smackfs: use __GFP_NOFAIL for smk_cipso_doi()   Sasha Levin
• [PATCH AUTOSEL 4.9 07/33] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 4.9 08/33] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 4.9 28/33] smackfs: use __GFP_NOFAIL for smk_cipso_doi()   Sasha Levin
• [PATCH AUTOSEL 4.4 06/30] smackfs: Fix use-after-free in netlbl_catmap_walk()   Sasha Levin
• [PATCH AUTOSEL 4.4 07/30] NET: IPV4: fix error "do not initialise globals to 0"   Sasha Levin
• [PATCH AUTOSEL 4.4 26/30] smackfs: use __GFP_NOFAIL for smk_cipso_doi()   Sasha Levin
• [fs] a0918006f9: netperf.Throughput_tps -11.6% regression   Kees Cook
  • [fs] a0918006f9: netperf.Throughput_tps -11.6% regression   Yin Fengwei
  • [fs] a0918006f9: netperf.Throughput_tps -11.6% regression   Mickaël Salaün
    • [fs] a0918006f9: netperf.Throughput_tps -11.6% regression   Yin Fengwei
  • [fs] a0918006f9: netperf.Throughput_tps -11.6% regression   Yin Fengwei
• donation   ecouso at mail.gruponetpc.com
• [PATCH v16 0/3] Add trusted_for(2) (was O_MAYEXEC)   Mickaël Salaün
  • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Mickaël Salaün
    • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Alejandro Colomar (man-pages)
      • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Mickaël Salaün
      • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Alejandro Colomar (man-pages)
      • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Mickaël Salaün
      • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Geert Uytterhoeven
      • [PATCH v16 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Alejandro Colomar (man-pages)
  • [PATCH v16 2/3] arch: Wire up trusted_for(2)   Mickaël Salaün
  • [PATCH v16 3/3] selftest/interpreter: Add tests for trusted_for(2) policies   Mickaël Salaün
• [GIT PULL] apparmor changes for 5.16   John Johansen
  • [GIT PULL] apparmor changes for 5.16   pr-tracker-bot at kernel.org
• [PATCH v3 0/1] fuse: Send file/inode security context during creation   Vivek Goyal
• [PATCH v3 1/1] fuse: Send security context of inode on file creation   Vivek Goyal
  • [PATCH v3 1/1] fuse: Send security context of inode on file creation   Vivek Goyal
  • [PATCH v3 1/1] fuse: Send security context of inode on file creation   Vivek Goyal
• [PATCH 4.4 1/2] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 4.4 2/2] binder: use cred instead of task for selinux checks   Todd Kjos
    • [PATCH 4.4 2/2] binder: use cred instead of task for selinux checks   Greg KH
      • [PATCH 4.4 2/2] binder: use cred instead of task for selinux checks   Greg KH
• [PATCH 4.9 1/2] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 4.9 2/2] binder: use cred instead of task for selinux checks   Todd Kjos
• [PATCH 4.14 1/2] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 4.14 2/2] binder: use cred instead of task for selinux checks   Todd Kjos
• [PATCH 4.19 1/2] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 4.19 2/2] binder: use cred instead of task for selinux checks   Todd Kjos
• [PATCH 5.4 1/3] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 5.4 2/3] binder: use cred instead of task for selinux checks   Todd Kjos
  • [PATCH 5.4 3/3] binder: use cred instead of task for getsecid   Todd Kjos
• [PATCH 5.10 1/3] binder: use euid from cred instead of using task   Todd Kjos
  • [PATCH 5.10 2/3] binder: use cred instead of task for selinux checks   Todd Kjos
  • [PATCH 5.10 3/3] binder: use cred instead of task for getsecid   Todd Kjos
• [PATCH v4 0/2] integrity: support including firmware ".platform" keys at build time   Nayna Jain
  • [PATCH v4 1/2] certs: export load_certificate_list() to be used outside certs/   Nayna Jain
  • [PATCH v4 2/2] integrity: support including firmware ".platform" keys at build time   Nayna Jain
    • [PATCH v4 2/2] integrity: support including firmware ".platform" keys at build time   Mimi Zohar
• [PATCH apparmor] apparmor: remove unneeded one-line hook wrappers   John Johansen
• kernel BUG at assoc_array.c:LINE! while adding key to keyring   Guozihua (Scott)
• [PATCH] binder: fix test regression due to sender_euid change   Todd Kjos
  • [PATCH] binder: fix test regression due to sender_euid change   Christian Brauner
  • [PATCH] binder: fix test regression due to sender_euid change   Paul Moore
    • [PATCH] binder: fix test regression due to sender_euid change   Todd Kjos
      • [PATCH] binder: fix test regression due to sender_euid change   Greg KH
• [PATCH] net, lsm, selinux: revert the security_sctp_assoc_established() hook   Paul Moore
  • [PATCH] net, lsm, selinux: revert the security_sctp_assoc_established() hook   patchwork-bot+netdevbpf at kernel.org
• [GIT PULL] SELinux fix / revert for v5.16 (#1)   Paul Moore
  • [GIT PULL] SELinux fix / revert for v5.16 (#1)   pr-tracker-bot at kernel.org
• [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Alistair Delva
  • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Jens Axboe
  • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Alistair Delva
  • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Ondrej Mosnacek
    • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Alistair Delva
      • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Dominick Grift
      • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Casey Schaufler
      • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
      • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   David Laight
      • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Serge E. Hallyn
    • [PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
• [PATCH v2] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Bart Van Assche
  • [PATCH v2] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Alistair Delva
  • [PATCH v2] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Serge E. Hallyn
  • [PATCH v2] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Jens Axboe
• [PATCH v17 0/3] Add trusted_for(2) (was O_MAYEXEC)   Mickaël Salaün
  • [PATCH v17 1/3] fs: Add trusted_for(2) syscall implementation and related sysctl   Mickaël Salaün
  • [PATCH v17 0/3] Add trusted_for(2) (was O_MAYEXEC)   Mickaël Salaün
  • [PATCH v17 0/3] Add trusted_for(2) (was O_MAYEXEC)   Florian Weimer
• [PATCH v17 2/3] arch: Wire up trusted_for(2)   Mickaël Salaün
• [PATCH v17 3/3] selftest/interpreter: Add tests for trusted_for(2) policies   Mickaël Salaün
• [PATCH v7 00/17] Enroll kernel keys thru MOK   Eric Snowberg
  • [PATCH v7 07/17] integrity: Fix warning about missing prototypes   Eric Snowberg
    • [PATCH v7 07/17] integrity: Fix warning about missing prototypes   Mimi Zohar
  • [PATCH v7 13/17] KEYS: link secondary_trusted_keys to machine trusted keys   Eric Snowberg
    • [PATCH v7 13/17] KEYS: link secondary_trusted_keys to machine trusted keys   Mimi Zohar
      • [PATCH v7 13/17] KEYS: link secondary_trusted_keys to machine trusted keys   Eric Snowberg
  • [PATCH v7 14/17] integrity: store reference to machine keyring   Eric Snowberg
  • [PATCH v7 15/17] efi/mokvar: move up init order   Eric Snowberg
  • [PATCH v7 16/17] integrity: Trust MOK keys if MokListTrustedRT found   Eric Snowberg
  • [PATCH v7 17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true   Eric Snowberg
  • [PATCH v7 00/17] Enroll kernel keys thru MOK   Jarkko Sakkinen
    • [PATCH v7 00/17] Enroll kernel keys thru MOK   Konrad Rzeszutek Wilk
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Jarkko Sakkinen
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Konrad Rzeszutek Wilk
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Jarkko Sakkinen
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Jarkko Sakkinen
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Konrad Rzeszutek Wilk
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Eric Snowberg
      • [PATCH v7 00/17] Enroll kernel keys thru MOK   Jarkko Sakkinen
• [PATCH v7 01/17] integrity: Introduce a Linux keyring called machine   Eric Snowberg
  • [PATCH v7 01/17] integrity: Introduce a Linux keyring called machine   Mimi Zohar
• [PATCH v7 02/17] integrity: Do not allow machine keyring updates following init   Eric Snowberg
  • [PATCH v7 02/17] integrity: Do not allow machine keyring updates following init   Mimi Zohar
• [PATCH v7 03/17] KEYS: Create static version of public_key_verify_signature   Eric Snowberg
  • [PATCH v7 03/17] KEYS: Create static version of public_key_verify_signature   Mimi Zohar
    • [PATCH v7 03/17] KEYS: Create static version of public_key_verify_signature   Mimi Zohar
• [PATCH v7 04/17] X.509: Parse Basic Constraints for CA   Eric Snowberg
  • [PATCH v7 04/17] X.509: Parse Basic Constraints for CA   Mimi Zohar
    • [PATCH v7 04/17] X.509: Parse Basic Constraints for CA   Eric Snowberg
• [PATCH v7 05/17] KEYS: CA link restriction   Eric Snowberg
• [PATCH v7 06/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca   Eric Snowberg
• [PATCH v7 08/17] integrity: add new keyring handler for mok keys   Eric Snowberg
  • [PATCH v7 08/17] integrity: add new keyring handler for mok keys   Mimi Zohar
• [PATCH v7 09/17] KEYS: Rename get_builtin_and_secondary_restriction   Eric Snowberg
  • [PATCH v7 09/17] KEYS: Rename get_builtin_and_secondary_restriction   Mimi Zohar
• [PATCH v7 10/17] KEYS: add a reference to machine keyring   Eric Snowberg
• [PATCH v7 11/17] KEYS: Introduce link restriction for machine keys   Eric Snowberg
  • [PATCH v7 11/17] KEYS: Introduce link restriction for machine keys   Mimi Zohar
    • [PATCH v7 11/17] KEYS: Introduce link restriction for machine keys   Eric Snowberg
• [PATCH v7 12/17] KEYS: integrity: change link restriction to trust the machine keyring   Eric Snowberg
  • [PATCH v7 12/17] KEYS: integrity: change link restriction to trust the machine keyring   Mimi Zohar
• Fotowoltaika dla firm   Dorian Kwiatkowski
• hi   Dr.Dickson Ebo
• SMACK: access is granted while smack-utils report that it shouldn't be   Denis Obrezkov
  • SMACK: access is granted while smack-utils report that it shouldn't be   Casey Schaufler
• [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   David Anderson
  • [PATCH v19 1/4] Add flags option to get xattr method paired to __vfs_getxattr   David Anderson
  • [PATCH v19 2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method   David Anderson
  • [PATCH v19 3/4] overlayfs: override_creds=off option bypass creator_cred   David Anderson
  • [PATCH v19 4/4] overlayfs: inode_owner_or_capable called during execv   David Anderson
  • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   Casey Schaufler
    • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   David Anderson
  • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   Amir Goldstein
    • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   David Anderson
      • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   Amir Goldstein
      • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   David Anderson
      • [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix   Amir Goldstein
• [PATCH -next] apparmor: Fix kernel-doc   Yang Li
• [PATCH v5 0/4] Allow guest access to EFI confidential computing secret area   Dov Murik
  • [PATCH v5 2/4] efi/libstub: Reserve confidential computing secret area   Dov Murik
  • [PATCH v5 4/4] docs: security: Add coco/efi_secret documentation   Dov Murik
• [PATCH v5 1/4] efi: Save location of EFI confidential computing area   Dov Murik
• [PATCH v5 3/4] virt: Add efi_secret module to expose confidential computing secrets   Dov Murik
  • [PATCH v5 3/4] virt: Add efi_secret module to expose confidential computing secrets   Greg KH
• I hope this email finds you well.   Joseph Choondak
• [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Paul Moore
  • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Serge E. Hallyn
    • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   John Johansen
      • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Paul Moore
  • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Casey Schaufler
    • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Paul Moore
      • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Casey Schaufler
  • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Paul Moore
    • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Serge E. Hallyn
    • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Casey Schaufler
      • [PATCH] lsm: security_task_getsecid_subj() -> security_current_getsecid_subj()   Paul Moore
• Hello   Mitchell Vivian
  • Hello   Evelyn Gaby
• [GIT PULL] SELinux fixes for v5.16 (#2)   Paul Moore
  • [GIT PULL] SELinux fixes for v5.16 (#2)   pr-tracker-bot at kernel.org
• [PATCH v30 00/28] LSM: Module stacking for AppArmor   Casey Schaufler
  • [PATCH v30 01/28] integrity: disassociate ima_filter_rule from security_audit_rule   Casey Schaufler
  • [PATCH v30 02/28] LSM: Infrastructure management of the sock security   Casey Schaufler
  • [PATCH v30 03/28] LSM: Add the lsmblob data structure.   Casey Schaufler
  • [PATCH v30 04/28] LSM: provide lsm name and id slot mappings   Casey Schaufler
  • [PATCH v30 05/28] IMA: avoid label collisions with stacked LSMs   Casey Schaufler
  • [PATCH v30 06/28] LSM: Use lsmblob in security_audit_rule_match   Casey Schaufler
    • [PATCH v30 06/28] LSM: Use lsmblob in security_audit_rule_match   kernel test robot
  • [PATCH v30 07/28] LSM: Use lsmblob in security_kernel_act_as   Casey Schaufler
  • [PATCH v30 08/28] LSM: Use lsmblob in security_secctx_to_secid   Casey Schaufler
  • [PATCH v30 09/28] LSM: Use lsmblob in security_secid_to_secctx   Casey Schaufler
  • [PATCH v30 10/28] LSM: Use lsmblob in security_ipc_getsecid   Casey Schaufler
  • [PATCH v30 11/28] LSM: Use lsmblob in security_task_getsecid   Casey Schaufler
  • [PATCH v30 12/28] LSM: Use lsmblob in security_inode_getsecid   Casey Schaufler
  • [PATCH v30 13/28] LSM: Use lsmblob in security_cred_getsecid   Casey Schaufler
  • [PATCH v30 14/28] LSM: Specify which LSM to display   Casey Schaufler
  • [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser   Casey Schaufler
  • [PATCH v30 16/28] LSM: Use lsmcontext in security_secid_to_secctx   Casey Schaufler
  • [PATCH v30 17/28] LSM: Use lsmcontext in security_inode_getsecctx   Casey Schaufler
  • [PATCH v30 18/28] LSM: security_secid_to_secctx in netlink netfilter   Casey Schaufler
  • [PATCH v30 19/28] NET: Store LSM netlabel data in a lsmblob   Casey Schaufler
  • [PATCH v30 20/28] binder: Pass LSM identifier for confirmation   Casey Schaufler
  • [PATCH v30 21/28] LSM: Extend security_secid_to_secctx to include module selection   Casey Schaufler
  • [PATCH v30 22/28] Audit: Keep multiple LSM data in audit_names   Casey Schaufler
  • [PATCH v30 23/28] Audit: Create audit_stamp structure   Casey Schaufler
  • [PATCH v30 24/28] Audit: Add framework for auxiliary records   Casey Schaufler
  • [PATCH v30 25/28] Audit: Add record for multiple task security contexts   Casey Schaufler
  • [PATCH v30 26/28] Audit: Add record for multiple object security contexts   Casey Schaufler
    • [PATCH v30 26/28] Audit: Add record for multiple object security contexts   kernel test robot
    • [PATCH v30 26/28] Audit: Add record for multiple object security contexts   kernel test robot
  • [PATCH v30 27/28] LSM: Add /proc attr entry for full LSM context   Casey Schaufler
  • [PATCH v30 28/28] AppArmor: Remove the exclusive flag   Casey Schaufler
• [PATCH v8 00/17] Enroll kernel keys thru MOK   Eric Snowberg
  • [PATCH v8 01/17] KEYS: Create static version of public_key_verify_signature   Eric Snowberg
  • [PATCH v8 02/17] integrity: Fix warning about missing prototypes   Eric Snowberg
  • [PATCH v8 03/17] integrity: Introduce a Linux keyring called machine   Eric Snowberg
    • [PATCH v8 03/17] integrity: Introduce a Linux keyring called machine   Mimi Zohar
      • [PATCH v8 03/17] integrity: Introduce a Linux keyring called machine   Eric Snowberg
    • [PATCH v8 03/17] integrity: Introduce a Linux keyring called machine   Jarkko Sakkinen
  • [PATCH v8 04/17] integrity: Do not allow machine keyring updates following init   Eric Snowberg
    • [PATCH v8 04/17] integrity: Do not allow machine keyring updates following init   Jarkko Sakkinen
  • [PATCH v8 05/17] X.509: Parse Basic Constraints for CA   Eric Snowberg
    • [PATCH v8 05/17] X.509: Parse Basic Constraints for CA   Jarkko Sakkinen
  • [PATCH v8 06/17] KEYS: CA link restriction   Eric Snowberg
    • [PATCH v8 06/17] KEYS: CA link restriction   Jarkko Sakkinen
  • [PATCH v8 07/17] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca   Eric Snowberg
  • [PATCH v8 08/17] integrity: add new keyring handler for mok keys   Eric Snowberg
    • [PATCH v8 08/17] integrity: add new keyring handler for mok keys   Jarkko Sakkinen
  • [PATCH v8 09/17] KEYS: Rename get_builtin_and_secondary_restriction   Eric Snowberg
    • [PATCH v8 09/17] KEYS: Rename get_builtin_and_secondary_restriction   Jarkko Sakkinen
      • [PATCH v8 09/17] KEYS: Rename get_builtin_and_secondary_restriction   Eric Snowberg
  • [PATCH v8 10/17] KEYS: add a reference to machine keyring   Eric Snowberg
  • [PATCH v8 11/17] KEYS: Introduce link restriction for machine keys   Eric Snowberg
  • [PATCH v8 12/17] KEYS: integrity: change link restriction to trust the machine keyring   Eric Snowberg
  • [PATCH v8 13/17] integrity: store reference to machine keyring   Eric Snowberg
  • [PATCH v8 14/17] KEYS: link machine trusted keys to secondary_trusted_keys   Eric Snowberg
  • [PATCH v8 15/17] efi/mokvar: move up init order   Eric Snowberg
  • [PATCH v8 16/17] integrity: Trust MOK keys if MokListTrustedRT found   Eric Snowberg
  • [PATCH v8 17/17] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true   Eric Snowberg
• [PATCH v4 5/5] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys   Ahmad Fatoum
• [PATCH 5.15 222/279] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
• [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
  • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Jari Ruusu
    • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
      • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Serge E. Hallyn
      • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Greg Kroah-Hartman
      • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Christian Göttsche
      • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Serge E. Hallyn
      • [PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT   Serge E. Hallyn
• [PATCH] security:trusted_tpm2: Fix memory leak in tpm2_key_encode()   Jianglei Nie
• [PATCH v5 0/2] integrity: support including firmware ".platform" keys at build time   Nayna Jain
  • [PATCH v5 1/2] certs: export load_certificate_list() to be used outside certs/   Nayna Jain
  • [PATCH v5 2/2] integrity: support including firmware ".platform" keys at build time   Nayna Jain
• [PATCH] ima: Fix trivial typos in the comments   Austin Kim
• Attn   Hamdy Elsayed
• [RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider   Roberto Sassu
  • [RFC PATCH v7 11/16] ipe: add support for dm-verity as a trust provider   Deven Bowers
• [PATCH v2 0/6] KEXEC_SIG with appended signature   Michal Suchanek
  • [PATCH v2 1/6] s390/kexec_file: Don't opencode appended signature check.   Michal Suchanek
  • [PATCH v2 2/6] powerpc/kexec_file: Add KEXEC_SIG support.   Michal Suchanek
  • [PATCH v2 3/6] kexec_file: Don't opencode appended signature verification.   Michal Suchanek
  • [PATCH v2 4/6] module: strip the signature marker in the verification function.   Michal Suchanek
  • [PATCH v2 5/6] module: Use key_being_used_for for log messages in verify_appended_signature   Michal Suchanek
  • [PATCH v2 6/6] module: Move duplicate mod_check_sig users code to mod_parse_sig   Michal Suchanek
  • [PATCH v2 0/6] KEXEC_SIG with appended signature   Heiko Carstens
• Von Koffi   Koffi Aya
• [PATCH v6 0/5] Allow guest access to EFI confidential computing secret area   Dov Murik
• [PATCH v6 1/5] efi: Save location of EFI confidential computing area   Dov Murik
• [PATCH v6 2/5] efi/libstub: Reserve confidential computing secret area   Dov Murik
• [PATCH v6 3/5] virt: Add efi_secret module to expose confidential computing secrets   Dov Murik
• [PATCH v6 4/5] efi: Load efi_secret module if EFI secret area is populated   Dov Murik
• [PATCH v6 5/5] docs: security: Add coco/efi_secret documentation   Dov Murik
• [PATCH v3 0/2] use SM3 instead of SM3_256   Tianjia Zhang
• [RFC 00/20] ima: Namespace IMA with audit support in IMA-ns   Stefan Berger
  • [RFC 02/20] ima: Define ns_status for storing namespaced iint data   Stefan Berger
  • [RFC 03/20] ima: Namespace audit status flags   Stefan Berger
  • [RFC 04/20] ima: Move delayed work queue and variables into ima_namespace   Stefan Berger
  • [RFC 05/20] ima: Move IMA's keys queue related variables into ima_namespace   Stefan Berger
  • [RFC 06/20] ima: Move policy related variables into ima_namespace   Stefan Berger
  • [RFC 07/20] ima: Move ima_htable into ima_namespace   Stefan Berger
  • [RFC 08/20] ima: Move measurement list related variables into ima_namespace   Stefan Berger
  • [RFC 09/20] ima: Only accept AUDIT rules for IMA non-init_ima_ns namespaces for now   Stefan Berger
  • [RFC 10/20] ima: Implement hierarchical processing of file accesses   Stefan Berger
  • [RFC 11/20] securityfs: Prefix global variables with securityfs_   Stefan Berger
  • [RFC 12/20] securityfs: Pass static variables as parameters from top level functions   Stefan Berger
  • [RFC 13/20] securityfs: Build securityfs_ns for namespacing support   Stefan Berger
  • [RFC 14/20] ima: Move some IMA policy and filesystem related variables into ima_namespace   Stefan Berger
  • [RFC 15/20] capabilities: Introduce CAP_INTEGRITY_ADMIN   Stefan Berger
    • [RFC 15/20] capabilities: Introduce CAP_INTEGRITY_ADMIN   Casey Schaufler
      • [RFC 15/20] capabilities: Introduce CAP_INTEGRITY_ADMIN   Stefan Berger
      • [RFC 15/20] capabilities: Introduce CAP_INTEGRITY_ADMIN   Casey Schaufler
  • [RFC 16/20] ima: Use ns_capable() for namespace policy access   Stefan Berger
  • [RFC 17/20] ima: Use integrity_admin_ns_capable() to check corresponding capability   Stefan Berger
  • [RFC 18/20] userns: Introduce a refcount variable for calling early teardown function   Stefan Berger
  • [RFC 19/20] ima/userns: Define early teardown function for IMA namespace   Stefan Berger
• [RFC 01/20] ima: Add IMA namespace support   Stefan Berger
• [RFC 20/20] ima: Setup securityfs_ns for IMA namespace   Stefan Berger

Last message date: Tue Nov 30 20:27:15 UTC 2021
Archived on: Tue Nov 30 20:16:22 UTC 2021

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...