December 2022 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Thu Dec 1 10:06:23 UTC 2022
Ending: Sat Dec 31 13:23:14 UTC 2022
Messages: 305

• [PATCH v2 0/2] ima/evm: Ensure digest to verify is in linear mapping area   Roberto Sassu
  • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Roberto Sassu
    • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Eric Biggers
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Mimi Zohar
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Eric Biggers
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Roberto Sassu
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Eric Biggers
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Roberto Sassu
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Mimi Zohar
      • [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y   Roberto Sassu
  • [PATCH v2 2/2] ima: Alloc ima_max_digest_data in xattr_verify() if CONFIG_VMAP_STACK=y   Roberto Sassu
    • [PATCH v2 2/2] ima: Alloc ima_max_digest_data in xattr_verify() if CONFIG_VMAP_STACK=y   Eric Biggers
• [PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes   Roberto Sassu
  • [PATCH v7 1/6] reiserfs: Switch to security_inode_init_security()   Roberto Sassu
  • [PATCH v7 2/6] ocfs2: Switch to security_inode_init_security()   Roberto Sassu
  • [PATCH v7 3/6] security: Remove security_old_inode_init_security()   Roberto Sassu
  • [PATCH v7 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook   Roberto Sassu
  • [PATCH v7 5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure   Roberto Sassu
  • [PATCH v7 6/6] evm: Support multiple LSMs providing an xattr   Roberto Sassu
• Broken SELinux/LSM labeling with MPTCP and accept(2)   Ondrej Mosnacek
  • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paolo Abeni
    • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paul Moore
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paolo Abeni
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Florian Westphal
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paul Moore
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paolo Abeni
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Ondrej Mosnacek
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paolo Abeni
      • Broken SELinux/LSM labeling with MPTCP and accept(2)   Paul Moore
• [PATCH v8 11/12] samples/landlock: Add network demo   Konstantin Meskhidze (A)
• [PATCH v8 01/12] landlock: Make ruleset's access masks more generic   Konstantin Meskhidze (A)
• [PATCH] landlock: Allow filesystem layout changes for domains without such rule type   Konstantin Meskhidze (A)
  • [PATCH] landlock: Allow filesystem layout changes for domains without such rule type   Konstantin Meskhidze (A)
  • [PATCH] landlock: Allow filesystem layout changes for domains without such rule type   Konstantin Meskhidze (A)
    • [PATCH] landlock: Allow filesystem layout changes for domains without such rule type   Mickaël Salaün
      • [PATCH] landlock: Allow filesystem layout changes for domains without such rule type   Konstantin Meskhidze (A)
• [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()   Konstantin Meskhidze (A)
• [PATCH v8 07/12] landlock: Add network rules support   Konstantin Meskhidze (A)
• [PATCH v8 08/12] landlock: Implement TCP network hooks   Konstantin Meskhidze (A)
  • [PATCH v8 08/12] landlock: Implement TCP network hooks   Mickaël Salaün
    • [PATCH v8 08/12] landlock: Implement TCP network hooks   Konstantin Meskhidze (A)
      • [PATCH v8 08/12] landlock: Implement TCP network hooks   Mickaël Salaün
• [PATCH v8 12/12] landlock: Document Landlock's network support   Konstantin Meskhidze (A)
• [PATCH v5 04/11] security: keys: trusted: Include TPM2 creation data   James Bottomley
  • [PATCH v5 04/11] security: keys: trusted: Include TPM2 creation data   Evan Green
• [PATCH v3 1/3] certs: log hash value on blacklist error   Jarkko Sakkinen
• [PATCH v1] landlock: Explain file descriptor access rights   Mickaël Salaün
  • [PATCH v1] landlock: Explain file descriptor access rights   Günther Noack
    • [PATCH v1] landlock: Explain file descriptor access rights   Mickaël Salaün
• REP:   Philip Manul
• [PATCH v2 1/2] lsm: Clarify documentation of vm_enough_memory hook   Paul Moore
• [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Paul Moore
  • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Roberto Sassu
    • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Roberto Sassu
      • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Paul Moore
      • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Roberto Sassu
      • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Paul Moore
      • [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting   Casey Schaufler
• [PATCH] public_key: Add a comment to public_key_signature struct definition   Roberto Sassu
• [PATCH v2 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
  • [PATCH v2 08/10] integrity: Use root of trust signature restriction   Eric Snowberg
  • [PATCH v2 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca   Eric Snowberg
  • [PATCH v2 00/10] Add CA enforcement keyring restrictions   Coiby Xu
    • [PATCH v2 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v2 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v2 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
• [PATCH v2 01/10] KEYS: Create static version of public_key_verify_signature   Eric Snowberg
  • [PATCH v2 01/10] KEYS: Create static version of public_key_verify_signature   Petr Vorel
• [PATCH v2 02/10] KEYS: Add missing function documentation   Eric Snowberg
  • [PATCH v2 02/10] KEYS: Add missing function documentation   Petr Vorel
• [PATCH v2 03/10] KEYS: X.509: Parse Basic Constraints for CA   Eric Snowberg
• [PATCH v2 04/10] KEYS: X.509: Parse Key Usage   Eric Snowberg
• [PATCH v2 05/10] KEYS: Introduce a CA endorsed flag   Eric Snowberg
• [PATCH v2 06/10] KEYS: Introduce keyring restriction that validates ca trust   Eric Snowberg
• [PATCH v2 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed   Eric Snowberg
• [PATCH v2 09/10] KEYS: CA link restriction   Eric Snowberg
• [RFC][PATCH v2 0/7] bpf-lsm: Check return values of security modules   Roberto Sassu
  • [RFC][PATCH v2 1/7] bpf: Remove superfluous btf_id_set_contains() declaration   Roberto Sassu
  • [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure   Roberto Sassu
    • [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure   Alexei Starovoitov
      • [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure   Roberto Sassu
      • [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure   Alexei Starovoitov
      • [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure   Roberto Sassu
  • [RFC][PATCH v2 3/7] lsm: Redefine LSM_HOOK() macro to add return value flags as argument   Roberto Sassu
  • [RFC][PATCH v2 4/7] bpf-lsm: Enforce return value limitations on security modules   Roberto Sassu
  • [RFC][PATCH v2 5/7] selftests/bpf: Check if return values of LSM programs are allowed   Roberto Sassu
  • [RFC][PATCH v2 6/7] selftests/bpf: Prevent positive ret values in test_lsm and verify_pkcs7_sig   Roberto Sassu
  • [RFC][PATCH v2 7/7] selftests/bpf: Change return value in test_libbpf_get_fd_by_id_opts.c   Roberto Sassu
• [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Paolo Abeni
  • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Mat Martineau
    • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Casey Schaufler
      • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Mat Martineau
    • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Paul Moore
      • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Paolo Abeni
      • [PATCH mptcp-net] mptcp: fix LSM labeling for passive msk   Paul Moore
• [PATCH v5 00/11] Encrypted Hibernation   Evan Green
• [syzbot] linux-next build error (14)   syzbot
• [GIT PULL] tpmdd updates for tpmdd-next-v6.2-rc1   Jarkko Sakkinen
  • [GIT PULL] tpmdd updates for tpmdd-next-v6.2-rc1   pr-tracker-bot at kernel.org
• [PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack   Roberto Sassu
  • [PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack   Eric Biggers
    • [PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack   Roberto Sassu
      • [PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack   Roberto Sassu
• [PATCH v6 6/6] mm/memfd: security hook for memfd_create   Kees Cook
• [PATCH 1/2] lsm: Fix description of fs_context_parse_param   Roberto Sassu
  • [PATCH 1/2] lsm: Fix description of fs_context_parse_param   Paul Moore
    • [PATCH 1/2] lsm: Fix description of fs_context_parse_param   Roberto Sassu
      • [PATCH 1/2] lsm: Fix description of fs_context_parse_param   Paul Moore
  • [PATCH 1/2] lsm: Fix description of fs_context_parse_param   patchwork-bot+netdevbpf at kernel.org
    • [PATCH 1/2] lsm: Fix description of fs_context_parse_param   Paul Moore
• [PATCH 2/2] doc: Fix fs_context_parse_param description in mount_api.rst   Roberto Sassu
  • [PATCH 2/2] doc: Fix fs_context_parse_param description in mount_api.rst   Paul Moore
    • [PATCH 2/2] doc: Fix fs_context_parse_param description in mount_api.rst   Roberto Sassu
• [PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
  • [PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Eric Biggers
    • [PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
      • [PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Herbert Xu
      • [PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
      • [PATCH] lib/mpi: Fix buffer overrun when SG is too long   Herbert Xu
      • [PATCH] lib/mpi: Fix buffer overrun when SG is too long   Roberto Sassu
      • [PATCH] lib/mpi: Fix buffer overrun when SG is too long   Eric Biggers
      • [v2 PATCH] lib/mpi: Fix buffer overrun when SG is too long   Herbert Xu
      • [v2 PATCH] lib/mpi: Fix buffer overrun when SG is too long   Eric Biggers
      • [v2 PATCH] lib/mpi: Fix buffer overrun when SG is too long   Herbert Xu
• [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   jeffxu at chromium.org
  • [PATCH v7 1/6] mm/memfd: add F_SEAL_EXEC   jeffxu at chromium.org
  • [PATCH v7 2/6] selftests/memfd: add tests for F_SEAL_EXEC   jeffxu at chromium.org
    • [PATCH v7 2/6] selftests/memfd: add tests for F_SEAL_EXEC   Kees Cook
  • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   jeffxu at chromium.org
    • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   Kees Cook
    • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   SeongJae Park
      • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   Jeff Xu
      • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   Andrew Morton
      • [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   SeongJae Park
  • [PATCH v7 4/6] mm/memfd: Add write seals when apply SEAL_EXEC to executable memfd   jeffxu at chromium.org
  • [PATCH v7 5/6] selftests/memfd: add tests for MFD_NOEXEC_SEAL MFD_EXEC   jeffxu at chromium.org
  • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   jeffxu at chromium.org
    • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Casey Schaufler
    • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Paul Moore
      • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Jeff Xu
      • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Casey Schaufler
      • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Paul Moore
      • [PATCH v7 6/6] mm/memfd: security hook for memfd_create   Jeff Xu
  • [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   Paul Moore
  • [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   Kees Cook
    • [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   Jeff Xu
      • [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   Kees Cook
      • [PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   Jeff Xu
• [PATCH v2] landlock: Explain file descriptor access rights   Mickaël Salaün
  • [PATCH v2] landlock: Explain file descriptor access rights   Günther Noack
    • [PATCH v2] landlock: Explain file descriptor access rights   Mickaël Salaün
• [PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks   Kees Cook
  • [PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks   Serge E. Hallyn
    • [PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks   Kees Cook
      • [PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks   Paul Moore
  • [PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks   Kees Cook
• [PATCH 0/4] LoadPin: Allow filesystem switch when not enforcing   Kees Cook
  • [PATCH 3/4] LoadPin: Move pin reporting cleanly out of locking   Kees Cook
  • [PATCH 4/4] LoadPin: Allow filesystem switch when not enforcing   Kees Cook
  • [PATCH 0/4] LoadPin: Allow filesystem switch when not enforcing   Serge E. Hallyn
• [PATCH 1/4] LoadPin: Refactor read-only check into a helper   Kees Cook
• [PATCH 2/4] LoadPin: Refactor sysctl initialization   Kees Cook
• [PATCH] [RFC] SELINUX: Remove obsolete deferred inode security init list.   Paul Moore
• [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs   Andrew Donnellan
  • [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs   Greg Kroah-Hartman
• [GIT PULL] Landlock updates for v6.2   Mickaël Salaün
  • [GIT PULL] Landlock updates for v6.2   pr-tracker-bot at kernel.org
• [PATCH v3 0/3] certs: Prevent spurious errors on repeated blacklisting   Paul Menzel
• Closing the BPF map permission loophole   Roberto Sassu
  • Closing the BPF map permission loophole   Alexei Starovoitov
    • Closing the BPF map permission loophole   Roberto Sassu
      • Closing the BPF map permission loophole   Roberto Sassu
      • Closing the BPF map permission loophole   Paul Moore
      • Closing the BPF map permission loophole   Roberto Sassu
      • Closing the BPF map permission loophole   Paul Moore
• [GIT PULL] SELinux patches for v6.2   Paul Moore
  • [GIT PULL] SELinux patches for v6.2   Linus Torvalds
    • [GIT PULL] SELinux patches for v6.2   Paul Moore
  • [GIT PULL] SELinux patches for v6.2   pr-tracker-bot at kernel.org
• [GIT PULL] LSM patches for v6.2   Paul Moore
  • [GIT PULL] LSM patches for v6.2   Linus Torvalds
  • [GIT PULL] LSM patches for v6.2   pr-tracker-bot at kernel.org
• [PATCH 0/1][RFC] SELINUX: Remove obsolete deferred inode security   Alexander Kozhevnikov
  • [PATCH 1/1] [RFC] SELINUX: Remove obsolete deferred inode security init list.   Alexander Kozhevnikov
• [PATCH v5 2/6] ocfs2: Switch to security_inode_init_security()   Roberto Sassu
• [PATCH v2 0/1] selftests/landlock: Fix selftest ptrace_test run fail   jeffxu at chromium.org
  • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   jeffxu at chromium.org
    • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   Mickaël Salaün
      • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   Jeff Xu
      • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   Jeff Xu
      • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   Mickaël Salaün
      • [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA   Jeff Xu
• [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
  • [PATCH v3 02/10] KEYS: Add missing function documentation   Eric Snowberg
  • [PATCH v3 03/10] KEYS: X.509: Parse Basic Constraints for CA   Eric Snowberg
    • [PATCH v3 03/10] KEYS: X.509: Parse Basic Constraints for CA   Mimi Zohar
  • [PATCH v3 06/10] KEYS: Introduce keyring restriction that validates ca trust   Eric Snowberg
  • [PATCH v3 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed   Eric Snowberg
    • [PATCH v3 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed   Mimi Zohar
  • [PATCH v3 08/10] integrity: Use root of trust signature restriction   Eric Snowberg
  • [PATCH v3 09/10] KEYS: CA link restriction   Eric Snowberg
  • [PATCH v3 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca   Eric Snowberg
  • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
    • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Coiby Xu
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Eric Snowberg
      • [PATCH v3 00/10] Add CA enforcement keyring restrictions   Mimi Zohar
• [PATCH v3 01/10] KEYS: Create static version of public_key_verify_signature   Eric Snowberg
• [PATCH v3 04/10] KEYS: X.509: Parse Key Usage   Eric Snowberg
  • [PATCH v3 04/10] KEYS: X.509: Parse Key Usage   Mimi Zohar
• [PATCH v3 05/10] KEYS: Introduce a CA endorsed flag   Eric Snowberg
• [GIT PULL] apparmor changes for v6.2   John Johansen
  • [GIT PULL] apparmor changes for v6.2   Linus Torvalds
    • [GIT PULL] apparmor changes for v6.2   John Johansen
  • [GIT PULL] apparmor changes for v6.2   pr-tracker-bot at kernel.org
• [PATCH 0/2] lsm: introduce and use security_mptcp_add_subflow()   Paolo Abeni
  • [PATCH 1/2] security, lsm: Introduce security_mptcp_add_subflow()   Paolo Abeni
    • [PATCH 1/2] security, lsm: Introduce security_mptcp_add_subflow()   kernel test robot
    • [PATCH 1/2] security, lsm: Introduce security_mptcp_add_subflow()   kernel test robot
  • [PATCH 2/2] selinux: Implement mptcp_add_subflow hook   Paolo Abeni
    • [PATCH 2/2] selinux: Implement mptcp_add_subflow hook   kernel test robot
  • [PATCH 0/2] lsm: introduce and use security_mptcp_add_subflow()   Paolo Abeni
• [PATCH v8 0/5] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC   jeffxu at chromium.org
  • [PATCH v8 1/5] mm/memfd: add F_SEAL_EXEC   jeffxu at chromium.org
  • [PATCH v8 2/5] selftests/memfd: add tests for F_SEAL_EXEC   jeffxu at chromium.org
  • [PATCH v8 3/5] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC   jeffxu at chromium.org
  • [PATCH v8 4/5] mm/memfd: Add write seals when apply SEAL_EXEC to executable memfd   jeffxu at chromium.org
  • [PATCH v8 5/5] selftests/memfd: add tests for MFD_NOEXEC_SEAL MFD_EXEC   jeffxu at chromium.org
• Słowa kluczowe do wypozycjonowania   Adam Charachuta
• [PATCH] ima: add check for khdr->buffer_size   Mimi Zohar
• [syzbot] KASAN: use-after-free Read in aa_label_sk_perm   syzbot
• [PATCH v2 0/2] lsm: introduce and use security_mptcp_add_subflow()   Paolo Abeni
  • [PATCH v2 1/2] security, lsm: Introduce security_mptcp_add_subflow()   Paolo Abeni
    • [PATCH v2 1/2] security, lsm: Introduce security_mptcp_add_subflow()   Mat Martineau
  • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paolo Abeni
    • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paul Moore
      • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paolo Abeni
      • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paul Moore
      • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paolo Abeni
      • [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook   Paul Moore
• [PATCH 0/2] Provide matching audit timestamp in the SELinux AVC trace event   Ondrej Mosnacek
  • [PATCH 1/2] audit: introduce a struct to represent an audit timestamp   Ondrej Mosnacek
    • [PATCH 1/2] audit: introduce a struct to represent an audit timestamp   Casey Schaufler
      • [PATCH 1/2] audit: introduce a struct to represent an audit timestamp   Paul Moore
• [PATCH RESEND 0/2] Provide matching audit timestamp in the SELinux AVC trace event   Ondrej Mosnacek
  • [PATCH RESEND 1/2] audit: introduce a struct to represent an audit timestamp   Ondrej Mosnacek
  • [PATCH RESEND 2/2] selinux: provide matching audit timestamp in the AVC trace event   Ondrej Mosnacek
    • [PATCH RESEND 2/2] selinux: provide matching audit timestamp in the AVC trace event   Paul Moore
• [PATCH v3 1/2] lib/mpi: Fix buffer overrun when SG is too long   Roberto Sassu
  • [PATCH v3 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
    • [PATCH v3 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Eric Biggers
• [PATCH] security: Restore passing final prot to ima_file_mmap()   Roberto Sassu
• [PATCH v2] security: Restore passing final prot to ima_file_mmap()   Roberto Sassu
• [PATCH v2] mm: new primitive kvmemdup()   Hao Sun
• [GIT PULL] kernel hardening fixes for v6.1-rc1   Kees Cook
  • [GIT PULL] kernel hardening fixes for v6.1-rc1   Kees Cook
• [GIT PULL] kernel hardening fixes for v6.2-rc1   Kees Cook
• [PATCH -next] evm: Support small xattr in dump_security_xattr()   Xiu Jianfeng
• [PATCH v4 1/2] lib/mpi: Fix buffer overrun when SG is too long   Roberto Sassu
  • [PATCH v4 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
    • [PATCH v4 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
• [PATCH v3 0/1] selftests/landlock: Fix selftest ptrace_test run fail   jeffxu at chromium.org
  • [PATCH v3 1/1] selftests/landlock: skip ptrace_test according to YAMA   jeffxu at chromium.org
• [PATCH v5 0/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
  • [PATCH v5 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Roberto Sassu
    • [PATCH v5 2/2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()   Eric Biggers
• [PATCH v5 1/2] lib/mpi: Fix buffer overrun when SG is too long   Roberto Sassu
  • [PATCH v5 1/2] lib/mpi: Fix buffer overrun when SG is too long   Eric Biggers
  • [PATCH v5 1/2] lib/mpi: Fix buffer overrun when SG is too long   David Laight
    • [PATCH v5 1/2] lib/mpi: Fix buffer overrun when SG is too long   Herbert Xu
      • [PATCH v5 1/2] lib/mpi: Fix buffer overrun when SG is too long   David Laight
• [PATCH -next] evm: Use __vfs_setxattr() to update security.evm   Xiu Jianfeng
• [PATCH 6.0 1012/1073] LoadPin: Ignore the "contents" argument of the LSM hooks   Greg Kroah-Hartman
• [PATCH 5.15 697/731] LoadPin: Ignore the "contents" argument of the LSM hooks   Greg Kroah-Hartman
• [PATCH 6.1 1079/1146] LoadPin: Ignore the "contents" argument of the LSM hooks   Greg Kroah-Hartman
• [PATCH v6 0/1] selftests/landlock: fix test when overlayfs is   jeffxu at chromium.org
  • [PATCH v6 1/1] selftests/landlock: skip overlayfs test when kernel not support it   jeffxu at chromium.org
    • [PATCH v6 1/1] selftests/landlock: skip overlayfs test when kernel not support it   Guenter Roeck
      • [PATCH v6 1/1] selftests/landlock: skip overlayfs test when kernel not support it   Jeff Xu
• [PATCH v7 0/1] selftests/landlock: fix test when overlayfs is   jeffxu at chromium.org
  • [PATCH v7 1/1] selftests/landlock: skip overlayfs test when kernel not support it   jeffxu at chromium.org
    • [PATCH v7 1/1] selftests/landlock: skip overlayfs test when kernel not support it   Guenter Roeck
  • [PATCH v7 0/1] selftests/landlock: fix test when overlayfs is   jeffxu at chromium.org
  • [PATCH v7 0/1] selftests/landlock: fix test when overlayfs is   jeffxu at chromium.org
    • [PATCH v7 0/1] selftests/landlock: fix test when overlayfs is   Jeff Xu
• [PATCH v4 0/8] LSM: Three basic syscalls   Casey Schaufler
  • [PATCH v4 1/8] LSM: Identify modules by more than name   Casey Schaufler
  • [PATCH v4 2/8] LSM: Maintain a table of LSM attribute data   Casey Schaufler
  • [PATCH v4 3/8] proc: Use lsmids instead of lsm names for attrs   Casey Schaufler
  • [PATCH v4 4/8] LSM: lsm_get_self_attr syscall for LSM self attributes   Casey Schaufler
  • [PATCH v4 5/8] LSM: Create lsm_module_list system call   Casey Schaufler
  • [PATCH v4 6/8] LSM: lsm_set_self_attr syscall for LSM self attributes   Casey Schaufler
  • [PATCH v4 7/8] LSM: wireup Linux Security Module syscalls   Casey Schaufler
  • [PATCH v4 8/8] LSM: selftests for Linux Security Module syscalls   Casey Schaufler

Last message date: Sat Dec 31 13:23:14 UTC 2022
Archived on: Sat Dec 31 12:58:54 UTC 2022

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...