February 2024 Archives by date

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

Starting: Thu Feb 1 10:43:40 UTC 2024
Ending: Thu Feb 29 23:25:46 UTC 2024
Messages: 510

[PATCH bpf-next] bpf: minor clean-up to sleepable_lsm_hooks BTF set Matt Bobrowski
[PATCH bpf-next] bpf: add security_file_mprotect() to sleepable_lsm_hooks BTF set Matt Bobrowski
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Amir Goldstein
[PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs Christian Brauner
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Stefan Berger
[PATCH bpf-next] bpf: add security_file_mprotect() to sleepable_lsm_hooks BTF set Matt Bobrowski
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Amir Goldstein
[PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs Amir Goldstein
[PATCH] apparmor: use kvfree_sensitive to free data->data Fedor Pchelkin
[PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs Stefan Berger
[PATCH bpf-next] bpf: minor clean-up to sleepable_lsm_hooks BTF set patchwork-bot+netdevbpf at kernel.org
[PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 Mimi Zohar
Starting to work on liblsm Casey Schaufler
[GIT PULL] lsm/lsm-pr-20240131 pr-tracker-bot at kernel.org
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Stefan Berger
[PATCH] KEYS: encrypted: Add check for strsep Jarkko Sakkinen
[PATCH] security: fix no-op hook logic in security_inode_{set, remove}xattr() Paul Moore
[PATCH] KEYS: encrypted: Add check for strsep Mimi Zohar
[PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr() Casey Schaufler
[PATCH v39 00/42] LSM: General module stacking John Johansen
[PATCH] security: fix no-op hook logic in security_inode_{set, remove}xattr() Paul Moore
[PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef George Guo
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Amir Goldstein
[PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs Christian Brauner
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Stefan Berger
[PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef Paul Moore
Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks Ondrej Mosnacek
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Amir Goldstein
Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks Jeff Layton
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Stefan Berger
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Amir Goldstein
[PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash Stefan Berger
Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks Ondrej Mosnacek
[RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Mike Snitzer
[PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef Jakub Kicinski
[RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Fan Wu
[PATCH v2 0/3] fs/exec: remove current->in_execve flag Tetsuo Handa
[PATCH v2 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v2 2/3] tomoyo: replace current->in_execve flag with security_execve_abort() hook Tetsuo Handa
[PATCH v2 3/3] fs/exec: remove current->in_execve flag Tetsuo Handa
[PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack Paul Moore
[PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider Paul Moore
[PATCH RFC v12 8/20] ipe: add userspace interface Paul Moore
[PATCH RFC v12 9/20] uapi|audit|ipe: add ipe auditing support Paul Moore
[PATCH RFC v12 10/20] ipe: add permissive toggle Paul Moore
[PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Paul Moore
[PATCH RFC v12 17/20] ipe: enable support for fs-verity as a trust provider Paul Moore
[PATCH v2 2/3] tomoyo: replace current->in_execve flag with security_execve_abort() hook kernel test robot
[PATCH v2 1/1] netlabel: cleanup struct netlbl_lsm_catmap George Guo
[PATCH v2 1/1] netlabel: cleanup struct netlbl_lsm_catmap Paul Moore
[PATCH v2 0/3] fs/exec: remove current->in_execve flag Serge Hallyn
[ANNOUNCE] CFP: Linux Security Summit Europe 2024 Reshetova, Elena
[PATCH v5 0/6] DCP as trusted keys backend David Gstir
[PATCH 2/13] Add TSEM specific documentation. Paul Moore
[PATCH v2 0/9] evm: Support signatures on stacked filesystem Stefan Berger
[PATCH v2 1/9] ima: Rename backing_inode to real_inode Stefan Berger
[PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs Stefan Berger
[PATCH v2 3/9] evm: Implement per signature type decision in security_inode_copy_up_xattr Stefan Berger
[PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file Stefan Berger
[PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash Stefan Berger
[PATCH v2 6/9] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 Stefan Berger
[PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED Stefan Berger
[PATCH v2 8/9] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs Stefan Berger
[PATCH v2 9/9] ima: Record i_version of real_inode for change detection Stefan Berger
[PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack Fan Wu
[PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[PATCH RFC v12 8/20] ipe: add userspace interface Fan Wu
[PATCH RFC v12 8/20] ipe: add userspace interface Paul Moore
[PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Fan Wu
[PATCH RFC v12 8/20] ipe: add userspace interface Fan Wu
[PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook Eric Biggers
[PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file kernel test robot
[PATCH v3 0/3] fs/exec: remove current->in_execve flag Tetsuo Handa
[PATCH v3 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v3 2/3] tomoyo: replace current->in_execve flag with security_execve_abort() hook Tetsuo Handa
[PATCH v3 3/3] fs/exec: remove current->in_execve flag Tetsuo Handa
smack: Possible NULL pointer deref in cred_free hook. Tetsuo Handa
[PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED Amir Goldstein
[PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs Amir Goldstein
[PATCH v2 9/9] ima: Record i_version of real_inode for change detection Amir Goldstein
[PATCH v2 1/9] ima: Rename backing_inode to real_inode Amir Goldstein
[PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash Amir Goldstein
[PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file Amir Goldstein
[PATCH v2 9/9] ima: Record i_version of real_inode for change detection Jeff Layton
[PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash kernel test robot
[PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Paul Moore
[PATCH v3 1/3] LSM: add security_execve_abort() hook Paul Moore
ANN: moving lsm/dev to v6.8-rc3 Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
smack: Possible NULL pointer deref in cred_free hook. Tetsuo Handa
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions Neeraj Upadhyay
[PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file kernel test robot
[PATCH v3 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v2 1/1] netlabel: cleanup struct netlbl_lsm_catmap patchwork-bot+netdevbpf at kernel.org
[PATCH v9 0/4] Reduce overhead of LSMs with static calls KP Singh
[PATCH v9 1/4] kernel: Add helper macros for loop unrolling KP Singh
[PATCH v9 2/4] security: Count the LSMs enabled at compile time KP Singh
[PATCH v9 3/4] security: Replace indirect LSM hook calls with static calls KP Singh
[PATCH v9 4/4] bpf: Only enable BPF LSM hooks when an LSM program is attached KP Singh
[PATCH v2 1/3] LSM: add security_execve_abort() hook Kees Cook
[PATCH v2 2/3] tomoyo: replace current->in_execve flag with security_execve_abort() hook Kees Cook
[PATCH v2 3/3] fs/exec: remove current->in_execve flag Kees Cook
[PATCH v3 1/3] LSM: add security_execve_abort() hook Kees Cook
[PATCH v2 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v2 1/3] LSM: add security_execve_abort() hook Paul Moore
[PATCH v2 1/3] LSM: add security_execve_abort() hook Kees Cook
[PATCH v3 1/3] LSM: add security_execve_abort() hook Paul Moore
[PATCH v2 1/3] LSM: add security_execve_abort() hook Paul Moore
[PATCH v2 1/3] LSM: add security_execve_abort() hook Linus Torvalds
[PATCH v2 1/3] LSM: add security_execve_abort() hook Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
[PATCH v2 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v2 1/3] LSM: add security_execve_abort() hook Paul Moore
[PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure Paul Moore
[PATCH v9 1/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure Paul Moore
[PATCH v9 2/25] ima: Align ima_file_mprotect() definition with LSM infrastructure Paul Moore
[PATCH v9 3/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure Paul Moore
[PATCH v9 4/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure Paul Moore
[PATCH v9 5/25] ima: Align ima_post_read_file() definition with LSM infrastructure Paul Moore
[PATCH v9 6/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure Paul Moore
[PATCH v9 7/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure Paul Moore
[PATCH v9 8/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure Paul Moore
[PATCH v9 9/25] security: Align inode_setattr hook definition with EVM Paul Moore
[PATCH v9 10/25] security: Introduce inode_post_setattr hook Paul Moore
[PATCH v9 11/25] security: Introduce inode_post_removexattr hook Paul Moore
[PATCH v9 12/25] security: Introduce file_post_open hook Paul Moore
[PATCH v9 13/25] security: Introduce file_release hook Paul Moore
[PATCH v9 14/25] security: Introduce path_post_mknod hook Paul Moore
[PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook Paul Moore
[PATCH v9 16/25] security: Introduce inode_post_set_acl hook Paul Moore
[PATCH v9 17/25] security: Introduce inode_post_remove_acl hook Paul Moore
[PATCH v9 18/25] security: Introduce key_post_create_or_update hook Paul Moore
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Paul Moore
[PATCH v9 20/25] ima: Move to LSM infrastructure Paul Moore
[PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure Paul Moore
[PATCH v9 22/25] evm: Move to LSM infrastructure Paul Moore
[PATCH v9 23/25] evm: Make it independent from 'integrity' LSM Paul Moore
[PATCH v9 25/25] integrity: Remove LSM Paul Moore
[PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure Roberto Sassu
[PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure Paul Moore
Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks Ondrej Mosnacek
[PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure Christian Brauner
[PATCH v9 22/25] evm: Move to LSM infrastructure Christian Brauner
[PATCH v9 20/25] ima: Move to LSM infrastructure Christian Brauner
[PATCH v9 16/25] security: Introduce inode_post_set_acl hook Christian Brauner
[PATCH v9 17/25] security: Introduce inode_post_remove_acl hook Christian Brauner
[PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook Christian Brauner
[PATCH v9 14/25] security: Introduce path_post_mknod hook Christian Brauner
[PATCH v9 12/25] security: Introduce file_post_open hook Christian Brauner
[PATCH v9 12/25] security: Introduce file_post_open hook Christian Brauner
[PATCH v9 12/25] security: Introduce file_post_open hook Christian Brauner
[PATCH v9 13/25] security: Introduce file_release hook Christian Brauner
[PATCH v9 11/25] security: Introduce inode_post_removexattr hook Christian Brauner
[PATCH v9 10/25] security: Introduce inode_post_setattr hook Christian Brauner
[PATCH v9 12/25] security: Introduce file_post_open hook Roberto Sassu
[PATCH v9 12/25] security: Introduce file_post_open hook Christian Brauner
[PATCH v9 12/25] security: Introduce file_post_open hook Roberto Sassu
[PATCH v3 00/13] security: digest_cache LSM Roberto Sassu
[PATCH v3 01/13] lib: Add TLV parser Roberto Sassu
[PATCH v3 02/13] security: Introduce the digest_cache LSM Roberto Sassu
[PATCH v3 03/13] digest_cache: Add securityfs interface Roberto Sassu
[PATCH v3 04/13] digest_cache: Add hash tables and operations Roberto Sassu
[PATCH v3 05/13] digest_cache: Populate the digest cache from a digest list Roberto Sassu
[PATCH v3 06/13] digest_cache: Parse tlv digest lists Roberto Sassu
[PATCH v3 07/13] digest_cache: Parse rpm digest lists Roberto Sassu
[PATCH v3 08/13] digest_cache: Add management of verification data Roberto Sassu
[PATCH v3 09/13] digest_cache: Add support for directories Roberto Sassu
[PATCH v3 10/13] digest cache: Prefetch digest lists if requested Roberto Sassu
[PATCH v3 11/13] digest_cache: Reset digest cache on file/directory change Roberto Sassu
[PATCH v3 12/13] selftests/digest_cache: Add selftests for digest_cache LSM Roberto Sassu
[PATCH v3 13/13] docs: Add documentation of the digest_cache LSM Roberto Sassu
[PATCH v9 0/8] Landlock: IOCTL support Günther Noack
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH v9 2/8] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v9 3/8] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v9 4/8] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v9 5/8] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v9 6/8] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v9 7/8] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL Günther Noack
[PATCH v9 8/8] landlock: Document IOCTL support Günther Noack
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions John Johansen
[PATCH v3 02/13] security: Introduce the digest_cache LSM Randy Dunlap
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH v9 1/8] landlock: Add IOCTL access right Arnd Bergmann
[PATCH] KEYS: encrypted: Add check for strsep Jarkko Sakkinen
[PATCH v3 02/13] security: Introduce the digest_cache LSM Roberto Sassu
[PATCH v9 1/8] landlock: Add IOCTL access right Christian Brauner
[PATCH v9 13/25] security: Introduce file_release hook Stefan Berger
[PATCH v9 14/25] security: Introduce path_post_mknod hook Stefan Berger
[PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook Stefan Berger
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Stefan Berger
[PATCH v9 20/25] ima: Move to LSM infrastructure Stefan Berger
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Paul Moore
[PATCH v9 22/25] evm: Move to LSM infrastructure Stefan Berger
[PATCH v9 23/25] evm: Make it independent from 'integrity' LSM Stefan Berger
[PATCH v9 24/25] ima: Make it independent from 'integrity' LSM Stefan Berger
[PATCH v9 25/25] integrity: Remove LSM Stefan Berger
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Stefan Berger
[PATCH v9 12/25] security: Introduce file_post_open hook Mimi Zohar
[PATCH v9 12/25] security: Introduce file_post_open hook Paul Moore
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Roberto Sassu
[PATCH v5 0/6] DCP as trusted keys backend Richard Weinberger
[PATCH v9 12/25] security: Introduce file_post_open hook Roberto Sassu
[PATCH v9 12/25] security: Introduce file_post_open hook Paul Moore
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Stefan Berger
[PATCH] security: use default hook return value in call_int_hook() Paul Moore
[PATCH v2 9/9] ima: Record i_version of real_inode for change detection Stefan Berger
[PATCH] security: use default hook return value in call_int_hook() Paul Moore
[PATCH] security: use default hook return value in call_int_hook() Casey Schaufler
[GIT PULL] Landlock fixes for v6.8-rc5 Mickaël Salaün
[RFC][PATCH 0/8] ima: Integrate with digest_cache LSM Roberto Sassu
[RFC][PATCH 1/8] ima: Introduce hook DIGEST_LIST_CHECK Roberto Sassu
[RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook Roberto Sassu
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Roberto Sassu
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Roberto Sassu
[RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache Roberto Sassu
[RFC][PATCH 6/8] ima: Use digest cache for measurement Roberto Sassu
[RFC][PATCH 7/8] ima: Use digest cache for appraisal Roberto Sassu
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Roberto Sassu
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Jann Horn
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Casey Schaufler
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Paul Moore
[PATCH v9 12/25] security: Introduce file_post_open hook Mimi Zohar
[PATCH v9 12/25] security: Introduce file_post_open hook Paul Moore
[PATCH v3 1/3] LSM: add security_execve_abort() hook Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Tetsuo Handa
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Kees Cook
[GIT PULL] Landlock fixes for v6.8-rc5 pr-tracker-bot at kernel.org
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Kees Cook
[PATCH v9 12/25] security: Introduce file_post_open hook Mimi Zohar
[PATCH v1 5/5] sbm: SandBox Mode documentation Roberto Sassu
[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA Roberto Sassu
[PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure Roberto Sassu
[PATCH v10 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure Roberto Sassu
[PATCH v10 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure Roberto Sassu
[PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure Roberto Sassu
[PATCH v10 09/25] security: Align inode_setattr hook definition with EVM Roberto Sassu
[PATCH v10 10/25] security: Introduce inode_post_setattr hook Roberto Sassu
[PATCH v10 11/25] security: Introduce inode_post_removexattr hook Roberto Sassu
[PATCH v10 12/25] security: Introduce file_post_open hook Roberto Sassu
[PATCH v10 13/25] security: Introduce file_release hook Roberto Sassu
[PATCH v10 14/25] security: Introduce path_post_mknod hook Roberto Sassu
[PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook Roberto Sassu
[PATCH v10 16/25] security: Introduce inode_post_set_acl hook Roberto Sassu
[PATCH v10 17/25] security: Introduce inode_post_remove_acl hook Roberto Sassu
[PATCH v10 18/25] security: Introduce key_post_create_or_update hook Roberto Sassu
[PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA Roberto Sassu
[PATCH v10 20/25] ima: Move to LSM infrastructure Roberto Sassu
[PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure Roberto Sassu
[PATCH v10 22/25] evm: Move to LSM infrastructure Roberto Sassu
[PATCH v10 23/25] evm: Make it independent from 'integrity' LSM Roberto Sassu
[PATCH v10 24/25] ima: Make it independent from 'integrity' LSM Roberto Sassu
[PATCH v10 25/25] integrity: Remove LSM Roberto Sassu
[PATCH] security: fix integer overflow in lsm_set_self_attr() syscall Paul Moore
[PATCH v3 1/3] LSM: add security_execve_abort() hook Tetsuo Handa
[PATCH v9 12/25] security: Introduce file_post_open hook Paul Moore
[PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA Roberto Sassu
[GIT PULL] lsm/lsm-pr-20240215 Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Paul Moore
[PATCH v3 1/3] LSM: add security_execve_abort() hook Paul Moore
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
[PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA Mimi Zohar
smack: Possible NULL pointer deref in cred_free hook. Paul Moore
[PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure Paul Moore
[PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure Roberto Sassu
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Coiby Xu
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Mimi Zohar
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[GIT PULL] lsm/lsm-pr-20240215 pr-tracker-bot at kernel.org
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[RFC 0/8] PGP key parser using SandBox Mode Roberto Sassu
[PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure Eric Snowberg
smack: Possible NULL pointer deref in cred_free hook. Serge E. Hallyn
[PATCH] LSM: Fix typos in security/security.c comment headers Pairman Guo
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH 2/13] Add TSEM specific documentation. Dr. Greg
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[PATCH] landlock: Fix asymmetric private inodes referring Mickaël Salaün
[PATCH] landlock: Warn once if a Landlock action is requested while disabled Mickaël Salaün
[PATCH] landlock: Warn once if a Landlock action is requested while disabled Kees Cook
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[syzbot] [apparmor?] [ext4?] general protection fault in common_perm_cond syzbot
[syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry syzbot
memory leak in smack since de93 e515 db30 ("Smack: Improve mount process memory use") Lukas Bulwahn
[syzbot] [apparmor?] [ext4?] general protection fault in common_perm_cond Jan Kara
[syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry Roberto Sassu
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH net-next v3 01/11] selftests: kselftest_harness: pass step via shared memory Jakub Kicinski
[PATCH net-next v3 02/11] selftests: kselftest_harness: use KSFT_* exit codes Jakub Kicinski
[PATCH net-next v3 03/11] selftests: kselftest_harness: generate test name once Jakub Kicinski
[PATCH net-next v3 04/11] selftests: kselftest_harness: save full exit code in metadata Jakub Kicinski
[PATCH net-next v3 05/11] selftests: kselftest_harness: use exit code to store skip Jakub Kicinski
[PATCH net-next v3 06/11] selftests: kselftest: add ksft_test_result_code(), handling all exit codes Jakub Kicinski
[PATCH net-next v3 07/11] selftests: kselftest_harness: print test name for SKIP Jakub Kicinski
[PATCH net-next v3 08/11] selftests: kselftest_harness: separate diagnostic message with # in ksft_test_result_code() Jakub Kicinski
[PATCH net-next v3 09/11] selftests: kselftest_harness: let PASS / FAIL provide diagnostic Jakub Kicinski
[PATCH net-next v3 10/11] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH net-next v3 11/11] selftests: ip_local_port_range: use XFAIL instead of SKIP Jakub Kicinski
[PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs Paul Moore
[PATCH net-next v3 05/11] selftests: kselftest_harness: use exit code to store skip Kees Cook
[PATCH net-next v3 06/11] selftests: kselftest: add ksft_test_result_code(), handling all exit codes Kees Cook
[PATCH net-next v3 07/11] selftests: kselftest_harness: print test name for SKIP Kees Cook
[PATCH net-next v3 08/11] selftests: kselftest_harness: separate diagnostic message with # in ksft_test_result_code() Kees Cook
[PATCH net-next v3 10/11] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH net-next v3 09/11] selftests: kselftest_harness: let PASS / FAIL provide diagnostic Kees Cook
[PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook Greg KH
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Paolo Abeni
smack: Possible NULL pointer deref in cred_free hook. Casey Schaufler
[PATCH] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Seth Forshee (DigitalOcean)
[PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h Seth Forshee (DigitalOcean)
[PATCH v2 02/25] mnt_idmapping: include cred.h Seth Forshee (DigitalOcean)
[PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data Seth Forshee (DigitalOcean)
[PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps Seth Forshee (DigitalOcean)
[PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids Seth Forshee (DigitalOcean)
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
[PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace Seth Forshee (DigitalOcean)
[PATCH v2 08/25] xattr: add is_fscaps_xattr() helper Seth Forshee (DigitalOcean)
[PATCH v2 09/25] commoncap: use is_fscaps_xattr() Seth Forshee (DigitalOcean)
[PATCH v2 10/25] xattr: use is_fscaps_xattr() Seth Forshee (DigitalOcean)
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
[PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
[PATCH v2 13/25] smack: add hooks for fscaps operations Seth Forshee (DigitalOcean)
[PATCH v2 14/25] evm: add support for fscaps security hooks Seth Forshee (DigitalOcean)
[PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Seth Forshee (DigitalOcean)
[PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps Seth Forshee (DigitalOcean)
[PATCH v2 17/25] fs: add vfs_get_fscaps() Seth Forshee (DigitalOcean)
[PATCH v2 18/25] fs: add vfs_set_fscaps() Seth Forshee (DigitalOcean)
[PATCH v2 19/25] fs: add vfs_remove_fscaps() Seth Forshee (DigitalOcean)
[PATCH v2 20/25] ovl: add fscaps handlers Seth Forshee (DigitalOcean)
[PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up Seth Forshee (DigitalOcean)
[PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs Seth Forshee (DigitalOcean)
[PATCH v2 23/25] commoncap: remove cap_inode_getsecurity() Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr() Seth Forshee (DigitalOcean)
[PATCH] landlock: Warn once if a Landlock action is requested while disabled Günther Noack
[PATCH v2 13/25] smack: add hooks for fscaps operations Casey Schaufler
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Paul Moore
[PATCH v2 12/25] selinux: add hooks for fscaps operations Paul Moore
[PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Paul Moore
[PATCH] LSM: Fix typos in security/security.c comment headers Paul Moore
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
[PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
[PATCH v2 13/25] smack: add hooks for fscaps operations Seth Forshee (DigitalOcean)
[PATCH v2 12/25] selinux: add hooks for fscaps operations Paul Moore
[PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Seth Forshee (DigitalOcean)
[PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
[PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Paul Moore
[syzbot] [keyrings?] [lsm?] KASAN: slab-out-of-bounds Read in key_task_permission (2) syzbot
[RFC 0/5] PoC: convert AppArmor parser to SandBox Mode Petr Tesarik
[RFC 1/5] sbm: x86: fix SBM error entry path Petr Tesarik
[RFC 2/5] sbm: enhance buffer mapping API Petr Tesarik
[RFC 3/5] sbm: x86: infrastructure to fix up sandbox faults Petr Tesarik
[RFC 4/5] sbm: fix up calls to dynamic memory allocators Petr Tesarik
[RFC 5/5] apparmor: parse profiles in sandbox mode Petr Tesarik
[PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h Christian Brauner
[PATCH v2 02/25] mnt_idmapping: include cred.h Christian Brauner
[PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data Christian Brauner
[PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids Christian Brauner
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Christian Brauner
[PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace Christian Brauner
[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Christian Brauner
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
[RFC 4/5] sbm: fix up calls to dynamic memory allocators Dave Hansen
[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Seth Forshee (DigitalOcean)
[RFC 4/5] sbm: fix up calls to dynamic memory allocators Petr Tesařík
[RFC 4/5] sbm: fix up calls to dynamic memory allocators Dave Hansen
[PATCH] security: use default hook return value in call_int_hook() Paul Moore
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Christian Brauner
[PATCH v2 08/25] xattr: add is_fscaps_xattr() helper Christian Brauner
[PATCH v2 09/25] commoncap: use is_fscaps_xattr() Christian Brauner
[PATCH v2 10/25] xattr: use is_fscaps_xattr() Christian Brauner
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Christian Brauner
[PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps Christian Brauner
[PATCH v2 17/25] fs: add vfs_get_fscaps() Christian Brauner
[PATCH v2 18/25] fs: add vfs_set_fscaps() Christian Brauner
[PATCH v2 19/25] fs: add vfs_remove_fscaps() Christian Brauner
[PATCH v2 20/25] ovl: add fscaps handlers Christian Brauner
[PATCH v3 00/10] evm: Support signatures on stacked filesystem Stefan Berger
[PATCH v3 01/10] ima: Rename backing_inode to real_inode Stefan Berger
[PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs Stefan Berger
[PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr Stefan Berger
[PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash Stefan Berger
[PATCH v3 05/10] ima: Move file-change detection variables into new structure Stefan Berger
[PATCH v3 06/10] evm: Store and detect metadata inode attributes changes Stefan Berger
[PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change Stefan Berger
[PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 Stefan Berger
[PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED Stefan Berger
[PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs Stefan Berger
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Paul Moore
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Paul Moore
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Paul Moore
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH 1/2] SELinux: Fix lsm_get_self_attr() Paul Moore
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v5 0/6] DCP as trusted keys backend Richard Weinberger
[PATCH v5 0/6] DCP as trusted keys backend Jarkko Sakkinen
[PATCH 0/2] Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH 1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() Mickaël Salaün
[PATCH 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH] landlock: Warn once if a Landlock action is requested while disabled Mickaël Salaün
[PATCH] proc: allow restricting /proc/pid/mem writes Doug Anderson
[PATCH] landlock: Warn once if a Landlock action is requested while disabled Mickaël Salaün
[PATCH 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() Kees Cook
[PATCH] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Paul Moore
[PATCH 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH] proc: allow restricting /proc/pid/mem writes Mike Frysinger
Re: [PATCH] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH] proc: allow restricting /proc/pid/mem writes Doug Anderson
[PATCH] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk Zhengchao Shao
[PATCH v2 1/2] landlock: Extend documentation for kernel support Mickaël Salaün
[PATCH v2 2/2] landlock: Warn once if a Landlock action is requested while disabled Mickaël Salaün
[PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk Jiri Pirko
[PATCH v2 20/25] ovl: add fscaps handlers Amir Goldstein
[PATCH v2 20/25] ovl: add fscaps handlers Seth Forshee (DigitalOcean)
[PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk Paul Moore
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Paul Moore
[syzbot] [lsm?] [reiserfs?] general protection fault in fsnotify_perm syzbot
[PATCH v2 1/2] landlock: Extend documentation for kernel support Günther Noack
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Paul Moore
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Paul Moore
[GIT PULL] lsm/lsm-pr-20240227 Paul Moore
[GIT PULL] lsm/lsm-pr-20240227 pr-tracker-bot at kernel.org
[PATCH 2/2] AppArmor: Fix lsm_get_self_attr() Mickaël Salaün
[PATCH v9 1/8] landlock: Add IOCTL access right Günther Noack
[PATCH v3 00/13] security: digest_cache LSM Roberto Sassu
[RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE) Fan Wu
[RFC PATCH v13 01/20] security: add ipe lsm Fan Wu
[RFC PATCH v13 02/20] ipe: add policy parser Fan Wu
[RFC PATCH v13 03/20] ipe: add evaluation loop Fan Wu
[RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read Fan Wu
[RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[RFC PATCH v13 07/20] security: add new securityfs delete function Fan Wu
[RFC PATCH v13 08/20] ipe: add userspace interface Fan Wu
[RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support Fan Wu
[RFC PATCH v13 10/20] ipe: add permissive toggle Fan Wu
[RFC PATCH v13 11/20] block|security: add LSM blob to block_device Fan Wu
[RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Fan Wu
[RFC PATCH v13 13/20] dm: add finalize hook to target_type Fan Wu
[RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider Fan Wu
[RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v13 18/20] scripts: add boot policy generation program Fan Wu
[RFC PATCH v13 19/20] ipe: kunit test for parser Fan Wu
[RFC PATCH v13 20/20] documentation: add ipe documentation Fan Wu
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 01/12] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() Jakub Kicinski
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Jakub Kicinski
[PATCH v4 03/12] selftests: kselftest_harness: use KSFT_* exit codes Jakub Kicinski
[PATCH v4 04/12] selftests: kselftest_harness: generate test name once Jakub Kicinski
[PATCH v4 05/12] selftests: kselftest_harness: save full exit code in metadata Jakub Kicinski
[PATCH v4 06/12] selftests: kselftest_harness: use exit code to store skip Jakub Kicinski
[PATCH v4 07/12] selftests: kselftest: add ksft_test_result_code(), handling all exit codes Jakub Kicinski
[PATCH v4 08/12] selftests: kselftest_harness: print test name for SKIP Jakub Kicinski
[PATCH v4 09/12] selftests: kselftest_harness: separate diagnostic message with # in ksft_test_result_code() Jakub Kicinski
[PATCH v4 10/12] selftests: kselftest_harness: let PASS / FAIL provide diagnostic Jakub Kicinski
[PATCH v4 11/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP Jakub Kicinski
[PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk patchwork-bot+netdevbpf at kernel.org
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Randy Dunlap
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Eric Biggers
[PATCH v1 0/8] Run KUnit tests late and handle faults Mickaël Salaün
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup Mickaël Salaün
[PATCH v1 2/8] kunit: Handle thread creation error Mickaël Salaün
[PATCH v1 3/8] kunit: Fix kthread reference Mickaël Salaün
[PATCH v1 4/8] kunit: Fix timeout message Mickaël Salaün
[PATCH v1 5/8] kunit: Handle test faults Mickaël Salaün
[PATCH v1 6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v1 7/8] kunit: Print last test location on fault Mickaël Salaün
[PATCH v1 8/8] kunit: Add tests for faults Mickaël Salaün
[GIT PULL] Landlock fixes for v6.8-rc7 Mickaël Salaün
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup Kees Cook
[PATCH v1 2/8] kunit: Handle thread creation error Kees Cook
[PATCH v1 3/8] kunit: Fix kthread reference Kees Cook
[PATCH v1 4/8] kunit: Fix timeout message Kees Cook
[PATCH v1 5/8] kunit: Handle test faults Kees Cook
[PATCH v1 6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Kees Cook
[PATCH v1 7/8] kunit: Print last test location on fault Kees Cook
[PATCH v1 8/8] kunit: Add tests for faults Kees Cook
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Eric Biggers
[RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
[PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP Jakub Sitnicki
[GIT PULL] Landlock fixes for v6.8-rc7 pr-tracker-bot at kernel.org
[PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP Xin Long

Last message date: Thu Feb 29 23:25:46 UTC 2024
Archived on: Thu Feb 29 23:26:19 UTC 2024

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).