March 2024 Archives by date

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

Starting: Fri Mar 1 05:29:40 UTC 2024
Ending: Sun Mar 31 18:08:28 UTC 2024
Messages: 682

[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup kernel test robot
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail patchwork-bot+netdevbpf at kernel.org
[PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP Jakub Sitnicki
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup kernel test robot
[PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control() Tetsuo Handa
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[PATCH v2 14/25] evm: add support for fscaps security hooks Seth Forshee (DigitalOcean)
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Roberto Sassu
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup Mickaël Salaün
[PATCH v1 5/8] kunit: Handle test faults Mickaël Salaün
[PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control() Linus Torvalds
[PATCH v1 8/8] kunit: Add tests for faults Mickaël Salaün
[PATCH v1 0/8] Run KUnit tests late and handle faults Mickaël Salaün
[PATCH v2 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v2 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v2 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v2 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v2 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v2 7/7] kunit: Add tests for fault Mickaël Salaün
[PATCH v1 8/8] kunit: Add tests for faults kernel test robot
[PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions Mateusz Guzik
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Mike Snitzer
[RFC PATCH v13 13/20] dm: add finalize hook to target_type Mike Snitzer
[RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry syzbot
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH][next] apparmor: remove useless static inline function is_deleted Colin Ian King
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v5 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v5 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys Jarkko Sakkinen
[PATCH v5 0/6] DCP as trusted keys backend Jarkko Sakkinen
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[linux-next:master] [selftests/harness] 0710a1a73f: kernel-selftests.seccomp.seccomp_bpf.TRAP.dfl.fail kernel test robot
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christoph Hellwig
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Seth Forshee
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Serge E. Hallyn
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Przemek Kitszel
[PATCH v1 0/2] Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v1 1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() Mickaël Salaün
[PATCH v1 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Jakub Kicinski
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Kees Cook
[PATCH v2 1/7] kunit: Handle thread creation error Rae Moar
[PATCH v2 2/7] kunit: Fix kthread reference Rae Moar
[PATCH v2 3/7] kunit: Fix timeout message Rae Moar
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Roberto Sassu
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Roberto Sassu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Matt Denton
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Mimi Zohar
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Casey Schaufler
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Casey Schaufler
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Paul Moore
[RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE) Fan Wu
[RFC PATCH v14 01/19] security: add ipe lsm Fan Wu
[RFC PATCH v14 02/19] ipe: add policy parser Fan Wu
[RFC PATCH v14 03/19] ipe: add evaluation loop Fan Wu
[RFC PATCH v14 04/19] ipe: add LSM hooks on execution and kernel read Fan Wu
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[RFC PATCH v14 07/19] security: add new securityfs delete function Fan Wu
[RFC PATCH v14 08/19] ipe: add userspace interface Fan Wu
[RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support Fan Wu
[RFC PATCH v14 10/19] ipe: add permissive toggle Fan Wu
[RFC PATCH v14 11/19] block|security: add LSM blob to block_device Fan Wu
[RFC PATCH v14 12/19] dm: add finalize hook to target_type Fan Wu
[RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v14 17/19] scripts: add boot policy generation program Fan Wu
[RFC PATCH v14 18/19] ipe: kunit test for parser Fan Wu
[RFC PATCH v14 19/19] documentation: add ipe documentation Fan Wu
[RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Randy Dunlap
[RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Randy Dunlap
[RFC PATCH v14 17/19] scripts: add boot policy generation program Randy Dunlap
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling patchwork-bot+netdevbpf at kernel.org
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Roberto Sassu
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Roberto Sassu
[syzbot] [usb] INFO: rcu detected stall in newfstatat (3) syzbot
[syzbot] [reiserfs?] INFO: task hung in flush_old_commits syzbot
[PATCH 1/2] landlock: Simplify current_check_access_socket() Mickaël Salaün
[PATCH 2/2] landlock: Rename "ptrace" files to "task" Mickaël Salaün
[PATCH] landlock: Use f_cred in security_file_open() hook Mickaël Salaün
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH] landlock: Use f_cred in security_file_open() hook Christian Brauner
[PATCH v2 1/2] landlock: Extend documentation for kernel support Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Christian Brauner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Seth Forshee
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Mickaël Salaün
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Günther Noack
[PATCH] landlock: Use f_cred in security_file_open() hook Mickaël Salaün
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Mickaël Salaün
[PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v5 0/6] DCP as trusted keys backend David Gstir
[PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys David Gstir
[PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config David Gstir
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[PATCH v6 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params David Gstir
[PATCH v6 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Casey Schaufler
[PATCH] landlock: Use f_cred in security_file_open() hook Kees Cook
[PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params Jarkko Sakkinen
[RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook Mimi Zohar
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Mimi Zohar
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Jarkko Sakkinen
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Jarkko Sakkinen
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook Roberto Sassu
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Roberto Sassu
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Roberto Sassu
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Mimi Zohar
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC][PATCH 6/8] ima: Use digest cache for measurement Mimi Zohar
[RFC][PATCH 6/8] ima: Use digest cache for measurement Roberto Sassu
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Mimi Zohar
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions John Johansen
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Casey Schaufler
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE) Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v10 0/9] Landlock: IOCTL support Günther Noack
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Günther Noack
[PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v10 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v10 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v10 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v10 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v10 9/9] landlock: Document IOCTL support Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode syzbot
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Casey Schaufler
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Tetsuo Handa
[syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode Tetsuo Handa
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Roberto Sassu
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Mimi Zohar
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache Mimi Zohar
[RFC PATCH v14 01/19] security: add ipe lsm Roberto Sassu
[PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Roberto Sassu
[PATCH RFC 0/8] Clavis LSM Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[PATCH RFC 2/8] clavis: Introduce a new system keyring called clavis Eric Snowberg
[PATCH RFC 3/8] efi: Make clavis boot param persist across kexec Eric Snowberg
[PATCH RFC 4/8] clavis: Prevent clavis boot param from changing during kexec Eric Snowberg
[PATCH RFC 5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE) Eric Snowberg
[PATCH RFC 6/8] keys: Add ability to track intended usage of the public key Eric Snowberg
[PATCH RFC 7/8] clavis: Introduce a new key type called clavis_key_acl Eric Snowberg
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Eric Snowberg
[RFC PATCH v14 01/19] security: add ipe lsm Fan Wu
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[GIT PULL] Smack patches for 6.9 Casey Schaufler
[PATCH v2 4/7] kunit: Handle test faults Rae Moar
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Randy Dunlap
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
[EXTERNAL] [PATCH RFC 1/8] certs: Introduce ability to link to a system key Bharat Bhushan
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Dmitry V. Levin
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 6/7] kunit: Print last test location on fault Mickaël Salaün
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Matt Bobrowski
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Dmitry V. Levin
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Casey Schaufler
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Matt Bobrowski
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Kees Cook
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[GIT PULL] Smack patches for 6.9 pr-tracker-bot at kernel.org
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[GIT PULL] selinux/selinux-pr-20240312 Paul Moore
[GIT PULL] lsm/lsm-pr-20240312 Paul Moore
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Coiby Xu
[GIT PULL] selinux/selinux-pr-20240312 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240312 pr-tracker-bot at kernel.org
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[GIT PULL] Landlock updates for v6.9 Mickaël Salaün
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Dmitry V. Levin
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Jan Kara
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Aleksandr Nogikh
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Jan Kara
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Dmitry V. Levin
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[GIT PULL] lsm/lsm-pr-20240314 Paul Moore
[GIT PULL] lsm/lsm-pr-20240314 Linus Torvalds
[GIT PULL] Landlock updates for v6.9 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240314 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240314 Paul Moore
[PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY Christian Göttsche
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Christian Göttsche
[PATCH 03/10] capability: use new capable_any functionality Christian Göttsche
[PATCH 04/10] block: use new capable_any functionality Christian Göttsche
[PATCH 05/10] drivers: use new capable_any functionality Christian Göttsche
[PATCH 06/10] fs: use new capable_any functionality Christian Göttsche
[PATCH 07/10] kernel: use new capable_any functionality Christian Göttsche
[PATCH 08/10] net: use new capable_any functionality Christian Göttsche
[PATCH 09/10] bpf: use new capable_any functionality Christian Göttsche
[PATCH 10/10] coccinelle: add script for capable_any() Christian Göttsche
[PATCH 00/10] Introduce capable_any() Christian Göttsche
[PATCH 2/2] apparmor: fix typo in kernel doc Christian Göttsche
[PATCH 1/2] yama: document function parameter Christian Göttsche
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Christian Brauner
[RFC PATCH] fs: Add an use vfs_get_ioctl_handler() Mickaël Salaün
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH 07/10] kernel: use new capable_any functionality Tycho Andersen
[PATCH 05/10] drivers: use new capable_any functionality Felix Kuehling
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Casey Schaufler
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Casey Schaufler
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH 09/10] bpf: use new capable_any functionality Andrii Nakryiko
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[PATCH 03/10] capability: use new capable_any functionality Andrii Nakryiko
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[RFC PATCH 2/2] selinux: wire up new execstack LSM hook Christian Göttsche
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Christian Göttsche
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Casey Schaufler
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Christian Göttsche
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Mickaël Salaün
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Christian Göttsche
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Casey Schaufler
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Jens Axboe
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Paul Moore
[PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY Serge Hallyn
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Serge Hallyn
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Paul Moore
[PATCH 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers Thomas Weißschuh
[PATCH 01/11] stackleak: don't modify ctl_table argument Thomas Weißschuh
[PATCH 02/11] cgroup: bpf: constify ctl_table arguments and fields Thomas Weißschuh
[PATCH 03/11] hugetlb: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 04/11] utsname: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 05/11] neighbour: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 06/11] ipv4/sysctl: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 07/11] ipv6/addrconf: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 08/11] ipv6/ndisc: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 09/11] ipvs: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 10/11] sysctl: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers Thomas Weißschuh
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[PATCH 08/10] net: use new capable_any functionality Kuniyuki Iwashima
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Kees Cook
[RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE) Fan Wu
[RFC PATCH v15 01/21] security: add ipe lsm Fan Wu
[RFC PATCH v15 02/21] ipe: add policy parser Fan Wu
[RFC PATCH v15 03/21] ipe: add evaluation loop Fan Wu
[RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read Fan Wu
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[RFC PATCH v15 07/21] security: add new securityfs delete function Fan Wu
[RFC PATCH v15 08/21] ipe: add userspace interface Fan Wu
[RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support Fan Wu
[RFC PATCH v15 10/21] ipe: add permissive toggle Fan Wu
[RFC PATCH v15 11/21] block|security: add LSM blob to block_device Fan Wu
[RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook Fan Wu
[RFC PATCH v15 13/21] dm: add finalize hook to target_type Fan Wu
[RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider Fan Wu
[RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook Fan Wu
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v15 19/21] scripts: add boot policy generation program Fan Wu
[RFC PATCH v15 20/21] ipe: kunit test for parser Fan Wu
[RFC PATCH v15 21/21] documentation: add ipe documentation Fan Wu
TSEM code organization. Dr. Greg
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH bpf-next 1/5] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT Xu Kuohai
[PATCH bpf-next 2/5] bpf, lsm: Add return value range description for lsm hook Xu Kuohai
[PATCH bpf-next 3/5] bpf, lsm: Add function to read lsm hook return value range Xu Kuohai
[PATCH bpf-next 4/5] bpf, lsm: Check bpf lsm hook return values in verifier Xu Kuohai
[PATCH bpf-next 5/5] bpf: Fix compare error in function retval_range_within Xu Kuohai
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Jens Axboe
TSEM code organization. Paul Moore
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Casey Schaufler
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Paul Moore
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Eric Biggers
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Eric Biggers
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Roberto Sassu
LSM/IMA integration denying access to inode_init_security. Dr. Greg
LSM/IMA integration denying access to inode_init_security. Roberto Sassu
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Stanislav Fomichev
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Paul Moore
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Roberto Sassu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH v2 1/2] landlock: Extend documentation for kernel support Mickaël Salaün
[PATCH v3 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v3 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v3 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v3 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v3 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v3 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v3 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v3 7/7] kunit: Add tests for fault Mickaël Salaün
Systemd v254 LSM stacking issue - patch Casey Schaufler
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v3 01/10] ima: Rename backing_inode to real_inode Mimi Zohar
[PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr Mimi Zohar
[PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash Mimi Zohar
[PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs Mimi Zohar
[PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change Mimi Zohar
[PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED Mimi Zohar
[PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs Mimi Zohar
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Paul Moore
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Paul Moore
[PATCH RFC v15 16/21] security: add security_inode_setintegrity() hook Paul Moore
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Paul Moore
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Paul Moore
[PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 Mimi Zohar
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Paul Moore
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Fan Wu
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Mimi Zohar
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v2][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Mimi Zohar
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
LSM/IMA integration denying access to inode_init_security. Dr. Greg
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Mickaël Salaün
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH] ima: Fix use-after-free on a dentry's dname.name Stefan Berger
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH v11 0/9] Landlock: IOCTL support Günther Noack
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Günther Noack
[PATCH v11 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v11 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v11 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v11 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v11 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v11 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v11 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v11 9/9] landlock: Document IOCTL support Günther Noack
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Arnd Bergmann
kernel crash in mknod Roberto Sassu
kernel crash in mknod Al Viro
[PATCH] Do not require attributes for security_inode_init_security. Greg Wettstein
[PATCH bpf-next v2 0/7] Add check for bpf lsm return value Xu Kuohai
[PATCH bpf-next v2 1/7] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT Xu Kuohai
[PATCH bpf-next v2 2/7] bpf, lsm: Add return value range description for lsm hook Xu Kuohai
[PATCH bpf-next v2 3/7] bpf, lsm: Add function to read lsm hook return value range Xu Kuohai
[PATCH bpf-next v2 4/7] bpf, lsm: Check bpf lsm hook return values in verifier Xu Kuohai
[PATCH bpf-next v2 5/7] bpf: Fix compare error in function retval_range_within Xu Kuohai
[PATCH bpf-next v2 6/7] selftests/bpf: Avoid load failure for token_lsm.c Xu Kuohai
[PATCH bpf-next v2 7/7] selftests/bpf: Add return value checks and corrections for failed progs Xu Kuohai
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Günther Noack
[PATCH v12 0/9] Landlock: IOCTL support Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v12 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v12 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v12 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v12 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v12 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v12 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v12 9/9] landlock: Document IOCTL support Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
kernel crash in mknod Christian Brauner
kernel crash in mknod Paul Moore
kernel crash in mknod Roberto Sassu
kernel crash in mknod Paul Moore
kernel crash in mknod Al Viro
kernel crash in mknod Al Viro
kernel crash in mknod Paulo Alcantara
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
kernel crash in mknod Al Viro
kernel crash in mknod Paulo Alcantara
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH v3 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
[PATCH v4 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v4 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v4 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v4 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v4 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v4 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v4 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v4 7/7] kunit: Add tests for fault Mickaël Salaün
[PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net Ivanov Mikhail
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
kernel crash in mknod Christian Brauner
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
kernel crash in mknod Paul Moore
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH 1/2] yama: document function parameter Paul Moore
[PATCH 1/2] yama: document function parameter Paul Moore
[PATCH v7 0/6] DCP as trusted keys backend David Gstir
[PATCH v7 1/6] crypto: mxs-dcp: Add support for hardware-bound keys David Gstir
[PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config David Gstir
[PATCH v7 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[PATCH v7 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params David Gstir
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net Mickaël Salaün
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Mickaël Salaün
[PATCH v1 2/2] selftests/landlock: Improve AF_UNSPEC tests Mickaël Salaün
[PATCH v13 00/10] Landlock: IOCTL support Günther Noack
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v13 02/10] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v13 03/10] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v13 04/10] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v13 05/10] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v13 06/10] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v13 07/10] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v13 08/10] landlock: Document IOCTL support Günther Noack
[PATCH v13 09/10] MAINTAINERS: Notify Landlock maintainers about changes to fs/ioctl.c Günther Noack
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Günther Noack
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params Jarkko Sakkinen
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Casey Schaufler
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
[PATCH v13 02/10] selftests/landlock: Test IOCTL support Mickaël Salaün
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Paul Moore
[PATCH] LANDLOCK: use kmem_cache for landlock_object Greg KH
[PATCH] LANDLOCK: use kmem_cache for landlock_object Dan Carpenter
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
kernel crash in mknod Roberto Sassu
kernel crash in mknod Christian Brauner
kernel crash in mknod Roberto Sassu
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
kernel crash in mknod Christian Brauner
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Mickaël Salaün
kernel crash in mknod Paul Moore
kernel crash in mknod Paul Moore
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Paul Moore
[PATCH v2] Add Landlock test for io_uring IORING_OP_OPENAT operation Mickaël Salaün
[PATCH] LANDLOCK: use kmem_cache for landlock_object Mickaël Salaün
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Ivanov Mikhail
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH 0/7] sysctl: Remove sentinel elements from misc directories Joel Granados via B4 Relay
[PATCH 1/7] memory: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 2/7] security: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 3/7] crypto: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 4/7] initrd: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 5/7] ipc: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 6/7] io_uring: Remove the now superfluous sentinel elements from ctl_table array Joel Granados via B4 Relay
[PATCH 7/7] drivers: perf: Remove the now superfluous sentinel elements from ctl_table array Joel Granados via B4 Relay
[PATCH] Do not require attributes for security_inode_init_security. Casey Schaufler
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Mickaël Salaün
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Paul Moore
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH] landlock: Add abstract unix socket connect restrictions TaheraFahimi
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Fan Wu
[PATCH v16 01/20] security: add ipe lsm Fan Wu
[PATCH v16 02/20] ipe: add policy parser Fan Wu
[PATCH v16 03/20] ipe: add evaluation loop Fan Wu
[PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read Fan Wu
[PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[PATCH v16 07/20] security: add new securityfs delete function Fan Wu
[PATCH v16 08/20] ipe: add userspace interface Fan Wu
[PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support Fan Wu
[PATCH v16 10/20] ipe: add permissive toggle Fan Wu
[PATCH v16 11/20] block|security: add LSM blob to block_device Fan Wu
[PATCH v16 12/20] dm: add finalize hook to target_type Fan Wu
[PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[PATCH v16 14/20] ipe: add support for dm-verity as a trust provider Fan Wu
[PATCH v16 15/20] security: add security_inode_setintegrity() hook Fan Wu
[PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook Fan Wu
[PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
[PATCH v16 18/20] scripts: add boot policy generation program Fan Wu
[PATCH v16 19/20] ipe: kunit test for parser Fan Wu
[PATCH v16 20/20] documentation: add ipe documentation Fan Wu
[PATCH] landlock: Add abstract unix socket connect restrictions Casey Schaufler
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Jarkko Sakkinen
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Jarkko Sakkinen
[PATCH v16 01/20] security: add ipe lsm Jarkko Sakkinen
[PATCH v16 02/20] ipe: add policy parser Jarkko Sakkinen
[PATCH v16 02/20] ipe: add policy parser Jarkko Sakkinen
[PATCH v16 03/20] ipe: add evaluation loop Jarkko Sakkinen
[PATCH 1/2] yama: document function parameter Kees Cook
[PATCH 2/2] apparmor: fix typo in kernel doc Kees Cook
[PATCH v16 01/20] security: add ipe lsm Randy Dunlap
(subset) [PATCH 0/7] sysctl: Remove sentinel elements from misc directories Jens Axboe
[PATCH v2] landlock: Add abstract unix socket connect restrictions TaheraFahimi
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] ima: Fix use-after-free on a dentry's dname.name Mimi Zohar
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[linus:master] [selftests/harness] 0710a1a73f: kernel-selftests.pidfd.pidfd_setns_test.fail kernel test robot
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Roberto Sassu
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Roberto Sassu
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Mimi Zohar
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Mimi Zohar
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Roberto Sassu
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Roberto Sassu
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Paul Moore
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Paul Moore
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Mimi Zohar
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Paul Moore
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v16 01/20] security: add ipe lsm Jarkko Sakkinen
[PATCH v16 11/20] block|security: add LSM blob to block_device kernel test robot
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH v2] landlock: Use kmem for landlock_object Greg KH
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari
[PATCH v2] landlock: Use kmem for landlock_object Greg KH
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari

Last message date: Sun Mar 31 18:08:28 UTC 2024
Archived on: Sun Mar 31 18:08:45 UTC 2024

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).