March 2024 Archives by subject

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

Starting: Fri Mar 1 05:29:40 UTC 2024
Ending: Sun Mar 31 18:08:28 UTC 2024
Messages: 682

(subset) [PATCH 0/7] sysctl: Remove sentinel elements from misc directories Jens Axboe
[EXTERNAL] [PATCH RFC 1/8] certs: Introduce ability to link to a system key Bharat Bhushan
[GIT PULL] Landlock updates for v6.9 Mickaël Salaün
[GIT PULL] Landlock updates for v6.9 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240312 Paul Moore
[GIT PULL] lsm/lsm-pr-20240312 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240314 Paul Moore
[GIT PULL] lsm/lsm-pr-20240314 Linus Torvalds
[GIT PULL] lsm/lsm-pr-20240314 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20240314 Paul Moore
[GIT PULL] selinux/selinux-pr-20240312 Paul Moore
[GIT PULL] selinux/selinux-pr-20240312 pr-tracker-bot at kernel.org
[GIT PULL] Smack patches for 6.9 Casey Schaufler
[GIT PULL] Smack patches for 6.9 pr-tracker-bot at kernel.org
[linus:master] [selftests/harness] 0710a1a73f: kernel-selftests.pidfd.pidfd_setns_test.fail kernel test robot
[linux-next:master] [selftests/harness] 0710a1a73f: kernel-selftests.seccomp.seccomp_bpf.TRAP.dfl.fail kernel test robot
[PATCH 0/7] sysctl: Remove sentinel elements from misc directories Joel Granados via B4 Relay
[PATCH 00/10] Introduce capable_any() Christian Göttsche
[PATCH 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers Thomas Weißschuh
[PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY Christian Göttsche
[PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY Serge Hallyn
[PATCH 01/11] stackleak: don't modify ctl_table argument Thomas Weißschuh
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Christian Göttsche
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Christian Göttsche
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Jens Axboe
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Paul Moore
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Serge Hallyn
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Andrii Nakryiko
[PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message Jens Axboe
[PATCH 02/11] cgroup: bpf: constify ctl_table arguments and fields Thomas Weißschuh
[PATCH 03/10] capability: use new capable_any functionality Christian Göttsche
[PATCH 03/10] capability: use new capable_any functionality Andrii Nakryiko
[PATCH 03/11] hugetlb: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 04/10] block: use new capable_any functionality Christian Göttsche
[PATCH 04/11] utsname: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 05/10] drivers: use new capable_any functionality Christian Göttsche
[PATCH 05/10] drivers: use new capable_any functionality Felix Kuehling
[PATCH 05/11] neighbour: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 06/10] fs: use new capable_any functionality Christian Göttsche
[PATCH 06/11] ipv4/sysctl: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 07/10] kernel: use new capable_any functionality Christian Göttsche
[PATCH 07/10] kernel: use new capable_any functionality Tycho Andersen
[PATCH 07/11] ipv6/addrconf: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 08/10] net: use new capable_any functionality Christian Göttsche
[PATCH 08/10] net: use new capable_any functionality Kuniyuki Iwashima
[PATCH 08/11] ipv6/ndisc: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 09/10] bpf: use new capable_any functionality Christian Göttsche
[PATCH 09/10] bpf: use new capable_any functionality Andrii Nakryiko
[PATCH 09/11] ipvs: constify ctl_table arguments of utility functions Thomas Weißschuh
[PATCH 1/2] landlock: Simplify current_check_access_socket() Mickaël Salaün
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Roberto Sassu
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Mimi Zohar
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Roberto Sassu
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod() Paul Moore
[PATCH 1/2] yama: document function parameter Christian Göttsche
[PATCH 1/2] yama: document function parameter Paul Moore
[PATCH 1/2] yama: document function parameter Paul Moore
[PATCH 1/2] yama: document function parameter Kees Cook
[PATCH 1/7] memory: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 10/10] coccinelle: add script for capable_any() Christian Göttsche
[PATCH 10/11] sysctl: constify ctl_table arguments of utility function Thomas Weißschuh
[PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers Thomas Weißschuh
[PATCH 2/2] apparmor: fix typo in kernel doc Christian Göttsche
[PATCH 2/2] apparmor: fix typo in kernel doc Kees Cook
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Roberto Sassu
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Mimi Zohar
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Roberto Sassu
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Paul Moore
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Mimi Zohar
[PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod() Paul Moore
[PATCH 2/2] landlock: Rename "ptrace" files to "task" Mickaël Salaün
[PATCH 2/7] security: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 3/7] crypto: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 4/7] initrd: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 5/7] ipc: Remove the now superfluous sentinel element from ctl_table array Joel Granados via B4 Relay
[PATCH 6/7] io_uring: Remove the now superfluous sentinel elements from ctl_table array Joel Granados via B4 Relay
[PATCH 7/7] drivers: perf: Remove the now superfluous sentinel elements from ctl_table array Joel Granados via B4 Relay
[PATCH][next] apparmor: remove useless static inline function is_deleted Colin Ian King
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Mimi Zohar
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH] Do not require attributes for security_inode_init_security. Greg Wettstein
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Casey Schaufler
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Dr. Greg
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] Do not require attributes for security_inode_init_security. Paul Moore
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Seth Forshee
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash() Roberto Sassu
[PATCH] ima: Fix use-after-free on a dentry's dname.name Stefan Berger
[PATCH] ima: Fix use-after-free on a dentry's dname.name Mimi Zohar
[PATCH] landlock: Add abstract unix socket connect restrictions TaheraFahimi
[PATCH] landlock: Add abstract unix socket connect restrictions Casey Schaufler
[PATCH] landlock: Use f_cred in security_file_open() hook Mickaël Salaün
[PATCH] landlock: Use f_cred in security_file_open() hook Christian Brauner
[PATCH] landlock: Use f_cred in security_file_open() hook Mickaël Salaün
[PATCH] landlock: Use f_cred in security_file_open() hook Kees Cook
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Paul Moore
[PATCH] LANDLOCK: use kmem_cache for landlock_object Greg KH
[PATCH] LANDLOCK: use kmem_cache for landlock_object Dan Carpenter
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Mickaël Salaün
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] LANDLOCK: use kmem_cache for landlock_object Ayush Tiwari
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Casey Schaufler
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Casey Schaufler
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Paul Moore
[PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx() Serge E. Hallyn
[PATCH] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Mickaël Salaün
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Günther Noack
[PATCH] samples/landlock: Don't error out if a file path cannot be opened Mickaël Salaün
[PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net Ivanov Mikhail
[PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net Mickaël Salaün
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Jakub Kicinski
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Kees Cook
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling Mickaël Salaün
[PATCH] selftests/harness: Fix TEST_F()'s vfork handling patchwork-bot+netdevbpf at kernel.org
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christian Brauner
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christoph Hellwig
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Seth Forshee
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Serge E. Hallyn
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Christian Brauner
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Jarkko Sakkinen
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size Jarkko Sakkinen
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Stanislav Fomichev
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Paul Moore
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Roberto Sassu
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value Xu Kuohai
[PATCH bpf-next 1/5] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT Xu Kuohai
[PATCH bpf-next 2/5] bpf, lsm: Add return value range description for lsm hook Xu Kuohai
[PATCH bpf-next 3/5] bpf, lsm: Add function to read lsm hook return value range Xu Kuohai
[PATCH bpf-next 4/5] bpf, lsm: Check bpf lsm hook return values in verifier Xu Kuohai
[PATCH bpf-next 5/5] bpf: Fix compare error in function retval_range_within Xu Kuohai
[PATCH bpf-next v2 0/7] Add check for bpf lsm return value Xu Kuohai
[PATCH bpf-next v2 1/7] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT Xu Kuohai
[PATCH bpf-next v2 2/7] bpf, lsm: Add return value range description for lsm hook Xu Kuohai
[PATCH bpf-next v2 3/7] bpf, lsm: Add function to read lsm hook return value range Xu Kuohai
[PATCH bpf-next v2 4/7] bpf, lsm: Check bpf lsm hook return values in verifier Xu Kuohai
[PATCH bpf-next v2 5/7] bpf: Fix compare error in function retval_range_within Xu Kuohai
[PATCH bpf-next v2 6/7] selftests/bpf: Avoid load failure for token_lsm.c Xu Kuohai
[PATCH bpf-next v2 7/7] selftests/bpf: Add return value checks and corrections for failed progs Xu Kuohai
[PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control() Tetsuo Handa
[PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control() Linus Torvalds
[PATCH RFC 0/8] Clavis LSM Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Eric Snowberg
[PATCH RFC 1/8] certs: Introduce ability to link to a system key Jarkko Sakkinen
[PATCH RFC 2/8] clavis: Introduce a new system keyring called clavis Eric Snowberg
[PATCH RFC 3/8] efi: Make clavis boot param persist across kexec Eric Snowberg
[PATCH RFC 4/8] clavis: Prevent clavis boot param from changing during kexec Eric Snowberg
[PATCH RFC 5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE) Eric Snowberg
[PATCH RFC 6/8] keys: Add ability to track intended usage of the public key Eric Snowberg
[PATCH RFC 7/8] clavis: Introduce a new key type called clavis_key_acl Eric Snowberg
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Eric Snowberg
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Randy Dunlap
[PATCH RFC 8/8] clavis: Introduce new LSM called clavis Eric Snowberg
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Paul Moore
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Fan Wu
[PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook Jarkko Sakkinen
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Paul Moore
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Paul Moore
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[PATCH RFC v15 16/21] security: add security_inode_setintegrity() hook Paul Moore
[PATCH v1 0/2] Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v1 0/8] Run KUnit tests late and handle faults Mickaël Salaün
[PATCH v10 0/9] Landlock: IOCTL support Günther Noack
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Günther Noack
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Paul Moore
[PATCH v10 1/9] security: Create security_file_vfs_ioctl hook Mickaël Salaün
[PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
[PATCH v10 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v10 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v10 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes Mickaël Salaün
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Mickaël Salaün
[PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v10 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v10 9/9] landlock: Document IOCTL support Günther Noack
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Mickaël Salaün
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Casey Schaufler
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Ivanov Mikhail
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect Paul Moore
[PATCH v1 1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() Mickaël Salaün
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup kernel test robot
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup kernel test robot
[PATCH v1 1/8] kunit: Run tests when the kernel is fully setup Mickaël Salaün
[PATCH v11 0/9] Landlock: IOCTL support Günther Noack
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Günther Noack
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Arnd Bergmann
[PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler() Günther Noack
[PATCH v11 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v11 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v11 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v11 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v11 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v11 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v11 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v11 9/9] landlock: Document IOCTL support Günther Noack
[PATCH v1 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v1 2/2] selftests/landlock: Improve AF_UNSPEC tests Mickaël Salaün
[PATCH v12 0/9] Landlock: IOCTL support Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Arnd Bergmann
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Günther Noack
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Mickaël Salaün
[PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks Paul Moore
[PATCH v12 2/9] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v12 3/9] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v12 4/9] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v12 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v12 6/9] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v12 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v12 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v12 9/9] landlock: Document IOCTL support Günther Noack
[PATCH v13 00/10] Landlock: IOCTL support Günther Noack
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Günther Noack
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
[PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices Mickaël Salaün
[PATCH v13 02/10] selftests/landlock: Test IOCTL support Günther Noack
[PATCH v13 02/10] selftests/landlock: Test IOCTL support Mickaël Salaün
[PATCH v13 03/10] selftests/landlock: Test IOCTL with memfds Günther Noack
[PATCH v13 04/10] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Günther Noack
[PATCH v13 05/10] selftests/landlock: Test IOCTLs on named pipes Günther Noack
[PATCH v13 06/10] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets Günther Noack
[PATCH v13 07/10] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV Günther Noack
[PATCH v13 08/10] landlock: Document IOCTL support Günther Noack
[PATCH v13 09/10] MAINTAINERS: Notify Landlock maintainers about changes to fs/ioctl.c Günther Noack
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Günther Noack
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Mickaël Salaün
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Paul Moore
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Mickaël Salaün
[PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM Paul Moore
[PATCH v1 5/8] kunit: Handle test faults Mickaël Salaün
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Dmitry V. Levin
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Dmitry V. Levin
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Kees Cook
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Casey Schaufler
[PATCH v15 05/11] LSM: Create lsm_list_modules system call Paul Moore
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Fan Wu
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Jarkko Sakkinen
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE) Jarkko Sakkinen
[PATCH v16 01/20] security: add ipe lsm Fan Wu
[PATCH v16 01/20] security: add ipe lsm Jarkko Sakkinen
[PATCH v16 01/20] security: add ipe lsm Randy Dunlap
[PATCH v16 01/20] security: add ipe lsm Jarkko Sakkinen
[PATCH v16 02/20] ipe: add policy parser Fan Wu
[PATCH v16 02/20] ipe: add policy parser Jarkko Sakkinen
[PATCH v16 02/20] ipe: add policy parser Jarkko Sakkinen
[PATCH v16 03/20] ipe: add evaluation loop Fan Wu
[PATCH v16 03/20] ipe: add evaluation loop Jarkko Sakkinen
[PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read Fan Wu
[PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[PATCH v16 07/20] security: add new securityfs delete function Fan Wu
[PATCH v16 08/20] ipe: add userspace interface Fan Wu
[PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support Fan Wu
[PATCH v16 10/20] ipe: add permissive toggle Fan Wu
[PATCH v16 11/20] block|security: add LSM blob to block_device Fan Wu
[PATCH v16 11/20] block|security: add LSM blob to block_device kernel test robot
[PATCH v16 12/20] dm: add finalize hook to target_type Fan Wu
[PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[PATCH v16 14/20] ipe: add support for dm-verity as a trust provider Fan Wu
[PATCH v16 15/20] security: add security_inode_setintegrity() hook Fan Wu
[PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook Fan Wu
[PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
[PATCH v16 18/20] scripts: add boot policy generation program Fan Wu
[PATCH v16 19/20] ipe: kunit test for parser Fan Wu
[PATCH v16 20/20] documentation: add ipe documentation Fan Wu
[PATCH v1 8/8] kunit: Add tests for faults Mickaël Salaün
[PATCH v1 8/8] kunit: Add tests for faults kernel test robot
[PATCH v2 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
[PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
[PATCH v2 1/2] landlock: Extend documentation for kernel support Mickaël Salaün
[PATCH v2 1/2] landlock: Extend documentation for kernel support Mickaël Salaün
[PATCH v2 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v2 1/7] kunit: Handle thread creation error Rae Moar
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Roberto Sassu
[PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
[PATCH v2 14/25] evm: add support for fscaps security hooks Seth Forshee (DigitalOcean)
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
[PATCH v2 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v2 2/7] kunit: Fix kthread reference Rae Moar
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
[PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
[PATCH v2 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v2 3/7] kunit: Fix timeout message Rae Moar
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 4/7] kunit: Handle test faults Rae Moar
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v2 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v2 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v2 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v2 7/7] kunit: Add tests for fault Mickaël Salaün
[PATCH v2][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v2] Add Landlock test for io_uring IORING_OP_OPENAT operation Mickaël Salaün
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Mimi Zohar
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg Coiby Xu
[PATCH v2] landlock: Add abstract unix socket connect restrictions TaheraFahimi
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari
[PATCH v2] landlock: Use kmem for landlock_object Greg KH
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari
[PATCH v2] landlock: Use kmem for landlock_object Greg KH
[PATCH v2] landlock: Use kmem for landlock_object Ayush Tiwari
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes Adrian Ratiu
[PATCH v2] proc: allow restricting /proc/pid/mem writes Kees Cook
[PATCH v2] proc: allow restricting /proc/pid/mem writes Christian Brauner
[PATCH v2] proc: allow restricting /proc/pid/mem writes Matt Denton
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Paul Moore
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Matt Bobrowski
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Matt Bobrowski
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Christian Brauner
[PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs Alexei Starovoitov
[PATCH v3 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v3 01/10] ima: Rename backing_inode to real_inode Mimi Zohar
[PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs Mimi Zohar
[PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr Mimi Zohar
[PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash Mimi Zohar
[PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change Mimi Zohar
[PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509 Mimi Zohar
[PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED Mimi Zohar
[PATCH v3 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs Mimi Zohar
[PATCH v3 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v3 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v3 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v3 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v3 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v3 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v3 7/7] kunit: Add tests for fault Mickaël Salaün
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Roberto Sassu
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Casey Schaufler
[PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule Roberto Sassu
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Roberto Sassu
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Casey Schaufler
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Roberto Sassu
[PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs Casey Schaufler
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Mimi Zohar
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings Gustavo A. R. Silva
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Dmitry V. Levin
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Casey Schaufler
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Dmitry V. Levin
[PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls. Paul Moore
[PATCH v4 0/7] Handle faults in KUnit tests Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail patchwork-bot+netdevbpf at kernel.org
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Kees Cook
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Przemek Kitszel
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Jakub Kicinski
[PATCH v4 00/12] selftests: kselftest_harness: support using xfail Mickaël Salaün
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F() Mickaël Salaün
[PATCH v4 1/7] kunit: Handle thread creation error Mickaël Salaün
[PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP Jakub Sitnicki
[PATCH v4 2/7] kunit: Fix kthread reference Mickaël Salaün
[PATCH v4 3/7] kunit: Fix timeout message Mickaël Salaün
[PATCH v4 4/7] kunit: Handle test faults Mickaël Salaün
[PATCH v4 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Mickaël Salaün
[PATCH v4 6/7] kunit: Print last test location on fault Mickaël Salaün
[PATCH v4 7/7] kunit: Add tests for fault Mickaël Salaün
[PATCH v5 0/6] DCP as trusted keys backend Jarkko Sakkinen
[PATCH v5 0/6] DCP as trusted keys backend David Gstir
[PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v5 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v5 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys Jarkko Sakkinen
[PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys David Gstir
[PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys Jarkko Sakkinen
[PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config David Gstir
[PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys Jarkko Sakkinen
[PATCH v6 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params David Gstir
[PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params Jarkko Sakkinen
[PATCH v6 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
[PATCH v7 0/6] DCP as trusted keys backend David Gstir
[PATCH v7 1/6] crypto: mxs-dcp: Add support for hardware-bound keys David Gstir
[PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config David Gstir
[PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config Jarkko Sakkinen
[PATCH v7 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys David Gstir
[PATCH v7 4/6] MAINTAINERS: add entry for DCP-based trusted keys David Gstir
[PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params David Gstir
[PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params Jarkko Sakkinen
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source David Gstir
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source Jarkko Sakkinen
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[PATCH v9 1/8] landlock: Add IOCTL access right Mickaël Salaün
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions Mateusz Guzik
[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions John Johansen
[RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook Mimi Zohar
[RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook Roberto Sassu
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Mimi Zohar
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Roberto Sassu
[RFC][PATCH 3/8] ima: Add digest_cache policy keyword Mimi Zohar
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Roberto Sassu
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies Mimi Zohar
[RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache Mimi Zohar
[RFC][PATCH 6/8] ima: Use digest cache for measurement Mimi Zohar
[RFC][PATCH 6/8] ima: Use digest cache for measurement Roberto Sassu
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Mimi Zohar
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Roberto Sassu
[RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal Mimi Zohar
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Christian Göttsche
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Casey Schaufler
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Christian Göttsche
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Casey Schaufler
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Paul Moore
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Kees Cook
[RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack Paul Moore
[RFC PATCH 2/2] selinux: wire up new execstack LSM hook Christian Göttsche
[RFC PATCH] fs: Add an use vfs_get_ioctl_handler() Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Christian Brauner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Arnd Bergmann
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Casey Schaufler
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Casey Schaufler
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Günther Noack
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Paul Moore
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Dave Chinner
[RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers Mickaël Salaün
[RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Mike Snitzer
[RFC PATCH v13 13/20] dm: add finalize hook to target_type Mike Snitzer
[RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
[RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE) Fan Wu
[RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE) Paul Moore
[RFC PATCH v14 01/19] security: add ipe lsm Fan Wu
[RFC PATCH v14 01/19] security: add ipe lsm Roberto Sassu
[RFC PATCH v14 01/19] security: add ipe lsm Fan Wu
[RFC PATCH v14 02/19] ipe: add policy parser Fan Wu
[RFC PATCH v14 03/19] ipe: add evaluation loop Fan Wu
[RFC PATCH v14 04/19] ipe: add LSM hooks on execution and kernel read Fan Wu
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Roberto Sassu
[RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[RFC PATCH v14 07/19] security: add new securityfs delete function Fan Wu
[RFC PATCH v14 08/19] ipe: add userspace interface Fan Wu
[RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support Fan Wu
[RFC PATCH v14 10/19] ipe: add permissive toggle Fan Wu
[RFC PATCH v14 11/19] block|security: add LSM blob to block_device Fan Wu
[RFC PATCH v14 12/19] dm: add finalize hook to target_type Fan Wu
[RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Fan Wu
[RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Randy Dunlap
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Casey Schaufler
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
[RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Randy Dunlap
[RFC PATCH v14 17/19] scripts: add boot policy generation program Fan Wu
[RFC PATCH v14 17/19] scripts: add boot policy generation program Randy Dunlap
[RFC PATCH v14 18/19] ipe: kunit test for parser Fan Wu
[RFC PATCH v14 19/19] documentation: add ipe documentation Fan Wu
[RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE) Fan Wu
[RFC PATCH v15 01/21] security: add ipe lsm Fan Wu
[RFC PATCH v15 02/21] ipe: add policy parser Fan Wu
[RFC PATCH v15 03/21] ipe: add evaluation loop Fan Wu
[RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read Fan Wu
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Casey Schaufler
[RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs() Paul Moore
[RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider Fan Wu
[RFC PATCH v15 07/21] security: add new securityfs delete function Fan Wu
[RFC PATCH v15 08/21] ipe: add userspace interface Fan Wu
[RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support Fan Wu
[RFC PATCH v15 10/21] ipe: add permissive toggle Fan Wu
[RFC PATCH v15 11/21] block|security: add LSM blob to block_device Fan Wu
[RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook Fan Wu
[RFC PATCH v15 13/21] dm: add finalize hook to target_type Fan Wu
[RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
[RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider Fan Wu
[RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook Fan Wu
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Fan Wu
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Eric Biggers
[RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook Paul Moore
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Eric Biggers
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Roberto Sassu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider Fan Wu
[RFC PATCH v15 19/21] scripts: add boot policy generation program Fan Wu
[RFC PATCH v15 20/21] ipe: kunit test for parser Fan Wu
[RFC PATCH v15 21/21] documentation: add ipe documentation Fan Wu
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Tetsuo Handa
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Jan Kara
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Aleksandr Nogikh
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Jan Kara
[syzbot] [hfs] general protection fault in tomoyo_check_acl (3) Christian Brauner
[syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry syzbot
[syzbot] [reiserfs?] INFO: task hung in flush_old_commits syzbot
[syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode syzbot
[syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode Tetsuo Handa
[syzbot] [usb] INFO: rcu detected stall in newfstatat (3) syzbot
kernel crash in mknod Roberto Sassu
kernel crash in mknod Al Viro
kernel crash in mknod Christian Brauner
kernel crash in mknod Paul Moore
kernel crash in mknod Roberto Sassu
kernel crash in mknod Paul Moore
kernel crash in mknod Al Viro
kernel crash in mknod Al Viro
kernel crash in mknod Paulo Alcantara
kernel crash in mknod Al Viro
kernel crash in mknod Paulo Alcantara
kernel crash in mknod Christian Brauner
kernel crash in mknod Paul Moore
kernel crash in mknod Roberto Sassu
kernel crash in mknod Christian Brauner
kernel crash in mknod Roberto Sassu
kernel crash in mknod Christian Brauner
kernel crash in mknod Paul Moore
kernel crash in mknod Paul Moore
LSM/IMA integration denying access to inode_init_security. Dr. Greg
LSM/IMA integration denying access to inode_init_security. Roberto Sassu
LSM/IMA integration denying access to inode_init_security. Dr. Greg
Systemd v254 LSM stacking issue - patch Casey Schaufler
TSEM code organization. Dr. Greg
TSEM code organization. Paul Moore

Last message date: Sun Mar 31 18:08:28 UTC 2024
Archived on: Sun Mar 31 18:08:45 UTC 2024

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).