March 2024 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Fri Mar 1 05:29:40 UTC 2024
Ending: Sun Mar 31 18:08:28 UTC 2024
Messages: 684

• [PATCH v1 1/8] kunit: Run tests when the kernel is fully setup   kernel test robot
  • [PATCH v1 1/8] kunit: Run tests when the kernel is fully setup   kernel test robot
  • [PATCH v1 1/8] kunit: Run tests when the kernel is fully setup   Mickaël Salaün
• [Linux Kernel Bug] KASAN: slab-out-of-bounds Write in tomoyo_write_control   Sam Sun
• [PATCH v2 14/25] evm: add support for fscaps security hooks   Roberto Sassu
  • [PATCH v2 14/25] evm: add support for fscaps security hooks   Christian Brauner
    • [PATCH v2 14/25] evm: add support for fscaps security hooks   Roberto Sassu
      • [PATCH v2 14/25] evm: add support for fscaps security hooks   Christian Brauner
  • [PATCH v2 14/25] evm: add support for fscaps security hooks   Seth Forshee (DigitalOcean)
    • [PATCH v2 14/25] evm: add support for fscaps security hooks   Roberto Sassu
  • [PATCH v2 14/25] evm: add support for fscaps security hooks   Roberto Sassu
• [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   patchwork-bot+netdevbpf at kernel.org
  • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Jakub Kicinski
    • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Kees Cook
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Jakub Kicinski
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Kees Cook
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Mickaël Salaün
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Jakub Kicinski
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Mickaël Salaün
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   Mickaël Salaün
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   Jakub Kicinski
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   Mickaël Salaün
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   Mickaël Salaün
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   Kees Cook
      • [PATCH] selftests/harness: Fix TEST_F()'s vfork handling   patchwork-bot+netdevbpf at kernel.org
    • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Przemek Kitszel
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Mickaël Salaün
      • [PATCH v4 00/12] selftests: kselftest_harness: support using xfail   Mickaël Salaün
• [PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP   Jakub Sitnicki
• [PATCH v9 1/8] landlock: Add IOCTL access right   Mickaël Salaün
  • [PATCH v9 1/8] landlock: Add IOCTL access right   Mickaël Salaün
• [PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control()   Tetsuo Handa
  • [PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control()   Linus Torvalds
• [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
  • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Arnd Bergmann
    • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
  • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Günther Noack
    • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Arnd Bergmann
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Christian Brauner
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Arnd Bergmann
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Günther Noack
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Paul Moore
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Dave Chinner
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Paul Moore
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Arnd Bergmann
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Paul Moore
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Casey Schaufler
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Paul Moore
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Günther Noack
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Casey Schaufler
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Paul Moore
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Günther Noack
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Dave Chinner
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Günther Noack
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Dave Chinner
      • [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers   Mickaël Salaün
• [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps   Roberto Sassu
  • [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps   Seth Forshee (DigitalOcean)
• [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps   Roberto Sassu
  • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps   Seth Forshee (DigitalOcean)
    • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps   Roberto Sassu
      • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps   Seth Forshee (DigitalOcean)
• [PATCH v1 5/8] kunit: Handle test faults   Mickaël Salaün
• [PATCH v1 8/8] kunit: Add tests for faults   Mickaël Salaün
  • [PATCH v1 8/8] kunit: Add tests for faults   kernel test robot
• [PATCH v1 0/8] Run KUnit tests late and handle faults   Mickaël Salaün
• [PATCH v2 0/7] Handle faults in KUnit tests   Mickaël Salaün
  • [PATCH v2 2/7] kunit: Fix kthread reference   Mickaël Salaün
    • [PATCH v2 2/7] kunit: Fix kthread reference   Rae Moar
  • [PATCH v2 3/7] kunit: Fix timeout message   Mickaël Salaün
    • [PATCH v2 3/7] kunit: Fix timeout message   Rae Moar
  • [PATCH v2 4/7] kunit: Handle test faults   Mickaël Salaün
    • [PATCH v2 4/7] kunit: Handle test faults   Rae Moar
      • [PATCH v2 4/7] kunit: Handle test faults   Mickaël Salaün
    • [PATCH v2 4/7] kunit: Handle test faults   Mickaël Salaün
  • [PATCH v2 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests   Mickaël Salaün
  • [PATCH v2 6/7] kunit: Print last test location on fault   Mickaël Salaün
    • [PATCH v2 6/7] kunit: Print last test location on fault   Mickaël Salaün
  • [PATCH v2 7/7] kunit: Add tests for fault   Mickaël Salaün
• [PATCH v2 1/7] kunit: Handle thread creation error   Mickaël Salaün
  • [PATCH v2 1/7] kunit: Handle thread creation error   Rae Moar
• [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
  • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
    • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
    • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
  • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
    • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
    • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Christian Brauner
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Kees Cook
      • [PATCH v2] proc: allow restricting /proc/pid/mem writes   Matt Denton
      • Re: [PATCH v2] proc: allow restricting /proc/pid/mem writes   Adrian Ratiu
• [RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions   Mateusz Guzik
  • [RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions   John Johansen
• [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag   Mike Snitzer
• [RFC PATCH v13 13/20] dm: add finalize hook to target_type   Mike Snitzer
• [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook   Mike Snitzer
  • [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook   Mike Snitzer
• [syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry   syzbot
• [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Seth Forshee (DigitalOcean)
    • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Seth Forshee (DigitalOcean)
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Christian Brauner
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Christian Brauner
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Seth Forshee (DigitalOcean)
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Seth Forshee (DigitalOcean)
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Mimi Zohar
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Roberto Sassu
      • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces   Mimi Zohar
• [PATCH][next] apparmor: remove useless static inline function is_deleted   Colin Ian King
• [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
  • [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
  • [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Mimi Zohar
    • [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
• [PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F()   Mickaël Salaün
  • [PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F()   Mickaël Salaün
    • [PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F()   Mickaël Salaün
      • [PATCH v1 0/2] Merge TEST_F_FORK() into TEST_F()   Mickaël Salaün
      • [PATCH v1 1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK()   Mickaël Salaün
      • [PATCH v1 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F()   Mickaël Salaün
• [PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys   Jarkko Sakkinen
  • [PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys   Jarkko Sakkinen
• [PATCH v5 2/6] KEYS: trusted: improve scalability of trust source config   Jarkko Sakkinen
• [PATCH v5 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   Jarkko Sakkinen
• [PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys   Jarkko Sakkinen
  • [PATCH v5 4/6] MAINTAINERS: add entry for DCP-based trusted keys   David Gstir
• [PATCH v5 0/6] DCP as trusted keys backend   Jarkko Sakkinen
  • [PATCH v5 0/6] DCP as trusted keys backend   David Gstir
    • [PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys   David Gstir
      • [PATCH v6 1/6] crypto: mxs-dcp: Add support for hardware-bound keys   Jarkko Sakkinen
    • [PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config   David Gstir
      • [PATCH v6 2/6] KEYS: trusted: improve scalability of trust source config   Jarkko Sakkinen
    • [PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   David Gstir
      • [PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   Jarkko Sakkinen
      • [PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   Jarkko Sakkinen
      • [PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   David Gstir
      • [PATCH v6 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   Jarkko Sakkinen
    • [PATCH v6 4/6] MAINTAINERS: add entry for DCP-based trusted keys   David Gstir
    • [PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params   David Gstir
      • [PATCH v6 5/6] docs: document DCP-backed trusted keys kernel params   Jarkko Sakkinen
    • [PATCH v6 6/6] docs: trusted-encrypted: add DCP as new trust source   David Gstir
• [linux-next:master] [selftests/harness] 0710a1a73f: kernel-selftests.seccomp.seccomp_bpf.TRAP.dfl.fail   kernel test robot
• [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Christian Brauner
  • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Christoph Hellwig
  • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Seth Forshee
  • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Serge E. Hallyn
  • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Christian Brauner
  • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Jarkko Sakkinen
    • [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size   Jarkko Sakkinen
• [PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule   Roberto Sassu
  • [PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule   Casey Schaufler
    • [PATCH v39 01/42] integrity: disassociate ima_filter_rule from security_audit_rule   Roberto Sassu
• [PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs   Roberto Sassu
  • [PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs   Casey Schaufler
    • [PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs   Roberto Sassu
      • [PATCH v39 04/42] IMA: avoid label collisions with stacked LSMs   Casey Schaufler
• [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg   Mimi Zohar
  • [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg   Coiby Xu
• [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
  • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Paul Moore
  • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
    • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Paul Moore
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Matt Bobrowski
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Matt Bobrowski
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Christian Brauner
      • [PATCH v2 bpf-next 0/9] add new acquire/release BPF kfuncs   Alexei Starovoitov
• [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE)   Fan Wu
  • [RFC PATCH v14 02/19] ipe: add policy parser   Fan Wu
  • [RFC PATCH v14 03/19] ipe: add evaluation loop   Fan Wu
  • [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs()   Fan Wu
    • [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs()   Roberto Sassu
      • [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs()   Fan Wu
  • [RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider   Fan Wu
  • [RFC PATCH v14 07/19] security: add new securityfs delete function   Fan Wu
  • [RFC PATCH v14 08/19] ipe: add userspace interface   Fan Wu
  • [RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support   Fan Wu
  • [RFC PATCH v14 10/19] ipe: add permissive toggle   Fan Wu
  • [RFC PATCH v14 11/19] block|security: add LSM blob to block_device   Fan Wu
  • [RFC PATCH v14 12/19] dm: add finalize hook to target_type   Fan Wu
  • [RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook   Fan Wu
  • [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider   Fan Wu
    • [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider   Randy Dunlap
  • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Fan Wu
    • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Eric Biggers
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Eric Biggers
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Paul Moore
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Fan Wu
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Casey Schaufler
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Fan Wu
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Paul Moore
      • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook   Fan Wu
  • [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider   Fan Wu
    • [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider   Randy Dunlap
  • [RFC PATCH v14 17/19] scripts: add boot policy generation program   Fan Wu
    • [RFC PATCH v14 17/19] scripts: add boot policy generation program   Randy Dunlap
  • [RFC PATCH v14 18/19] ipe: kunit test for parser   Fan Wu
  • [RFC PATCH v14 19/19] documentation: add ipe documentation   Fan Wu
  • [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE)   Paul Moore
• [RFC PATCH v14 01/19] security: add ipe lsm   Fan Wu
  • [RFC PATCH v14 01/19] security: add ipe lsm   Roberto Sassu
    • [RFC PATCH v14 01/19] security: add ipe lsm   Fan Wu
• [RFC PATCH v14 04/19] ipe: add LSM hooks on execution and kernel read   Fan Wu
• [syzbot] [usb] INFO: rcu detected stall in newfstatat (3)   syzbot
• [syzbot] [reiserfs?] INFO: task hung in flush_old_commits   syzbot
• [PATCH 1/2] landlock: Simplify current_check_access_socket()   Mickaël Salaün
  • [PATCH 2/2] landlock: Rename "ptrace" files to "task"   Mickaël Salaün
• [PATCH] landlock: Use f_cred in security_file_open() hook   Mickaël Salaün
  • [PATCH] landlock: Use f_cred in security_file_open() hook   Christian Brauner
    • [PATCH] landlock: Use f_cred in security_file_open() hook   Mickaël Salaün
  • [PATCH] landlock: Use f_cred in security_file_open() hook   Kees Cook
• [PATCH v2 1/2] landlock: Extend documentation for kernel support   Mickaël Salaün
  • [PATCH v2 1/2] landlock: Extend documentation for kernel support   Mickaël Salaün
• [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash()   Roberto Sassu
  • [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash()   Seth Forshee
    • [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash()   Roberto Sassu
      • [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash()   Roberto Sassu
• [PATCH] samples/landlock: Don't error out if a file path cannot be opened   Mickaël Salaün
  • [PATCH] samples/landlock: Don't error out if a file path cannot be opened   Günther Noack
    • [PATCH] samples/landlock: Don't error out if a file path cannot be opened   Mickaël Salaün
• [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook   Mimi Zohar
  • [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook   Roberto Sassu
• [RFC][PATCH 3/8] ima: Add digest_cache policy keyword   Mimi Zohar
  • [RFC][PATCH 3/8] ima: Add digest_cache policy keyword   Roberto Sassu
    • [RFC][PATCH 3/8] ima: Add digest_cache policy keyword   Mimi Zohar
• [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies   Mimi Zohar
  • [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies   Roberto Sassu
    • [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies   Mimi Zohar
  • [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies   Mimi Zohar
• [RFC][PATCH 6/8] ima: Use digest cache for measurement   Mimi Zohar
  • [RFC][PATCH 6/8] ima: Use digest cache for measurement   Roberto Sassu
• [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal   Mimi Zohar
  • [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal   Roberto Sassu
    • [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal   Mimi Zohar
• [PATCH v10 0/9] Landlock: IOCTL support   Günther Noack
  • [PATCH v10 1/9] security: Create security_file_vfs_ioctl hook   Günther Noack
    • [PATCH v10 1/9] security: Create security_file_vfs_ioctl hook   Paul Moore
      • [RFC PATCH] fs: Add an use vfs_get_ioctl_handler()   Mickaël Salaün
      • [PATCH v10 1/9] security: Create security_file_vfs_ioctl hook   Mickaël Salaün
  • [PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices   Günther Noack
    • [PATCH v10 2/9] landlock: Add IOCTL access right for character and block devices   Mickaël Salaün
  • [PATCH v10 3/9] selftests/landlock: Test IOCTL support   Günther Noack
  • [PATCH v10 4/9] selftests/landlock: Test IOCTL with memfds   Günther Noack
  • [PATCH v10 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)   Günther Noack
  • [PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes   Günther Noack
    • [PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes   Mickaël Salaün
      • [PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes   Mickaël Salaün
      • [PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes   Günther Noack
      • [PATCH v10 6/9] selftests/landlock: Test IOCTLs on named pipes   Mickaël Salaün
  • [PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Günther Noack
    • [PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Mickaël Salaün
      • [PATCH v10 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Günther Noack
  • [PATCH v10 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV   Günther Noack
  • [PATCH v10 9/9] landlock: Document IOCTL support   Günther Noack
• [syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode   syzbot
  • [syzbot] [reiserfs?] possible deadlock in reiserfs_dirty_inode   Tetsuo Handa
• [syzbot] [hfs] general protection fault in tomoyo_check_acl (3)   Tetsuo Handa
  • [syzbot] [hfs] general protection fault in tomoyo_check_acl (3)   Jan Kara
    • [syzbot] [hfs] general protection fault in tomoyo_check_acl (3)   Aleksandr Nogikh
      • [syzbot] [hfs] general protection fault in tomoyo_check_acl (3)   Jan Kara
      • [syzbot] [hfs] general protection fault in tomoyo_check_acl (3)   Christian Brauner
• [RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache   Mimi Zohar
• [PATCH RFC 0/8] Clavis LSM   Eric Snowberg
  • [PATCH RFC 6/8] keys: Add ability to track intended usage of the public key   Eric Snowberg
  • [PATCH RFC 7/8] clavis: Introduce a new key type called clavis_key_acl   Eric Snowberg
  • [PATCH RFC 8/8] clavis: Introduce new LSM called clavis   Eric Snowberg
    • [PATCH RFC 8/8] clavis: Introduce new LSM called clavis   Randy Dunlap
      • [PATCH RFC 8/8] clavis: Introduce new LSM called clavis   Eric Snowberg
• [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Eric Snowberg
  • [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Jarkko Sakkinen
    • [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Eric Snowberg
  • [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Jarkko Sakkinen
    • [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Eric Snowberg
      • [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Jarkko Sakkinen
  • [EXTERNAL] [PATCH RFC 1/8] certs: Introduce ability to link to a system key   Bharat Bhushan
• [PATCH RFC 2/8] clavis: Introduce a new system keyring called clavis   Eric Snowberg
• [PATCH RFC 3/8] efi: Make clavis boot param persist across kexec   Eric Snowberg
• [PATCH RFC 4/8] clavis: Prevent clavis boot param from changing during kexec   Eric Snowberg
• [PATCH RFC 5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE)   Eric Snowberg
• [GIT PULL] Smack patches for 6.9   Casey Schaufler
  • [GIT PULL] Smack patches for 6.9   pr-tracker-bot at kernel.org
• [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Dmitry V. Levin
  • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Paul Moore
    • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Casey Schaufler
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Paul Moore
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Casey Schaufler
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Paul Moore
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Dmitry V. Levin
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Kees Cook
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Casey Schaufler
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Paul Moore
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Casey Schaufler
      • [PATCH v15 05/11] LSM: Create lsm_list_modules system call   Paul Moore
• [PATCH] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
• [GIT PULL] selinux/selinux-pr-20240312   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20240312   pr-tracker-bot at kernel.org
• [GIT PULL] lsm/lsm-pr-20240312   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20240312   pr-tracker-bot at kernel.org
• [PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
  • [PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
    • [PATCH v2] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
• [GIT PULL] Landlock updates for v6.9   Mickaël Salaün
  • [GIT PULL] Landlock updates for v6.9   pr-tracker-bot at kernel.org
• [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
  • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Dmitry V. Levin
  • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
    • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
    • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Casey Schaufler
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Dmitry V. Levin
      • [PATCH v3] LSM: use 32 bit compatible data types in LSM syscalls.   Paul Moore
• [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
  • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
  • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
    • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Casey Schaufler
    • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Casey Schaufler
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Paul Moore
      • [PATCH] lsm: handle the NULL buffer case in lsm_fill_user_ctx()   Serge E. Hallyn
• [GIT PULL] lsm/lsm-pr-20240314   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20240314   Linus Torvalds
    • [GIT PULL] lsm/lsm-pr-20240314   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20240314   pr-tracker-bot at kernel.org
• [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY   Christian Göttsche
  • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Christian Göttsche
    • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Andrii Nakryiko
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Christian Göttsche
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Andrii Nakryiko
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Jens Axboe
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Paul Moore
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Andrii Nakryiko
      • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Jens Axboe
    • [PATCH 02/10] capability: add any wrappers to test for multiple caps with exactly one audit message   Serge Hallyn
  • [PATCH 03/10] capability: use new capable_any functionality   Christian Göttsche
    • [PATCH 03/10] capability: use new capable_any functionality   Andrii Nakryiko
  • [PATCH 04/10] block: use new capable_any functionality   Christian Göttsche
  • [PATCH 05/10] drivers: use new capable_any functionality   Christian Göttsche
    • [PATCH 05/10] drivers: use new capable_any functionality   Felix Kuehling
  • [PATCH 06/10] fs: use new capable_any functionality   Christian Göttsche
  • [PATCH 07/10] kernel: use new capable_any functionality   Christian Göttsche
    • [PATCH 07/10] kernel: use new capable_any functionality   Tycho Andersen
  • [PATCH 08/10] net: use new capable_any functionality   Christian Göttsche
    • [PATCH 08/10] net: use new capable_any functionality   Kuniyuki Iwashima
  • [PATCH 09/10] bpf: use new capable_any functionality   Christian Göttsche
    • [PATCH 09/10] bpf: use new capable_any functionality   Andrii Nakryiko
  • [PATCH 10/10] coccinelle: add script for capable_any()   Christian Göttsche
  • [PATCH 00/10] Introduce capable_any()   Christian Göttsche
  • [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY   Serge Hallyn
• [PATCH 2/2] apparmor: fix typo in kernel doc   Christian Göttsche
  • [PATCH 1/2] yama: document function parameter   Christian Göttsche
    • [PATCH 1/2] yama: document function parameter   Paul Moore
      • [PATCH 1/2] yama: document function parameter   Paul Moore
    • [PATCH 1/2] yama: document function parameter   Kees Cook
  • [PATCH 2/2] apparmor: fix typo in kernel doc   Kees Cook
• [RFC PATCH 2/2] selinux: wire up new execstack LSM hook   Christian Göttsche
  • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Christian Göttsche
    • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Casey Schaufler
      • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Christian Göttsche
      • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Casey Schaufler
    • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Paul Moore
      • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Kees Cook
      • [RFC PATCH 1/2] lsm: introduce new hook security_vm_execstack   Paul Moore
• [PATCH 00/11] sysctl: treewide: constify ctl_table argument of sysctl handlers   Thomas Weißschuh
  • [PATCH 01/11] stackleak: don't modify ctl_table argument   Thomas Weißschuh
  • [PATCH 02/11] cgroup: bpf: constify ctl_table arguments and fields   Thomas Weißschuh
  • [PATCH 03/11] hugetlb: constify ctl_table arguments of utility functions   Thomas Weißschuh
  • [PATCH 04/11] utsname: constify ctl_table arguments of utility function   Thomas Weißschuh
  • [PATCH 05/11] neighbour: constify ctl_table arguments of utility function   Thomas Weißschuh
  • [PATCH 06/11] ipv4/sysctl: constify ctl_table arguments of utility functions   Thomas Weißschuh
  • [PATCH 07/11] ipv6/addrconf: constify ctl_table arguments of utility functions   Thomas Weißschuh
  • [PATCH 08/11] ipv6/ndisc: constify ctl_table arguments of utility function   Thomas Weißschuh
  • [PATCH 09/11] ipvs: constify ctl_table arguments of utility functions   Thomas Weißschuh
  • [PATCH 10/11] sysctl: constify ctl_table arguments of utility function   Thomas Weißschuh
  • [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers   Thomas Weißschuh
    • [PATCH 11/11] sysctl: treewide: constify the ctl_table argument of handlers   Dave Chinner
• [RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE)   Fan Wu
  • [RFC PATCH v15 01/21] security: add ipe lsm   Fan Wu
  • [RFC PATCH v15 02/21] ipe: add policy parser   Fan Wu
  • [RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read   Fan Wu
  • [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs()   Fan Wu
    • [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs()   Casey Schaufler
      • [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs()   Paul Moore
  • [RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider   Fan Wu
  • [RFC PATCH v15 07/21] security: add new securityfs delete function   Fan Wu
  • [RFC PATCH v15 08/21] ipe: add userspace interface   Fan Wu
  • [RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support   Fan Wu
  • [RFC PATCH v15 10/21] ipe: add permissive toggle   Fan Wu
  • [RFC PATCH v15 11/21] block|security: add LSM blob to block_device   Fan Wu
  • [RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook   Fan Wu
    • [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook   Paul Moore
      • [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook   Jarkko Sakkinen
      • [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook   Jarkko Sakkinen
      • [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook   Fan Wu
      • [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook   Jarkko Sakkinen
  • [RFC PATCH v15 13/21] dm: add finalize hook to target_type   Fan Wu
  • [RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Fan Wu
    • [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Paul Moore
      • [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Mike Snitzer
      • [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Paul Moore
      • [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Mike Snitzer
      • [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook   Fan Wu
  • [RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider   Fan Wu
  • [RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook   Fan Wu
    • [PATCH RFC v15 16/21] security: add security_inode_setintegrity() hook   Paul Moore
  • [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook   Fan Wu
    • [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook   Eric Biggers
      • [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook   Paul Moore
  • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider   Fan Wu
    • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider   Eric Biggers
      • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider   Roberto Sassu
      • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider   Fan Wu
      • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider   Fan Wu
  • [RFC PATCH v15 19/21] scripts: add boot policy generation program   Fan Wu
  • [RFC PATCH v15 20/21] ipe: kunit test for parser   Fan Wu
  • [RFC PATCH v15 21/21] documentation: add ipe documentation   Fan Wu
• [RFC PATCH v15 03/21] ipe: add evaluation loop   Fan Wu
• TSEM code organization.   Dr. Greg
  • TSEM code organization.   Paul Moore
• [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Xu Kuohai
  • [PATCH bpf-next 1/5] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT   Xu Kuohai
  • [PATCH bpf-next 2/5] bpf, lsm: Add return value range description for lsm hook   Xu Kuohai
  • [PATCH bpf-next 3/5] bpf, lsm: Add function to read lsm hook return value range   Xu Kuohai
  • [PATCH bpf-next 4/5] bpf, lsm: Check bpf lsm hook return values in verifier   Xu Kuohai
  • [PATCH bpf-next 5/5] bpf: Fix compare error in function retval_range_within   Xu Kuohai
  • [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Stanislav Fomichev
    • [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Paul Moore
      • [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Xu Kuohai
    • [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Roberto Sassu
      • [PATCH bpf-next 0/5] Fix kernel panic caused by bpf lsm return value   Xu Kuohai
• LSM/IMA integration denying access to inode_init_security.   Dr. Greg
  • LSM/IMA integration denying access to inode_init_security.   Roberto Sassu
    • LSM/IMA integration denying access to inode_init_security.   Dr. Greg
• [PATCH v3 0/7] Handle faults in KUnit tests   Mickaël Salaün
  • [PATCH v3 1/7] kunit: Handle thread creation error   Mickaël Salaün
  • [PATCH v3 2/7] kunit: Fix kthread reference   Mickaël Salaün
  • [PATCH v3 3/7] kunit: Fix timeout message   Mickaël Salaün
  • [PATCH v3 4/7] kunit: Handle test faults   Mickaël Salaün
    • [PATCH v3 4/7] kunit: Handle test faults   Mickaël Salaün
  • [PATCH v3 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests   Mickaël Salaün
  • [PATCH v3 6/7] kunit: Print last test location on fault   Mickaël Salaün
  • [PATCH v3 7/7] kunit: Add tests for fault   Mickaël Salaün
• Systemd v254 LSM stacking issue - patch   Casey Schaufler
• [PATCH v3 01/10] ima: Rename backing_inode to real_inode   Mimi Zohar
• [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr   Mimi Zohar
• [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash   Mimi Zohar
• [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs   Mimi Zohar
• [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change   Mimi Zohar
• [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED   Mimi Zohar
• [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs   Mimi Zohar
• [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509   Mimi Zohar
• [PATCH v2][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
• [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
  • [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Mimi Zohar
    • [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings   Gustavo A. R. Silva
• [PATCH] ima: Fix use-after-free on a dentry's dname.name   Stefan Berger
  • [PATCH] ima: Fix use-after-free on a dentry's dname.name   Mimi Zohar
• [PATCH v11 0/9] Landlock: IOCTL support   Günther Noack
  • [PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler()   Günther Noack
    • [PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler()   Arnd Bergmann
      • [PATCH v11 1/9] fs: Add and use vfs_get_ioctl_handler()   Günther Noack
  • [PATCH v11 2/9] landlock: Add IOCTL access right for character and block devices   Günther Noack
  • [PATCH v11 3/9] selftests/landlock: Test IOCTL support   Günther Noack
  • [PATCH v11 4/9] selftests/landlock: Test IOCTL with memfds   Günther Noack
  • [PATCH v11 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)   Günther Noack
  • [PATCH v11 6/9] selftests/landlock: Test IOCTLs on named pipes   Günther Noack
  • [PATCH v11 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Günther Noack
  • [PATCH v11 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV   Günther Noack
  • [PATCH v11 9/9] landlock: Document IOCTL support   Günther Noack
• kernel crash in mknod   Roberto Sassu
  • kernel crash in mknod   Al Viro
  • kernel crash in mknod   Christian Brauner
    • kernel crash in mknod   Roberto Sassu
      • kernel crash in mknod   Christian Brauner
      • kernel crash in mknod   Paul Moore
      • kernel crash in mknod   Roberto Sassu
      • kernel crash in mknod   Christian Brauner
      • kernel crash in mknod   Roberto Sassu
      • kernel crash in mknod   Christian Brauner
      • kernel crash in mknod   Paul Moore
      • kernel crash in mknod   Paul Moore
    • kernel crash in mknod   Paul Moore
    • kernel crash in mknod   Al Viro
      • kernel crash in mknod   Al Viro
      • kernel crash in mknod   Paulo Alcantara
      • kernel crash in mknod   Al Viro
      • kernel crash in mknod   Paulo Alcantara
  • kernel crash in mknod   Paul Moore
• [PATCH] Do not require attributes for security_inode_init_security.   Greg Wettstein
  • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
    • [PATCH] Do not require attributes for security_inode_init_security.   Dr. Greg
      • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
      • [PATCH] Do not require attributes for security_inode_init_security.   Dr. Greg
      • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
      • [PATCH] Do not require attributes for security_inode_init_security.   Dr. Greg
      • [PATCH] Do not require attributes for security_inode_init_security.   Casey Schaufler
      • [PATCH] Do not require attributes for security_inode_init_security.   Dr. Greg
      • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
      • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
      • [PATCH] Do not require attributes for security_inode_init_security.   Dr. Greg
      • [PATCH] Do not require attributes for security_inode_init_security.   Paul Moore
• [PATCH bpf-next v2 0/7] Add check for bpf lsm return value   Xu Kuohai
• [PATCH bpf-next v2 1/7] bpf, lsm: Annotate lsm hook return integer with new macro LSM_RET_INT   Xu Kuohai
• [PATCH bpf-next v2 2/7] bpf, lsm: Add return value range description for lsm hook   Xu Kuohai
• [PATCH bpf-next v2 3/7] bpf, lsm: Add function to read lsm hook return value range   Xu Kuohai
• [PATCH bpf-next v2 4/7] bpf, lsm: Check bpf lsm hook return values in verifier   Xu Kuohai
• [PATCH bpf-next v2 5/7] bpf: Fix compare error in function retval_range_within   Xu Kuohai
• [PATCH bpf-next v2 6/7] selftests/bpf: Avoid load failure for token_lsm.c   Xu Kuohai
• [PATCH bpf-next v2 7/7] selftests/bpf: Add return value checks and corrections for failed progs   Xu Kuohai
• [PATCH v12 0/9] Landlock: IOCTL support   Günther Noack
• [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Günther Noack
  • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Günther Noack
  • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Arnd Bergmann
    • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Mickaël Salaün
      • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Arnd Bergmann
      • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Mickaël Salaün
      • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Arnd Bergmann
      • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Günther Noack
      • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Mickaël Salaün
  • [PATCH v12 1/9] security: Introduce ENOFILEOPS return value for IOCTL hooks   Paul Moore
• [PATCH v12 2/9] landlock: Add IOCTL access right for character and block devices   Günther Noack
• [PATCH v12 3/9] selftests/landlock: Test IOCTL support   Günther Noack
• [PATCH v12 4/9] selftests/landlock: Test IOCTL with memfds   Günther Noack
• [PATCH v12 5/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)   Günther Noack
• [PATCH v12 6/9] selftests/landlock: Test IOCTLs on named pipes   Günther Noack
• [PATCH v12 7/9] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Günther Noack
• [PATCH v12 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV   Günther Noack
• [PATCH v12 9/9] landlock: Document IOCTL support   Günther Noack
• [PATCH v4 0/7] Handle faults in KUnit tests   Mickaël Salaün
  • [PATCH v4 2/7] kunit: Fix kthread reference   Mickaël Salaün
  • [PATCH v4 3/7] kunit: Fix timeout message   Mickaël Salaün
  • [PATCH v4 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests   Mickaël Salaün
  • [PATCH v4 6/7] kunit: Print last test location on fault   Mickaël Salaün
  • [PATCH v4 7/7] kunit: Add tests for fault   Mickaël Salaün
• [PATCH v4 1/7] kunit: Handle thread creation error   Mickaël Salaün
• [PATCH v4 4/7] kunit: Handle test faults   Mickaël Salaün
• [PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net   Ivanov Mikhail
  • [PATCH] samples/landlock: Fix incorrect free in populate_ruleset_net   Mickaël Salaün
• [PATCH v7 0/6] DCP as trusted keys backend   David Gstir
  • [PATCH v7 1/6] crypto: mxs-dcp: Add support for hardware-bound keys   David Gstir
  • [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config   David Gstir
    • [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config   Jarkko Sakkinen
  • [PATCH v7 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys   David Gstir
  • [PATCH v7 4/6] MAINTAINERS: add entry for DCP-based trusted keys   David Gstir
  • [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params   David Gstir
    • [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params   Jarkko Sakkinen
  • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source   David Gstir
    • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source   Jarkko Sakkinen
      • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source   David Gstir
      • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source   Jarkko Sakkinen
      • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source   Jarkko Sakkinen
• [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Mickaël Salaün
  • [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Casey Schaufler
  • [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Ivanov Mikhail
    • [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Paul Moore
      • [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Paul Moore
  • [PATCH v1 1/2] lsm: Check and handle error priority for socket_bind and socket_connect   Paul Moore
• [PATCH v1 2/2] selftests/landlock: Improve AF_UNSPEC tests   Mickaël Salaün
• [PATCH v13 00/10] Landlock: IOCTL support   Günther Noack
  • [PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices   Günther Noack
    • [PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices   Mickaël Salaün
      • [PATCH v13 01/10] landlock: Add IOCTL access right for character and block devices   Mickaël Salaün
  • [PATCH v13 02/10] selftests/landlock: Test IOCTL support   Günther Noack
    • [PATCH v13 02/10] selftests/landlock: Test IOCTL support   Mickaël Salaün
  • [PATCH v13 03/10] selftests/landlock: Test IOCTL with memfds   Günther Noack
  • [PATCH v13 04/10] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)   Günther Noack
  • [PATCH v13 05/10] selftests/landlock: Test IOCTLs on named pipes   Günther Noack
  • [PATCH v13 06/10] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets   Günther Noack
  • [PATCH v13 07/10] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV   Günther Noack
  • [PATCH v13 08/10] landlock: Document IOCTL support   Günther Noack
  • [PATCH v13 09/10] MAINTAINERS: Notify Landlock maintainers about changes to fs/ioctl.c   Günther Noack
  • [PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM   Günther Noack
    • [PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM   Mickaël Salaün
      • [PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM   Paul Moore
      • [PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM   Mickaël Salaün
      • [PATCH v13 10/10] fs/ioctl: Add a comment to keep the logic in sync with the Landlock LSM   Paul Moore
• [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
  • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Paul Moore
    • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
      • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Mickaël Salaün
      • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
      • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
  • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Greg KH
    • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
  • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Dan Carpenter
    • [PATCH] LANDLOCK: use kmem_cache for landlock_object   Ayush Tiwari
• [PATCH v2] Add Landlock test for io_uring IORING_OP_OPENAT operation   Mickaël Salaün
• [PATCH 0/7] sysctl: Remove sentinel elements from misc directories   Joel Granados via B4 Relay
  • [PATCH 1/7] memory: Remove the now superfluous sentinel element from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 2/7] security: Remove the now superfluous sentinel element from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 3/7] crypto: Remove the now superfluous sentinel element from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 4/7] initrd: Remove the now superfluous sentinel element from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 5/7] ipc: Remove the now superfluous sentinel element from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 6/7] io_uring: Remove the now superfluous sentinel elements from ctl_table array   Joel Granados via B4 Relay
  • [PATCH 7/7] drivers: perf: Remove the now superfluous sentinel elements from ctl_table array   Joel Granados via B4 Relay
  • (subset) [PATCH 0/7] sysctl: Remove sentinel elements from misc directories   Jens Axboe
• [PATCH] landlock: Add abstract unix socket connect restrictions   TaheraFahimi
  • [PATCH] landlock: Add abstract unix socket connect restrictions   Casey Schaufler
• [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE)   Fan Wu
  • [PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs()   Fan Wu
  • [PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider   Fan Wu
  • [PATCH v16 07/20] security: add new securityfs delete function   Fan Wu
  • [PATCH v16 08/20] ipe: add userspace interface   Fan Wu
  • [PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support   Fan Wu
  • [PATCH v16 10/20] ipe: add permissive toggle   Fan Wu
  • [PATCH v16 11/20] block|security: add LSM blob to block_device   Fan Wu
    • [PATCH v16 11/20] block|security: add LSM blob to block_device   kernel test robot
  • [PATCH v16 12/20] dm: add finalize hook to target_type   Fan Wu
  • [PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook   Fan Wu
  • [PATCH v16 14/20] ipe: add support for dm-verity as a trust provider   Fan Wu
  • [PATCH v16 15/20] security: add security_inode_setintegrity() hook   Fan Wu
  • [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook   Fan Wu
  • [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider   Fan Wu
  • [PATCH v16 18/20] scripts: add boot policy generation program   Fan Wu
  • [PATCH v16 19/20] ipe: kunit test for parser   Fan Wu
  • [PATCH v16 20/20] documentation: add ipe documentation   Fan Wu
  • [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE)   Jarkko Sakkinen
    • [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE)   Jarkko Sakkinen
• [PATCH v16 01/20] security: add ipe lsm   Fan Wu
  • [PATCH v16 01/20] security: add ipe lsm   Jarkko Sakkinen
    • [PATCH v16 01/20] security: add ipe lsm   Randy Dunlap
      • [PATCH v16 01/20] security: add ipe lsm   Jarkko Sakkinen
• [PATCH v16 02/20] ipe: add policy parser   Fan Wu
  • [PATCH v16 02/20] ipe: add policy parser   Jarkko Sakkinen
  • [PATCH v16 02/20] ipe: add policy parser   Jarkko Sakkinen
• [PATCH v16 03/20] ipe: add evaluation loop   Fan Wu
  • [PATCH v16 03/20] ipe: add evaluation loop   Jarkko Sakkinen
• [PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read   Fan Wu
• [PATCH v2] landlock: Add abstract unix socket connect restrictions   TaheraFahimi
• [linus:master] [selftests/harness] 0710a1a73f: kernel-selftests.pidfd.pidfd_setns_test.fail   kernel test robot
• [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod()   Roberto Sassu
  • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Roberto Sassu
    • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Mimi Zohar
      • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Paul Moore
      • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Mimi Zohar
      • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Paul Moore
    • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod()   Roberto Sassu
  • [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod()   Mimi Zohar
    • [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod()   Roberto Sassu
  • [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod()   Paul Moore
• [PATCH v2] landlock: Use kmem for landlock_object   Ayush Tiwari
  • [PATCH v2] landlock: Use kmem for landlock_object   Greg KH
    • [PATCH v2] landlock: Use kmem for landlock_object   Ayush Tiwari
      • [PATCH v2] landlock: Use kmem for landlock_object   Greg KH
      • [PATCH v2] landlock: Use kmem for landlock_object   Ayush Tiwari

Last message date: Sun Mar 31 18:08:28 UTC 2024
Archived on: Tue Dec 17 21:00:50 UTC 2024

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...