March 2025 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Sat Mar 1 00:37:29 UTC 2025
Ending: Sun Mar 9 13:08:10 UTC 2025
Messages: 238

• [PATCH 1/1] security: Propagate caller information in bpf hooks   Song Liu
• [PATCH] security: keys: Make sysctl table const   Jarkko Sakkinen
  • [PATCH] security: keys: Make sysctl table const   Jarkko Sakkinen
• [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
  • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
  • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
    • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
  • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
    • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
    • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
• [PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported   Arulpandiyan Vadivel
  • [PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported   Kees Cook
• [PATCH v3] fs: introduce getfsxattrat and setfsxattrat syscalls   Pali Rohár
• [PATCH v2 02/11] quota: reorder capability check last   Christian Göttsche
  • [PATCH v2 03/11] ext4: reorder capability check last   Christian Göttsche
    • [PATCH v2 03/11] ext4: reorder capability check last   Jan Kara
  • [PATCH v2 04/11] hugetlbfs: reorder capability check last   Christian Göttsche
  • [PATCH v2 05/11] genwqe: reorder capability check last   Christian Göttsche
  • [PATCH v2 06/11] ubifs: reorder capability check last   Christian Göttsche
    • [PATCH v2 06/11] ubifs: reorder capability check last   Zhihao Cheng
  • [PATCH v2 07/11] drm/panthor: reorder capability check last   Christian Göttsche
  • [PATCH v2 08/11] ipv4: reorder capability check last   Christian Göttsche
    • [PATCH v2 08/11] ipv4: reorder capability check last   Eric Dumazet
  • [PATCH v2 09/11] fs: reorder capability check last   Christian Göttsche
  • [PATCH v2 10/11] skbuff: reorder capability check last   Christian Göttsche
    • [PATCH v2 10/11] skbuff: reorder capability check last   Willem de Bruijn
  • [PATCH v2 11/11] infiniband: reorder capability check last   Christian Göttsche
    • [PATCH v2 11/11] infiniband: reorder capability check last   Leon Romanovsky
  • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Christian Göttsche
    • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Casey Schaufler
      • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Christian Göttsche
• [PATCH v4 2/14] Add TSEM specific documentation.   Dr. Greg
  • [PATCH v4 2/14] Add TSEM specific documentation.   Casey Schaufler
• [PATCH v2 1/3] landlock.7: Update description of Landlock rules   Günther Noack
• [PATCH] cred: rust: mark Credential methods inline   Alice Ryhl
  • [PATCH] cred: rust: mark Credential methods inline   Boqun Feng
  • [PATCH] cred: rust: mark Credential methods inline   Andreas Hindborg
  • [PATCH] cred: rust: mark Credential methods inline   Christian Brauner
• [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Casey Schaufler
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Casey Schaufler
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Andreas Hindborg
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Miguel Ojeda
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Miguel Ojeda
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
• [PATCH v2 2/3] landlock.7: Move over documentation for ABI version 6   Günther Noack
• [PATCH v2 3/3] landlock.7: Clarify IPC scoping documentation in line with kernel side   Günther Noack
• [RFC] Type-Partitioned vmalloc (with sample *.ko code)   Kees Cook
  • [RFC] Type-Partitioned vmalloc (with sample *.ko code)   Maxwell Bland
• [PATCH v3 0/1] landlock: Clarify IPC scoping documentation   Günther Noack
  • [PATCH v3 1/1] landlock: Clarify IPC scoping documentation   Günther Noack
    • [PATCH v3 1/1] landlock: Clarify IPC scoping documentation   Mickaël Salaün
  • [PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules   Günther Noack
    • [PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules   Alejandro Colomar
  • [PATCH man v3 2/2] landlock.7: Add IPC scoping documentation in line with kernel side   Günther Noack
• [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
  • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
  • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
    • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
      • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
      • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
• [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
  • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
    • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
    • [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
      • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
      • [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
• [PATCH 0/1 v3] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH 1/1] security: Propagate caller information in bpf hooks   Blaise Boscaccy
    • [PATCH 1/1] security: Propagate caller information in bpf hooks   Song Liu
• [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
  • [RFC PATCH 1/9] Define the supervisor and event structure   Tingmao Wang
  • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Tingmao Wang
    • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Mickaël Salaün
      • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Tingmao Wang
      • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Mickaël Salaün
  • [RFC PATCH 3/9] Adds a supervisor reference in the per-layer information   Tingmao Wang
  • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Tingmao Wang
    • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Mickaël Salaün
  • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
    • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
      • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
  • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Tingmao Wang
    • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Mickaël Salaün
  • [RFC PATCH 7/9] Implement fdinfo for ruleset and supervisor fd   Tingmao Wang
  • [RFC PATCH 8/9] Implement fops for supervisor-fd   Tingmao Wang
  • [RFC PATCH 9/9] Enhance the sandboxer example to support landlock-supervise   Tingmao Wang
  • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
    • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Amir Goldstein
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
  • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Jan Kara
    • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
• [PATCH v2] cred: rust: mark Credential methods inline   Alice Ryhl
  • [PATCH v2] cred: rust: mark Credential methods inline   Paul Moore
• [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
  • [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Fiona Behrens
  • [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Paul Moore
• [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Alice Ryhl
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Fiona Behrens
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Casey Schaufler
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Paul Moore
• [PATCH v8 2/7] kexec: define functions to map and unmap segments   Mimi Zohar
• [PATCH v9 0/7] ima: kexec: measure events between kexec load and execute   steven chen
  • [PATCH v9 2/7] kexec: define functions to map and unmap segments   steven chen
    • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Jarkko Sakkinen
      • [PATCH v9 2/7] kexec: define functions to map and unmap segments   steven chen
      • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Baoquan He
    • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Dan Carpenter
  • [PATCH v9 4/7] ima: kexec: define functions to copy IMA log at soft boot   steven chen
  • [PATCH v9 5/7] ima: kexec: move IMA log copy from kexec load to execute   steven chen
  • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   steven chen
    • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   Mimi Zohar
      • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   steven chen
• [PATCH v9 1/7] ima: copy only complete measurement records across kexec   steven chen
  • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
    • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
  • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Baoquan He
    • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   steven chen
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
• [PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot   steven chen
  • [PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot   Baoquan He
• [PATCH v9 6/7] ima: make the kexec extra memory configurable   steven chen
• [RFC 1/2] landlock: Multithreading support for landlock_restrict_self()   Mickaël Salaün
• [PATCH v4 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
    • [PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks   Paul Moore
  • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
    • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
    • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Alexei Starovoitov
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
• [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
  • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
    • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   sergeh at kernel.org
      • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
  • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Günther Noack
• [PATCH] yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()   Kees Cook
• apparmor NULL pointer dereference on resume   Malte Schröder
  • apparmor NULL pointer dereference on resume   Ryan Lee
    • apparmor NULL pointer dereference on resume   Malte Schröder
• [PATCH v2 6/6] module: Introduce hash-based integrity checking   Thomas Weißschuh
• [PATCH] security/commoncap: don't assume "setid" if all ids are identical   Max Kellermann
  • [PATCH] security/commoncap: don't assume "setid" if all ids are identical   kernel test robot
• [PATCH v1] samples/check-exec: Fix script name   Mickaël Salaün
  • [PATCH v1] samples/check-exec: Fix script name   Kees Cook
• [PATCH 0/2] smack: fix two bugs in setting task label   Konstantin Andreev
  • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Konstantin Andreev
    • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Casey Schaufler
      • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Konstantin Andreev
      • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Casey Schaufler
  • [PATCH 0/2] smack: fix two bugs in setting task label   Casey Schaufler
• [PATCH 2/2] smack: fix bug: setting task label silently ignores input garbage   Konstantin Andreev
• The Business Loan/financing.1   Barry
• [PATCH v5 02/24] landlock: Add unique ID generator   Günther Noack
  • [PATCH v5 02/24] landlock: Add unique ID generator   Mickaël Salaün
• [PATCH v2 0/6] Audit: Records for multiple security contexts   Casey Schaufler
  • [PATCH v2 1/6] Audit: Create audit_stamp structure   Casey Schaufler
• [PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer   Casey Schaufler
• [PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection   Casey Schaufler
  • [PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection   kernel test robot
• [PATCH v2 4/6] Audit: Add record for multiple task security contexts   Casey Schaufler
• [PATCH v2 5/6] Audit: multiple subject lsm values for netlabel   Casey Schaufler
• [PATCH v2 6/6] Audit: Add record for multiple object contexts   Casey Schaufler
• [PATCH v5 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v5 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
    • [PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
• [PATCH v4 0/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
• [RFC PATCH v4 1/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
• [PATCH v6 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v6 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
• [PATCH v2] capability: Remove unused has_capability   sergeh at kernel.org
  • [PATCH v2] capability: Remove unused has_capability   Dr. David Alan Gilbert
• [PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
• [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Kees Cook
  • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Ingo Molnar
  • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Nathan Chancellor
    • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Kees Cook
• [PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
  • [PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
• [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Parav Pandit
• [PATCH v6 00/26] Landlock audit support   Mickaël Salaün
  • [PATCH v6 01/26] lsm: Add audit_log_lsm_data() helper   Mickaël Salaün
  • [PATCH v6 02/26] landlock: Add unique ID generator   Mickaël Salaün
  • [PATCH v6 03/26] landlock: Move domain hierarchy management   Mickaël Salaün
  • [PATCH v6 04/26] landlock: Prepare to use credential instead of domain for filesystem   Mickaël Salaün
  • [PATCH v6 05/26] landlock: Prepare to use credential instead of domain for network   Mickaël Salaün
  • [PATCH v6 06/26] landlock: Prepare to use credential instead of domain for scope   Mickaël Salaün
  • [PATCH v6 07/26] landlock: Prepare to use credential instead of domain for fowner   Mickaël Salaün
  • [PATCH v6 08/26] landlock: Identify domain execution crossing   Mickaël Salaün
  • [PATCH v6 09/26] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials   Mickaël Salaün
  • [PATCH v6 10/26] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Mickaël Salaün
  • [PATCH v6 11/26] landlock: Log mount-related denials   Mickaël Salaün
  • [PATCH v6 12/26] landlock: Log file-related denials   Mickaël Salaün
  • [PATCH v6 13/26] landlock: Log truncate and IOCTL denials   Mickaël Salaün
  • [PATCH v6 14/26] landlock: Log TCP bind and connect denials   Mickaël Salaün
  • [PATCH v6 15/26] landlock: Log scoped denials   Mickaël Salaün
  • [PATCH v6 16/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags   Mickaël Salaün
  • [PATCH v6 17/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF   Mickaël Salaün
  • [PATCH v6 18/26] samples/landlock: Enable users to log sandbox denials   Mickaël Salaün
  • [PATCH v6 19/26] selftests/landlock: Add test for invalid ruleset file descriptor   Mickaël Salaün
  • [PATCH v6 20/26] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags   Mickaël Salaün
  • [PATCH v6 21/26] selftests/landlock: Add tests for audit flags and domain IDs   Mickaël Salaün
  • [PATCH v6 22/26] selftests/landlock: Test audit with restrict flags   Mickaël Salaün
  • [PATCH v6 23/26] selftests/landlock: Add audit tests for ptrace   Mickaël Salaün
  • [PATCH v6 24/26] selftests/landlock: Add audit tests for abstract unix socket scoping   Mickaël Salaün
  • [PATCH v6 25/26] selftests/landlock: Add audit tests for filesystem   Mickaël Salaün
  • [PATCH v6 26/26] landlock: Add audit documentation   Mickaël Salaün
  • [PATCH v6 00/26] Landlock audit support   Mickaël Salaün
• [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   sergeh at kernel.org

Last message date: Sun Mar 9 13:08:10 UTC 2025
Archived on: Sun Mar 9 13:08:21 UTC 2025

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...