March 2025 Archives by subject

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

Starting: Sat Mar 1 00:37:29 UTC 2025
Ending: Mon Mar 31 20:57:15 UTC 2025
Messages: 684

[bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status Dan Carpenter
[bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status Mickaël Salaün
[bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status Dan Carpenter
[GIT PULL] capabilities update for 6.15 Serge E. Hallyn
[GIT PULL] capabilities update for 6.15 pr-tracker-bot at kernel.org
[GIT PULL] IPE update for 6.15 Fan Wu
[GIT PULL] IPE update for 6.15 pr-tracker-bot at kernel.org
[GIT PULL] Landlock update for v6.15-rc1 Mickaël Salaün
[GIT PULL] Landlock update for v6.15-rc1 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20250323 Paul Moore
[GIT PULL] lsm/lsm-pr-20250323 pr-tracker-bot at kernel.org
[GIT PULL] selinux/selinux-pr-20250323 Paul Moore
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 pr-tracker-bot at kernel.org
[GIT PULL] selinux/selinux-pr-20250323 Paul Moore
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Paul Moore
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Paul Moore
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Thiébaud Weksteen
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Thiébaud Weksteen
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Jeffrey Vander Stoep
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Casey Schaufler
[GIT PULL] selinux/selinux-pr-20250323 Stephen Smalley
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Stephen Smalley
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Stephen Smalley
[GIT PULL] selinux/selinux-pr-20250323 Paul Moore
[GIT PULL] selinux/selinux-pr-20250323 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20250323 Casey Schaufler
[GIT PULL] Smack patches for 6.15 Casey Schaufler
[GIT PULL] Smack patches for 6.15 pr-tracker-bot at kernel.org
[linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage kernel test robot
[linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage Mickaël Salaün
[linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage Mickaël Salaün
[LTP] [PATCH 0/4] Landlock tests for ABI v6 Petr Vorel
[PATCH 0/1 v3] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH 0/2] Allow individual features to be locked down Nikolay Borisov
[PATCH 0/2] Allow individual features to be locked down Paul Moore
[PATCH 0/2] smack: fix two bugs in setting task label Konstantin Andreev
[PATCH 0/2] smack: fix two bugs in setting task label Casey Schaufler
[PATCH 0/2] smack: fix two bugs in setting task label Casey Schaufler
[PATCH 0/2] smack: fix two bugs in setting task label Konstantin Andreev
[PATCH 0/2] smack: fix two bugs in setting task label Casey Schaufler
[PATCH 1/1] security: Propagate caller information in bpf hooks Song Liu
[PATCH 1/1] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH 1/1] security: Propagate caller information in bpf hooks Song Liu
[PATCH 1/2] lockdown: Switch implementation to using bitmap Nikolay Borisov
[PATCH 1/2] lockdown: Switch implementation to using bitmap sergeh at kernel.org
[PATCH 1/2] smack: fix bug: unprivileged task can create labels Konstantin Andreev
[PATCH 1/2] smack: fix bug: unprivileged task can create labels Casey Schaufler
[PATCH 1/2] smack: fix bug: unprivileged task can create labels Konstantin Andreev
[PATCH 1/2] smack: fix bug: unprivileged task can create labels Casey Schaufler
[PATCH 2/2] lockdown/kunit: Introduce kunit tests Nikolay Borisov
[PATCH 2/2] smack: fix bug: setting task label silently ignores input garbage Konstantin Andreev
[PATCH] [v2] crypto: lib/Kconfig: hide library options Arnd Bergmann
[PATCH] [v2] crypto: lib/Kconfig: hide library options David Howells
[PATCH] [v2] crypto: lib/Kconfig: hide library options Herbert Xu
[PATCH] [v2] crypto: lib/Kconfig: hide library options Arnd Bergmann
[PATCH] [v2] crypto: lib/Kconfig: hide library options Jarkko Sakkinen
[PATCH] [v2] crypto: lib/Kconfig: hide library options Herbert Xu
[PATCH] [v2] crypto: lib/Kconfig: hide library options Geert Uytterhoeven
[PATCH] [v2] crypto: lib/Kconfig: hide library options Arnd Bergmann
[PATCH] [v2] crypto: lib/Kconfig: hide library options Geert Uytterhoeven
[PATCH] [v2] crypto: lib/Kconfig: hide library options Herbert Xu
[PATCH] apparmor: make __begin_current_label_crit_section() indicate whether put is needed Mateusz Guzik
[PATCH] cred: rust: mark Credential methods inline Alice Ryhl
[PATCH] cred: rust: mark Credential methods inline Boqun Feng
[PATCH] cred: rust: mark Credential methods inline Andreas Hindborg
[PATCH] cred: rust: mark Credential methods inline Christian Brauner
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Kees Cook
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Nathan Chancellor
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Kees Cook
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Nathan Chancellor
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Kees Cook
[PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Nathan Chancellor
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Roberto Sassu
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Roberto Sassu
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Roberto Sassu
[PATCH] init/main.c: Initialize early LSMs after arch code joeyli
[PATCH] init/main.c: Initialize early LSMs after arch code Paul Moore
[PATCH] keys: Fix UAF in key_put() David Howells
[PATCH] keys: Fix UAF in key_put() Oleg Nesterov
[PATCH] keys: Fix UAF in key_put() Oleg Nesterov
[PATCH] keys: Fix UAF in key_put() David Howells
[PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings Bo Liu
[PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings Jarkko Sakkinen
[PATCH] lsm: rust: mark SecurityCtx methods inline Alice Ryhl
[PATCH] lsm: rust: mark SecurityCtx methods inline Casey Schaufler
[PATCH] lsm: rust: mark SecurityCtx methods inline Andreas Hindborg
[PATCH] lsm: rust: mark SecurityCtx methods inline Alice Ryhl
[PATCH] lsm: rust: mark SecurityCtx methods inline Casey Schaufler
[PATCH] lsm: rust: mark SecurityCtx methods inline Paul Moore
[PATCH] lsm: rust: mark SecurityCtx methods inline Miguel Ojeda
[PATCH] lsm: rust: mark SecurityCtx methods inline Alice Ryhl
[PATCH] lsm: rust: mark SecurityCtx methods inline Paul Moore
[PATCH] lsm: rust: mark SecurityCtx methods inline Paul Moore
[PATCH] lsm: rust: mark SecurityCtx methods inline Miguel Ojeda
[PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx Alice Ryhl
[PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx Fiona Behrens
[PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx Casey Schaufler
[PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx Paul Moore
[PATCH] lsm_audit: remove old email address Stephen Smalley
[PATCH] lsm_audit: remove old email address Paul Moore
[PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds sergeh at kernel.org
[PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds Paul Moore
[PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds Serge E. Hallyn
[PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds Paul Moore
[PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds Serge E. Hallyn
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Parav Pandit
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Jason Gunthorpe
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Parav Pandit
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Jason Gunthorpe
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Parav Pandit
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Jason Gunthorpe
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Eric W. Biederman
[PATCH] RDMA/uverbs: Consider capability of the process that opens the file Jason Gunthorpe
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Parav Pandit
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Serge E. Hallyn
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Parav Pandit
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Eric W. Biederman
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Parav Pandit
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Eric W. Biederman
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Serge E. Hallyn
[PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace Parav Pandit
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" Lennart Poettering
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" Jarkko Sakkinen
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" lee joey
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" Lennart Poettering
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" James Bottomley
[PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled" Jarkko Sakkinen
[PATCH] security/commoncap: don't assume "setid" if all ids are identical Max Kellermann
[PATCH] security/commoncap: don't assume "setid" if all ids are identical kernel test robot
[PATCH] security/commoncap: don't assume "setid" if all ids are identical Serge E. Hallyn
[PATCH] security: keys: Make sysctl table const Jarkko Sakkinen
[PATCH] security: keys: Make sysctl table const Jarkko Sakkinen
[PATCH] yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl() Kees Cook
[PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules Günther Noack
[PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules Alejandro Colomar
[PATCH man v3 2/2] landlock.7: Add IPC scoping documentation in line with kernel side Günther Noack
[PATCH RFC v4 1/1] ipe: add errno field to IPE policy load auditing Paul Moore
[PATCH v10 0/8] ima: kexec: measure events between kexec load and execute steven chen
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" steven chen
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" Stefan Berger
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" Baoquan He
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" Mimi Zohar
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" steven chen
[PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file" steven chen
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() steven chen
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() Baoquan He
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() Mimi Zohar
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() Baoquan He
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() Mimi Zohar
[PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf() steven chen
[PATCH v10 3/8] kexec: define functions to map and unmap segments steven chen
[PATCH v10 3/8] kexec: define functions to map and unmap segments Baoquan He
[PATCH v10 4/8] ima: kexec: skip IMA segment validation after kexec soft reboot steven chen
[PATCH v10 4/8] ima: kexec: skip IMA segment validation after kexec soft reboot Baoquan He
[PATCH v10 5/8] ima: kexec: define functions to copy IMA log at soft boot steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute Mimi Zohar
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute Baoquan He
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute Baoquan He
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute Baoquan He
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute Mimi Zohar
[PATCH v10 7/8] ima: make the kexec extra memory configurable steven chen
[PATCH v10 7/8] ima: make the kexec extra memory configurable Baoquan He
[PATCH v10 7/8] ima: make the kexec extra memory configurable steven chen
[PATCH v10 8/8] ima: measure kexec load and exec events as critical data steven chen
[PATCH v10 8/8] ima: measure kexec load and exec events as critical data Mimi Zohar
[PATCH v10 8/8] ima: measure kexec load and exec events as critical data steven chen
[PATCH v1] landlock: Remove incorrect warning Mickaël Salaün
[PATCH v1] samples/check-exec: Fix script name Mickaël Salaün
[PATCH v1] samples/check-exec: Fix script name Kees Cook
[PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Kees Cook
[PATCH v2 0/2] smack: fix two bugs in setting task label Konstantin Andreev
[PATCH v2 0/6] Audit: Records for multiple security contexts Casey Schaufler
[PATCH v2 0/8] Landlock signal scope fix and errata interface Mickaël Salaün
[PATCH v2 01/11] coccinelle: Add script to reorder capable() calls Christian Göttsche
[PATCH v2 01/11] coccinelle: Add script to reorder capable() calls Casey Schaufler
[PATCH v2 01/11] coccinelle: Add script to reorder capable() calls Christian Göttsche
[PATCH v2 01/11] coccinelle: Add script to reorder capable() calls Theodore Ts'o
[PATCH v2 02/11] quota: reorder capability check last Christian Göttsche
[PATCH v2 03/11] ext4: reorder capability check last Christian Göttsche
[PATCH v2 03/11] ext4: reorder capability check last Jan Kara
[PATCH v2 04/11] hugetlbfs: reorder capability check last Christian Göttsche
[PATCH v2 05/11] genwqe: reorder capability check last Christian Göttsche
[PATCH v2 06/11] ubifs: reorder capability check last Christian Göttsche
[PATCH v2 06/11] ubifs: reorder capability check last Zhihao Cheng
[PATCH v2 07/11] drm/panthor: reorder capability check last Christian Göttsche
[PATCH v2 08/11] ipv4: reorder capability check last Christian Göttsche
[PATCH v2 08/11] ipv4: reorder capability check last Eric Dumazet
[PATCH v2 09/11] fs: reorder capability check last Christian Göttsche
[PATCH v2 1/2] smack: fix bug: unprivileged task can create labels Konstantin Andreev
[PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC Kees Cook
[PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC Ingo Molnar
[PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC Nathan Chancellor
[PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC Kees Cook
[PATCH v2 1/3] landlock.7: Update description of Landlock rules Günther Noack
[PATCH v2 1/6] Audit: Create audit_stamp structure Casey Schaufler
[PATCH v2 1/6] Audit: Create audit_stamp structure Paul Moore
[PATCH v2 1/8] landlock: Move code to ease future backports Mickaël Salaün
[PATCH v2 10/11] skbuff: reorder capability check last Christian Göttsche
[PATCH v2 10/11] skbuff: reorder capability check last Willem de Bruijn
[PATCH v2 11/11] infiniband: reorder capability check last Christian Göttsche
[PATCH v2 11/11] infiniband: reorder capability check last Leon Romanovsky
[PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Kees Cook
[PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+ Nathan Chancellor
[PATCH v2 2/2] smack: fix bug: setting task label silently ignores input garbage Konstantin Andreev
[PATCH v2 2/3] landlock.7: Move over documentation for ABI version 6 Günther Noack
[PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer Casey Schaufler
[PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer Paul Moore
[PATCH v2 2/8] landlock: Add the errata interface Mickaël Salaün
[PATCH v2 2/8] landlock: Add the errata interface Günther Noack
[PATCH v2 2/8] landlock: Add the errata interface Mickaël Salaün
[PATCH v2 3/3] landlock.7: Clarify IPC scoping documentation in line with kernel side Günther Noack
[PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection Casey Schaufler
[PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection kernel test robot
[PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection Paul Moore
[PATCH v2 3/8] landlock: Add erratum for TCP fix Mickaël Salaün
[PATCH v2 4/6] Audit: Add record for multiple task security contexts Casey Schaufler
[PATCH v2 4/6] Audit: Add record for multiple task security contexts Paul Moore
[PATCH v2 4/6] Audit: Add record for multiple task security contexts Paul Moore
[PATCH v2 4/8] landlock: Prepare to add second errata Mickaël Salaün
[PATCH v2 5/6] Audit: multiple subject lsm values for netlabel Casey Schaufler
[PATCH v2 5/6] Audit: multiple subject lsm values for netlabel Paul Moore
[PATCH v2 5/8] landlock: Always allow signals between threads of the same process Mickaël Salaün
[PATCH v2 5/8] landlock: Always allow signals between threads of the same process Mickaël Salaün
[PATCH v2 5/8] landlock: Always allow signals between threads of the same process kernel test robot
[PATCH v2 5/8] landlock: Always allow signals between threads of the same process Mickaël Salaün
[PATCH v2 6/6] Audit: Add record for multiple object contexts Casey Schaufler
[PATCH v2 6/6] Audit: Add record for multiple object contexts kernel test robot
[PATCH v2 6/6] Audit: Add record for multiple object contexts kernel test robot
[PATCH v2 6/6] Audit: Add record for multiple object contexts Dan Carpenter
[PATCH v2 6/6] Audit: Add record for multiple object contexts Paul Moore
[PATCH v2 6/6] module: Introduce hash-based integrity checking Thomas Weißschuh
[PATCH v2 6/8] selftests/landlock: Split signal_scoping_threads tests Mickaël Salaün
[PATCH v2 7/8] selftests/landlock: Add a new test for setuid() Mickaël Salaün
[PATCH v2 8/8] landlock: Document errata Mickaël Salaün
[PATCH v2] capability: Remove unused has_capability sergeh at kernel.org
[PATCH v2] capability: Remove unused has_capability Dr. David Alan Gilbert
[PATCH v2] cred: rust: mark Credential methods inline Alice Ryhl
[PATCH v2] cred: rust: mark Credential methods inline Paul Moore
[PATCH v2] keys: Fix UAF in key_put() David Howells
[PATCH v2] keys: Fix UAF in key_put() Oleg Nesterov
[PATCH v2] keys: Fix UAF in key_put() Linus Torvalds
[PATCH v2] keys: Fix UAF in key_put() David Howells
[PATCH v2] keys: Fix UAF in key_put() Jarkko Sakkinen
[PATCH v2] keys: Fix UAF in key_put() David Howells
[PATCH v2] keys: Fix UAF in key_put() Jarkko Sakkinen
[PATCH v2] keys: Fix UAF in key_put() Jarkko Sakkinen
[PATCH v2] keys: Fix UAF in key_put() Jarkko Sakkinen
[PATCH v2] lsm: rust: mark SecurityCtx methods inline Alice Ryhl
[PATCH v2] lsm: rust: mark SecurityCtx methods inline Fiona Behrens
[PATCH v2] lsm: rust: mark SecurityCtx methods inline Paul Moore
[PATCH v2] netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets Debin Zhu
[PATCH v3 0/1] landlock: Clarify IPC scoping documentation Günther Noack
[PATCH v3 0/5] Audit: Records for multiple security contexts Casey Schaufler
[PATCH v3 1/1] landlock: Clarify IPC scoping documentation Günther Noack
[PATCH v3 1/1] landlock: Clarify IPC scoping documentation Mickaël Salaün
[PATCH v3 1/5] Audit: Create audit_stamp structure Casey Schaufler
[PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection Casey Schaufler
[PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection Fan Wu
[PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection Casey Schaufler
[PATCH v3 3/5] Audit: Add record for multiple task security contexts Casey Schaufler
[PATCH v3 4/5] Audit: multiple subject lsm values for netlabel Casey Schaufler
[PATCH v3 5/5] Audit: Add record for multiple object contexts Casey Schaufler
[PATCH v3] fs: introduce getfsxattrat and setfsxattrat syscalls Pali Rohár
[PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Frederick Lawler
[PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ Roberto Sassu
[PATCH v3] ipe: add errno field to IPE policy load auditing Fan Wu
[PATCH v3] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v3] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v3] ipe: add errno field to IPE policy load auditing Fan Wu
[PATCH v3] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v3] ipe: add errno field to IPE policy load auditing Fan Wu
[PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported Arulpandiyan Vadivel
[PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported Kees Cook
[PATCH v4 0/1] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Andrey Albershteyn
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Pali Rohár
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Pali Rohár
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Pali Rohár
[PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr Andrey Albershteyn
[PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr Paul Moore
[PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr Mickaël Salaün
[PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr Mickaël Salaün
[PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr Andrey Albershteyn
[PATCH v4 2/14] Add TSEM specific documentation. Dr. Greg
[PATCH v4 2/14] Add TSEM specific documentation. Casey Schaufler
[PATCH v4 2/3] fs: split fileattr/fsxattr converters into helpers Andrey Albershteyn
[PATCH v4 2/3] fs: split fileattr/fsxattr converters into helpers Jan Kara
[PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls Andrey Albershteyn
[PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls Andrey Albershteyn
[PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls Amir Goldstein
[PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls Jan Kara
[PATCH v4 bpf-next 0/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks Paul Moore
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Blaise Boscaccy
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Song Liu
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Blaise Boscaccy
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Paul Moore
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Blaise Boscaccy
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Paul Moore
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Song Liu
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Song Liu
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Paul Moore
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Alexei Starovoitov
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Song Liu
[PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs Paul Moore
[PATCH v5 0/1] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v5 02/24] landlock: Add unique ID generator Günther Noack
[PATCH v5 02/24] landlock: Add unique ID generator Mickaël Salaün
[PATCH v5 1/1] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[PATCH v5 1/1] ipe: add errno field to IPE policy load auditing Fan Wu
[PATCH v5 1/1] ipe: add errno field to IPE policy load auditing Paul Moore
[PATCH v5 1/1] ipe: add errno field to IPE policy load auditing Fan Wu
[PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685 Chiang Brian
[PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685 Guenter Roeck
[PATCH v5 bpf-next 0/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v5 bpf-next 1/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Blaise Boscaccy
[PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Song Liu
[PATCH v6 00/26] Landlock audit support Mickaël Salaün
[PATCH v6 00/26] Landlock audit support Mickaël Salaün
[PATCH v6 01/26] lsm: Add audit_log_lsm_data() helper Mickaël Salaün
[PATCH v6 02/26] landlock: Add unique ID generator Mickaël Salaün
[PATCH v6 03/26] landlock: Move domain hierarchy management Mickaël Salaün
[PATCH v6 04/26] landlock: Prepare to use credential instead of domain for filesystem Mickaël Salaün
[PATCH v6 05/26] landlock: Prepare to use credential instead of domain for network Mickaël Salaün
[PATCH v6 06/26] landlock: Prepare to use credential instead of domain for scope Mickaël Salaün
[PATCH v6 07/26] landlock: Prepare to use credential instead of domain for fowner Mickaël Salaün
[PATCH v6 08/26] landlock: Identify domain execution crossing Mickaël Salaün
[PATCH v6 09/26] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials Mickaël Salaün
[PATCH v6 1/2] security: Propagate caller information in bpf hooks Paul Moore
[PATCH v6 10/26] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status Mickaël Salaün
[PATCH v6 11/26] landlock: Log mount-related denials Mickaël Salaün
[PATCH v6 12/26] landlock: Log file-related denials Mickaël Salaün
[PATCH v6 13/26] landlock: Log truncate and IOCTL denials Mickaël Salaün
[PATCH v6 14/26] landlock: Log TCP bind and connect denials Mickaël Salaün
[PATCH v6 15/26] landlock: Log scoped denials Mickaël Salaün
[PATCH v6 16/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags Mickaël Salaün
[PATCH v6 17/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF Mickaël Salaün
[PATCH v6 18/26] samples/landlock: Enable users to log sandbox denials Mickaël Salaün
[PATCH v6 19/26] selftests/landlock: Add test for invalid ruleset file descriptor Mickaël Salaün
[PATCH v6 20/26] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags Mickaël Salaün
[PATCH v6 21/26] selftests/landlock: Add tests for audit flags and domain IDs Mickaël Salaün
[PATCH v6 22/26] selftests/landlock: Test audit with restrict flags Mickaël Salaün
[PATCH v6 23/26] selftests/landlock: Add audit tests for ptrace Mickaël Salaün
[PATCH v6 24/26] selftests/landlock: Add audit tests for abstract unix socket scoping Mickaël Salaün
[PATCH v6 25/26] selftests/landlock: Add audit tests for filesystem Mickaël Salaün
[PATCH v6 26/26] landlock: Add audit documentation Mickaël Salaün
[PATCH v6 bpf-next 0/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v6 bpf-next 1/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Blaise Boscaccy
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Song Liu
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Blaise Boscaccy
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Song Liu
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Blaise Boscaccy
[PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Song Liu
[PATCH v7 00/28] Landlock audit support Mickaël Salaün
[PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper Mickaël Salaün
[PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper Günther Noack
[PATCH v7 02/28] landlock: Add unique ID generator Mickaël Salaün
[PATCH v7 03/28] landlock: Move domain hierarchy management Mickaël Salaün
[PATCH v7 03/28] landlock: Move domain hierarchy management Günther Noack
[PATCH v7 04/28] landlock: Prepare to use credential instead of domain for filesystem Mickaël Salaün
[PATCH v7 05/28] landlock: Prepare to use credential instead of domain for network Mickaël Salaün
[PATCH v7 06/28] landlock: Prepare to use credential instead of domain for scope Mickaël Salaün
[PATCH v7 07/28] landlock: Prepare to use credential instead of domain for fowner Mickaël Salaün
[PATCH v7 08/28] landlock: Identify domain execution crossing Mickaël Salaün
[PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials Mickaël Salaün
[PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials Tingmao Wang
[PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials Mickaël Salaün
[PATCH v7 10/28] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status Mickaël Salaün
[PATCH v7 11/28] landlock: Log mount-related denials Mickaël Salaün
[PATCH v7 12/28] landlock: Log file-related denials Mickaël Salaün
[PATCH v7 13/28] landlock: Factor out IOCTL hooks Mickaël Salaün
[PATCH v7 14/28] landlock: Log truncate and IOCTL denials Mickaël Salaün
[PATCH v7 15/28] landlock: Log TCP bind and connect denials Mickaël Salaün
[PATCH v7 16/28] landlock: Log scoped denials Mickaël Salaün
[PATCH v7 17/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags Mickaël Salaün
[PATCH v7 18/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF Mickaël Salaün
[PATCH v7 19/28] samples/landlock: Enable users to log sandbox denials Mickaël Salaün
[PATCH v7 20/28] selftests/landlock: Add test for invalid ruleset file descriptor Mickaël Salaün
[PATCH v7 21/28] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags Mickaël Salaün
[PATCH v7 22/28] selftests/landlock: Add tests for audit flags and domain IDs Mickaël Salaün
[PATCH v7 23/28] selftests/landlock: Test audit with restrict flags Mickaël Salaün
[PATCH v7 24/28] selftests/landlock: Add audit tests for ptrace Mickaël Salaün
[PATCH v7 25/28] selftests/landlock: Add audit tests for abstract UNIX socket scoping Mickaël Salaün
[PATCH v7 26/28] selftests/landlock: Add audit tests for filesystem Mickaël Salaün
[PATCH v7 27/28] selftests/landlock: Add audit tests for network Mickaël Salaün
[PATCH v7 28/28] landlock: Add audit documentation Mickaël Salaün
[PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks patchwork-bot+netdevbpf at kernel.org
[PATCH v7 bpf-next 1/2] security: Propagate caller information in bpf hooks Blaise Boscaccy
[PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Blaise Boscaccy
[PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Song Liu
[PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook Alexei Starovoitov
[PATCH v8 2/7] kexec: define functions to map and unmap segments Mimi Zohar
[PATCH v9 0/7] ima: kexec: measure events between kexec load and execute steven chen
[PATCH v9 1/7] ima: copy only complete measurement records across kexec steven chen
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Mimi Zohar
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Mimi Zohar
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Baoquan He
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Mimi Zohar
[PATCH v9 1/7] ima: copy only complete measurement records across kexec steven chen
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Mimi Zohar
[PATCH v9 1/7] ima: copy only complete measurement records across kexec Mimi Zohar
[PATCH v9 1/7] ima: copy only complete measurement records across kexec steven chen
[PATCH v9 2/7] kexec: define functions to map and unmap segments steven chen
[PATCH v9 2/7] kexec: define functions to map and unmap segments Jarkko Sakkinen
[PATCH v9 2/7] kexec: define functions to map and unmap segments steven chen
[PATCH v9 2/7] kexec: define functions to map and unmap segments Baoquan He
[PATCH v9 2/7] kexec: define functions to map and unmap segments Dan Carpenter
[PATCH v9 2/7] kexec: define functions to map and unmap segments steven chen
[PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot steven chen
[PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot Baoquan He
[PATCH v9 4/7] ima: kexec: define functions to copy IMA log at soft boot steven chen
[PATCH v9 4/7] ima: kexec: define functions to copy IMA log at soft boot kernel test robot
[PATCH v9 5/7] ima: kexec: move IMA log copy from kexec load to execute steven chen
[PATCH v9 6/7] ima: make the kexec extra memory configurable steven chen
[PATCH v9 7/7] ima: measure kexec load and exec events as critical data steven chen
[PATCH v9 7/7] ima: measure kexec load and exec events as critical data Mimi Zohar
[PATCH v9 7/7] ima: measure kexec load and exec events as critical data steven chen
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] James Bottomley
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] Christian Brauner
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] James Bottomley
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] Christian Brauner
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] James Bottomley
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] Ard Biesheuvel
[RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]] Christian Brauner
[RFC 1/2] landlock: Multithreading support for landlock_restrict_self() Mickaël Salaün
[RFC 1/2] landlock: Multithreading support for landlock_restrict_self() Günther Noack
[RFC 1/2] landlock: Multithreading support for landlock_restrict_self() Mickaël Salaün
[RFC] Type-Partitioned vmalloc (with sample *.ko code) Kees Cook
[RFC] Type-Partitioned vmalloc (with sample *.ko code) Maxwell Bland
[RFC PATCH 0/6] fs, lsm: mediate O_PATH fd creation in file_open hook Ryan Lee
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tingmao Wang
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tingmao Wang
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Amir Goldstein
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Jan Kara
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tingmao Wang
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Song Liu
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tingmao Wang
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Song Liu
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tetsuo Handa
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Jan Kara
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Mickaël Salaün
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Amir Goldstein
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tingmao Wang
[RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests Tetsuo Handa
[RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well Ryan Lee
[RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well Al Viro
[RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well Christian Brauner
[RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well Paul Moore
[RFC PATCH 1/9] Define the supervisor and event structure Tingmao Wang
[RFC PATCH 2/6] apparmor: explicitly skip mediation of O_PATH file descriptors Ryan Lee
[RFC PATCH 2/9] Refactor per-layer information in rulesets and rules Tingmao Wang
[RFC PATCH 2/9] Refactor per-layer information in rulesets and rules Mickaël Salaün
[RFC PATCH 2/9] Refactor per-layer information in rulesets and rules Tingmao Wang
[RFC PATCH 2/9] Refactor per-layer information in rulesets and rules Mickaël Salaün
[RFC PATCH 2/9] Refactor per-layer information in rulesets and rules Tingmao Wang
[RFC PATCH 3/6] landlock: explicitly skip mediation of O_PATH file descriptors Ryan Lee
[RFC PATCH 3/9] Adds a supervisor reference in the per-layer information Tingmao Wang
[RFC PATCH 4/6] selinux: explicitly skip mediation of O_PATH file descriptors Ryan Lee
[RFC PATCH 4/9] User-space API for creating a supervisor-fd Tingmao Wang
[RFC PATCH 4/9] User-space API for creating a supervisor-fd Mickaël Salaün
[RFC PATCH 4/9] User-space API for creating a supervisor-fd Tingmao Wang
[RFC PATCH 4/9] User-space API for creating a supervisor-fd Mickaël Salaün
[RFC PATCH 4/9] User-space API for creating a supervisor-fd Tingmao Wang
[RFC PATCH 5/6] smack: explicitly skip mediation of O_PATH file descriptors Ryan Lee
[RFC PATCH 5/6] smack: explicitly skip mediation of O_PATH file descriptors Casey Schaufler
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 5/9] Define user structure for events and responses. Mickaël Salaün
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 5/9] Define user structure for events and responses. Mickaël Salaün
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 5/9] Define user structure for events and responses. Mickaël Salaün
[RFC PATCH 5/9] Define user structure for events and responses. Mickaël Salaün
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 5/9] Define user structure for events and responses. Mickaël Salaün
[RFC PATCH 5/9] Define user structure for events and responses. Tingmao Wang
[RFC PATCH 6/6] tomoyo: explicitly skip mediation of O_PATH file descriptors Ryan Lee
[RFC PATCH 6/9] Creating supervisor events for filesystem operations Tingmao Wang
[RFC PATCH 6/9] Creating supervisor events for filesystem operations Mickaël Salaün
[RFC PATCH 6/9] Creating supervisor events for filesystem operations Tingmao Wang
[RFC PATCH 6/9] Creating supervisor events for filesystem operations Mickaël Salaün
[RFC PATCH 7/9] Implement fdinfo for ruleset and supervisor fd Tingmao Wang
[RFC PATCH 8/9] Implement fops for supervisor-fd Tingmao Wang
[RFC PATCH 9/9] Enhance the sandboxer example to support landlock-supervise Tingmao Wang
[RFC PATCH] keys: Add a list for unreferenced keys Jarkko Sakkinen
[RFC PATCH] MAINTAINERS: add an explicit credentials entry Paul Moore
[RFC PATCH] MAINTAINERS: add an explicit credentials entry Paul Moore
[RFC PATCH] MAINTAINERS: add an explicit credentials entry sergeh at kernel.org
[RFC PATCH] MAINTAINERS: add an explicit credentials entry Paul Moore
[RFC PATCH] MAINTAINERS: add an explicit credentials entry Günther Noack
[RFC PATCH] MAINTAINERS: add an explicit credentials entry Paul Moore
[RFC PATCH security-next 0/4] Introducing Hornet LSM Blaise Boscaccy
[RFC PATCH security-next 0/4] Introducing Hornet LSM Paul Moore
[RFC PATCH security-next 0/4] Introducing Hornet LSM Jarkko Sakkinen
[RFC PATCH security-next 0/4] Introducing Hornet LSM Paul Moore
[RFC PATCH security-next 0/4] Introducing Hornet LSM Paul Moore
[RFC PATCH security-next 0/4] Introducing Hornet LSM Jarkko Sakkinen
[RFC PATCH security-next 0/4] Introducing Hornet LSM Jarkko Sakkinen
[RFC PATCH security-next 0/4] Introducing Hornet LSM Blaise Boscaccy
[RFC PATCH security-next 1/4] security: Hornet LSM Blaise Boscaccy
[RFC PATCH security-next 1/4] security: Hornet LSM Jonathan Corbet
[RFC PATCH security-next 1/4] security: Hornet LSM sergeh at kernel.org
[RFC PATCH security-next 1/4] security: Hornet LSM Blaise Boscaccy
[RFC PATCH security-next 1/4] security: Hornet LSM Blaise Boscaccy
[RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf Blaise Boscaccy
[RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf Jarkko Sakkinen
[RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf Blaise Boscaccy
[RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script Blaise Boscaccy
[RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script Jarkko Sakkinen
[RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script Blaise Boscaccy
[RFC PATCH security-next 4/4] selftests/hornet: Add a selftest for the hornet LSM Blaise Boscaccy
[RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1 Nicolai Stange
[RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1 Roberto Sassu
[RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1 Nicolai Stange
[RFC PATCH v1 1/7] ima: don't expose runtime_measurements for unsupported hashes Nicolai Stange
[RFC PATCH v1 2/7] ima: always create runtime_measurements sysfs file for ima_hash Nicolai Stange
[RFC PATCH v1 3/7] ima: move INVALID_PCR() to ima.h Nicolai Stange
[RFC PATCH v1 3/7] ima: move INVALID_PCR() to ima.h Mimi Zohar
[RFC PATCH v1 4/7] ima: track the set of PCRs ever extended Nicolai Stange
[RFC PATCH v1 5/7] tpm: enable bank selection for PCR extend Nicolai Stange
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Nicolai Stange
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Mimi Zohar
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Nicolai Stange
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Mimi Zohar
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Nicolai Stange
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Mimi Zohar
[RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use Nicolai Stange
[RFC PATCH v1 7/7] ima: make SHA1 non-mandatory Nicolai Stange
[RFC PATCH v1] landlock: Allow signals between threads of the same process Mickaël Salaün
[RFC PATCH v1] landlock: Allow signals between threads of the same process Christian Brauner
[RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1 Nicolai Stange
[RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1 Mimi Zohar
[RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes Nicolai Stange
[RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes Mimi Zohar
[RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes Nicolai Stange
[RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes Mimi Zohar
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Nicolai Stange
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Mimi Zohar
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Nicolai Stange
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Mimi Zohar
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Nicolai Stange
[RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash Mimi Zohar
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Nicolai Stange
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks James Bottomley
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Mimi Zohar
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Mimi Zohar
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks James Bottomley
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Nicolai Stange
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Nicolai Stange
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Mimi Zohar
[RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks Nicolai Stange
[RFC PATCH v2 04/13] ima: make SHA1 non-mandatory Nicolai Stange
[RFC PATCH v2 05/13] ima: select CRYPTO_SHA256 from Kconfig Nicolai Stange
[RFC PATCH v2 05/13] ima: select CRYPTO_SHA256 from Kconfig Mimi Zohar
[RFC PATCH v2 06/13] ima: move INVALID_PCR() to ima.h Nicolai Stange
[RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend Nicolai Stange
[RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend Jarkko Sakkinen
[RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend Mimi Zohar
[RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend Nicolai Stange
[RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend Nicolai Stange
[RFC PATCH v2 08/13] ima: track the set of PCRs ever extended Nicolai Stange
[RFC PATCH v2 08/13] ima: track the set of PCRs ever extended Mimi Zohar
[RFC PATCH v2 08/13] ima: track the set of PCRs ever extended Nicolai Stange
[RFC PATCH v2 09/13] ima: invalidate unsupported PCR banks only once Nicolai Stange
[RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read() Nicolai Stange
[RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read() James Bottomley
[RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read() Jarkko Sakkinen
[RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read() Nicolai Stange
[RFC PATCH v2 11/13] ima: introduce ima_pcr_invalidated_banks() helper Nicolai Stange
[RFC PATCH v2 12/13] ima: make ima_free_tfm()'s linkage extern Nicolai Stange
[RFC PATCH v2 13/13] ima: don't re-invalidate unsupported PCR banks after kexec Nicolai Stange
[RFC PATCH v2] KEYS: Add a list for unreferenced keys Jarkko Sakkinen
[RFC PATCH v2] KEYS: Add a list for unreferenced keys Jarkko Sakkinen
[RFC PATCH v2] KEYS: Add a list for unreferenced keys Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Mimi Zohar
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Mimi Zohar
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Mimi Zohar
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM James Bottomley
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM James Bottomley
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Jarkko Sakkinen
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM James Bottomley
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v3 00/13] Clavis LSM Paul Moore
[RFC PATCH v3 00/13] Clavis LSM Eric Snowberg
[RFC PATCH v4 1/1] ipe: add errno field to IPE policy load auditing Jasjiv Singh
[RFC PATCH v4 1/1] ipe: add errno field to IPE policy load auditing Fan Wu
[syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put David Howells
[syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put syzbot
[syzbot] [lsm?] WARNING in free_ruleset syzbot
[syzbot] [net] INFO: rcu detected stall in sys_getdents64 syzbot
apparmor NULL pointer dereference on resume Malte Schröder
apparmor NULL pointer dereference on resume Ryan Lee
apparmor NULL pointer dereference on resume Malte Schröder
apparmor NULL pointer dereference on resume Ryan Lee
apparmor NULL pointer dereference on resume [efivarfs] James Bottomley
apparmor NULL pointer dereference on resume [efivarfs] Ard Biesheuvel
apparmor NULL pointer dereference on resume [efivarfs] Christian Brauner
apparmor NULL pointer dereference on resume [efivarfs] James Bottomley
apparmor NULL pointer dereference on resume [efivarfs] Christian Brauner
apparmor NULL pointer dereference on resume [efivarfs] Christian Brauner
apparmor NULL pointer dereference on resume [efivarfs] James Bottomley
apparmor NULL pointer dereference on resume [efivarfs] Al Viro
apparmor NULL pointer dereference on resume [efivarfs] James Bottomley
CVE-2025-21830: landlock: Handle weird files Mickaël Salaün
CVE-2025-21830: landlock: Handle weird files Kent Overstreet
CVE-2025-21830: landlock: Handle weird files Greg Kroah-Hartman
CVE-2025-21830: landlock: Handle weird files Dave Chinner
CVE-2025-21830: landlock: Handle weird files Kent Overstreet
CVE-2025-21830: landlock: Handle weird files Dave Chinner
CVE-2025-21830: landlock: Handle weird files Greg Kroah-Hartman
CVE-2025-21830: landlock: Handle weird files Kent Overstreet
The Business Loan/financing.1 Barry
Unprivileged filesystem mounts Demi Marie Obenour
Unprivileged filesystem mounts Dave Chinner
Unprivileged filesystem mounts Christian Brauner
Unprivileged filesystem mounts Al Viro
Unprivileged filesystem mounts Kent Overstreet
Unprivileged filesystem mounts Eric Biggers
Unprivileged filesystem mounts Dave Chinner
Unprivileged filesystem mounts Theodore Ts'o
Unprivileged filesystem mounts Theodore Ts'o
Unprivileged filesystem mounts Theodore Ts'o
Unprivileged filesystem mounts Theodore Ts'o
Unprivileged filesystem mounts Theodore Ts'o

Last message date: Mon Mar 31 20:57:15 UTC 2025
Archived on: Mon Mar 31 20:57:38 UTC 2025

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).