March 2025 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Sat Mar 1 00:37:29 UTC 2025
Ending: Mon Mar 31 20:57:15 UTC 2025
Messages: 684

• [PATCH 1/1] security: Propagate caller information in bpf hooks   Song Liu
• [PATCH] security: keys: Make sysctl table const   Jarkko Sakkinen
  • [PATCH] security: keys: Make sysctl table const   Jarkko Sakkinen
• [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
  • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
  • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
    • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Mimi Zohar
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
  • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
    • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   James Bottomley
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   James Bottomley
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   James Bottomley
      • [RFC PATCH v3 00/13] Clavis LSM   Eric Snowberg
      • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
    • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
      • [RFC PATCH v3 00/13] Clavis LSM   Paul Moore
      • [RFC PATCH v3 00/13] Clavis LSM   Jarkko Sakkinen
• [PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported   Arulpandiyan Vadivel
  • [PATCH V3] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported   Kees Cook
• [PATCH v3] fs: introduce getfsxattrat and setfsxattrat syscalls   Pali Rohár
• [PATCH v2 02/11] quota: reorder capability check last   Christian Göttsche
  • [PATCH v2 03/11] ext4: reorder capability check last   Christian Göttsche
    • [PATCH v2 03/11] ext4: reorder capability check last   Jan Kara
  • [PATCH v2 04/11] hugetlbfs: reorder capability check last   Christian Göttsche
  • [PATCH v2 05/11] genwqe: reorder capability check last   Christian Göttsche
  • [PATCH v2 06/11] ubifs: reorder capability check last   Christian Göttsche
    • [PATCH v2 06/11] ubifs: reorder capability check last   Zhihao Cheng
  • [PATCH v2 07/11] drm/panthor: reorder capability check last   Christian Göttsche
  • [PATCH v2 08/11] ipv4: reorder capability check last   Christian Göttsche
    • [PATCH v2 08/11] ipv4: reorder capability check last   Eric Dumazet
  • [PATCH v2 09/11] fs: reorder capability check last   Christian Göttsche
  • [PATCH v2 10/11] skbuff: reorder capability check last   Christian Göttsche
    • [PATCH v2 10/11] skbuff: reorder capability check last   Willem de Bruijn
  • [PATCH v2 11/11] infiniband: reorder capability check last   Christian Göttsche
    • [PATCH v2 11/11] infiniband: reorder capability check last   Leon Romanovsky
  • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Christian Göttsche
    • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Casey Schaufler
      • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Christian Göttsche
    • [PATCH v2 01/11] coccinelle: Add script to reorder capable() calls   Theodore Ts'o
• [PATCH v4 2/14] Add TSEM specific documentation.   Dr. Greg
  • [PATCH v4 2/14] Add TSEM specific documentation.   Casey Schaufler
• [PATCH v2 1/3] landlock.7: Update description of Landlock rules   Günther Noack
• [PATCH] cred: rust: mark Credential methods inline   Alice Ryhl
  • [PATCH] cred: rust: mark Credential methods inline   Boqun Feng
  • [PATCH] cred: rust: mark Credential methods inline   Andreas Hindborg
  • [PATCH] cred: rust: mark Credential methods inline   Christian Brauner
• [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Casey Schaufler
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Casey Schaufler
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Andreas Hindborg
  • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Miguel Ojeda
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Miguel Ojeda
    • [PATCH] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
      • [PATCH] lsm: rust: mark SecurityCtx methods inline   Paul Moore
• [PATCH v2 2/3] landlock.7: Move over documentation for ABI version 6   Günther Noack
• [PATCH v2 3/3] landlock.7: Clarify IPC scoping documentation in line with kernel side   Günther Noack
• [RFC] Type-Partitioned vmalloc (with sample *.ko code)   Kees Cook
  • [RFC] Type-Partitioned vmalloc (with sample *.ko code)   Maxwell Bland
• [PATCH v3 0/1] landlock: Clarify IPC scoping documentation   Günther Noack
  • [PATCH v3 1/1] landlock: Clarify IPC scoping documentation   Günther Noack
    • [PATCH v3 1/1] landlock: Clarify IPC scoping documentation   Mickaël Salaün
  • [PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules   Günther Noack
    • [PATCH man v3 1/2] landlock.7: Copy introductory description of Landlock rules   Alejandro Colomar
  • [PATCH man v3 2/2] landlock.7: Add IPC scoping documentation in line with kernel side   Günther Noack
• [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
  • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
  • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
    • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
      • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
      • [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
• [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
  • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
    • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
    • [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
      • [PATCH v3] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
      • [PATCH v3] ipe: add errno field to IPE policy load auditing   Fan Wu
• [PATCH 0/1 v3] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH 1/1] security: Propagate caller information in bpf hooks   Blaise Boscaccy
    • [PATCH 1/1] security: Propagate caller information in bpf hooks   Song Liu
• [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
  • [RFC PATCH 1/9] Define the supervisor and event structure   Tingmao Wang
  • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Tingmao Wang
    • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Mickaël Salaün
      • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Tingmao Wang
      • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Mickaël Salaün
      • [RFC PATCH 2/9] Refactor per-layer information in rulesets and rules   Tingmao Wang
  • [RFC PATCH 3/9] Adds a supervisor reference in the per-layer information   Tingmao Wang
  • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Tingmao Wang
    • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Mickaël Salaün
      • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Tingmao Wang
      • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Mickaël Salaün
      • [RFC PATCH 4/9] User-space API for creating a supervisor-fd   Tingmao Wang
  • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
    • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
      • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
      • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
      • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
      • [RFC PATCH 5/9] Define user structure for events and responses.   Mickaël Salaün
      • [RFC PATCH 5/9] Define user structure for events and responses.   Tingmao Wang
  • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Tingmao Wang
    • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Mickaël Salaün
      • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Tingmao Wang
      • [RFC PATCH 6/9] Creating supervisor events for filesystem operations   Mickaël Salaün
  • [RFC PATCH 7/9] Implement fdinfo for ruleset and supervisor fd   Tingmao Wang
  • [RFC PATCH 8/9] Implement fops for supervisor-fd   Tingmao Wang
  • [RFC PATCH 9/9] Enhance the sandboxer example to support landlock-supervise   Tingmao Wang
  • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
    • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Amir Goldstein
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Song Liu
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Song Liu
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Jan Kara
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Amir Goldstein
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
  • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Jan Kara
    • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Mickaël Salaün
  • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tetsuo Handa
    • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tingmao Wang
      • [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests   Tetsuo Handa
• [PATCH v2] cred: rust: mark Credential methods inline   Alice Ryhl
  • [PATCH v2] cred: rust: mark Credential methods inline   Paul Moore
• [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Alice Ryhl
  • [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Fiona Behrens
  • [PATCH v2] lsm: rust: mark SecurityCtx methods inline   Paul Moore
• [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Alice Ryhl
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Fiona Behrens
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Casey Schaufler
  • [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx   Paul Moore
• [PATCH v8 2/7] kexec: define functions to map and unmap segments   Mimi Zohar
• [PATCH v9 0/7] ima: kexec: measure events between kexec load and execute   steven chen
  • [PATCH v9 2/7] kexec: define functions to map and unmap segments   steven chen
    • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Jarkko Sakkinen
      • [PATCH v9 2/7] kexec: define functions to map and unmap segments   steven chen
      • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Baoquan He
      • [PATCH v9 2/7] kexec: define functions to map and unmap segments   steven chen
    • [PATCH v9 2/7] kexec: define functions to map and unmap segments   Dan Carpenter
  • [PATCH v9 4/7] ima: kexec: define functions to copy IMA log at soft boot   steven chen
    • [PATCH v9 4/7] ima: kexec: define functions to copy IMA log at soft boot   kernel test robot
  • [PATCH v9 5/7] ima: kexec: move IMA log copy from kexec load to execute   steven chen
  • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   steven chen
    • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   Mimi Zohar
      • [PATCH v9 7/7] ima: measure kexec load and exec events as critical data   steven chen
• [PATCH v9 1/7] ima: copy only complete measurement records across kexec   steven chen
  • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
    • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
  • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Baoquan He
    • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   steven chen
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   Mimi Zohar
      • [PATCH v9 1/7] ima: copy only complete measurement records across kexec   steven chen
• [PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot   steven chen
  • [PATCH v9 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot   Baoquan He
• [PATCH v9 6/7] ima: make the kexec extra memory configurable   steven chen
• [RFC 1/2] landlock: Multithreading support for landlock_restrict_self()   Mickaël Salaün
  • [RFC 1/2] landlock: Multithreading support for landlock_restrict_self()   Günther Noack
    • [RFC 1/2] landlock: Multithreading support for landlock_restrict_self()   Mickaël Salaün
• [PATCH v4 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
    • [PATCH v4 bpf-next 1/2] security: Propagate caller information in bpf hooks   Paul Moore
  • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
    • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
    • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Blaise Boscaccy
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Alexei Starovoitov
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Song Liu
      • [PATCH v4 bpf-next 2/2] selftests/bpf: Add is_kernel parameter to LSM/bpf test programs   Paul Moore
• [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
  • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
    • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   sergeh at kernel.org
      • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
  • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Günther Noack
    • [RFC PATCH] MAINTAINERS: add an explicit credentials entry   Paul Moore
• [PATCH] yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()   Kees Cook
• apparmor NULL pointer dereference on resume   Malte Schröder
  • apparmor NULL pointer dereference on resume   Ryan Lee
    • apparmor NULL pointer dereference on resume   Malte Schröder
      • apparmor NULL pointer dereference on resume   Ryan Lee
      • apparmor NULL pointer dereference on resume [efivarfs]   James Bottomley
      • apparmor NULL pointer dereference on resume [efivarfs]   Ard Biesheuvel
      • apparmor NULL pointer dereference on resume [efivarfs]   Christian Brauner
      • apparmor NULL pointer dereference on resume [efivarfs]   James Bottomley
      • apparmor NULL pointer dereference on resume [efivarfs]   Christian Brauner
      • apparmor NULL pointer dereference on resume [efivarfs]   Christian Brauner
      • apparmor NULL pointer dereference on resume [efivarfs]   James Bottomley
      • apparmor NULL pointer dereference on resume [efivarfs]   Al Viro
      • apparmor NULL pointer dereference on resume [efivarfs]   James Bottomley
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   James Bottomley
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   Christian Brauner
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   James Bottomley
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   Christian Brauner
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   James Bottomley
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   Ard Biesheuvel
      • [RFC 1/1] fix NULL mnt [was Re: apparmor NULL pointer dereference on resume [efivarfs]]   Christian Brauner
• [PATCH v2 6/6] module: Introduce hash-based integrity checking   Thomas Weißschuh
• [PATCH] security/commoncap: don't assume "setid" if all ids are identical   Max Kellermann
  • [PATCH] security/commoncap: don't assume "setid" if all ids are identical   kernel test robot
  • [PATCH] security/commoncap: don't assume "setid" if all ids are identical   Serge E. Hallyn
• [PATCH v1] samples/check-exec: Fix script name   Mickaël Salaün
  • [PATCH v1] samples/check-exec: Fix script name   Kees Cook
• [PATCH 0/2] smack: fix two bugs in setting task label   Konstantin Andreev
  • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Konstantin Andreev
    • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Casey Schaufler
      • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Konstantin Andreev
      • [PATCH 1/2] smack: fix bug: unprivileged task can create labels   Casey Schaufler
  • [PATCH 0/2] smack: fix two bugs in setting task label   Casey Schaufler
  • [PATCH 0/2] smack: fix two bugs in setting task label   Casey Schaufler
    • [PATCH 0/2] smack: fix two bugs in setting task label   Konstantin Andreev
      • [PATCH 0/2] smack: fix two bugs in setting task label   Casey Schaufler
• [PATCH 2/2] smack: fix bug: setting task label silently ignores input garbage   Konstantin Andreev
• The Business Loan/financing.1   Barry
• [PATCH v5 02/24] landlock: Add unique ID generator   Günther Noack
  • [PATCH v5 02/24] landlock: Add unique ID generator   Mickaël Salaün
• [PATCH v2 0/6] Audit: Records for multiple security contexts   Casey Schaufler
  • [PATCH v2 1/6] Audit: Create audit_stamp structure   Casey Schaufler
    • [PATCH v2 1/6] Audit: Create audit_stamp structure   Paul Moore
• [PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer   Casey Schaufler
  • [PATCH v2 2/6] Audit: Allow multiple records in an audit_buffer   Paul Moore
• [PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection   Casey Schaufler
  • [PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection   kernel test robot
  • [PATCH v2 3/6] LSM: security_lsmblob_to_secctx module selection   Paul Moore
• [PATCH v2 4/6] Audit: Add record for multiple task security contexts   Casey Schaufler
  • [PATCH v2 4/6] Audit: Add record for multiple task security contexts   Paul Moore
    • [PATCH v2 4/6] Audit: Add record for multiple task security contexts   Paul Moore
• [PATCH v2 5/6] Audit: multiple subject lsm values for netlabel   Casey Schaufler
  • [PATCH v2 5/6] Audit: multiple subject lsm values for netlabel   Paul Moore
• [PATCH v2 6/6] Audit: Add record for multiple object contexts   Casey Schaufler
  • [PATCH v2 6/6] Audit: Add record for multiple object contexts   kernel test robot
  • [PATCH v2 6/6] Audit: Add record for multiple object contexts   kernel test robot
  • [PATCH v2 6/6] Audit: Add record for multiple object contexts   Dan Carpenter
  • [PATCH v2 6/6] Audit: Add record for multiple object contexts   Paul Moore
• [PATCH v5 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v5 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
    • [PATCH v5 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
• [PATCH v4 0/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
• [RFC PATCH v4 1/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
  • [RFC PATCH v4 1/1] ipe: add errno field to IPE policy load auditing   Fan Wu
  • [PATCH RFC v4 1/1] ipe: add errno field to IPE policy load auditing   Paul Moore
• [PATCH v6 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v6 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
    • [PATCH v6 1/2] security: Propagate caller information in bpf hooks   Paul Moore
  • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
    • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
      • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
      • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
      • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
      • [PATCH v6 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
• [PATCH v2] capability: Remove unused has_capability   sergeh at kernel.org
  • [PATCH v2] capability: Remove unused has_capability   Dr. David Alan Gilbert
• [PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
• [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Kees Cook
  • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Ingo Molnar
  • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Nathan Chancellor
    • [PATCH v2 1/2] x86/build: Remove -ffreestanding on i386 with GCC   Kees Cook
• [PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Kees Cook
  • [PATCH v2 2/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+   Nathan Chancellor
• [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Parav Pandit
  • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Serge E. Hallyn
    • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Parav Pandit
      • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Serge E. Hallyn
  • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Eric W. Biederman
    • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Parav Pandit
      • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Eric W. Biederman
      • [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace   Parav Pandit
• [PATCH v6 00/26] Landlock audit support   Mickaël Salaün
  • [PATCH v6 01/26] lsm: Add audit_log_lsm_data() helper   Mickaël Salaün
  • [PATCH v6 02/26] landlock: Add unique ID generator   Mickaël Salaün
  • [PATCH v6 03/26] landlock: Move domain hierarchy management   Mickaël Salaün
  • [PATCH v6 04/26] landlock: Prepare to use credential instead of domain for filesystem   Mickaël Salaün
  • [PATCH v6 05/26] landlock: Prepare to use credential instead of domain for network   Mickaël Salaün
  • [PATCH v6 06/26] landlock: Prepare to use credential instead of domain for scope   Mickaël Salaün
  • [PATCH v6 07/26] landlock: Prepare to use credential instead of domain for fowner   Mickaël Salaün
  • [PATCH v6 08/26] landlock: Identify domain execution crossing   Mickaël Salaün
  • [PATCH v6 09/26] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials   Mickaël Salaün
  • [PATCH v6 10/26] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Mickaël Salaün
  • [PATCH v6 11/26] landlock: Log mount-related denials   Mickaël Salaün
  • [PATCH v6 12/26] landlock: Log file-related denials   Mickaël Salaün
  • [PATCH v6 13/26] landlock: Log truncate and IOCTL denials   Mickaël Salaün
  • [PATCH v6 14/26] landlock: Log TCP bind and connect denials   Mickaël Salaün
  • [PATCH v6 15/26] landlock: Log scoped denials   Mickaël Salaün
  • [PATCH v6 16/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags   Mickaël Salaün
  • [PATCH v6 17/26] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF   Mickaël Salaün
  • [PATCH v6 18/26] samples/landlock: Enable users to log sandbox denials   Mickaël Salaün
  • [PATCH v6 19/26] selftests/landlock: Add test for invalid ruleset file descriptor   Mickaël Salaün
  • [PATCH v6 20/26] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags   Mickaël Salaün
  • [PATCH v6 21/26] selftests/landlock: Add tests for audit flags and domain IDs   Mickaël Salaün
  • [PATCH v6 22/26] selftests/landlock: Test audit with restrict flags   Mickaël Salaün
  • [PATCH v6 23/26] selftests/landlock: Add audit tests for ptrace   Mickaël Salaün
  • [PATCH v6 24/26] selftests/landlock: Add audit tests for abstract unix socket scoping   Mickaël Salaün
  • [PATCH v6 25/26] selftests/landlock: Add audit tests for filesystem   Mickaël Salaün
  • [PATCH v6 26/26] landlock: Add audit documentation   Mickaël Salaün
  • [PATCH v6 00/26] Landlock audit support   Mickaël Salaün
• [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   sergeh at kernel.org
  • [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   Paul Moore
    • [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   Serge E. Hallyn
      • [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   Paul Moore
      • [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds   Serge E. Hallyn
• CVE-2025-21830: landlock: Handle weird files   Mickaël Salaün
  • CVE-2025-21830: landlock: Handle weird files   Kent Overstreet
  • CVE-2025-21830: landlock: Handle weird files   Greg Kroah-Hartman
    • CVE-2025-21830: landlock: Handle weird files   Dave Chinner
      • CVE-2025-21830: landlock: Handle weird files   Kent Overstreet
      • CVE-2025-21830: landlock: Handle weird files   Dave Chinner
      • CVE-2025-21830: landlock: Handle weird files   Kent Overstreet
      • Unprivileged filesystem mounts   Demi Marie Obenour
      • Unprivileged filesystem mounts   Dave Chinner
      • Unprivileged filesystem mounts   Christian Brauner
      • Unprivileged filesystem mounts   Al Viro
      • Unprivileged filesystem mounts   Kent Overstreet
      • Unprivileged filesystem mounts   Eric Biggers
      • Unprivileged filesystem mounts   Dave Chinner
      • Unprivileged filesystem mounts   Theodore Ts'o
      • Unprivileged filesystem mounts   Theodore Ts'o
      • Unprivileged filesystem mounts   Theodore Ts'o
      • Unprivileged filesystem mounts   Theodore Ts'o
      • Unprivileged filesystem mounts   Theodore Ts'o
      • CVE-2025-21830: landlock: Handle weird files   Greg Kroah-Hartman
• [PATCH] lsm_audit: remove old email address   Stephen Smalley
  • [PATCH] lsm_audit: remove old email address   Paul Moore
• [PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v7 bpf-next 1/2] security: Propagate caller information in bpf hooks   Blaise Boscaccy
  • [PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Blaise Boscaccy
    • [PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Song Liu
      • [PATCH v7 bpf-next 2/2] selftests/bpf: Add a kernel flag test for LSM bpf hook   Alexei Starovoitov
  • [PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks   patchwork-bot+netdevbpf at kernel.org
• [PATCH] init/main.c: Initialize early LSMs after arch code   joeyli
  • [PATCH] init/main.c: Initialize early LSMs after arch code   Paul Moore
• [bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Dan Carpenter
  • [bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Mickaël Salaün
    • [bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Dan Carpenter
• [RFC PATCH 0/6] fs, lsm: mediate O_PATH fd creation in file_open hook   Ryan Lee
  • [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well   Ryan Lee
    • [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well   Al Viro
      • [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well   Christian Brauner
      • [RFC PATCH 1/6] fs: invoke LSM file_open hook in do_dentry_open for O_PATH fds as well   Paul Moore
  • [RFC PATCH 2/6] apparmor: explicitly skip mediation of O_PATH file descriptors   Ryan Lee
  • [RFC PATCH 3/6] landlock: explicitly skip mediation of O_PATH file descriptors   Ryan Lee
  • [RFC PATCH 4/6] selinux: explicitly skip mediation of O_PATH file descriptors   Ryan Lee
  • [RFC PATCH 5/6] smack: explicitly skip mediation of O_PATH file descriptors   Ryan Lee
    • [RFC PATCH 5/6] smack: explicitly skip mediation of O_PATH file descriptors   Casey Schaufler
  • [RFC PATCH 6/6] tomoyo: explicitly skip mediation of O_PATH file descriptors   Ryan Lee
• [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Parav Pandit
  • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Jason Gunthorpe
    • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Parav Pandit
      • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Jason Gunthorpe
      • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Parav Pandit
      • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Jason Gunthorpe
      • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Eric W. Biederman
      • [PATCH] RDMA/uverbs: Consider capability of the process that opens the file   Jason Gunthorpe
• [RFC PATCH v1] landlock: Allow signals between threads of the same process   Mickaël Salaün
  • [RFC PATCH v1] landlock: Allow signals between threads of the same process   Christian Brauner
• [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1   Nicolai Stange
  • [RFC PATCH v1 1/7] ima: don't expose runtime_measurements for unsupported hashes   Nicolai Stange
  • [RFC PATCH v1 2/7] ima: always create runtime_measurements sysfs file for ima_hash   Nicolai Stange
  • [RFC PATCH v1 3/7] ima: move INVALID_PCR() to ima.h   Nicolai Stange
    • [RFC PATCH v1 3/7] ima: move INVALID_PCR() to ima.h   Mimi Zohar
  • [RFC PATCH v1 4/7] ima: track the set of PCRs ever extended   Nicolai Stange
  • [RFC PATCH v1 5/7] tpm: enable bank selection for PCR extend   Nicolai Stange
  • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Nicolai Stange
    • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Mimi Zohar
      • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Nicolai Stange
      • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Mimi Zohar
      • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Nicolai Stange
      • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Mimi Zohar
      • [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use   Nicolai Stange
  • [RFC PATCH v1 7/7] ima: make SHA1 non-mandatory   Nicolai Stange
  • [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1   Roberto Sassu
    • [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1   Nicolai Stange
• [PATCH v5 0/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
  • [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing   Jasjiv Singh
    • [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing   Fan Wu
      • [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing   Paul Moore
      • [PATCH v5 1/1] ipe: add errno field to IPE policy load auditing   Fan Wu
• [PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685   Chiang Brian
  • [PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685   Guenter Roeck
• [PATCH] [v2] crypto: lib/Kconfig: hide library options   Arnd Bergmann
  • [PATCH] [v2] crypto: lib/Kconfig: hide library options   David Howells
    • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Herbert Xu
      • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Arnd Bergmann
  • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Jarkko Sakkinen
  • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Herbert Xu
  • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Geert Uytterhoeven
    • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Arnd Bergmann
      • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Geert Uytterhoeven
      • [PATCH] [v2] crypto: lib/Kconfig: hide library options   Herbert Xu
• [PATCH v2 0/2] smack: fix two bugs in setting task label   Konstantin Andreev
  • [PATCH v2 1/2] smack: fix bug: unprivileged task can create labels   Konstantin Andreev
  • [PATCH v2 2/2] smack: fix bug: setting task label silently ignores input garbage   Konstantin Andreev
• [PATCH v10 0/8] ima: kexec: measure events between kexec load and execute   steven chen
  • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   steven chen
    • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   Stefan Berger
      • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   Baoquan He
      • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   steven chen
    • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   Mimi Zohar
      • [PATCH v10 1/8] ima: rename variable the ser_file "file" to "ima_kexec_file"   steven chen
  • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   steven chen
    • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   Baoquan He
      • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   Mimi Zohar
      • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   Baoquan He
      • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   Mimi Zohar
      • [PATCH v10 2/8] ima: define and call ima_alloc_kexec_file_buf()   steven chen
  • [PATCH v10 3/8] kexec: define functions to map and unmap segments   steven chen
    • [PATCH v10 3/8] kexec: define functions to map and unmap segments   Baoquan He
  • [PATCH v10 4/8] ima: kexec: skip IMA segment validation after kexec soft reboot   steven chen
    • [PATCH v10 4/8] ima: kexec: skip IMA segment validation after kexec soft reboot   Baoquan He
  • [PATCH v10 5/8] ima: kexec: define functions to copy IMA log at soft boot   steven chen
  • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   steven chen
    • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   Mimi Zohar
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   steven chen
    • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   Baoquan He
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   steven chen
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   Baoquan He
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   steven chen
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   Baoquan He
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   steven chen
      • [PATCH v10 6/8] ima: kexec: move IMA log copy from kexec load to execute   Mimi Zohar
  • [PATCH v10 7/8] ima: make the kexec extra memory configurable   steven chen
    • [PATCH v10 7/8] ima: make the kexec extra memory configurable   Baoquan He
      • [PATCH v10 7/8] ima: make the kexec extra memory configurable   steven chen
  • [PATCH v10 8/8] ima: measure kexec load and exec events as critical data   steven chen
    • [PATCH v10 8/8] ima: measure kexec load and exec events as critical data   Mimi Zohar
      • [PATCH v10 8/8] ima: measure kexec load and exec events as critical data   steven chen
• [PATCH] keys: Fix UAF in key_put()   David Howells
  • [PATCH] keys: Fix UAF in key_put()   Oleg Nesterov
    • [PATCH] keys: Fix UAF in key_put()   Oleg Nesterov
      • [PATCH] keys: Fix UAF in key_put()   David Howells
• [PATCH v2 0/8] Landlock signal scope fix and errata interface   Mickaël Salaün
  • [PATCH v2 6/8] selftests/landlock: Split signal_scoping_threads tests   Mickaël Salaün
• [PATCH v2 1/8] landlock: Move code to ease future backports   Mickaël Salaün
• [PATCH v2 2/8] landlock: Add the errata interface   Mickaël Salaün
  • [PATCH v2 2/8] landlock: Add the errata interface   Günther Noack
    • [PATCH v2 2/8] landlock: Add the errata interface   Mickaël Salaün
• [PATCH v2 3/8] landlock: Add erratum for TCP fix   Mickaël Salaün
• [PATCH v2 4/8] landlock: Prepare to add second errata   Mickaël Salaün
• [PATCH v2 5/8] landlock: Always allow signals between threads of the same process   Mickaël Salaün
  • [PATCH v2 5/8] landlock: Always allow signals between threads of the same process   Mickaël Salaün
  • [PATCH v2 5/8] landlock: Always allow signals between threads of the same process   kernel test robot
    • [PATCH v2 5/8] landlock: Always allow signals between threads of the same process   Mickaël Salaün
      • [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage   Mickaël Salaün
• [PATCH v2 7/8] selftests/landlock: Add a new test for setuid()   Mickaël Salaün
• [PATCH v2 8/8] landlock: Document errata   Mickaël Salaün
• [PATCH] apparmor: make __begin_current_label_crit_section() indicate whether put is needed   Mateusz Guzik
• [syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put   David Howells
  • [syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put   syzbot
• [PATCH v2] keys: Fix UAF in key_put()   David Howells
  • [PATCH v2] keys: Fix UAF in key_put()   Oleg Nesterov
    • [PATCH v2] keys: Fix UAF in key_put()   Linus Torvalds
      • [PATCH v2] keys: Fix UAF in key_put()   David Howells
  • [PATCH v2] keys: Fix UAF in key_put()   Jarkko Sakkinen
    • [PATCH v2] keys: Fix UAF in key_put()   David Howells
      • [PATCH v2] keys: Fix UAF in key_put()   Jarkko Sakkinen
      • [PATCH v2] keys: Fix UAF in key_put()   Jarkko Sakkinen
      • [PATCH v2] keys: Fix UAF in key_put()   Jarkko Sakkinen
• [PATCH v3 0/5] Audit: Records for multiple security contexts   Casey Schaufler
  • [PATCH v3 1/5] Audit: Create audit_stamp structure   Casey Schaufler
  • [PATCH v3 3/5] Audit: Add record for multiple task security contexts   Casey Schaufler
  • [PATCH v3 4/5] Audit: multiple subject lsm values for netlabel   Casey Schaufler
  • [PATCH v3 5/5] Audit: Add record for multiple object contexts   Casey Schaufler
• [PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection   Casey Schaufler
  • [PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection   Fan Wu
    • [PATCH v3 2/5] LSM: security_lsmblob_to_secctx module selection   Casey Schaufler
• [PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings   Bo Liu
  • [PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings   Jarkko Sakkinen
• [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   Lennart Poettering
  • [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   Jarkko Sakkinen
  • [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   lee joey
    • [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   Lennart Poettering
      • [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   Jarkko Sakkinen
    • [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"   James Bottomley
• [PATCH v7 00/28] Landlock audit support   Mickaël Salaün
  • [PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper   Mickaël Salaün
    • [PATCH v7 01/28] lsm: Add audit_log_lsm_data() helper   Günther Noack
  • [PATCH v7 03/28] landlock: Move domain hierarchy management   Mickaël Salaün
    • [PATCH v7 03/28] landlock: Move domain hierarchy management   Günther Noack
  • [PATCH v7 04/28] landlock: Prepare to use credential instead of domain for filesystem   Mickaël Salaün
  • [PATCH v7 05/28] landlock: Prepare to use credential instead of domain for network   Mickaël Salaün
  • [PATCH v7 06/28] landlock: Prepare to use credential instead of domain for scope   Mickaël Salaün
  • [PATCH v7 07/28] landlock: Prepare to use credential instead of domain for fowner   Mickaël Salaün
  • [PATCH v7 08/28] landlock: Identify domain execution crossing   Mickaël Salaün
  • [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials   Mickaël Salaün
    • [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials   Tingmao Wang
      • [PATCH v7 09/28] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials   Mickaël Salaün
  • [PATCH v7 10/28] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status   Mickaël Salaün
  • [PATCH v7 11/28] landlock: Log mount-related denials   Mickaël Salaün
  • [PATCH v7 12/28] landlock: Log file-related denials   Mickaël Salaün
  • [PATCH v7 13/28] landlock: Factor out IOCTL hooks   Mickaël Salaün
  • [PATCH v7 14/28] landlock: Log truncate and IOCTL denials   Mickaël Salaün
  • [PATCH v7 15/28] landlock: Log TCP bind and connect denials   Mickaël Salaün
  • [PATCH v7 16/28] landlock: Log scoped denials   Mickaël Salaün
  • [PATCH v7 17/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_*_EXEC_* flags   Mickaël Salaün
  • [PATCH v7 18/28] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF   Mickaël Salaün
  • [PATCH v7 19/28] samples/landlock: Enable users to log sandbox denials   Mickaël Salaün
  • [PATCH v7 20/28] selftests/landlock: Add test for invalid ruleset file descriptor   Mickaël Salaün
  • [PATCH v7 21/28] selftests/landlock: Extend tests for landlock_restrict_self(2)'s flags   Mickaël Salaün
  • [PATCH v7 22/28] selftests/landlock: Add tests for audit flags and domain IDs   Mickaël Salaün
  • [PATCH v7 23/28] selftests/landlock: Test audit with restrict flags   Mickaël Salaün
  • [PATCH v7 24/28] selftests/landlock: Add audit tests for ptrace   Mickaël Salaün
  • [PATCH v7 25/28] selftests/landlock: Add audit tests for abstract UNIX socket scoping   Mickaël Salaün
  • [PATCH v7 26/28] selftests/landlock: Add audit tests for filesystem   Mickaël Salaün
  • [PATCH v7 27/28] selftests/landlock: Add audit tests for network   Mickaël Salaün
  • [PATCH v7 28/28] landlock: Add audit documentation   Mickaël Salaün
• [PATCH v7 02/28] landlock: Add unique ID generator   Mickaël Salaün
• [PATCH 0/2] Allow individual features to be locked down   Nikolay Borisov
  • [PATCH 0/2] Allow individual features to be locked down   Paul Moore
• [PATCH 1/2] lockdown: Switch implementation to using bitmap   Nikolay Borisov
  • [PATCH 1/2] lockdown: Switch implementation to using bitmap   sergeh at kernel.org
• [PATCH 2/2] lockdown/kunit: Introduce kunit tests   Nikolay Borisov
• [RFC PATCH security-next 0/4] Introducing Hornet LSM   Blaise Boscaccy
  • [RFC PATCH security-next 1/4] security: Hornet LSM   Blaise Boscaccy
    • [RFC PATCH security-next 1/4] security: Hornet LSM   Jonathan Corbet
      • [RFC PATCH security-next 1/4] security: Hornet LSM   Blaise Boscaccy
    • [RFC PATCH security-next 1/4] security: Hornet LSM   sergeh at kernel.org
      • [RFC PATCH security-next 1/4] security: Hornet LSM   Blaise Boscaccy
  • [RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf   Blaise Boscaccy
    • [RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf   Jarkko Sakkinen
      • [RFC PATCH security-next 2/4] hornet: Introduce sign-ebpf   Blaise Boscaccy
  • [RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script   Blaise Boscaccy
    • [RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script   Jarkko Sakkinen
      • [RFC PATCH security-next 3/4] hornet: Add an example lskel data extactor script   Blaise Boscaccy
  • [RFC PATCH security-next 4/4] selftests/hornet: Add a selftest for the hornet LSM   Blaise Boscaccy
  • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Paul Moore
  • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Jarkko Sakkinen
    • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Paul Moore
      • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Paul Moore
      • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Jarkko Sakkinen
      • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Jarkko Sakkinen
    • [RFC PATCH security-next 0/4] Introducing Hornet LSM   Blaise Boscaccy
• [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Andrey Albershteyn
  • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr   Andrey Albershteyn
    • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr   Paul Moore
      • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr   Mickaël Salaün
      • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr   Andrey Albershteyn
    • [PATCH v4 1/3] lsm: introduce new hooks for setting/getting inode fsxattr   Mickaël Salaün
  • [PATCH v4 2/3] fs: split fileattr/fsxattr converters into helpers   Andrey Albershteyn
    • [PATCH v4 2/3] fs: split fileattr/fsxattr converters into helpers   Jan Kara
  • [PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Andrey Albershteyn
    • [PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
      • [PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Andrey Albershteyn
      • [PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
    • [PATCH v4 3/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Jan Kara
  • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
    • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Pali Rohár
      • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
      • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Pali Rohár
      • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
      • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Pali Rohár
      • [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls   Amir Goldstein
• [syzbot] [net] INFO: rcu detected stall in sys_getdents64   syzbot
• [RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1   Nicolai Stange
  • [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes   Nicolai Stange
    • [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes   Mimi Zohar
      • [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes   Nicolai Stange
      • [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes   Mimi Zohar
  • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Nicolai Stange
    • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Mimi Zohar
      • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Nicolai Stange
      • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Mimi Zohar
      • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Nicolai Stange
      • [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash   Mimi Zohar
  • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Nicolai Stange
    • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   James Bottomley
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Mimi Zohar
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   James Bottomley
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Nicolai Stange
    • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Mimi Zohar
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Nicolai Stange
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Mimi Zohar
      • [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks   Nicolai Stange
  • [RFC PATCH v2 04/13] ima: make SHA1 non-mandatory   Nicolai Stange
  • [RFC PATCH v2 05/13] ima: select CRYPTO_SHA256 from Kconfig   Nicolai Stange
    • [RFC PATCH v2 05/13] ima: select CRYPTO_SHA256 from Kconfig   Mimi Zohar
  • [RFC PATCH v2 06/13] ima: move INVALID_PCR() to ima.h   Nicolai Stange
  • [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend   Nicolai Stange
    • [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend   Jarkko Sakkinen
      • [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend   Nicolai Stange
    • [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend   Mimi Zohar
      • [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend   Nicolai Stange
  • [RFC PATCH v2 08/13] ima: track the set of PCRs ever extended   Nicolai Stange
    • [RFC PATCH v2 08/13] ima: track the set of PCRs ever extended   Mimi Zohar
      • [RFC PATCH v2 08/13] ima: track the set of PCRs ever extended   Nicolai Stange
  • [RFC PATCH v2 09/13] ima: invalidate unsupported PCR banks only once   Nicolai Stange
  • [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()   Nicolai Stange
    • [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()   James Bottomley
      • [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()   Nicolai Stange
    • [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()   Jarkko Sakkinen
  • [RFC PATCH v2 11/13] ima: introduce ima_pcr_invalidated_banks() helper   Nicolai Stange
  • [RFC PATCH v2 12/13] ima: make ima_free_tfm()'s linkage extern   Nicolai Stange
  • [RFC PATCH v2 13/13] ima: don't re-invalidate unsupported PCR banks after kexec   Nicolai Stange
  • [RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1   Mimi Zohar
• [GIT PULL] lsm/lsm-pr-20250323   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20250323   pr-tracker-bot at kernel.org
• [GIT PULL] selinux/selinux-pr-20250323   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
    • [GIT PULL] selinux/selinux-pr-20250323   Paul Moore
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Paul Moore
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Paul Moore
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Thiébaud Weksteen
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Thiébaud Weksteen
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Jeffrey Vander Stoep
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Stephen Smalley
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Stephen Smalley
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Stephen Smalley
      • [GIT PULL] selinux/selinux-pr-20250323   Paul Moore
      • [GIT PULL] selinux/selinux-pr-20250323   Linus Torvalds
      • [GIT PULL] selinux/selinux-pr-20250323   Casey Schaufler
      • [GIT PULL] selinux/selinux-pr-20250323   Casey Schaufler
  • [GIT PULL] selinux/selinux-pr-20250323   pr-tracker-bot at kernel.org
• [GIT PULL] IPE update for 6.15   Fan Wu
  • [GIT PULL] IPE update for 6.15   pr-tracker-bot at kernel.org
• [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
  • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Roberto Sassu
  • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
    • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Roberto Sassu
      • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
  • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
    • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
      • [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Roberto Sassu
• [GIT PULL] Smack patches for 6.15   Casey Schaufler
  • [GIT PULL] Smack patches for 6.15   pr-tracker-bot at kernel.org
• [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage   kernel test robot
  • [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage   Mickaël Salaün
• [LTP] [PATCH 0/4] Landlock tests for ABI v6   Petr Vorel
• [PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Frederick Lawler
  • [PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ   Roberto Sassu
• [GIT PULL] capabilities update for 6.15   Serge E. Hallyn
  • [GIT PULL] capabilities update for 6.15   pr-tracker-bot at kernel.org
• [GIT PULL] Landlock update for v6.15-rc1   Mickaël Salaün
  • [GIT PULL] Landlock update for v6.15-rc1   pr-tracker-bot at kernel.org
• [RFC PATCH] keys: Add a list for unreferenced keys   Jarkko Sakkinen
• [syzbot] [lsm?] WARNING in free_ruleset   syzbot
  • [PATCH v1] landlock: Remove incorrect warning   Mickaël Salaün
• [PATCH v2] netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets   Debin Zhu
• [RFC PATCH v2] KEYS: Add a list for unreferenced keys   Jarkko Sakkinen
  • [RFC PATCH v2] KEYS: Add a list for unreferenced keys   Jarkko Sakkinen
  • [RFC PATCH v2] KEYS: Add a list for unreferenced keys   Jarkko Sakkinen

Last message date: Mon Mar 31 20:57:15 UTC 2025
Archived on: Mon Mar 31 20:57:38 UTC 2025

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...