April 2026 Archives by author

Messages sorted by: [ thread ] [ subject ] [ date ]
More info on this list...

Starting: Wed Apr 1 15:09:10 UTC 2026
Ending: Sun Apr 26 13:42:24 UTC 2026
Messages: 459

landlock: Add support for chmod and chown system calls families Jeffrey Bencteux
[PATCH 1/5] selftests/landlock: fix return condition on create_directory Jeffrey Bencteux
[PATCH 2/5] landlock: add support for chmod and chown Jeffrey Bencteux
[PATCH 3/5] selftests/landlock: add tests for chmod and chown restrictions Jeffrey Bencteux
[PATCH 4/5] samples/landlock: add support for chown and chmod Jeffrey Bencteux
[PATCH 5/5] landlock: Document chmod and chown support in example code Jeffrey Bencteux
landlock: Add support for chmod and chown system calls families Jeffrey Bencteux
[PATCH 0/3] Add support for ML-DSA signature for EVM and IMA Stefan Berger
[PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys Stefan Berger
[PATCH 2/3] integrity: Refactor asymmetric_verify for reusability Stefan Berger
[PATCH 3/3] integrity: Add support for sigv3 verification using ML-DSA keys Stefan Berger
[PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys Stefan Berger
[PATCH v2 0/2] Add support for ML-DSA signature for EVM and IMA Stefan Berger
[PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability Stefan Berger
[PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys Stefan Berger
[PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability Stefan Berger
[PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys Stefan Berger
[PATCH v3 0/4] Add support for ML-DSA signature for EVM and IMA Stefan Berger
[PATCH v3 1/4] integrity: Check for NULL returned by asymmetric_key_public_key Stefan Berger
[PATCH v3 2/4] integrity: Check that algo parameter is within valid range Stefan Berger
[PATCH v3 3/4] integrity: Refactor asymmetric_verify for reusability Stefan Berger
[PATCH v3 4/4] integrity: Add support for sigv3 verification using ML-DSA keys Stefan Berger
[PATCH] ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG Stefan Berger
[PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys Eric Biggers
[PATCH v4 00/10] Reintroduce Hornet LSM Blaise Boscaccy
[PATCH v4 01/10] crypto: pkcs7: add flag for validated trust on a signed info block Blaise Boscaccy
[PATCH v4 02/10] crypto: pkcs7: add ability to extract signed attributes by OID Blaise Boscaccy
[PATCH v4 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr Blaise Boscaccy
[PATCH v4 04/10] lsm: framework for BPF integrity verification Blaise Boscaccy
[PATCH v4 05/10] lsm: security: Add additional enum values for bpf integrity checks Blaise Boscaccy
[PATCH v4 06/10] security: Hornet LSM Blaise Boscaccy
[PATCH v4 07/10] hornet: Introduce gen_sig Blaise Boscaccy
[PATCH v4 08/10] hornet: Add a light skeleton data extractor scripts Blaise Boscaccy
[PATCH v4 09/10] selftests/hornet: Add a selftest for the Hornet LSM Blaise Boscaccy
[PATCH v4 10/10] ipe: Add BPF program load policy enforcement via Hornet integration Blaise Boscaccy
[PATCH v5 00/10] Reintroduce Hornet LSM Blaise Boscaccy
[PATCH v5 01/10] crypto: pkcs7: add flag for validated trust on a signed info block Blaise Boscaccy
[PATCH v5 02/10] crypto: pkcs7: add ability to extract signed attributes by OID Blaise Boscaccy
[PATCH v5 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr Blaise Boscaccy
[PATCH v5 04/10] lsm: framework for BPF integrity verification Blaise Boscaccy
[PATCH v5 05/10] lsm: security: Add additional enum values for bpf integrity checks Blaise Boscaccy
[PATCH v5 06/10] security: Hornet LSM Blaise Boscaccy
[PATCH v5 07/10] hornet: Introduce gen_sig Blaise Boscaccy
[PATCH v5 08/10] hornet: Add a light skeleton data extractor scripts Blaise Boscaccy
[PATCH v5 09/10] selftests/hornet: Add a selftest for the Hornet LSM Blaise Boscaccy
[PATCH v5 10/10] ipe: Add BPF program load policy enforcement via Hornet integration Blaise Boscaccy
LSM: Whiteout chardev creation sidesteps mknod hook Christian Brauner
[RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records Christian Brauner
[PATCH v4 2/3] lsm: add backing_file LSM hooks Christian Brauner
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Christian Brauner
[bug report] apparmor: add support loading per permission tagging Dan Carpenter
[PATCH] security: remove BUG_ON in security_skb_classify_flow Jiayuan Chen
[PATCH] security: remove BUG_ON in security_skb_classify_flow Jiayuan Chen
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Will Deacon
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Will Deacon
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Will Deacon
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sebastian Ene
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sebastian Ene
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sebastian Ene
[PATCH] trusted-keys: move pr_fmt out of trusted-type.h Ahmad Fatoum
[PATCH] trusted-keys: move pr_fmt out of trusted-type.h Marco Felsch
[PATCH v2] trusted-keys: move pr_fmt out of trusted-type.h Marco Felsch
[PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling Georgia Garcia
[apparmor] [PATCH RESEND] apparmor: Fix string overrun due to missing termination Georgia Garcia
[PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine Georgia Garcia
[PATCH v4 2/3] lsm: add backing_file LSM hooks Amir Goldstein
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Amir Goldstein
LSM namespacing API Dr. Greg
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
[PATCH v2 0/4] Firmware LSM hook Jason Gunthorpe
LSM: Whiteout chardev creation sidesteps mknod hook Serge Hallyn
[PATCH v4 1/3] fs: prepare for adding LSM blob to backing_file Serge E. Hallyn
[PATCH v4 2/3] lsm: add backing_file LSM hooks Serge E. Hallyn
[PATCH] security: remove BUG_ON in security_skb_classify_flow Serge E. Hallyn
[PATCH] security: remove BUG_ON in security_skb_classify_flow Serge E. Hallyn
[PATCH] tomoyo: reject short exec.envp[] names before suffix checks Tetsuo Handa
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sudeep Holla
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sudeep Holla
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Sudeep Holla
[RFC PATCH v2 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall Sudeep Holla
[RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" Sudeep Holla
[RFC PATCH v3 3/4] Revert "tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in" Sudeep Holla
[PATCH] evm: zero-initialize the evm_xattrs read buffer Pengpeng Hou
[PATCH] evm: zero-initialize the evm_xattrs read buffer Pengpeng Hou
[PATCH] tomoyo: reject short exec.envp[] names before suffix checks Pengpeng Hou
[PATCH v2] evm: terminate and bound the evm_xattrs read buffer Pengpeng Hou
[PATCH v3] evm: terminate and bound the evm_xattrs read buffer Pengpeng Hou
[PATCH] tomoyo: reject short exec.envp[] names before suffix checks Pengpeng Hou
[RFC PATCH v4 00/19] Support socket access-control Mikhail Ivanov
[RFC PATCH v4 00/19] Support socket access-control Mikhail Ivanov
[RFC PATCH v4 01/19] landlock: Support socket access-control Mikhail Ivanov
[PATCH v8 04/12] landlock: Control pathname UNIX domain socket resolution by path Kuniyuki Iwashima
[PATCH v2] KEYS: trusted: Debugging as a feature Nayna Jain
[PATCH v2] KEYS: trusted: Debugging as a feature Nayna Jain
[PATCH v3] KEYS: trusted: Debugging as a feature Nayna Jain
[PATCH v4] KEYS: trusted: Debugging as a feature Nayna Jain
[GIT PULL] AppArmor updates for 7.1 John Johansen
[PATCH v6.1] apparmor: fix unprivileged local user can do privileged policy management Keerthana K
[PATCH v5.10-v5.15] apparmor: fix unprivileged local user can do privileged policy management Keerthana K
[PATCH v6.1] apparmor: fix unprivileged local user can do privileged policy management Greg KH
[PATCH 55/61] interconnect: Prefer IS_ERR_OR_NULL over manual NULL check Krzysztof Kozlowski
[PATCH 01/61] Coccinelle: Prefer IS_ERR_OR_NULL over manual NULL check Krzysztof Kozlowski
[PATCH] ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG Kamlesh Kumar
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Frederick Lawler
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Frederick Lawler
[PATCH AUTOSEL 7.0-6.18] ima: Define and use a digest_size field in the ima_algo_desc structure Sasha Levin
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Song Liu
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Song Liu
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Song Liu
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Song Liu
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Song Liu
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Jonathan McDowell
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Jonathan McDowell
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Jonathan McDowell
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Jonathan McDowell
[RFC PATCH v3 0/4] Fix IMA + TPM initialisation ordering issue Jonathan McDowell
[RFC PATCH v3 1/4] lsm: Allow LSMs to register for late_initcall_sync init Jonathan McDowell
[RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Jonathan McDowell
[RFC PATCH v3 3/4] Revert "tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in" Jonathan McDowell
[RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" Jonathan McDowell
[RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Jonathan McDowell
LSM namespacing API Paul Moore
LSM namespacing API Paul Moore
[PATCH v4 0/3] Fix incorrect overlayfs mmap() and mprotect() LSM access controls Paul Moore
[PATCH v4 1/3] fs: prepare for adding LSM blob to backing_file Paul Moore
[PATCH v4 2/3] lsm: add backing_file LSM hooks Paul Moore
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Paul Moore
[PATCH v4 2/3] lsm: add backing_file LSM hooks Paul Moore
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Paul Moore
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[GIT PULL] lsm/lsm-pr-20260410 Paul Moore
[GIT PULL] selinux/selinux-pr-20260410 Paul Moore
[GIT PULL] lsm/lsm-pr-20260410 Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[syzbot] Monthly lsm report (Apr 2026) Paul Moore
[syzbot] Monthly lsm report (Apr 2026) Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Paul Moore
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Paul Moore
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Paul Moore
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Paul Moore
[PATCH v5 6/10] security: Hornet LSM Paul Moore
[PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions Paul Moore
[PATCH RFC 2/3] LSM: Enforce exclusive hooks Paul Moore
[PATCH RFC 3/3] LSM: Reserve use of secmarks Paul Moore
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Paul Moore
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Paul Moore
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Paul Moore
[PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions Paul Moore
[PATCH v2 0/4] Firmware LSM hook Paul Moore
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Paul Moore
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Paul Moore
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Ondrej Mosnacek
[PATCH] landlock: Document fallocate(2) as another truncation corner case Günther Noack
[PATCH] landlock: Document fallocate(2) as another truncation corner case Günther Noack
[PATCH v3 5/5] selftests/landlock: Fix format warning for __u64 in net_test Günther Noack
[PATCH v3 2/5] selftests/landlock: Fix socket file descriptor leaks in audit helpers Günther Noack
[PATCH v3 3/5] selftests/landlock: Drain stale audit records on init Günther Noack
[PATCH v3 1/5] selftests/landlock: Fix snprintf truncation checks in audit helpers Günther Noack
[PATCH v3 0/5] Fix Landlock audit test flakiness Günther Noack
[PATCH v3 0/5] Fix Landlock audit test flakiness Günther Noack
[PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork() Günther Noack
[PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 Günther Noack
LSM: Whiteout chardev creation sidesteps mknod hook Günther Noack
[PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork() Günther Noack
[PATCH v2 1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() Günther Noack
LSM: Whiteout chardev creation sidesteps mknod hook Günther Noack
LSM: Whiteout chardev creation sidesteps mknod hook Günther Noack
[PATCH 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT Günther Noack
[PATCH 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_CHAR for RENAME_WHITEOUT Günther Noack
[PATCH 2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial Günther Noack
[PATCH 3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_CHAR Günther Noack
LSM: Whiteout chardev creation sidesteps mknod hook Günther Noack
landlock: Add support for chmod and chown system calls families Günther Noack
[RFC PATCH v1 00/11] Landlock: Namespace and capability control Günther Noack
[RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions Günther Noack
[RFC PATCH v1 00/11] Landlock: Namespace and capability control Günther Noack
[RFC PATCH v1 10/11] samples/landlock: Add capability and namespace restriction support Günther Noack
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Günther Noack
[RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records Günther Noack
[RFC PATCH v1 04/11] landlock: Wrap per-layer access masks in struct layer_rights Günther Noack
[RFC PATCH v1 06/11] landlock: Enforce capability restrictions Günther Noack
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 0/4] Firmware LSM hook Leon Romanovsky
[PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials Steven Rostedt
[PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling GONG Ruiqi
[PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling GONG Ruiqi
[PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling GONG Ruiqi
[PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine GONG Ruiqi
[PATCH v3] KEYS: trusted: Debugging as a feature Jarkko Sakinen
[PATCH v2] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[PATCH v2] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[PATCH v2] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[PATCH v3] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[PATCH v3] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[PATCH] trusted-keys: move pr_fmt out of trusted-type.h Jarkko Sakkinen
[syzbot] Monthly lsm report (Apr 2026) Jarkko Sakkinen
[PATCH v4] KEYS: trusted: Debugging as a feature Jarkko Sakkinen
[syzbot] Monthly lsm report (Apr 2026) Jarkko Sakkinen
[RFC PATCH v2 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall" Jarkko Sakkinen
[PATCH v2 0/4] Fix Landlock audit test flakiness Mickaël Salaün
[PATCH v2 1/4] selftests/landlock: Fix snprintf truncation checks in audit helpers Mickaël Salaün
[PATCH v2 2/4] selftests/landlock: Fix socket file descriptor leaks in audit helpers Mickaël Salaün
[PATCH v2 3/4] selftests/landlock: Drain stale audit records on init Mickaël Salaün
[PATCH v2 4/4] selftests/landlock: Skip stale records in audit_match_record() Mickaël Salaün
[PATCH] landlock: Document fallocate(2) as another truncation corner case Mickaël Salaün
[RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records Mickaël Salaün
[PATCH v8 03/12] landlock: Replace union access_masks_all with helper functions Mickaël Salaün
[RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records Mickaël Salaün
[PATCH] landlock: Document fallocate(2) as another truncation corner case Mickaël Salaün
[PATCH v3 0/5] Fix Landlock audit test flakiness Mickaël Salaün
[PATCH v3 1/5] selftests/landlock: Fix snprintf truncation checks in audit helpers Mickaël Salaün
[PATCH v3 2/5] selftests/landlock: Fix socket file descriptor leaks in audit helpers Mickaël Salaün
[PATCH v3 3/5] selftests/landlock: Drain stale audit records on init Mickaël Salaün
[PATCH v3 4/5] selftests/landlock: Skip stale records in audit_match_record() Mickaël Salaün
[PATCH v3 5/5] selftests/landlock: Fix format warning for __u64 in net_test Mickaël Salaün
[PATCH v3 0/5] Fix Landlock audit test flakiness Mickaël Salaün
[PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork() Mickaël Salaün
[PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 Mickaël Salaün
[PATCH v2 00/17] Landlock tracepoints Mickaël Salaün
[PATCH v2 01/17] landlock: Prepare ruleset and domain type split Mickaël Salaün
[PATCH v2 02/17] landlock: Move domain query functions to domain.c Mickaël Salaün
[PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset Mickaël Salaün
[PATCH v2 04/17] landlock: Split denial logging from audit into common framework Mickaël Salaün
[PATCH v2 05/17] tracing: Add __print_untrusted_str() Mickaël Salaün
[PATCH v2 06/17] landlock: Add create_ruleset and free_ruleset tracepoints Mickaël Salaün
[PATCH v2 07/17] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints Mickaël Salaün
[PATCH v2 08/17] landlock: Add restrict_self and free_domain tracepoints Mickaël Salaün
[PATCH v2 09/17] landlock: Add tracepoints for rule checking Mickaël Salaün
[PATCH v2 10/17] landlock: Set audit_net.sk for socket access checks Mickaël Salaün
[PATCH v2 11/17] landlock: Add landlock_deny_access_fs and landlock_deny_access_net Mickaël Salaün
[PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials Mickaël Salaün
[PATCH v2 13/17] selftests/landlock: Add trace event test infrastructure and tests Mickaël Salaün
[PATCH v2 14/17] selftests/landlock: Add filesystem tracepoint tests Mickaël Salaün
[PATCH v2 15/17] selftests/landlock: Add network tracepoint tests Mickaël Salaün
[PATCH v2 16/17] selftests/landlock: Add scope and ptrace tracepoint tests Mickaël Salaün
[PATCH v2 17/17] landlock: Document tracepoints Mickaël Salaün
[PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials Mickaël Salaün
[PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork() Mickaël Salaün
[PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 Mickaël Salaün
[PATCH v2 1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() Mickaël Salaün
[PATCH v2 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 Mickaël Salaün
[RFC PATCH v4 00/19] Support socket access-control Mickaël Salaün
LSM: Whiteout chardev creation sidesteps mknod hook Mickaël Salaün
LSM: Whiteout chardev creation sidesteps mknod hook Mickaël Salaün
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Mickaël Salaün
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Mickaël Salaün
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Mickaël Salaün
[GIT PULL] Landlock update for v7.1-rc1 Mickaël Salaün
[PATCH 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT Mickaël Salaün
LSM: Whiteout chardev creation sidesteps mknod hook Mickaël Salaün
[RFC PATCH v4 00/19] Support socket access-control Mickaël Salaün
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Mickaël Salaün
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Mickaël Salaün
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Mickaël Salaün
[RFC PATCH v1 00/11] Landlock: Namespace and capability control Mickaël Salaün
[RFC PATCH v1 00/11] Landlock: Namespace and capability control Mickaël Salaün
[RFC PATCH v1 10/11] samples/landlock: Add capability and namespace restriction support Mickaël Salaün
[RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions Mickaël Salaün
[RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions Mickaël Salaün
[RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces Mickaël Salaün
[PATCH v5 2/3] ima: trim N IMA event log records Roberto Sassu
[PATCH v2 0/4] Firmware LSM hook Roberto Sassu
[PATCH] evm: zero-initialize the evm_xattrs read buffer Roberto Sassu
[syzbot] Monthly lsm report (Apr 2026) Roberto Sassu
[PATCH v2] evm: terminate and bound the evm_xattrs read buffer Roberto Sassu
[PATCH v2] evm: terminate and bound the evm_xattrs read buffer Roberto Sassu
[PATCH v3] evm: terminate and bound the evm_xattrs read buffer Roberto Sassu
LSM namespacing API Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH v2 0/4] Firmware LSM hook Casey Schaufler
[PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions Casey Schaufler
[PATCH RFC 2/3] LSM: Enforce exclusive hooks Casey Schaufler
[PATCH RFC 3/3] LSM: Reserve use of secmarks Casey Schaufler
[PATCH v8 04/12] landlock: Control pathname UNIX domain socket resolution by path Sebastian Andrzej Siewior
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Stephen Smalley
[PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Stephen Smalley
LSM: Whiteout chardev creation sidesteps mknod hook Stephen Smalley
[PATCH 1/7] lsm: Add granular mount hooks to replace security_sb_mount Stephen Smalley
[PATCH 4/7] selinux: Convert from sb_mount to granular mount hooks Stephen Smalley
[PATCH 7/7] lsm: Remove security_sb_mount and security_move_mount Stephen Smalley
[PATCH] security: remove BUG_ON in security_skb_classify_flow Stephen Smalley
[PATCH] lsm: Fix the crash issue in xfrm_decode_session Stephen Smalley
[PATCH] trusted-keys: move pr_fmt out of trusted-type.h Josh Snyder
[PATCH v2] trusted-keys: move pr_fmt out of trusted-type.h Josh Snyder
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Ihor Solodrai
[PATCH v3] KEYS: trusted: Debugging as a feature Srish Srinivasan
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Alexei Starovoitov
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Alexei Starovoitov
[PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs Alexei Starovoitov
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Justin Suess
[RFC PATCH 01/20] landlock: Move operations from syscall into ruleset code Justin Suess
[RFC PATCH 02/20] execve: Add set_nnp_on_point_of_no_return Justin Suess
[RFC PATCH 03/20] landlock: Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[RFC PATCH 04/20] selftests/landlock: Cover LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[RFC PATCH 05/20] landlock: Make ruleset deferred free RCU safe Justin Suess
[RFC PATCH 06/20] bpf: lsm: Add Landlock kfuncs Justin Suess
[RFC PATCH 07/20] bpf: arraymap: Implement Landlock ruleset map Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[RFC PATCH 09/20] bpf: syscall: Handle Landlock ruleset maps Justin Suess
[RFC PATCH 10/20] bpf: verifier: Add Landlock ruleset map support Justin Suess
[RFC PATCH 11/20] selftests/bpf: Add Landlock kfunc declarations Justin Suess
[RFC PATCH 12/20] selftests/landlock: Rename gettid wrapper for BPF reuse Justin Suess
[RFC PATCH 13/20] selftests/bpf: Enable Landlock in selftests kernel. Justin Suess
[RFC PATCH 14/20] selftests/bpf: Add Landlock kfunc test program Justin Suess
[RFC PATCH 15/20] selftests/bpf: Add Landlock kfunc test runner Justin Suess
[RFC PATCH 16/20] landlock: Bump ABI version Justin Suess
[RFC PATCH 17/20] tools: bpftool: Add documentation for landlock_ruleset Justin Suess
[RFC PATCH 18/20] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[RFC PATCH 19/20] bpf: Document BPF_MAP_TYPE_LANDLOCK_RULESET Justin Suess
[RFC PATCH 20/20] MAINTAINERS: update entry for the Landlock subsystem Justin Suess
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Justin Suess
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Justin Suess
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Justin Suess
[PATCH v7 00/10] Implement LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v7 01/10] landlock: Add path walk helper Justin Suess
[PATCH v7 02/10] landlock: Use landlock_walk_path_up for is_access_to_paths_allowed Justin Suess
[PATCH v7 03/10] landlock: Use landlock_walk_path_up for collect_domain_accesses Justin Suess
[PATCH v7 04/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT userspace api Justin Suess
[PATCH v7 05/10] landlock: Move find_rule definition above landlock_append_fs_rule Justin Suess
[PATCH v7 06/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v7 07/10] landlock: Add documentation for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v7 08/10] samples/landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT to landlock-sandboxer Justin Suess
[PATCH v7 09/10] selftests/landlock: Implement selftests for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v7 10/10] landlock: Implement KUnit test for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[RFC PATCH 08/20] bpf: Add Landlock ruleset map type Justin Suess
[BUG] landlock: warning in collect_domain_accesses via renameat2 path rename Justin Suess
[RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions Justin Suess
[RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions Justin Suess
LSM: Whiteout chardev creation sidesteps mknod hook Miklos Szeredi
LSM: Whiteout chardev creation sidesteps mknod hook Miklos Szeredi
[PATCH 04/61] ext4: Prefer IS_ERR_OR_NULL over manual NULL check Theodore Ts'o
[PATCH] ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images Chi Wang
[PATCH v3 3/3] landlock: transpose the layer masks data structure Tingmao Wang
[PATCH v8 0/9] Implement LANDLOCK_ADD_RULE_QUIET Tingmao Wang
[PATCH v8 1/9] landlock: Add a place for flags to layer rules Tingmao Wang
[PATCH v8 2/9] landlock: Add API support and docs for the quiet flags Tingmao Wang
[PATCH v8 3/9] landlock: Suppress logging when quiet flag is present Tingmao Wang
[PATCH v8 4/9] samples/landlock: Add quiet flag support to sandboxer Tingmao Wang
[PATCH v8 5/9] selftests/landlock: Replace hard-coded 16 with a constant Tingmao Wang
[PATCH v8 6/9] selftests/landlock: add tests for quiet flag with fs rules Tingmao Wang
[PATCH v8 7/9] selftests/landlock: add tests for quiet flag with net rules Tingmao Wang
[PATCH v8 8/9] selftests/landlock: Add tests for quiet flag with scope Tingmao Wang
[PATCH v8 9/9] selftests/landlock: Add tests for invalid use of quiet flag Tingmao Wang
[RFC PATCH v1 04/11] landlock: Wrap per-layer access masks in struct layer_rights Tingmao Wang
[RFC PATCH v1 05/11] landlock: Enforce namespace entry restrictions Tingmao Wang
[PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset Tingmao Wang
[PATCH v2 01/17] landlock: Prepare ruleset and domain type split Tingmao Wang
[GIT PULL] IPE update for 7.1 Fan Wu
[PATCH v4 10/10] ipe: Add BPF program load policy enforcement via Hornet integration Fan Wu
[PATCH v5 06/10] security: Hornet LSM Fan Wu
[PATCH v5 07/10] hornet: Introduce gen_sig Fan Wu
[PATCH v5 10/10] ipe: Add BPF program load policy enforcement via Hornet integration Fan Wu
[PATCH] lsm: Fix the crash issue in xfrm_decode_session Feng Yang
[RFC PATCH 0/4] fix FF-A call failed with pKVM when ff-a driver is built-in Yeoreum Yun
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Yeoreum Yun
[RFC PATCH 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[RFC PATCH 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Yeoreum Yun
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Yeoreum Yun
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH v2 0/4] fix FF-A call failed with pKVM when ff-a driver is built-in Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[RFC PATCH v2 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall Yeoreum Yun
[RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Yeoreum Yun
[PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability Mimi Zohar
[PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys Mimi Zohar
[PATCH] ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images Mimi Zohar
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Mimi Zohar
[RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync Mimi Zohar
[PATCH AUTOSEL 7.0-6.18] ima: Define and use a digest_size field in the ima_algo_desc structure Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM Mimi Zohar
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Marc Zyngier
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Marc Zyngier
[RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Marc Zyngier
[RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver Marc Zyngier
[PATCH v5 0/3] Trim N entries of IMA event logs steven chen
[PATCH v5 1/3] ima: make ima event log trimming configurable steven chen
[PATCH v5 2/3] ima: trim N IMA event log records steven chen
[PATCH v5 3/3] ima: add new critical data record to measure log trim steven chen
[PATCH v4 11/13] ima: Support staging and deleting N measurements entries steven chen
[PATCH v4 09/13] ima: Add support for staging measurements with prompt steven chen
[PATCH v5 2/3] ima: trim N IMA event log records steven chen
[PATCH 6.1.y] apparmor: fix memory leak in verify_header Li hongliang
[PATCH 5.15.y] apparmor: fix memory leak in verify_header Li hongliang
[PATCH 5.10.y] apparmor: fix memory leak in verify_header Li hongliang
[GIT PULL] Landlock update for v7.1-rc1 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20260410 pr-tracker-bot at kernel.org
[GIT PULL] selinux/selinux-pr-20260410 pr-tracker-bot at kernel.org
[GIT PULL] IPE update for 7.1 pr-tracker-bot at kernel.org
[GIT PULL] AppArmor updates for 7.1 pr-tracker-bot at kernel.org
[syzbot] Monthly lsm report (Apr 2026) syzbot
[syzbot] [integrity?] [lsm?] BUG: sleeping function called from invalid context in page_cache_ra_unbounded syzbot
[BUG] landlock: warning in collect_domain_accesses via renameat2 path rename 王志
社長のNG行動 神田／ナレッジリンク

Last message date: Sun Apr 26 13:42:24 UTC 2026
Archived on: Sun Apr 26 13:42:34 UTC 2026

Messages sorted by: [ thread ] [ subject ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).