April 2026 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Wed Apr 1 15:09:10 UTC 2026
Ending: Thu Apr 30 22:35:51 UTC 2026
Messages: 534

• [PATCH] landlock: Document fallocate(2) as another truncation corner case   Günther Noack
  • [PATCH] landlock: Document fallocate(2) as another truncation corner case   Mickaël Salaün
    • [PATCH] landlock: Document fallocate(2) as another truncation corner case   Günther Noack
      • [PATCH] landlock: Document fallocate(2) as another truncation corner case   Mickaël Salaün
• [PATCH v2 0/4] Fix Landlock audit test flakiness   Mickaël Salaün
  • [PATCH v2 1/4] selftests/landlock: Fix snprintf truncation checks in audit helpers   Mickaël Salaün
  • [PATCH v2 2/4] selftests/landlock: Fix socket file descriptor leaks in audit helpers   Mickaël Salaün
  • [PATCH v2 3/4] selftests/landlock: Drain stale audit records on init   Mickaël Salaün
  • [PATCH v2 4/4] selftests/landlock: Skip stale records in audit_match_record()   Mickaël Salaün
• [RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records   Mickaël Salaün
  • [RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records   Mickaël Salaün
    • [RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records   Christian Brauner
  • [RFC PATCH v1 02/11] security: Add LSM_AUDIT_DATA_NS for namespace audit records   Günther Noack
• [PATCH v5 0/3] Trim N entries of IMA event logs   steven chen
  • [PATCH v5 1/3] ima: make ima event log trimming configurable   steven chen
  • [PATCH v5 2/3] ima: trim N IMA event log records   steven chen
    • [PATCH v5 2/3] ima: trim N IMA event log records   Roberto Sassu
      • [PATCH v5 2/3] ima: trim N IMA event log records   steven chen
  • [PATCH v5 3/3] ima: add new critical data record to measure log trim   steven chen
• [PATCH v4 11/13] ima: Support staging and deleting N measurements entries   steven chen
• [PATCH v4 09/13] ima: Add support for staging measurements with prompt   steven chen
• [PATCH v8 03/12] landlock: Replace union access_masks_all with helper functions   Mickaël Salaün
• [PATCH v6.1] apparmor: fix unprivileged local user can do privileged policy management   Keerthana K
  • [PATCH v6.1] apparmor: fix unprivileged local user can do privileged policy management   Greg KH
• [PATCH v5.10-v5.15] apparmor: fix unprivileged local user can do privileged policy management   Keerthana K
• [PATCH v8 04/12] landlock: Control pathname UNIX domain socket resolution by path   Sebastian Andrzej Siewior
  • [PATCH v8 04/12] landlock: Control pathname UNIX domain socket resolution by path   Kuniyuki Iwashima
• LSM namespacing API   Dr. Greg
  • LSM namespacing API   Casey Schaufler
    • LSM namespacing API   Paul Moore
  • LSM namespacing API   Paul Moore
• [PATCH v3 0/5] Fix Landlock audit test flakiness   Mickaël Salaün
  • [PATCH v3 2/5] selftests/landlock: Fix socket file descriptor leaks in audit helpers   Mickaël Salaün
    • [PATCH v3 2/5] selftests/landlock: Fix socket file descriptor leaks in audit helpers   Günther Noack
  • [PATCH v3 3/5] selftests/landlock: Drain stale audit records on init   Mickaël Salaün
    • [PATCH v3 3/5] selftests/landlock: Drain stale audit records on init   Günther Noack
  • [PATCH v3 0/5] Fix Landlock audit test flakiness   Günther Noack
    • [PATCH v3 0/5] Fix Landlock audit test flakiness   Günther Noack
    • [PATCH v3 0/5] Fix Landlock audit test flakiness   Mickaël Salaün
• [PATCH v3 1/5] selftests/landlock: Fix snprintf truncation checks in audit helpers   Mickaël Salaün
  • [PATCH v3 1/5] selftests/landlock: Fix snprintf truncation checks in audit helpers   Günther Noack
• [PATCH v3 4/5] selftests/landlock: Skip stale records in audit_match_record()   Mickaël Salaün
• [PATCH v3 5/5] selftests/landlock: Fix format warning for __u64 in net_test   Mickaël Salaün
  • [PATCH v3 5/5] selftests/landlock: Fix format warning for __u64 in net_test   Günther Noack
• [PATCH v4 0/3] Fix incorrect overlayfs mmap() and mprotect() LSM access controls   Paul Moore
  • [PATCH v4 1/3] fs: prepare for adding LSM blob to backing_file   Paul Moore
    • [PATCH v4 1/3] fs: prepare for adding LSM blob to backing_file   Serge E. Hallyn
  • [PATCH v4 2/3] lsm: add backing_file LSM hooks   Paul Moore
    • [PATCH v4 2/3] lsm: add backing_file LSM hooks   Amir Goldstein
      • [PATCH v4 2/3] lsm: add backing_file LSM hooks   Paul Moore
    • [PATCH v4 2/3] lsm: add backing_file LSM hooks   Serge E. Hallyn
    • [PATCH v4 2/3] lsm: add backing_file LSM hooks   Christian Brauner
  • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Paul Moore
    • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Amir Goldstein
    • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Stephen Smalley
      • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Paul Moore
      • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Stephen Smalley
      • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Paul Moore
      • [PATCH v4 3/3] selinux: fix overlayfs mmap() and mprotect() access checks   Ondrej Mosnacek
• [PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling   GONG Ruiqi
  • [PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling   GONG Ruiqi
  • [PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling   Georgia Garcia
    • [PATCH] apparmor: Fix two bugs of aa_setup_dfa_engine's fail handling   GONG Ruiqi
• [PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork()   Mickaël Salaün
  • [PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork()   Günther Noack
    • [PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork()   Mickaël Salaün
      • [PATCH v1 1/2] landlock: Fix log_subdomains_off inheritance across fork()   Günther Noack
• [PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1   Mickaël Salaün
  • [PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1   Günther Noack
    • [PATCH v1 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1   Mickaël Salaün
• [PATCH 0/3] Add support for ML-DSA signature for EVM and IMA   Stefan Berger
  • [PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys   Stefan Berger
    • [PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys   Eric Biggers
      • [PATCH 1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys   Stefan Berger
  • [PATCH 3/3] integrity: Add support for sigv3 verification using ML-DSA keys   Stefan Berger
• [PATCH 2/3] integrity: Refactor asymmetric_verify for reusability   Stefan Berger
• [PATCH v2 00/17] Landlock tracepoints   Mickaël Salaün
  • [PATCH v2 02/17] landlock: Move domain query functions to domain.c   Mickaël Salaün
  • [PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset   Mickaël Salaün
    • [PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset   Tingmao Wang
  • [PATCH v2 04/17] landlock: Split denial logging from audit into common framework   Mickaël Salaün
  • [PATCH v2 05/17] tracing: Add __print_untrusted_str()   Mickaël Salaün
  • [PATCH v2 06/17] landlock: Add create_ruleset and free_ruleset tracepoints   Mickaël Salaün
  • [PATCH v2 07/17] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints   Mickaël Salaün
  • [PATCH v2 08/17] landlock: Add restrict_self and free_domain tracepoints   Mickaël Salaün
  • [PATCH v2 09/17] landlock: Add tracepoints for rule checking   Mickaël Salaün
  • [PATCH v2 10/17] landlock: Set audit_net.sk for socket access checks   Mickaël Salaün
  • [PATCH v2 11/17] landlock: Add landlock_deny_access_fs and landlock_deny_access_net   Mickaël Salaün
  • [PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials   Mickaël Salaün
    • [PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials   Steven Rostedt
      • [PATCH v2 12/17] landlock: Add tracepoints for ptrace and scope denials   Mickaël Salaün
  • [PATCH v2 13/17] selftests/landlock: Add trace event test infrastructure and tests   Mickaël Salaün
  • [PATCH v2 14/17] selftests/landlock: Add filesystem tracepoint tests   Mickaël Salaün
  • [PATCH v2 15/17] selftests/landlock: Add network tracepoint tests   Mickaël Salaün
  • [PATCH v2 16/17] selftests/landlock: Add scope and ptrace tracepoint tests   Mickaël Salaün
• [PATCH v2 01/17] landlock: Prepare ruleset and domain type split   Mickaël Salaün
  • [PATCH v2 01/17] landlock: Prepare ruleset and domain type split   Tingmao Wang
• [PATCH v2 17/17] landlock: Document tracepoints   Mickaël Salaün
• [PATCH v3 3/3] landlock: transpose the layer masks data structure   Tingmao Wang
• [PATCH v8 0/9] Implement LANDLOCK_ADD_RULE_QUIET   Tingmao Wang
  • [PATCH v8 1/9] landlock: Add a place for flags to layer rules   Tingmao Wang
  • [PATCH v8 2/9] landlock: Add API support and docs for the quiet flags   Tingmao Wang
  • [PATCH v8 3/9] landlock: Suppress logging when quiet flag is present   Tingmao Wang
  • [PATCH v8 4/9] samples/landlock: Add quiet flag support to sandboxer   Tingmao Wang
  • [PATCH v8 5/9] selftests/landlock: Replace hard-coded 16 with a constant   Tingmao Wang
  • [PATCH v8 6/9] selftests/landlock: add tests for quiet flag with fs rules   Tingmao Wang
  • [PATCH v8 7/9] selftests/landlock: add tests for quiet flag with net rules   Tingmao Wang
  • [PATCH v8 8/9] selftests/landlock: Add tests for quiet flag with scope   Tingmao Wang
  • [PATCH v8 9/9] selftests/landlock: Add tests for invalid use of quiet flag   Tingmao Wang
• [PATCH v2] KEYS: trusted: Debugging as a feature   Nayna Jain
  • [PATCH v2] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
  • [PATCH v2] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
    • [PATCH v2] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
    • [PATCH v2] KEYS: trusted: Debugging as a feature   Nayna Jain
• [PATCH] evm: zero-initialize the evm_xattrs read buffer   Pengpeng Hou
  • [PATCH] evm: zero-initialize the evm_xattrs read buffer   Roberto Sassu
  • [PATCH] evm: zero-initialize the evm_xattrs read buffer   Pengpeng Hou
  • [PATCH v2] evm: terminate and bound the evm_xattrs read buffer   Pengpeng Hou
    • [PATCH v2] evm: terminate and bound the evm_xattrs read buffer   Roberto Sassu
      • [PATCH v2] evm: terminate and bound the evm_xattrs read buffer   Roberto Sassu
    • [PATCH v3] evm: terminate and bound the evm_xattrs read buffer   Pengpeng Hou
      • [PATCH v3] evm: terminate and bound the evm_xattrs read buffer   Roberto Sassu
• LSM: Whiteout chardev creation sidesteps mknod hook   Günther Noack
  • LSM: Whiteout chardev creation sidesteps mknod hook   Serge Hallyn
    • LSM: Whiteout chardev creation sidesteps mknod hook   Christian Brauner
      • LSM: Whiteout chardev creation sidesteps mknod hook   Günther Noack
      • LSM: Whiteout chardev creation sidesteps mknod hook   Miklos Szeredi
      • LSM: Whiteout chardev creation sidesteps mknod hook   Günther Noack
      • LSM: Whiteout chardev creation sidesteps mknod hook   Stephen Smalley
      • LSM: Whiteout chardev creation sidesteps mknod hook   Mickaël Salaün
      • LSM: Whiteout chardev creation sidesteps mknod hook   Miklos Szeredi
  • LSM: Whiteout chardev creation sidesteps mknod hook   Mickaël Salaün
    • LSM: Whiteout chardev creation sidesteps mknod hook   Mickaël Salaün
    • LSM: Whiteout chardev creation sidesteps mknod hook   Günther Noack
• [PATCH v2 1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()   Mickaël Salaün
  • [PATCH v2 1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork()   Günther Noack
• [PATCH v2 2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1   Mickaël Salaün
• [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Justin Suess
  • [RFC PATCH 01/20] landlock: Move operations from syscall into ruleset code   Justin Suess
  • [RFC PATCH 02/20] execve: Add set_nnp_on_point_of_no_return   Justin Suess
  • [RFC PATCH 03/20] landlock: Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS   Justin Suess
  • [RFC PATCH 04/20] selftests/landlock: Cover LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS   Justin Suess
  • [RFC PATCH 05/20] landlock: Make ruleset deferred free RCU safe   Justin Suess
  • [RFC PATCH 06/20] bpf: lsm: Add Landlock kfuncs   Justin Suess
  • [RFC PATCH 07/20] bpf: arraymap: Implement Landlock ruleset map   Justin Suess
  • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
    • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Song Liu
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Song Liu
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Mickaël Salaün
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Song Liu
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Mickaël Salaün
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Mickaël Salaün
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Song Liu
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Justin Suess
      • [RFC PATCH 08/20] bpf: Add Landlock ruleset map type   Song Liu
  • [RFC PATCH 09/20] bpf: syscall: Handle Landlock ruleset maps   Justin Suess
  • [RFC PATCH 10/20] bpf: verifier: Add Landlock ruleset map support   Justin Suess
  • [RFC PATCH 11/20] selftests/bpf: Add Landlock kfunc declarations   Justin Suess
  • [RFC PATCH 12/20] selftests/landlock: Rename gettid wrapper for BPF reuse   Justin Suess
  • [RFC PATCH 13/20] selftests/bpf: Enable Landlock in selftests kernel.   Justin Suess
  • [RFC PATCH 14/20] selftests/bpf: Add Landlock kfunc test program   Justin Suess
  • [RFC PATCH 15/20] selftests/bpf: Add Landlock kfunc test runner   Justin Suess
  • [RFC PATCH 16/20] landlock: Bump ABI version   Justin Suess
  • [RFC PATCH 17/20] tools: bpftool: Add documentation for landlock_ruleset   Justin Suess
  • [RFC PATCH 18/20] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS   Justin Suess
  • [RFC PATCH 19/20] bpf: Document BPF_MAP_TYPE_LANDLOCK_RULESET   Justin Suess
  • [RFC PATCH 20/20] MAINTAINERS: update entry for the Landlock subsystem   Justin Suess
  • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Ihor Solodrai
    • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Justin Suess
  • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Mickaël Salaün
    • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Justin Suess
      • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Mickaël Salaün
      • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Justin Suess
      • [RFC PATCH 00/20] BPF interface for applying Landlock rulesets   Justin Suess
• [RFC PATCH v4 00/19] Support socket access-control   Mickaël Salaün
  • [RFC PATCH v4 00/19] Support socket access-control   Mikhail Ivanov
    • [RFC PATCH v4 00/19] Support socket access-control   Mickaël Salaün
      • [RFC PATCH v4 00/19] Support socket access-control   Mikhail Ivanov
• [PATCH] security: remove BUG_ON in security_skb_classify_flow   Jiayuan Chen
  • [PATCH] security: remove BUG_ON in security_skb_classify_flow   Serge E. Hallyn
    • [PATCH] security: remove BUG_ON in security_skb_classify_flow   Jiayuan Chen
      • [PATCH] security: remove BUG_ON in security_skb_classify_flow   Serge E. Hallyn
      • [PATCH] security: remove BUG_ON in security_skb_classify_flow   Stephen Smalley
• [PATCH v2 0/2] Add support for ML-DSA signature for EVM and IMA   Stefan Berger
• [PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability   Stefan Berger
  • [PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability   Mimi Zohar
    • [PATCH v2 1/2] integrity: Refactor asymmetric_verify for reusability   Stefan Berger
• [PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys   Stefan Berger
  • [PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys   Mimi Zohar
    • [PATCH v2 2/2] integrity: Add support for sigv3 verification using ML-DSA keys   Stefan Berger
• [PATCH v2 0/4] Firmware LSM hook   Roberto Sassu
  • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
    • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Casey Schaufler
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Paul Moore
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
      • [PATCH v2 0/4] Firmware LSM hook   Jason Gunthorpe
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
      • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
• [PATCH v3] KEYS: trusted: Debugging as a feature   Jarkko Sakinen
  • [PATCH v3] KEYS: trusted: Debugging as a feature   Srish Srinivasan
    • [PATCH v3] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
  • [PATCH v3] KEYS: trusted: Debugging as a feature   Nayna Jain
    • [PATCH v3] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
• [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Mickaël Salaün
  • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Christian Brauner
  • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Günther Noack
  • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Paul Moore
    • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Mickaël Salaün
      • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Paul Moore
      • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Christian Brauner
      • [RFC PATCH v1 01/11] security: add LSM blob and hooks for namespaces   Paul Moore
• [GIT PULL] Landlock update for v7.1-rc1   Mickaël Salaün
  • [GIT PULL] Landlock update for v7.1-rc1   pr-tracker-bot at kernel.org
• [RFC PATCH v1 04/11] landlock: Wrap per-layer access masks in struct layer_rights   Tingmao Wang
  • [RFC PATCH v1 04/11] landlock: Wrap per-layer access masks in struct layer_rights   Günther Noack
• [RFC PATCH v1 05/11] landlock: Enforce namespace entry restrictions   Tingmao Wang
• [bug report] apparmor: add support loading per permission tagging   Dan Carpenter
• [PATCH 04/61] ext4: Prefer IS_ERR_OR_NULL over manual NULL check   Theodore Ts'o
• [GIT PULL] lsm/lsm-pr-20260410   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20260410   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20260410   pr-tracker-bot at kernel.org
• [GIT PULL] selinux/selinux-pr-20260410   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20260410   pr-tracker-bot at kernel.org
• [PATCH 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT   Günther Noack
  • [PATCH 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_CHAR for RENAME_WHITEOUT   Günther Noack
  • [PATCH 2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial   Günther Noack
  • [PATCH 3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_CHAR   Günther Noack
  • [PATCH 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT   Mickaël Salaün
• [PATCH] trusted-keys: move pr_fmt out of trusted-type.h   Josh Snyder
  • [PATCH] trusted-keys: move pr_fmt out of trusted-type.h   Marco Felsch
    • [PATCH] trusted-keys: move pr_fmt out of trusted-type.h   Ahmad Fatoum
      • [PATCH] trusted-keys: move pr_fmt out of trusted-type.h   Jarkko Sakkinen
• landlock: Add support for chmod and chown system calls families   Jeffrey Bencteux
  • [PATCH 1/5] selftests/landlock: fix return condition on create_directory   Jeffrey Bencteux
  • [PATCH 2/5] landlock: add support for chmod and chown   Jeffrey Bencteux
  • [PATCH 3/5] selftests/landlock: add tests for chmod and chown restrictions   Jeffrey Bencteux
  • [PATCH 4/5] samples/landlock: add support for chown and chmod   Jeffrey Bencteux
  • landlock: Add support for chmod and chown system calls families   Günther Noack
    • landlock: Add support for chmod and chown system calls families   Jeffrey Bencteux
• [PATCH 5/5] landlock: Document chmod and chown support in example code   Jeffrey Bencteux
• [PATCH v7 00/10] Implement LANDLOCK_ADD_RULE_NO_INHERIT   Justin Suess
  • [PATCH v7 02/10] landlock: Use landlock_walk_path_up for is_access_to_paths_allowed   Justin Suess
  • [PATCH v7 03/10] landlock: Use landlock_walk_path_up for collect_domain_accesses   Justin Suess
  • [PATCH v7 04/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT userspace api   Justin Suess
  • [PATCH v7 05/10] landlock: Move find_rule definition above landlock_append_fs_rule   Justin Suess
  • [PATCH v7 06/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT   Justin Suess
  • [PATCH v7 07/10] landlock: Add documentation for LANDLOCK_ADD_RULE_NO_INHERIT   Justin Suess
  • [PATCH v7 08/10] samples/landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT to landlock-sandboxer   Justin Suess
  • [PATCH v7 09/10] selftests/landlock: Implement selftests for LANDLOCK_ADD_RULE_NO_INHERIT   Justin Suess
  • [PATCH v7 10/10] landlock: Implement KUnit test for LANDLOCK_ADD_RULE_NO_INHERIT   Justin Suess
• [PATCH v7 01/10] landlock: Add path walk helper   Justin Suess
• [PATCH 6.1.y] apparmor: fix memory leak in verify_header   Li hongliang
• [PATCH 5.15.y] apparmor: fix memory leak in verify_header   Li hongliang
• [PATCH 5.10.y] apparmor: fix memory leak in verify_header   Li hongliang
• [PATCH 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Stephen Smalley
• [PATCH 4/7] selinux: Convert from sb_mount to granular mount hooks   Stephen Smalley
• [PATCH 7/7] lsm: Remove security_sb_mount and security_move_mount   Stephen Smalley
• [PATCH] lsm: Fix the crash issue in xfrm_decode_session   Stephen Smalley
  • [PATCH] lsm: Fix the crash issue in xfrm_decode_session   Feng Yang
• [GIT PULL] IPE update for 7.1   Fan Wu
  • [GIT PULL] IPE update for 7.1   pr-tracker-bot at kernel.org
• [syzbot] Monthly lsm report (Apr 2026)   syzbot
  • [syzbot] Monthly lsm report (Apr 2026)   Paul Moore
    • [syzbot] Monthly lsm report (Apr 2026)   Roberto Sassu
  • [syzbot] Monthly lsm report (Apr 2026)   Paul Moore
    • [syzbot] Monthly lsm report (Apr 2026)   Jarkko Sakkinen
    • [syzbot] Monthly lsm report (Apr 2026)   Jarkko Sakkinen
• [PATCH] ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images   Chi Wang
  • [PATCH] ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images   Mimi Zohar
• [PATCH v4] KEYS: trusted: Debugging as a feature   Jarkko Sakkinen
  • [PATCH v4] KEYS: trusted: Debugging as a feature   Nayna Jain
• [PATCH v2] trusted-keys: move pr_fmt out of trusted-type.h   Josh Snyder
  • [PATCH v2] trusted-keys: move pr_fmt out of trusted-type.h   Marco Felsch
• 社長のNG行動   神田／ナレッジリンク
• [PATCH 55/61] interconnect: Prefer IS_ERR_OR_NULL over manual NULL check   Krzysztof Kozlowski
• [PATCH 01/61] Coccinelle: Prefer IS_ERR_OR_NULL over manual NULL check   Krzysztof Kozlowski
• [PATCH v3 0/4] Add support for ML-DSA signature for EVM and IMA   Stefan Berger
• [PATCH v3 1/4] integrity: Check for NULL returned by asymmetric_key_public_key   Stefan Berger
• [PATCH v3 2/4] integrity: Check that algo parameter is within valid range   Stefan Berger
• [PATCH v3 3/4] integrity: Refactor asymmetric_verify for reusability   Stefan Berger
• [PATCH v3 4/4] integrity: Add support for sigv3 verification using ML-DSA keys   Stefan Berger
• [PATCH v4 00/10] Reintroduce Hornet LSM   Blaise Boscaccy
  • [PATCH v4 01/10] crypto: pkcs7: add flag for validated trust on a signed info block   Blaise Boscaccy
  • [PATCH v4 02/10] crypto: pkcs7: add ability to extract signed attributes by OID   Blaise Boscaccy
  • [PATCH v4 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr   Blaise Boscaccy
  • [PATCH v4 04/10] lsm: framework for BPF integrity verification   Blaise Boscaccy
  • [PATCH v4 05/10] lsm: security: Add additional enum values for bpf integrity checks   Blaise Boscaccy
  • [PATCH v4 06/10] security: Hornet LSM   Blaise Boscaccy
  • [PATCH v4 07/10] hornet: Introduce gen_sig   Blaise Boscaccy
  • [PATCH v4 08/10] hornet: Add a light skeleton data extractor scripts   Blaise Boscaccy
  • [PATCH v4 09/10] selftests/hornet: Add a selftest for the Hornet LSM   Blaise Boscaccy
  • [PATCH v4 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Blaise Boscaccy
    • [PATCH v4 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Fan Wu
• [PATCH] tomoyo: reject short exec.envp[] names before suffix checks   Pengpeng Hou
  • [PATCH] tomoyo: reject short exec.envp[] names before suffix checks   Tetsuo Handa
  • [PATCH] tomoyo: reject short exec.envp[] names before suffix checks   Pengpeng Hou
• [BUG] landlock: warning in collect_domain_accesses via renameat2 path rename   王志
  • [BUG] landlock: warning in collect_domain_accesses via renameat2 path rename   Justin Suess
• [RFC PATCH 0/4] fix FF-A call failed with pKVM when ff-a driver is built-in   Yeoreum Yun
  • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Yeoreum Yun
    • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Jonathan McDowell
      • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Yeoreum Yun
    • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Mimi Zohar
      • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Yeoreum Yun
      • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Mimi Zohar
      • [RFC PATCH 1/4] security: ima: move ima_init into late_initcall_sync   Yeoreum Yun
  • [RFC PATCH 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in   Yeoreum Yun
  • [RFC PATCH 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall   Yeoreum Yun
  • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
    • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Marc Zyngier
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Marc Zyngier
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Will Deacon
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Will Deacon
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sudeep Holla
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sudeep Holla
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Will Deacon
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
    • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sebastian Ene
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Marc Zyngier
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sebastian Ene
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sudeep Holla
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Sebastian Ene
      • [RFC PATCH 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
• [syzbot] [integrity?] [lsm?] BUG: sleeping function called from invalid context in page_cache_ra_unbounded   syzbot
• [RFC PATCH v4 01/19] landlock: Support socket access-control   Mikhail Ivanov
• [PATCH AUTOSEL 7.0-6.18] ima: Define and use a digest_size field in the ima_algo_desc structure   Sasha Levin
  • [PATCH AUTOSEL 7.0-6.18] ima: Define and use a digest_size field in the ima_algo_desc structure   Mimi Zohar
• [RFC PATCH v1 00/11] Landlock: Namespace and capability control   Günther Noack
  • [RFC PATCH v1 00/11] Landlock: Namespace and capability control   Mickaël Salaün
    • [RFC PATCH v1 00/11] Landlock: Namespace and capability control   Günther Noack
      • [RFC PATCH v1 00/11] Landlock: Namespace and capability control   Mickaël Salaün
• [PATCH v5 00/10] Reintroduce Hornet LSM   Blaise Boscaccy
  • [PATCH v5 01/10] crypto: pkcs7: add flag for validated trust on a signed info block   Blaise Boscaccy
  • [PATCH v5 02/10] crypto: pkcs7: add ability to extract signed attributes by OID   Blaise Boscaccy
  • [PATCH v5 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr   Blaise Boscaccy
  • [PATCH v5 05/10] lsm: security: Add additional enum values for bpf integrity checks   Blaise Boscaccy
  • [PATCH v5 06/10] security: Hornet LSM   Blaise Boscaccy
    • [PATCH v5 06/10] security: Hornet LSM   Fan Wu
      • [PATCH v5 06/10] security: Hornet LSM   Blaise Boscaccy
    • [PATCH v5 6/10] security: Hornet LSM   Paul Moore
  • [PATCH v5 07/10] hornet: Introduce gen_sig   Blaise Boscaccy
    • [PATCH v5 07/10] hornet: Introduce gen_sig   Fan Wu
  • [PATCH v5 08/10] hornet: Add a light skeleton data extractor scripts   Blaise Boscaccy
  • [PATCH v5 09/10] selftests/hornet: Add a selftest for the Hornet LSM   Blaise Boscaccy
  • [PATCH v5 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Blaise Boscaccy
    • [PATCH v5 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Fan Wu
      • [PATCH v5 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Blaise Boscaccy
• [PATCH v5 04/10] lsm: framework for BPF integrity verification   Blaise Boscaccy
• [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Frederick Lawler
  • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Alexei Starovoitov
    • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Paul Moore
      • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Alexei Starovoitov
      • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Paul Moore
      • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Alexei Starovoitov
      • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Paul Moore
      • [PATCH RFC bpf-next 0/4] audit: Expose audit subsystem to BPF LSM programs via BPF kfuncs   Frederick Lawler
• [RFC PATCH v2 0/4] fix FF-A call failed with pKVM when ff-a driver is built-in   Yeoreum Yun
  • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
    • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Jonathan McDowell
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Jonathan McDowell
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Roberto Sassu
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Paul Moore
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Jonathan McDowell
      • [RFC PATCH v2 1/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
  • [RFC PATCH v2 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in   Yeoreum Yun
    • [RFC PATCH v2 2/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in   Jarkko Sakkinen
  • [RFC PATCH v2 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall   Yeoreum Yun
    • [RFC PATCH v2 3/4] firmware: arm_ffa: revert ffa_init() initcall level to device_initcall   Sudeep Holla
  • [RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
    • [RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Marc Zyngier
      • [RFC PATCH v2 4/4] firmware: arm_ffa: check pkvm initailised when initailise ffa driver   Yeoreum Yun
• [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Günther Noack
  • [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Mickaël Salaün
    • [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Justin Suess
      • [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Justin Suess
  • [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Mickaël Salaün
• [RFC PATCH v1 10/11] samples/landlock: Add capability and namespace restriction support   Günther Noack
  • [RFC PATCH v1 10/11] samples/landlock: Add capability and namespace restriction support   Mickaël Salaün
• [RFC PATCH v1 06/11] landlock: Enforce capability restrictions   Günther Noack
• [apparmor] [PATCH RESEND] apparmor: Fix string overrun due to missing termination   Georgia Garcia
• [PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine   GONG Ruiqi
  • [PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine   Georgia Garcia
• [GIT PULL] AppArmor updates for 7.1   John Johansen
  • [GIT PULL] AppArmor updates for 7.1   pr-tracker-bot at kernel.org
• [PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions   Paul Moore
  • [PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions   Casey Schaufler
    • [PATCH RFC 1/3] LSM: add a flags field to the LSM hook definitions   Paul Moore
• [PATCH RFC 2/3] LSM: Enforce exclusive hooks   Paul Moore
  • [PATCH RFC 2/3] LSM: Enforce exclusive hooks   Casey Schaufler
• [PATCH RFC 3/3] LSM: Reserve use of secmarks   Paul Moore
  • [PATCH RFC 3/3] LSM: Reserve use of secmarks   Casey Schaufler
• [PATCH] ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG   Kamlesh Kumar
  • [PATCH] ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG   Stefan Berger
• [RFC PATCH v3 0/4] Fix IMA + TPM initialisation ordering issue   Jonathan McDowell
  • [RFC PATCH v3 1/4] lsm: Allow LSMs to register for late_initcall_sync init   Jonathan McDowell
  • [RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Jonathan McDowell
    • [RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Yeoreum Yun
    • [RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Mimi Zohar
      • [RFC PATCH v3 2/4] security: ima: call ima_init() again at late_initcall_sync for defered TPM   Jonathan McDowell
  • [RFC PATCH v3 3/4] Revert "tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in"   Jonathan McDowell
    • [RFC PATCH v3 3/4] Revert "tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in"   Sudeep Holla
  • [RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall"   Jonathan McDowell
    • [RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall"   Sudeep Holla
    • [RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall"   Jarkko Sakkinen
  • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
    • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Paul Moore
• [PATCH] selinux: don't reserve xattr slot when we won't fill it   David Windsor
  • [PATCH] selinux: don't reserve xattr slot when we won't fill it   Paul Moore
• [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
  • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   bot+bpf-ci at kernel.org
  • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Kumar Kartikeya Dwivedi
    • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Kumar Kartikeya Dwivedi
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Matt Bobrowski
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Song Liu
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Kumar Kartikeya Dwivedi
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Song Liu
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Matt Bobrowski
      • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Kumar Kartikeya Dwivedi
  • [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Matt Bobrowski
• [syzbot] [integrity?] [lsm?] WARNING: bad unlock balance in __filemap_add_folio   syzbot
• [PATCH ported/repost v2] security, fs, nfs, net: update security_inode_listsecurity() interface   Paul Moore
  • [PATCH ported/repost v2] security,fs,nfs,net: update security_inode_listsecurity() interface   Paul Moore
• [PATCH 0/1] yama: clean-up ptrace relations upon activating YAMA_SCOPE_NO_ATTACH   Ethan Ferguson
• [PATCH 1/1] yama: clean-up ptrace relations upon activating YAMA_SCOPE_NO_ATTACH   Ethan Ferguson
• [PATCH 00/14] Bump minimum version of LLVM for building the kernel to 17.0.1   Nathan Chancellor
  • [PATCH 02/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS   Nathan Chancellor
  • [PATCH 03/14] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE   Nathan Chancellor
  • [PATCH 04/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT   Nathan Chancellor
• [linus:master] [proc] 599bbba5a3: kernel-selftests.mm.ksft_mkdirty.sh.mkdirty.fail   kernel test robot
• [PATCH v5 00/13] ima: Introduce staging mechanism   Roberto Sassu
  • [PATCH v5 01/13] ima: Remove ima_h_table structure   Roberto Sassu
  • [PATCH v5 02/13] ima: Replace static htable queue with dynamically allocated array   Roberto Sassu
  • [PATCH v5 03/13] ima: Introduce per binary measurements list type ima_num_entries counter   Roberto Sassu
  • [PATCH v5 04/13] ima: Introduce per binary measurements list type binary_runtime_size value   Roberto Sassu
  • [PATCH v5 05/13] ima: Introduce _ima_measurements_start() and _ima_measurements_next()   Roberto Sassu
  • [PATCH v5 06/13] ima: Mediate open/release method of the measurements list   Roberto Sassu
  • [PATCH v5 07/13] ima: Use snprintf() in create_securityfs_measurement_lists   Roberto Sassu
  • [PATCH v5 08/13] ima: Introduce ima_dump_measurement()   Roberto Sassu
  • [PATCH v5 09/13] ima: Add support for staging measurements with prompt   Roberto Sassu
  • [PATCH v5 10/13] ima: Add support for flushing the hash table when staging measurements   Roberto Sassu
  • [PATCH v5 11/13] ima: Support staging and deleting N measurements entries   Roberto Sassu
  • [PATCH v5 12/13] ima: Return error on deleting measurements already copied during kexec   Roberto Sassu
  • [PATCH v5 13/13] doc: security: Add documentation of the IMA staging mechanism   Roberto Sassu
• [v6 00/10] Reintroduce Hornet LSM   Blaise Boscaccy
  • [v6 01/10] crypto: pkcs7: add flag for validated trust on a signed info block   Blaise Boscaccy
  • [v6 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr   Blaise Boscaccy
  • [v6 04/10] lsm: framework for BPF integrity verification   Blaise Boscaccy
  • [v6 06/10] security: Hornet LSM   Blaise Boscaccy
  • [v6 08/10] hornet: Add a light skeleton data extractor scripts   Blaise Boscaccy
  • [v6 09/10] selftests/hornet: Add a selftest for the Hornet LSM   Blaise Boscaccy
  • [v6 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Blaise Boscaccy
• [v6 02/10] crypto: pkcs7: add ability to extract signed attributes by OID   Blaise Boscaccy
• [v6 05/10] lsm: security: Add additional enum values for bpf integrity checks   Blaise Boscaccy
• [v6 07/10] hornet: Introduce gen_sig   Blaise Boscaccy
• [PATCH v2 0/7] lsm: Replace security_sb_mount with granular mount hooks   Song Liu
  • [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Song Liu
  • [PATCH v2 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount   Song Liu
  • [PATCH v2 3/7] apparmor: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v2 4/7] selinux: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v2 5/7] landlock: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v2 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v2 7/7] lsm: Remove security_sb_mount and security_move_mount   Song Liu
• [linus:master] [landlock] 874c8f8382: kernel-selftests.landlock.audit_test.audit.thread.fail   kernel test robot
• (subset) [PATCH v3 00/14] Remove redundant rcu_read_lock/unlock() in spin_lock   Jeff Johnson

Last message date: Thu Apr 30 22:35:51 UTC 2026
Archived on: Thu Apr 30 22:36:10 UTC 2026

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...