June 2026 Archives by subject

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

Starting: Mon Jun 1 00:00:34 UTC 2026
Ending: Fri Jun 26 02:40:58 UTC 2026
Messages: 458

-next status as at v7.1-rc6 Paul Moore
-next status as at v7.1-rc6 Linus Torvalds
-next status as at v7.1-rc6 Paul Moore
-next status as at v7.1-rc6 Linus Torvalds
-next status as at v7.1-rc6 Paul Moore
-next status as at v7.1-rc6 Serge E. Hallyn
-next status as at v7.1-rc6 Linus Torvalds
-next status as at v7.1-rc6 James Bottomley
[bug report] apparmor: add support loading per permission tagging John Johansen
[GIT PULL] AppArmor updates for 7.2-rc1 John Johansen
[GIT PULL] AppArmor updates for 7.2-rc1 pr-tracker-bot at kernel.org
[GIT PULL] Landlock update for v7.2-rc1 Mickaël Salaün
[GIT PULL] Landlock update for v7.2-rc1 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20260615 Paul Moore
[GIT PULL] lsm/lsm-pr-20260615 pr-tracker-bot at kernel.org
[GIT PULL] selinux/selinux-pr-20260615 Paul Moore
[GIT PULL] selinux/selinux-pr-20260615 Linus Torvalds
[GIT PULL] selinux/selinux-pr-20260615 pr-tracker-bot at kernel.org
[GIT PULL] selinux/selinux-pr-20260615 Kuan-Wei Chiu
[net v3] netlabel: validate unlabeled address and mask attribute lengths Chenguang Zhao
[net v3] netlabel: validate unlabeled address and mask attribute lengths patchwork-bot+netdevbpf at kernel.org
[PATCH -next 0/2] Fix call security_backing_file_free second time Cai Xinchen
[PATCH -next 1/2] security: Some cleanup code Cai Xinchen
[PATCH -next 2/2] security: Fix call security_backing_file_free second time Cai Xinchen
[PATCH 0/2] security/keys: replace BUG() in unreachable default cases Mohammed EL Kadiri
[PATCH 0/3] hornet: post-TOCTOU-fix cleanup and observability Blaise Boscaccy
[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation Yan Zhu
[PATCH 00/11] Convert moduleparams to seq_buf Kees Cook
[PATCH 01/10] docs/zh_CN: add LSM/index Chinese translation Yan Zhu
[PATCH 01/11] hornet: fix TOCTOU in signed program verification Paul Moore
[PATCH 01/11] hornet: fix TOCTOU in signed program verification Fan Wu
[PATCH 01/11] params: bound array element output to the caller's page buffer Andy Shevchenko
[PATCH 01/11] params: bound array element output to the caller's page buffer Jason Gunthorpe
[PATCH 02/10] docs/zh_CN: add LSM/apparmor Chinese translation Yan Zhu
[PATCH 02/11] hornet: invert map set check logic Paul Moore
[PATCH 02/11] hornet: invert map set check logic Blaise Boscaccy
[PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation Yan Zhu
[PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation Yan Zhu
[PATCH 04/10] docs/zh_CN: add LSM/SELinux Chinese translation Yan Zhu
[PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS jim.cromie at gmail.com
[PATCH 05/10] docs/zh_CN: add LSM/Smack Chinese translation Yan Zhu
[PATCH 06/10] docs/zh_CN: add LSM/tomoyo Chinese translation Yan Zhu
[PATCH 07/10] docs/zh_CN: add LSM/Yama Chinese translation Yan Zhu
[PATCH 08/10] docs/zh_CN: add LSM/SafeSetID Chinese translation Yan Zhu
[PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation Yan Zhu
[PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation Fan Wu
[PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation Yan Zhu
[PATCH 1/2] bpf: lsm: disable xfrm_decode_session hook attachment Bradley Morgan
[PATCH 1/2] bpf: lsm: disable xfrm_decode_session hook attachment Alexei Starovoitov
[PATCH 1/2] keys: request_key: replace BUG with return -EINVAL Mohammed EL Kadiri
[PATCH 1/2] keys: request_key: replace BUG with return -EINVAL Jarkko Sakkinen
[PATCH 1/2] landlock: Fix unmarked concurrent access to socket family Matthieu Buffet
[PATCH 1/3] apparmor: Fix return in ns_mkdir_op John Johansen
[PATCH 1/3] hornet: log map hash check failures in prog map validation Blaise Boscaccy
[PATCH 10/10] docs/zh_CN: add LSM/landlock Chinese translation Yan Zhu
[PATCH 2/2] keys: keyctl_pkey: replace BUG with return -EOPNOTSUPP Mohammed EL Kadiri
[PATCH 2/2] keys: keyctl_pkey: replace BUG with return -EOPNOTSUPP Jarkko Sakkinen
[PATCH 2/2] landlock: replace __sk_common struct sock field accesses Matthieu Buffet
[PATCH 2/2] landlock: replace __sk_common struct sock field accesses Mickaël Salaün
[PATCH 2/2] landlock: replace __sk_common struct sock field accesses Mickaël Salaün
[PATCH 2/2] lsm: fix size queries for getselfattr with NULL buffer Bradley Morgan
[PATCH 2/3] security, ipe: Remove LSM_INT_VERDICT_UNEXPECTED support Blaise Boscaccy
[PATCH 3/3] hornet: update signing workflow documentation Blaise Boscaccy
[PATCH] Add LoadPin support for eBPF program loading Alex Roberts via B4 Relay
[PATCH] Add LoadPin support for eBPF program loading David Windsor
[PATCH] Add LoadPin support for eBPF program loading kernel test robot
[PATCH] Add LoadPin support for eBPF program loading Alexei Starovoitov
[PATCH] Add LoadPin support for eBPF program loading Alex Roberts
[PATCH] Add LoadPin support for eBPF program loading Alex Roberts
[PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine John Johansen
[PATCH] apparmor: check label build before no_new_privs test Ruoyu Wang
[PATCH] apparmor: Constify 'nulldfa_src' and 'stacksplitdfa_src' arrays Len Bao
[PATCH] apparmor: fix use-after-free in policy replacement path Junxiao Chang
[PATCH] apparmor: fix use-after-free in policy replacement path John Johansen
[PATCH] apparmor: mediate the implicit connect of TCP fast open sendmsg Bryam Vargas via B4 Relay
[PATCH] apparmor: mediate the implicit connect of TCP fast open sendmsg John Johansen
[PATCH] apparmor: mv get_loaddata_common_ref() into CONFIG_SECURITY_APPARMOR_EXPORT_BINARY block yaolu at kylinos.cn
[PATCH] apparmor: mv get_loaddata_common_ref() into CONFIG_SECURITY_APPARMOR_EXPORT_BINARY block John Johansen
[PATCH] cred: prevent slab cache merging for cred_jar Mohammed EL Kadiri
[PATCH] cred: prevent slab cache merging for cred_jar Kees Cook
[PATCH] cred: prevent slab cache merging for cred_jar Mohammed EL Kadiri
[PATCH] cred: prevent slab cache merging for cred_jar Kees Cook
[PATCH] cred: prevent slab cache merging for cred_jar Paul Moore
[PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker Doehyun Baek
[PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker Günther Noack
[PATCH] fork: Ensure copy_process() returns a valid error pointer on failure Shijia Hu
[PATCH] fork: Ensure copy_process() returns a valid error pointer on failure Alexei Starovoitov
[PATCH] fork: Ensure copy_process() returns a valid error pointer on failure Shijia Hu
[PATCH] hardening: Default randstruct off with rust for better allmodconfig support Mark Brown
[PATCH] hardening: Default randstruct off with rust for better allmodconfig support Kees Cook
[PATCH] hardening: Default randstruct off with rust for better allmodconfig support Miguel Ojeda
[PATCH] keys: allow request-key path to be configured via Kconfig Gary Guo
[PATCH] keys: allow request-key path to be configured via Kconfig Serge E. Hallyn
[PATCH] keys: allow request-key path to be configured via Kconfig Jarkko Sakkinen
[PATCH] keys: allow request-key path to be configured via Kconfig Jarkko Sakkinen
[PATCH] keys: allow request-key path to be configured via Kconfig Gary Guo
[PATCH] keys: allow request-key path to be configured via Kconfig Jarkko Sakkinen
[PATCH] keys: allow request-key path to be configured via Kconfig Jarkko Sakkinen
[PATCH] keys: allow request-key path to be configured via Kconfig Gary Guo
[PATCH] keys: allow request-key path to be configured via Kconfig Gary Guo
[PATCH] keys: allow request-key path to be configured via Kconfig Jarkko Sakkinen
[PATCH] KEYS: avoid filesystem reclaim while holding keyring->sem Mohammed EL Kadiri
[PATCH] KEYS: avoid filesystem reclaim while holding keyring->sem Eric Biggers
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: Pin request_key_auth payload in instantiate paths eee sss
[PATCH] keys: Pin request_key_auth payload in instantiate paths Jarkko Sakkinen
[PATCH] keys: prevent slab cache merging for key_jar Mohammed EL Kadiri
[PATCH] keys: prevent slab cache merging for key_jar Vlastimil Babka (SUSE)
[PATCH] keys: prevent slab cache merging for key_jar Jarkko Sakkinen
[PATCH] keys: prevent slab cache merging for key_jar Jarkko Sakkinen
[PATCH] keys: prevent slab cache merging for key_jar Vlastimil Babka (SUSE)
[PATCH] keys: prevent slab cache merging for key_jar Jarkko Sakkinen
[PATCH] keys: prevent slab cache merging for key_jar Mohammed EL Kadiri
[PATCH] keys: prevent slab cache merging for key_jar Jarkko Sakkinen
[PATCH] keys: trusted: dcp: Make dcp_trusted_key_ops const Jarkko Sakkinen
[PATCH] KEYS: Use acquire when reading state in keyring search Gui-Dong Han
[PATCH] KEYS: Use acquire when reading state in keyring search Jarkko Sakkinen
[PATCH] landlock: Documentation wording cleanups Günther Noack
[PATCH] landlock: shrink tsync works[] on partial allocation failure Peng Hao
[PATCH] landlock: shrink tsync works[] on partial allocation failure Günther Noack
[PATCH] landlock: shrink tsync works[] on partial allocation failure Hao Peng
[PATCH] landlock: work around gcc-16 -Wuninitialized warning Arnd Bergmann
[PATCH] lsm,bpf: fix security_bpf_prog_load() error handling Alexei Starovoitov
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM Sebastian Bockholt
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM Casey Schaufler
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM Sebastian Bockholt
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM Casey Schaufler
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM Sebastian Bockholt
[PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr() John Johansen
[PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr() Paul Moore
[PATCH] security: clarify task_prctl hook documentation Bill Roberts
[PATCH] security: clarify task_prctl hook documentation Casey Schaufler
[PATCH] security: clarify task_prctl hook documentation Serge E. Hallyn
[PATCH] selftests/landlock: explicitly disable audit Mickaël Salaün
[PATCH] selftests/landlock: explicitly disable audit Mickaël Salaün
[PATCH] selftests/landlock: explicitly disable audit Maximilian Heyne
[PATCH] selinux: check connect-related permissions on TCP Fast Open Bryam Vargas
[PATCH] tests: add a regression test for the TCP Fast Open connect-mediation bypass Bryam Vargas via B4 Relay
[PATCH] tests: add a regression test for the TCP Fast Open connect-mediation bypass John Johansen
[PATCH] tomoyo: Enforce connect policy in TCP Fast Open Matthieu Buffet
[PATCH bpf-next 0/5] Verify BPF signed loader at load time Daniel Borkmann
[PATCH bpf-next 0/5] Verify BPF signed loader at load time Paul Moore
[PATCH bpf-next 0/5] Verify BPF signed loader at load time Daniel Borkmann
[PATCH bpf-next 0/5] Verify BPF signed loader at load time Paul Moore
[PATCH bpf-next 1/5] bpf: Verify signed loader metadata at load time Daniel Borkmann
[PATCH bpf-next 2/5] libbpf: Drop in-loader metadata check for load-time verification Daniel Borkmann
[PATCH bpf-next 3/5] bpftool: Cover loader metadata with the program signature Daniel Borkmann
[PATCH bpf-next 3/5] bpftool: Cover loader metadata with the program signature bot+bpf-ci at kernel.org
[PATCH bpf-next 4/5] selftests/bpf: Verify load-time signed loader metadata Daniel Borkmann
[PATCH bpf-next 5/5] Documentation/bpf: Add BPF signing and enforcement doc Daniel Borkmann
[PATCH bpf-next v2 0/5] Verify BPF signed loader at load time Daniel Borkmann
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Daniel Borkmann
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Paul Moore
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time bot+bpf-ci at kernel.org
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Daniel Borkmann
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Paul Moore
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Daniel Borkmann
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Paul Moore
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Alexei Starovoitov
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Paul Moore
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Alexei Starovoitov
[PATCH bpf-next v2 1/5] bpf: Verify signed loader metadata at load time Paul Moore
[PATCH bpf-next v2 2/5] libbpf: Drop in-loader metadata check for load-time verification Daniel Borkmann
[PATCH bpf-next v2 3/5] bpftool: Cover loader metadata with the program signature Daniel Borkmann
[PATCH bpf-next v2 4/5] selftests/bpf: Verify load-time signed loader metadata Daniel Borkmann
[PATCH bpf-next v2 5/5] Documentation/bpf: Add BPF signing and enforcement doc Daniel Borkmann
[PATCH bpf-next v3 0/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling bot+bpf-ci at kernel.org
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Christian Brauner
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Alexei Starovoitov
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Alexei Starovoitov
[PATCH bpf-next v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH bpf-next v3 2/2] selftests/bpf: add tests for bpf_init_inode_xattr kfunc David Windsor
[PATCH net v2 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr Paul Moore
[PATCH net v2 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr Paul Moore
[PATCH net v2] netlabel: validate unlabeled mask attribute length Paul Moore
[PATCH net v2] netlabel: validate unlabeled mask attribute length Jakub Kicinski
[PATCH net v2] netlabel: validate unlabeled mask attribute length Paul Moore
[PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE) david.laight.linux at gmail.com
[PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE) Jarkko Sakkinen
[PATCH RESEND 1/1] yama: clean-up ptrace relations upon activating YAMA_SCOPE_NO_ATTACH Paul Moore
[PATCH RESEND] apparmor: Fix string overrun due to missing termination John Johansen
[PATCH v10 0/9] Implement LANDLOCK_ADD_RULE_QUIET Tingmao Wang
[PATCH v10 1/9] landlock: Add a place for flags to layer rules Tingmao Wang
[PATCH v10 1/9] landlock: Add a place for flags to layer rules Mickaël Salaün
[PATCH v10 1/9] landlock: Add a place for flags to layer rules Tingmao Wang
[PATCH v10 2/9] landlock: Add API support and docs for the quiet flags Tingmao Wang
[PATCH v10 2/9] landlock: Add API support and docs for the quiet flags Mickaël Salaün
[PATCH v10 3/9] landlock: Suppress logging when quiet flag is present Tingmao Wang
[PATCH v10 3/9] landlock: Suppress logging when quiet flag is present Mickaël Salaün
[PATCH v10 3/9] landlock: Suppress logging when quiet flag is present Tingmao Wang
[PATCH v10 4/9] samples/landlock: Add quiet flag support to sandboxer Tingmao Wang
[PATCH v10 4/9] samples/landlock: Add quiet flag support to sandboxer Mickaël Salaün
[PATCH v10 4/9] samples/landlock: Add quiet flag support to sandboxer Tingmao Wang
[PATCH v10 5/9] selftests/landlock: Replace hard-coded 16 with a constant Tingmao Wang
[PATCH v10 6/9] selftests/landlock: add tests for quiet flag with fs rules Tingmao Wang
[PATCH v10 6/9] selftests/landlock: add tests for quiet flag with fs rules Justin Suess
[PATCH v10 6/9] selftests/landlock: add tests for quiet flag with fs rules Tingmao Wang
[PATCH v10 7/9] selftests/landlock: add tests for quiet flag with net rules Tingmao Wang
[PATCH v10 8/9] selftests/landlock: Add tests for quiet flag with scope Tingmao Wang
[PATCH v10 9/9] selftests/landlock: Add tests for invalid use of quiet flag Tingmao Wang
[PATCH v10 9/9] selftests/landlock: Add tests for invalid use of quiet flag Mickaël Salaün
[PATCH v11 0/9] Implement LANDLOCK_ADD_RULE_QUIET Tingmao Wang
[PATCH v11 1/9] landlock: Add a place for flags to layer rules Tingmao Wang
[PATCH v11 2/9] landlock: Add API support and docs for the quiet flags Tingmao Wang
[PATCH v11 3/9] landlock: Suppress logging when quiet flag is present Tingmao Wang
[PATCH v11 4/9] samples/landlock: Add quiet flag support to sandboxer Tingmao Wang
[PATCH v11 5/9] selftests/landlock: Replace hard-coded 16 with a constant Tingmao Wang
[PATCH v11 6/9] selftests/landlock: add tests for quiet flag with fs rules Tingmao Wang
[PATCH v11 7/9] selftests/landlock: add tests for quiet flag with net rules Tingmao Wang
[PATCH v11 8/9] selftests/landlock: Add tests for quiet flag with scope Tingmao Wang
[PATCH v11 9/9] selftests/landlock: Add tests for invalid use of quiet flag Tingmao Wang
[PATCH v17 00/10] rust: add `Ownable` trait and `Owned` type Andreas Hindborg
[PATCH v17 00/10] rust: add `Ownable` trait and `Owned` type Miguel Ojeda
[PATCH v17 01/10] rust: alloc: add `KBox::into_non_null` Andreas Hindborg
[PATCH v17 01/10] rust: alloc: add `KBox::into_non_null` Alice Ryhl
[PATCH v17 01/10] rust: alloc: add `KBox::into_non_null` Gary Guo
[PATCH v17 02/10] rust: types: Add Ownable/Owned types Andreas Hindborg
[PATCH v17 02/10] rust: types: Add Ownable/Owned types Alice Ryhl
[PATCH v17 02/10] rust: types: Add Ownable/Owned types Andreas Hindborg
[PATCH v17 03/10] rust: implement `ForeignOwnable` for `Owned` Andreas Hindborg
[PATCH v17 03/10] rust: implement `ForeignOwnable` for `Owned` Gary Guo
[PATCH v17 03/10] rust: implement `ForeignOwnable` for `Owned` Andreas Hindborg
[PATCH v17 04/10] rust: page: update formatting of `use` statements Andreas Hindborg
[PATCH v17 05/10] rust: page: convert to `Ownable` Andreas Hindborg
[PATCH v17 05/10] rust: page: convert to `Ownable` Alice Ryhl
[PATCH v17 05/10] rust: page: convert to `Ownable` Alice Ryhl
[PATCH v17 05/10] rust: page: convert to `Ownable` Andreas Hindborg
[PATCH v17 05/10] rust: page: convert to `Ownable` Andreas Hindborg
[PATCH v17 06/10] rust: rename `AlwaysRefCounted` to `RefCounted`. Andreas Hindborg
[PATCH v17 06/10] rust: rename `AlwaysRefCounted` to `RefCounted`. Onur Özkan
[PATCH v17 06/10] rust: rename `AlwaysRefCounted` to `RefCounted`. Andreas Hindborg
[PATCH v17 07/10] rust: Add missing SAFETY documentation for `ARef` example Andreas Hindborg
[PATCH v17 08/10] rust: aref: update formatting of use statements Andreas Hindborg
[PATCH v17 08/10] rust: aref: update formatting of use statements Onur Özkan
[PATCH v17 08/10] rust: aref: update formatting of use statements Andreas Hindborg
[PATCH v17 09/10] rust: Add `OwnableRefCounted` Andreas Hindborg
[PATCH v17 10/10] rust: page: add `from_raw()` Andreas Hindborg
[PATCH v17 10/10] rust: page: add `from_raw()` Onur Özkan
[PATCH v18 0/8] rust: add `Ownable` trait and `Owned` type Andreas Hindborg
[PATCH v18 1/8] rust: alloc: add `KBox::into_non_null` Andreas Hindborg
[PATCH v18 2/8] rust: types: Add Ownable/Owned types Andreas Hindborg
[PATCH v18 3/8] rust: implement `ForeignOwnable` for `Owned` Andreas Hindborg
[PATCH v18 3/8] rust: implement `ForeignOwnable` for `Owned` Gary Guo
[PATCH v18 3/8] rust: implement `ForeignOwnable` for `Owned` Andreas Hindborg
[PATCH v18 4/8] rust: page: convert to `Ownable` Andreas Hindborg
[PATCH v18 4/8] rust: page: convert to `Ownable` Gary Guo
[PATCH v18 5/8] rust: rename `AlwaysRefCounted` to `RefCounted`. Andreas Hindborg
[PATCH v18 6/8] rust: Add missing SAFETY documentation for `ARef` example Andreas Hindborg
[PATCH v18 7/8] rust: Add `OwnableRefCounted` Andreas Hindborg
[PATCH v18 8/8] rust: page: add `from_raw()` Andreas Hindborg
[PATCH v2 00/16] Bump minimum version of LLVM for building the kernel to 17.0.1 Nathan Chancellor
[PATCH v2 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT Mickaël Salaün
[PATCH v2 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT Günther Noack
[PATCH v2 1/9] security: add LSM blob and hooks for namespaces Mickaël Salaün
[PATCH v2 1/9] security: add LSM blob and hooks for namespaces Paul Moore
[PATCH v2 9/9] landlock: Add documentation for capability and namespace restrictions Günther Noack
[PATCH v2] cred: prevent slab cache merging for cred_jar Mohammed EL Kadiri
[PATCH v2] hardening: Default randstruct off with rust for better allmodconfig support Mark Brown
[PATCH v2] hardening: Default randstruct off with rust for better allmodconfig support Miguel Ojeda
[PATCH v2] hardening: Default randstruct off with rust for better allmodconfig support Kees Cook
[PATCH v2] keys: prevent slab cache merging for key_jar Mohammed EL Kadiri
[PATCH v2] keys: prevent slab cache merging for key_jar Jarkko Sakkinen
[PATCH v2] landlock: Set audit_net.sk for socket access checks Mickaël Salaün
[PATCH v2] tpm: use a map for tpm2_calc_ordinal_duration() Benoit HOUYERE
[PATCH v2] tpm: use a map for tpm2_calc_ordinal_duration() Jarkko Sakkinen
[PATCH v2 stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls Cai Xinchen
[PATCH v2 stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks Cai Xinchen
[PATCH v2 stable/linux-6.18.y 2/2] selinux: fix overlayfs mmap() and mprotect() access checks Cai Xinchen
[PATCH v2 v2] evm: check return values of crypto_shash functions Roberto Sassu
[PATCH v3 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT Günther Noack
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling David Windsor
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Christian Brauner
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Alexei Starovoitov
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Alexei Starovoitov
[PATCH v3 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH v3 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid Günther Noack
[PATCH v3 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT Günther Noack
[PATCH v3 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT Mickaël Salaün
[PATCH v3 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT Günther Noack
[PATCH v3 2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial Günther Noack
[PATCH v3 3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_WHITEOUT Günther Noack
[PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask Aaron Tomlin
[PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask Paul Moore
[PATCH v4 0/2] Delete task_euid() Paul Moore
[PATCH v4 0/2] Delete task_euid() Alice Ryhl
[PATCH v4 0/2] Delete task_euid() Paul Moore
[PATCH v4 0/2] Delete task_euid() Alice Ryhl
[PATCH v4 0/2] landlock: fix SCOPE_SIGNAL bypass on the SIGIO/fowner path Bryam Vargas
[PATCH v4 0/7] landlock: Add UDP access control support Matthieu Buffet
[PATCH v4 0/7] landlock: Add UDP access control support Mickaël Salaün
[PATCH v4 0/7] landlock: Add UDP access control support Matthieu Buffet
[PATCH v4 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Bryam Vargas
[PATCH v4 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Günther Noack
[PATCH v4 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Bryam Vargas
[PATCH v4 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Günther Noack
[PATCH v4 2/2] selftests/landlock: test SCOPE_SIGNAL on the SIGIO/fowner pgid path Bryam Vargas
[PATCH v4 2/7] landlock: Add UDP connect() access control Matthieu Buffet
[PATCH v4 2/7] landlock: Add UDP connect() access control Matthieu Buffet
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Sudeep Holla
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Sudeep Holla
[PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v5 0/2] landlock: fix SCOPE_SIGNAL bypass on the SIGIO/fowner path Bryam Vargas
[PATCH v5 0/4] introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v5 0/6] landlock: Add UDP access control support Matthieu Buffet
[PATCH v5 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Bryam Vargas
[PATCH v5 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Günther Noack
[PATCH v5 1/4] security: lsm: allow LSMs to register for late_initcall_sync init Yeoreum Yun
[PATCH v5 1/6] landlock: Add UDP bind() access control Matthieu Buffet
[PATCH v5 11/13] ima: Support staging and deleting N measurements entries steven chen
[PATCH v5 12/13] ima: Return error on deleting measurements already copied during kexec Mimi Zohar
[PATCH v5 2/2] selftests/landlock: test SCOPE_SIGNAL on the SIGIO/fowner pgid path Bryam Vargas
[PATCH v5 2/2] selftests/landlock: test SCOPE_SIGNAL on the SIGIO/fowner pgid path Günther Noack
[PATCH v5 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v5 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Mimi Zohar
[PATCH v5 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v5 2/6] landlock: Add UDP send+connect access control Matthieu Buffet
[PATCH v5 2/6] landlock: Add UDP send+connect access control Mickaël Salaün
[PATCH v5 3/4] security: ima: rename boot_aggregate when ima is initialised at late_sync Yeoreum Yun
[PATCH v5 3/4] security: ima: rename boot_aggregate when ima is initialised at late_sync Mimi Zohar
[PATCH v5 3/4] security: ima: rename boot_aggregate when ima is initialised at late_sync Yeoreum Yun
[PATCH v5 3/6] selftests/landlock: Add tests for UDP bind/connect Matthieu Buffet
[PATCH v5 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v5 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v5 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v5 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v5 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v5 4/6] selftests/landlock: Add tests for UDP send Matthieu Buffet
[PATCH v5 5/6] samples/landlock: Add sandboxer UDP access control Matthieu Buffet
[PATCH v5 6/6] landlock: Add documentation for UDP support Matthieu Buffet
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Song Liu
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Christian Brauner
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Song Liu
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Christian Brauner
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Bryam Vargas
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Song Liu
[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks Christian Brauner
[PATCH v6 0/4] introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v6 00/12] ima: Exporting and deleting IMA measurement records from kernel memory Roberto Sassu
[PATCH v6 01/12] ima: Remove ima_h_table structure Roberto Sassu
[PATCH v6 02/12] ima: Replace static htable queue with dynamically allocated array Roberto Sassu
[PATCH v6 03/12] ima: Introduce per binary measurements list type ima_num_records counter Roberto Sassu
[PATCH v6 04/12] ima: Introduce per binary measurements list type binary_runtime_size value Roberto Sassu
[PATCH v6 05/12] ima: Introduce _ima_measurements_start() and _ima_measurements_next() Roberto Sassu
[PATCH v6 06/12] ima: Mediate open/release method of the measurements list Roberto Sassu
[PATCH v6 07/12] ima: Use snprintf() in create_securityfs_measurement_lists Roberto Sassu
[PATCH v6 08/12] ima: Introduce ima_dump_measurement() Roberto Sassu
[PATCH v6 09/12] ima: Add support for staging measurements with prompt Roberto Sassu
[PATCH v6 09/12] ima: Add support for staging measurements with prompt Mimi Zohar
[PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init Yeoreum Yun
[PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init Mimi Zohar
[PATCH v6 1/4] security: lsm: allow LSMs to register for late_initcall_sync init Paul Moore
[PATCH v6 10/12] ima: Add support for flushing the hash table when staging measurements Roberto Sassu
[PATCH v6 10/12] ima: Add support for flushing the hash table when staging measurements Mimi Zohar
[PATCH v6 11/12] ima: Support staging and deleting N measurements records Roberto Sassu
[PATCH v6 11/12] ima: Support staging and deleting N measurements records Roberto Sassu
[PATCH v6 11/12] ima: Support staging and deleting N measurements records steven chen
[PATCH v6 12/12] doc: security: Add documentation of exporting and deleting IMA measurements Roberto Sassu
[PATCH v6 12/12] doc: security: Add documentation of exporting and deleting IMA measurements Mimi Zohar
[PATCH v6 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v6 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Mimi Zohar
[PATCH v6 2/4] security: ima: introduce IMA_INIT_LATE_SYNC option Yeoreum Yun
[PATCH v6 3/4] security: ima: rename boot_aggregate when ima is initialised at late_sync Yeoreum Yun
[PATCH v6 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v6 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Jarkko Sakkinen
[PATCH v6 4/4] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in Yeoreum Yun
[PATCH v7 00/12] ima: Exporting and deleting IMA measurement records from kernel memory Roberto Sassu
[PATCH v7 00/12] ima: Exporting and deleting IMA measurement records from kernel memory Mimi Zohar
[PATCH v7 00/12] ima: Exporting and deleting IMA measurement records from kernel memory Roberto Sassu
[PATCH v7 01/12] ima: Remove ima_h_table structure Roberto Sassu
[PATCH v7 02/12] ima: Replace static htable queue with dynamically allocated array Roberto Sassu
[PATCH v7 03/12] ima: Introduce per binary measurements list type ima_num_records counter Roberto Sassu
[PATCH v7 04/12] ima: Introduce per binary measurements list type binary_runtime_size value Roberto Sassu
[PATCH v7 05/12] ima: Introduce _ima_measurements_start() and _ima_measurements_next() Roberto Sassu
[PATCH v7 06/12] ima: Mediate open/release method of the measurements list Roberto Sassu
[PATCH v7 07/12] ima: Use snprintf() in create_securityfs_measurement_lists Roberto Sassu
[PATCH v7 08/12] ima: Introduce ima_dump_measurement() Roberto Sassu
[PATCH v7 09/12] ima: Add support for staging measurements with prompt Roberto Sassu
[PATCH v7 10/12] ima: Add support for flushing the hash table when staging measurements Roberto Sassu
[PATCH v7 11/12] ima: Support staging and deleting N measurements records Roberto Sassu
[PATCH v7 12/12] doc: security: Add documentation of exporting and deleting IMA measurements Roberto Sassu
[PATCH v9 0/9] Implement LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v9 1/9] landlock: Add and use landlock_walk_path_up() helper Justin Suess
[PATCH v9 2/9] landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT user API Justin Suess
[PATCH v9 3/9] landlock: Return inserted rule from landlock_insert_rule() Justin Suess
[PATCH v9 4/9] landlock: Move log_fs_change_topology_dentry() above current_check_refer_path() Justin Suess
[PATCH v9 5/9] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v9 6/9] landlock: Add documentation for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v9 7/9] samples/landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT to landlock-sandboxer Justin Suess
[PATCH v9 8/9] selftests/landlock: Add selftests for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[PATCH v9 9/9] landlock: Add KUnit tests for LANDLOCK_ADD_RULE_NO_INHERIT Justin Suess
[RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass Matthieu Buffet
[RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass Bryam Vargas
[RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass Matthieu Buffet
[RFC PATCH 1/2] landlock: fix TCP Fast Open connection bypass Bryam Vargas
[RFC PATCH 2/2] selftests/landlock: Add test for TCP fast open Matthieu Buffet
[RFC PATCH] hornet: adjustments for the updated bpf_map_ops::map_get_hash() API Paul Moore
[RFC PATCH] hornet: adjustments for the updated bpf_map_ops::map_get_hash() API Blaise Boscaccy
[stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls Cai Xinchen
[stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls Greg KH
[stable/linux-6.12.y 1/2] lsm: add backing_file LSM hooks Cai Xinchen
[stable/linux-6.12.y 2/2] selinux: fix overlayfs mmap() and mprotect() access checks Cai Xinchen
[stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls Cai Xinchen
[stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks Cai Xinchen
[stable/linux-6.18.y 1/2] lsm: add backing_file LSM hooks Greg KH
[stable/linux-6.18.y 2/2] selinux: fix overlayfs mmap() and mprotect() access checks Cai Xinchen
[stable/linux-6.18.y 2/2] selinux: fix overlayfs mmap() and mprotect() access checks Greg KH
[stable/linux-6.6.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls Cai Xinchen
[stable/linux-6.6.y 1/3] fs: prepare for adding LSM blob to backing_file Cai Xinchen
[stable/linux-6.6.y 2/3] lsm: add backing_file LSM hooks Cai Xinchen
[stable/linux-6.6.y 3/3] selinux: fix overlayfs mmap() and mprotect() access checks Cai Xinchen
[syzbot] [tomoyo?] KMSAN: uninit-value in tomoyo_path_chown (3) syzbot
[syzbot] Monthly tomoyo report (Jun 2026) syzbot
AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM) Bryam Vargas
AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM) Ryan Lee
AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM) John Johansen
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Bryam Vargas
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Jens Axboe
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Bryam Vargas
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Jens Axboe
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Günther Noack
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Mickaël Salaün
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Jens Axboe
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Günther Noack
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Bryam Vargas
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Günther Noack
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD Bryam Vargas
Landlock: LANDLOCK_ACCESS_NET_CONNECT_TCP bypass via TCP Fast Open Bryam Vargas
Landlock: LANDLOCK_ACCESS_NET_CONNECT_TCP bypass via TCP Fast Open Mickaël Salaün
Landlock: LANDLOCK_ACCESS_NET_CONNECT_TCP bypass via TCP Fast Open Matthieu Buffet
Landstrip Jarkko Sakkinen
Sashiko reviews for the LSM mailing list Mickaël Salaün
Sashiko reviews for the LSM mailing list Paul Moore
Sashiko reviews for the LSM mailing list Mickaël Salaün
Sashiko reviews for the LSM mailing list Paul Moore
Sashiko reviews for the LSM mailing list Mickaël Salaün
Sashiko reviews for the LSM mailing list Paul Moore
Sashiko reviews for the LSM mailing list Mickaël Salaün
Sashiko reviews for the LSM mailing list Roman Gushchin
Sashiko reviews for the LSM mailing list Paul Moore
security_inode_follow_link: KASAN UAF localization report David Maximiliano Hermitte
security_task_prctl: why -ENOSYS William Roberts
security_task_prctl: why -ENOSYS Serge E. Hallyn

Last message date: Fri Jun 26 02:40:58 UTC 2026
Archived on: Fri Jun 26 02:15:07 UTC 2026

Messages sorted by: [ thread ] [ author ] [ date ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).