August 2026 Archives by date

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

Starting: Sat Aug 1 10:50:28 UTC 2026
Ending: Wed Aug 26 21:20:56 UTC 2026
Messages: 375

[PATCH -next,v3] ima: add cond_resched() in ima_calc_file_hash_tfm loop cuigaosheng
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Baoquan He
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Jan Sebastian Götte
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Dave Young
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Jan Sebastian Götte
[PATCH v6 bpf-next 3/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH v6 bpf-next 3/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling Paul Moore
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump David Howells
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Dave Young
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Dave Young
[PATCH] ima: fix out-of-bounds read in xattr_verify() Mimi Zohar
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump Jan Sebastian Götte
[PATCH v2] ima: fix out-of-bounds read in xattr_verify() Lincoln Wallace
[PATCH v3 0/4] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v3 2/4] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v3 3/4] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v3 4/4] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler Justin Suess
[PATCH net v2] netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init() Jakub Kicinski
[syzbot] [lsm?] memory leak in prepare_creds (7) syzbot
Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8 Jiri Vozar
[PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit cem at kernel.org
[PATCH v4 1/5] xfs: fix capability check in xfs cem at kernel.org
[PATCH v4 2/5] capability: Add new capable_noaudit cem at kernel.org
[PATCH v4 3/5] quota: Don't issue audit messages on quota enforcing cem at kernel.org
[PATCH v4 4/5] xfs: replace ns_capable_noaudit cem at kernel.org
[PATCH v4 5/5] capability: unexport has_capability_noaudit cem at kernel.org
[PATCH v5 13/14] kbuild: move handling of module stripping to Makefile.lib Nicolas Schier
[PATCH v5 14/14] kbuild: make CONFIG_MODULE_HASHES compatible with module stripping Nicolas Schier
Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8 Stephen Smalley
[PATCH v4 1/5] xfs: fix capability check in xfs Christoph Hellwig
[PATCH v4 4/5] xfs: replace ns_capable_noaudit Christoph Hellwig
[PATCH] fs: fix user path of nested backing files Paul Moore
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder Justin Suess
[PATCH v6] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function Andreas Hindborg
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() Jann Horn
[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support Mark Brown
[PATCH v6] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function Miguel Ojeda
[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support Paul Moore
[REGRESSION] apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7 Chengfeng Lin
[PATCH v7] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function Andreas Hindborg
[GIT PULL] selinux/selinux-pr-20260805 Paul Moore
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Justin Suess
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Justin Suess
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Paul Moore
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() John Johansen
[REGRESSION] apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7 John Johansen
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() John Johansen
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Justin Suess
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() Peter Zijlstra
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() John Johansen
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() Jann Horn
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section() Jann Horn
[PATCH v2] apparmor: fix cred UAF caused by begin_current_label_crit_section() Jann Horn
[GIT PULL] selinux/selinux-pr-20260805 pr-tracker-bot at kernel.org
[PATCH v3 07/20] tracing: Add __print_untrusted_str() Mickaël Salaün
[PATCH v4 1/5] xfs: fix capability check in xfs sergeh at kernel.org
[PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset Mickaël Salaün
[PATCH v2 01/17] landlock: Prepare ruleset and domain type split Mickaël Salaün
[PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset Mickaël Salaün
[PATCH v4 2/5] capability: Add new capable_noaudit sergeh at kernel.org
[PATCH v4 5/5] capability: unexport has_capability_noaudit sergeh at kernel.org
[PATCH] smack: fix cred UAF in smack_file_send_sigiotask() Jann Horn
[PATCH] smack: fix cred UAF in smack_file_send_sigiotask() Jann Horn
[PATCH] cred: clarify that task_struct::cred is only for the current task Jann Horn
[PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit sergeh at kernel.org
[PATCH v4 4/5] xfs: replace ns_capable_noaudit sergeh at kernel.org
[PATCH v2] apparmor: fix cred UAF caused by begin_current_label_crit_section() John Johansen
[PATCH v5 1/2] treewide: Add a flag to detect the Apple T2 chip Andy Shevchenko
[PATCH v4 5/5] capability: unexport has_capability_noaudit Carlos Maiolino
[PATCH v4 4/5] xfs: replace ns_capable_noaudit Carlos Maiolino
[PATCH v3 2/4] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
[PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
[PATCH v3 3/4] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
[PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Paul Moore
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Justin Suess
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate syzbot
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces Maoyi Xie
[PATCH] apparmor: fix integer overflow in verify_tags() bounds check Fabrice Derepas
[PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v4 1/5] landlock: Check landlock_restrict_self(2)'s flags before privileges Justin Suess
[PATCH v4 3/5] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v4 4/5] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v4 5/5] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler Justin Suess
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH v3 04/12] landlock: Rename quiet_masks to quiet_access Tingmao Wang
[PATCH v3 05/12] landlock: Wrap per-layer access masks in struct layer_config Tingmao Wang
[PATCH v3 06/12] landlock: Copy the quiet mask in the ruleset merge helper Tingmao Wang
[PATCH v3 07/12] landlock: Enforce namespace use restrictions Tingmao Wang
[PATCH v3 08/12] landlock: Enforce capability restrictions Tingmao Wang
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Paul Moore
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets Justin Suess
[PATCH v4 2/5] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Justin Suess
[PATCH] apparmor: fix integer overflow in verify_tags() bounds check John Johansen
[PATCH] apparmor: fix integer overflow in verify_tags() bounds check John Johansen
[PATCH] apparmor: fix out-of-bounds write when null terminating a label vec Hyunwoo Kim
[PATCH] KEYS: trusted: Fix TPM teardown ordering Jarkko Sakkinen
[PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe secrets before kdump Jarkko Sakkinen
[PATCH 4/4] security/keys: zeroize key payloads before kdump Jarkko Sakkinen
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces Jarkko Sakkinen
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces James Bottomley
[PATCH] cred: clarify that task_struct::cred is only for the current task Paul Moore
[PATCH] apparmor: fix out-of-bounds write when null terminating a label vec John Johansen
[PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS Mickaël Salaün
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces Maoyi Xie
[PATCH v4 00/19] Landlock tracepoints Mickaël Salaün
[PATCH v4 01/19] landlock: Prepare ruleset and domain type split Mickaël Salaün
[PATCH v4 02/19] landlock: Move domain query functions to domain.c Mickaël Salaün
[PATCH v4 03/19] landlock: Split struct landlock_domain from struct landlock_ruleset Mickaël Salaün
[PATCH v4 04/19] landlock: Split denial logging from audit into common framework Mickaël Salaün
[PATCH v4 05/19] landlock: Decouple the per-denial logging decision from CONFIG_AUDIT Mickaël Salaün
[PATCH v4 06/19] landlock: Consolidate access-right and scope names in a shared header Mickaël Salaün
[PATCH v4 07/19] landlock: Add create_ruleset and free_ruleset tracepoints Mickaël Salaün
[PATCH v4 08/19] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints Mickaël Salaün
[PATCH v4 09/19] landlock: Add create_domain and free_domain tracepoints Mickaël Salaün
[PATCH v4 10/19] landlock: Add landlock_enforce_domain tracepoint Mickaël Salaün
[PATCH v4 11/19] landlock: Add tracepoints for rule checking Mickaël Salaün
[PATCH v4 12/19] landlock: Add landlock_deny_access_fs and landlock_deny_access_net Mickaël Salaün
[PATCH v4 13/19] landlock: Add tracepoints for ptrace and scope denials Mickaël Salaün
[PATCH v4 14/19] selftests/landlock: Add trace event test infrastructure and tests Mickaël Salaün
[PATCH v4 15/19] selftests/landlock: Add filesystem tracepoint tests Mickaël Salaün
[PATCH v4 16/19] selftests/landlock: Add network tracepoint tests Mickaël Salaün
[PATCH v4 17/19] selftests/landlock: Add scope and ptrace tracepoint tests Mickaël Salaün
[PATCH v4 18/19] selftests/landlock: Add landlock_enforce_domain trace tests Mickaël Salaün
[PATCH v4 19/19] landlock: Document tracepoints Mickaël Salaün
[PATCH 1/4] of/kexec: fix typo in comment (usable-memory-range) Rob Herring
[PATCH v4 00/19] Landlock tracepoints Steven Rostedt
[PATCH 3/4] mm/secretmem: zeroize secret pages before kdump David Hildenbrand (Arm)
[PATCH 4/4] security/keys: zeroize key payloads before kdump Jan Sebastian Götte
[PATCH 3/4] mm/secretmem: zeroize secret pages before kdump Jan Sebastian Götte
[PATCH 3/4] mm/secretmem: zeroize secret pages before kdump David Hildenbrand (Arm)
[PATCH 3/4] mm/secretmem: zeroize secret pages before kdump Jan Sebastian Götte
[PATCH] keys: fix lost wakeup when reaping a dead key type Karl Mehltretter
[PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) Jan Sebastian Götte
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Jan Sebastian Götte
[PATCH v2 02/13] crash-core: Flush caches on CRASH_WIPE_SECRETS Jan Sebastian Götte
[PATCH v2 03/13] arm64/mm: add set_direct_map_default_nosplit() Jan Sebastian Götte
[PATCH v2 04/13] mm/secretmem: wipe secret pages before kdump Jan Sebastian Götte
[PATCH v2 05/13] security/keys: wipe key payloads before kdump Jan Sebastian Götte
[PATCH v2 06/13] security/keys: implement wipe op for user-type keys Jan Sebastian Götte
[PATCH v2 07/13] security/keys: implement wipe op for big_key Jan Sebastian Götte
[PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys Jan Sebastian Götte
[PATCH v2 09/13] security/keys: implement wipe op for asymmetric keys Jan Sebastian Götte
[PATCH v2 10/13] rxrpc: implement wipe op for rxrpc keys Jan Sebastian Götte
[PATCH v2 11/13] fscrypt: wipe master keys before kdump Jan Sebastian Götte
[PATCH v2 12/13] crypto: api - wipe tfm contexts before kdump Jan Sebastian Götte
[PATCH v2 13/13] dm crypt: wipe key material before kdump Jan Sebastian Götte
[PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) Eric Biggers
[PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) Jan Sebastian Götte
[PATCH v3 3/12] security: Add LSM_AUDIT_DATA_NS for namespace audit records Paul Moore
[PATCH v2 13/13] dm crypt: wipe key material before kdump Milan Broz
[PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE) Eric Biggers
[REGRESSION] Apparmor deadlock in 6.12.101 in complain mode Mattias Åsander
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Baoquan He
[PATCH v2 13/13] dm crypt: wipe key material before kdump Jan Sebastian Götte
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Jan Sebastian Götte
[PATCH] ima: reject a kexec buffer whose declared size exceeds the buffer Fabrice Derepas
[PATCH] cred: remove RCU initializer for init_task.cred Jann Horn
[PATCH] cred: clarify that task_struct::cred is only for the current task Serge E. Hallyn
[PATCH] cred: clarify that task_struct::cred is only for the current task Paul Moore
[PATCH] cred: remove RCU initializer for init_task.cred Paul Moore
[PATCH 0/3] lib/crypto: Provide a function for zeroizing hmac_sha1_ctx Thomas Huth
[PATCH 1/3] crypto: Provide a wrapper for zeroizing hmac_sha1_ctx Thomas Huth
[PATCH 2/3] security: keys: trusted: always clear the hmac_sha1_ctx before returning Thomas Huth
[PATCH 3/3] lib/crypto: sha1: Use hmac_sha1_zeroize_ctx() instead of memzero_explicit() Thomas Huth
[PATCH v5 2/5] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Günther Noack
[PATCH v4 4/5] selftests/landlock: Test whiteout object behaviour in OverlayFS renames Günther Noack
[PATCH 0/3] lib/crypto: Provide a function for zeroizing hmac_sha1_ctx Eric Biggers
[PATCH 0/3] lib/crypto: Provide a function for zeroizing hmac_sha1_ctx Thomas Huth
[PATCH v6 0/6] landlock: Restrict whiteout object creation Günther Noack
[PATCH v6 1/6] selftests/landlock: Use an actual chardev for MAKE_CHAR audit test Günther Noack
[PATCH v6 2/6] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Günther Noack
[PATCH v6 3/6] selftests/landlock: Add tests for whiteout object creation Günther Noack
[PATCH v6 4/6] selftests/landlock: Add audit test for whiteout object creation Günther Noack
[PATCH v6 5/6] selftests/landlock: Test whiteout object behaviour in OverlayFS renames Günther Noack
[PATCH v6 6/6] landlock: Link the erratum documentation for whiteout objects Günther Noack
[PATCH v6 3/6] selftests/landlock: Add tests for whiteout object creation Günther Noack
[PATCH] lsm: update the BUILD_BUG_ON() in audit_log_lsm_data() Paul Moore
[PATCH] lsm: update the BUILD_BUG_ON() in audit_log_lsm_data() Paul Moore
[GIT PULL] Smack patches for 7.3 Casey Schaufler
[PATCH 0/7] Change skb secmarks to x-array indexes Casey Schaufler
[PATCH 1/7] net, smack: Create a function to set secmarks Casey Schaufler
[PATCH 2/7] LSM: Implement x array functions for secmarks Casey Schaufler
[PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop Casey Schaufler
[PATCH 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop Casey Schaufler
[PATCH 5/7] Smack: hooks for secctx_to_lsmprop and update_lsmprop Casey Schaufler
[PATCH 6/7] Apparmor: hooks for secctx_to_lsmprop and update_lsmprop Casey Schaufler
[PATCH 7/7] net, lsm: Change skb secmarks to x-array indexes Casey Schaufler
[PATCH] ima: bound line scan in ima_read_policy() to fix OOB read Fabrice Derepas
[PATCH v6 0/6] landlock: Restrict whiteout object creation Mickaël Salaün
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Justin Suess
[PATCH bpf-next 1/2] lsm: add bpf_security_locked_down() kfunc Justin Suess
[PATCH bpf-next 2/2] selftests/bpf: Test bpf_security_locked_down kfunc Justin Suess
[PATCH bpf-next 2/2] selftests/bpf: Test bpf_security_locked_down kfunc bot+bpf-ci at kernel.org
[PATCH bpf-next 1/2] lsm: add bpf_security_locked_down() kfunc bot+bpf-ci at kernel.org
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Lukas Wunner
[PATCH v4 01/19] landlock: Prepare ruleset and domain type split Tingmao Wang
[PATCH v4 05/19] landlock: Decouple the per-denial logging decision from CONFIG_AUDIT Tingmao Wang
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Baoquan He
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Baoquan He
[RFC] IMA: periodic runtime re-measurement of process .text/GOT Nicolai Kuntze
[REGRESSION] Apparmor deadlock in 6.12.101 in complain mode John Johansen
[PATCH v4 1/5] xfs: fix capability check in xfs Carlos Maiolino
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate Frederick Lawler
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate Mimi Zohar
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate Frederick Lawler
[GIT PULL] selinux/selinux-pr-20260814 Paul Moore
[GIT PULL] lsm/lsm-pr-20260814 Paul Moore
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate Mimi Zohar
IT教育で、新規事業 石嶋紗季
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Xiujianfeng
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Justin Suess
[PATCH v2 01/13] kexec: add CRASH_WIPE_SECRETS to wipe secrets before kdump Jan Sebastian Götte
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Kumar Kartikeya Dwivedi
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Xiujianfeng
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Nicolas Bouchinet
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Justin Suess
[RFC PATCH 0/3] smack: add file label preserve mechanism Casey Schaufler
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Justin Suess
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state David Windsor
[PATCH 0/2] ima: don't measure/appraise files on configfs Frederick Lawler
[PATCH 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Frederick Lawler
[PATCH 2/2] ima: don't measure/appraise files on configfs Frederick Lawler
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate Frederick Lawler
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Paul Moore
[PATCH 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem Jann Horn
[PATCH 1/3] proc: refactor /proc/$pid/mem to use struct as private_data Jann Horn
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Jann Horn
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state David Windsor
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state Paul Moore
[PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state David Windsor
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder Li Chen
[PATCH 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Breno Leitao
[RFC PATCH 12/24] fork: let kernel callers create embryonic tasks Li Chen
[PATCH 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Frederick Lawler
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Stephen Smalley
[RFC] IMA: periodic runtime re-measurement of process .text/GOT Mimi Zohar
[PATCH 2/2] ima: don't measure/appraise files on configfs Mimi Zohar
[PATCH v2 0/2] ima: don't measure/appraise files on configfs Frederick Lawler
[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Frederick Lawler
[PATCH v2 2/2] ima: don't measure/appraise files on configfs Frederick Lawler
[GIT PULL] selinux/selinux-pr-20260814 pr-tracker-bot at kernel.org
[GIT PULL] Smack patches for 7.3 pr-tracker-bot at kernel.org
[GIT PULL] lsm/lsm-pr-20260814 pr-tracker-bot at kernel.org
[PATCH RFC 0/3] pidfd: add task path ioctls Chen Linxuan via B4 Relay
[PATCH RFC 1/3] fs: Introduce task path helpers Chen Linxuan via B4 Relay
[PATCH RFC 2/3] pidfd: Use scoped cleanup for task access Chen Linxuan via B4 Relay
[PATCH RFC 3/3] pidfd: Add task path ioctls Chen Linxuan via B4 Relay
[GIT PULL] Landlock update for v7.3-rc1 Mickaël Salaün
[PATCH v4 09/19] landlock: Add create_domain and free_domain tracepoints Günther Noack
[PATCH v4 03/19] landlock: Split struct landlock_domain from struct landlock_ruleset Günther Noack
[PATCH 1/3] proc: refactor /proc/$pid/mem to use struct as private_data Jan Kara
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Jann Horn
[PATCH 1/3] proc: refactor /proc/$pid/mem to use struct as private_data David Hildenbrand (Arm)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) David Hildenbrand (Arm)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
Re: 回复: [RFC PATCH 0/3] smack: add file label preserve mechanism Casey Schaufler
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces Jarkko Sakkinen
[PATCH] keys: fix lost wakeup when reaping a dead key type Jarkko Sakkinen
[PATCH 0/3] lib/crypto: Provide a function for zeroizing hmac_sha1_ctx Jarkko Sakkinen
[PATCH v2] keys: fix lost wakeup when reaping a dead key type Karl Mehltretter
[PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit Carlos Maiolino
[PATCH 0/6] landlock: Add POSIX message queue scoping Günther Noack
[RFC] IMA: periodic runtime re-measurement of process .text/GOT James Bottomley
[PATCH] keys: translate request_key_auth pid for the reading procfs instance Maoyi Xie
[PATCH v2 3/6] landlock: Bump ABI for LANDLOCK_SCOPE_SYSV_MSG_QUEUE Günther Noack
[PATCH v2 3/6] landlock: Bump ABI for LANDLOCK_SCOPE_SYSV_MSG_QUEUE Justin Suess
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Stephen Smalley
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) David Hildenbrand (Arm)
[PATCH 3/4] mm/secretmem: zeroize secret pages before kdump David Hildenbrand (Arm)
[PATCH v2 3/6] landlock: Bump ABI for LANDLOCK_SCOPE_SYSV_MSG_QUEUE Justin Suess
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Jann Horn
[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support Kees Cook
[PATCH 1/3] proc: refactor /proc/$pid/mem to use struct as private_data Lorenzo Stoakes (ARM)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Lorenzo Stoakes (ARM)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support Miguel Ojeda
[GIT PULL] Landlock update for v7.3-rc1 pr-tracker-bot at kernel.org
[PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig Julian Braha
[PATCH] ima: reject modsig if detached data cannot be supplied Jérémy Jean
[PATCH v2 4/6] selftests/landlock: Test LANDLOCK_SCOPE_SYSV_MSG_QUEUE Günther Noack
[PATCH] landlock: Fix use-after-free of the source's parent directory Norbert Szetei
[GIT PULL] capabilities update for v7.3 Serge E. Hallyn
[GIT PULL] capabilities update for v7.3 Linus Torvalds
[GIT PULL] capabilities update for v7.3 pr-tracker-bot at kernel.org
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Günther Noack
[RFC] IMA: periodic runtime re-measurement of process .text/GOT Nicolai Kuntze
[GIT PULL] capabilities update for v7.3 Serge E. Hallyn
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Günther Noack
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Justin Suess
[PATCH] keys: Fix key_user use-after-free during ownership changes Chengfeng Ye
[PATCH] keys: Fix key_user use-after-free during ownership changes Chengfeng Ye
[PATCH] keys: Fix key_user use-after-free during ownership changes Chengfeng Ye
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Günther Noack
[syzbot] [apparmor?] WARNING in aa_policy_destroy syzbot
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Günther Noack
[PATCH] selftests/landlock: Fix snprintf truncation checks in test files Wang Yan
[PATCH v20 0/8] rust: add `Ownable` trait and `Owned` type Andreas Hindborg
[PATCH v20 1/8] rust: alloc: add `KBox::into_non_null` Andreas Hindborg
[PATCH v20 2/8] rust: types: Add Ownable/Owned types Andreas Hindborg
[PATCH v20 3/8] rust: implement `ForeignOwnable` for `Owned` Andreas Hindborg
[PATCH v20 4/8] rust: page: convert to `Ownable` Andreas Hindborg
[PATCH v20 5/8] rust: rename `AlwaysRefCounted` to `RefCounted`. Andreas Hindborg
[PATCH v20 6/8] rust: Add missing SAFETY documentation for `ARef` example Andreas Hindborg
[PATCH v20 7/8] rust: Add `OwnableRefCounted` Andreas Hindborg
[PATCH v20 8/8] rust: page: add `from_raw()` Andreas Hindborg
[PATCH] keys: reject descriptions that exceed the index length Daehyeon Ko
[PATCH v20 6/8] rust: Add missing SAFETY documentation for `ARef` example Miguel Ojeda
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Justin Suess
[RFC] IMA: periodic runtime re-measurement of process .text/GOT Mimi Zohar
[PATCH 0/2] lsm: expose mount idmaps to inode hooks Daan De Meyer via B4 Relay
[PATCH 1/2] lsm: expose mount idmaps to inode hooks Daan De Meyer via B4 Relay
[PATCH 2/2] selftests/bpf: verify mount idmaps reach inode hooks Daan De Meyer via B4 Relay
[RFC] IMA: periodic runtime re-measurement of process .text/GOT Mimi Zohar
[PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig Mimi Zohar
[PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig Julian Braha
[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates Maxime Bélair
[PATCH] ima: reject modsig if detached data cannot be supplied Mimi Zohar
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues Günther Noack
[PATCH] ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX Julian Braha
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection Jann Horn
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
Re: 回复: 回复: [RFC PATCH 0/3] smack: add file label preserve mechanism Casey Schaufler
[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates Aurelien Jarno
[Bug] landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader poppet lovelace
[PATCH v20 1/8] rust: alloc: add `KBox::into_non_null` Danilo Krummrich
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Christian Brauner
[PATCH v20 7/8] rust: Add `OwnableRefCounted` Danilo Krummrich
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Christian Brauner
[PATCH v20 4/8] rust: page: convert to `Ownable`' Alice Ryhl
[PATCH v20 4/8] rust: page: convert to `Ownable` Danilo Krummrich
[PATCH v20 7/8] rust: Add `OwnableRefCounted` Gary Guo
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH v2] keys: fix lost wakeup when reaping a dead key type Jarkko Sakkinen
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Breno Leitao
[PATCH] keys: translate request_key_auth pid for the reading procfs instance Jarkko Sakkinen
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Frederick Lawler
[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Mimi Zohar
[PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem Jann Horn
[PATCH v2 1/3] proc: refactor /proc/$pid/mem to use struct as private_data Jann Horn
[PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[PATCH v2 3/3] selinux: require PROCESS__PTRACE for FOLL_FORCE introspection Jann Horn
[PATCH v2 3/3] selinux: require PROCESS__PTRACE for FOLL_FORCE introspection Stephen Smalley
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder Mateusz Guzik
[RFC PATCH] smack: preserve low-integrity labels on copy via whitelist Tang Peter
[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h Breno Leitao
[PATCH v20 6/8] rust: Add missing SAFETY documentation for `ARef` example Andreas Hindborg
[PATCH] ima: bound line scan in ima_read_policy() to fix OOB read Roberto Sassu
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Christian Brauner
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Christian Brauner
[PATCH] selftests/landlock: Fix snprintf truncation checks in test files Günther Noack
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Christian Brauner
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Lorenzo Stoakes (ARM)
[PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len Cen Zhang (Microsoft Security FORGE Labs)
[GIT PULL] AppArmor updates for v7.3 John Johansen
[PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS) Jann Horn
[GIT PULL] AppArmor updates for v7.3 pr-tracker-bot at kernel.org
[PATCH] ima: select the SHA384 PCR bank for the boot aggregate Singh, Jashandeep
[PATCH] ima: select the SHA384 PCR bank for the boot aggregate Mimi Zohar

Last message date: Wed Aug 26 21:20:56 UTC 2026
Archived on: Wed Aug 26 21:22:14 UTC 2026

Messages sorted by: [ thread ] [ subject ] [ author ]
More info on this list...

This archive was generated by Pipermail 0.09 (Mailman edition).