May 2026 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Fri May 1 01:51:00 UTC 2026
Ending: Sat May 16 13:36:47 UTC 2026
Messages: 279

• [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
  • [PATCH] ima: debugging late_initcall_sync measurements   David Safford
    • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Yeoreum Yun
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
  • [PATCH] ima: debugging late_initcall_sync measurements   Paul Moore
    • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Paul Moore
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Paul Moore
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Paul Moore
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
      • [PATCH] ima: debugging late_initcall_sync measurements   Roberto Sassu
      • [PATCH] ima: debugging late_initcall_sync measurements   Mimi Zohar
• [PATCH bpf-next 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
• [PATCH ported/repost v2] security,fs,nfs,net: update security_inode_listsecurity() interface   Paul Moore
• [PATCH] lockdown: remove useless decrement operation   Kalevi Kolttonen
  • [PATCH] lockdown: remove useless decrement operation   Nicolas Bouchinet
  • [PATCH] lockdown: remove useless decrement operation   Nicolas Bouchinet
    • [PATCH] lockdown: remove useless decrement operation   Xiu Jianfeng
• [GIT PULL] selinux/selinux-pr-20260501   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20260501   pr-tracker-bot at kernel.org
• [PATCH v4 0/7] landlock: Add UDP access control support   Matthieu Buffet
  • [PATCH v4 1/7] landlock: Add UDP bind() access control   Matthieu Buffet
  • [PATCH v4 0/7] landlock: Add UDP access control support   Günther Noack
    • [PATCH v4 0/7] landlock: Add UDP access control support   Matthieu Buffet
• [PATCH v4 2/7] landlock: Add UDP connect() access control   Matthieu Buffet
• [PATCH v4 3/7] landlock: Add UDP send access control   Matthieu Buffet
• [PATCH v4 4/7] selftests/landlock: Add UDP bind/connect tests   Matthieu Buffet
• [PATCH v4 5/7] selftests/landlock: Add tests for sendmsg()   Matthieu Buffet
• [PATCH v4 6/7] samples/landlock: Add sandboxer UDP access control   Matthieu Buffet
• [PATCH v4 7/7] landlock: Add documentation for UDP support   Matthieu Buffet
• [PATCH 1/3] apparmor: Fix return in ns_mkdir_op   Hongling Zeng
  • [PATCH 1/3] apparmor: Fix return in ns_mkdir_op   Ryan Lee
• [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
  • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Paul Moore
    • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Song Liu
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Paul Moore
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Song Liu
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   David Windsor
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Paul Moore
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Paul Moore
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Song Liu
      • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   Paul Moore
  • [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling   bot+bpf-ci at kernel.org
• [PATCH RESEND] keys: use kmalloc_flex in user_preparse   Thorsten Blum
  • [PATCH RESEND] keys: use kmalloc_flex in user_preparse   Jarkko Sakkinen
• [PATCH v5 09/13] ima: Add support for staging measurements with prompt   Roberto Sassu
• [PATCH v2 0/4] Firmware LSM hook   Paul Moore
  • [PATCH v2 0/4] Firmware LSM hook   Leon Romanovsky
• [v6 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Fan Wu
• [PATCH v5 00/14] module: Introduce hash-based integrity checking   Thomas Weißschuh
  • [PATCH v5 07/14] module: Make module authentication usable without MODULE_SIG   Thomas Weißschuh
  • [PATCH v5 11/14] module: update timestamp of modules.order after modules are built   Thomas Weißschuh
  • [PATCH v5 12/14] module: Introduce hash-based integrity checking   Thomas Weißschuh
  • [PATCH v5 13/14] kbuild: move handling of module stripping to Makefile.lib   Thomas Weißschuh
  • [PATCH v5 14/14] kbuild: make CONFIG_MODULE_HASHES compatible with module stripping   Thomas Weißschuh
• [PATCH v5 01/14] kbuild: generate module BTF based on vmlinux.unstripped   Thomas Weißschuh
• [PATCH v5 02/14] lockdown: Make the relationship to MODULE_SIG a dependency   Thomas Weißschuh
• [PATCH v5 03/14] kbuild: rename the strip_relocs command   Thomas Weißschuh
• [PATCH v5 04/14] module: Drop pointless debugging message   Thomas Weißschuh
• [PATCH v5 05/14] module: Make mod_verify_sig() static   Thomas Weißschuh
• [PATCH v5 06/14] module: Switch load_info::len to size_t   Thomas Weißschuh
• [PATCH v5 08/14] module: Move authentication logic into dedicated new file   Thomas Weißschuh
• [PATCH v5 09/14] module: Move signature type check out of mod_check_sig()   Thomas Weißschuh
• [PATCH v5 10/14] module: Prepare for additional module authentication mechanisms   Thomas Weißschuh
• [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Yeoreum Yun
  • [RFC PATCH 1/3] arm64: KVM: defer kvm_init() to finalise_pkvm() when pKVM is enabled   Yeoreum Yun
    • [RFC PATCH 1/3] arm64: KVM: defer kvm_init() to finalise_pkvm() when pKVM is enabled   Sudeep Holla
  • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
    • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Yeoreum Yun
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
      • [RFC PATCH 2/3] firmware: arm_ffa: initialise ff-a after finalising pKVM initialisation   Sudeep Holla
  • [RFC PATCH 3/3] security: integrity: call load_uefi_certs() at late_initcall_sync   Yeoreum Yun
  • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Ben Horgan
    • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Yeoreum Yun
      • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Yeoreum Yun
      • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Ben Horgan
      • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Yeoreum Yun
  • [RFC PATCH 0/3] initalise ff-a after finalising pKVM   Sudeep Holla
• [PATCH 02/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS   Nicolas Schier
• [PATCH 03/14] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE   Nicolas Schier
• [PATCH 04/14] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT   Nicolas Schier
• [PATCH v5 11/13] ima: Support staging and deleting N measurements entries   steven chen
• [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Mayank Gite
  • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Randy Dunlap
  • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Mayank Gite
    • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Randy Dunlap
      • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   John Doe
      • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Jonathan Corbet
      • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Mayank Gite
    • [PATCH] Documentation: fix typo and formattting in security/credentials.rst   Jonathan Corbet
• [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   Arnav Sharma
  • [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   Onur Özkan
  • [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   Alice Ryhl
  • [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   kernel test robot
  • [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   kernel test robot
  • [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()   Miguel Ojeda
• [PATCH v3 0/2] Delete task_euid()   Alice Ryhl
  • [PATCH v3 2/2] cred: delete task_euid()   Alice Ryhl
• [PATCH v3 1/2] rust: task: clarify comments on task UID accessors   Alice Ryhl
  • [PATCH v3 1/2] rust: task: clarify comments on task UID accessors   Gary Guo
    • [PATCH v3 1/2] rust: task: clarify comments on task UID accessors   Alice Ryhl
• [PATCH v5 00/13] ima: Introduce staging mechanism   steven chen
  • [PATCH v5 00/13] ima: Introduce staging mechanism   Lakshmi Ramasubramanian
    • [PATCH v5 00/13] ima: Introduce staging mechanism   Roberto Sassu
      • [PATCH v5 00/13] ima: Introduce staging mechanism   Lakshmi Ramasubramanian
• [PATCH v7 00/10] Reintroduce Hornet LSM   Blaise Boscaccy
  • [PATCH v7 01/10] crypto: pkcs7: add flag for validated trust on a signed info block   Blaise Boscaccy
    • [PATCH v7 1/10] crypto: pkcs7: add flag for validated trust on a signed info block   Paul Moore
  • [PATCH v7 02/10] crypto: pkcs7: add ability to extract signed attributes by OID   Blaise Boscaccy
    • [PATCH v7 2/10] crypto: pkcs7: add ability to extract signed attributes by OID   Paul Moore
  • [PATCH v7 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr   Blaise Boscaccy
    • [PATCH v7 3/10] crypto: pkcs7: add tests for pkcs7_get_authattr   Paul Moore
  • [PATCH v7 04/10] lsm: framework for BPF integrity verification   Blaise Boscaccy
    • [PATCH v7 4/10] lsm: framework for BPF integrity verification   Paul Moore
  • [PATCH v7 05/10] lsm: security: Add additional enum values for bpf integrity checks   Blaise Boscaccy
    • [PATCH v7 5/10] lsm: security: Add additional enum values for bpf integrity checks   Paul Moore
  • [PATCH v7 06/10] security: Hornet LSM   Blaise Boscaccy
    • [PATCH v7 6/10] security: Hornet LSM   Paul Moore
  • [PATCH v7 07/10] hornet: Introduce gen_sig   Blaise Boscaccy
    • [PATCH v7 7/10] hornet: Introduce gen_sig   Paul Moore
  • [PATCH v7 08/10] hornet: Add a light skeleton data extractor scripts   Blaise Boscaccy
    • [PATCH v7 8/10] hornet: Add a light skeleton data extractor scripts   Paul Moore
  • [PATCH v7 09/10] selftests/hornet: Add a selftest for the Hornet LSM   Blaise Boscaccy
    • [PATCH v7 9/10] selftests/hornet: Add a selftest for the Hornet LSM   Paul Moore
  • [PATCH v7 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Blaise Boscaccy
    • [PATCH v7 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Fan Wu
    • [PATCH v7 10/10] ipe: Add BPF program load policy enforcement via Hornet integration   Paul Moore
  • [PATCH v7 00/10] Reintroduce Hornet LSM   Paul Moore
    • [PATCH v7 00/10] Reintroduce Hornet LSM   Eric Biggers
      • [PATCH v7 00/10] Reintroduce Hornet LSM   Paul Moore
• [v6 00/10] Reintroduce Hornet LSM   Paul Moore
  • [v6 00/10] Reintroduce Hornet LSM   Blaise Boscaccy
• [GIT PULL] selinux/selinux-pr-20260507   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20260507   pr-tracker-bot at kernel.org
• [RFC PATCH v4 01/19] landlock: Support socket access-control   Mickaël Salaün
• [RFC PATCH v1 11/11] landlock: Add documentation for capability and namespace restrictions   Günther Noack
• [RFC PATCH v1 05/11] landlock: Enforce namespace entry restrictions   Günther Noack
• [RFC PATCH v1 06/11] landlock: Enforce capability restrictions   Günther Noack
• [PATCH 0/4] firmware: arm_ffa: Move core init to platform driver probe   Sudeep Holla
  • [PATCH 1/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall"   Sudeep Holla
  • [PATCH 2/4] firmware: arm_ffa: Register core as a platform driver   Sudeep Holla
    • [PATCH 2/4] firmware: arm_ffa: Register core as a platform driver   Yeoreum Yun
  • [PATCH 3/4] firmware: arm_ffa: Set the core device as FF-A device parent   Sudeep Holla
    • [PATCH 3/4] firmware: arm_ffa: Set the core device as FF-A device parent   Yeoreum Yun
  • [PATCH 4/4] firmware: arm_ffa: Defer probe until pKVM is initialized   Sudeep Holla
    • [PATCH 4/4] firmware: arm_ffa: Defer probe until pKVM is initialized   Yeoreum Yun
• [RFC PATCH v3 4/4] Revert "firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall"   Sudeep Holla
• [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Paul Moore
  • [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Song Liu
    • [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Paul Moore
      • [PATCH v2 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Song Liu
• [PATCH v3 0/7] lsm: Replace security_sb_mount with granular mount hooks   Song Liu
  • [PATCH v3 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Song Liu
  • [PATCH v3 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount   Song Liu
    • [PATCH v3 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount   Paul Moore
  • [PATCH v3 3/7] apparmor: Convert from sb_mount to granular mount hooks   Song Liu
    • [PATCH v3 3/7] apparmor: Convert from sb_mount to granular mount hooks   Paul Moore
  • [PATCH v3 4/7] selinux: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v3 5/7] landlock: Convert from sb_mount to granular mount hooks   Song Liu
    • [PATCH v3 5/7] landlock: Convert from sb_mount to granular mount hooks   Paul Moore
  • [PATCH v3 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Song Liu
    • [PATCH v3 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Paul Moore
    • [PATCH v3 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Tetsuo Handa
      • [PATCH v3 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Paul Moore
      • [PATCH v3 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount   Song Liu
    • [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount   Paul Moore
      • [PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount   Song Liu
• [PATCH 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes   Aaron Tomlin
  • [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()   Aaron Tomlin
    • [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()   Waiman Long
      • [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()   Waiman Long
      • [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()   Aaron Tomlin
  • [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask   Aaron Tomlin
  • [PATCH 3/3] mips: sched: Fix CPUMASK_OFFSTACK memory corruption   Aaron Tomlin
• [PATCH v2 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes   Aaron Tomlin
  • [PATCH v2 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes   Aaron Tomlin
  • [PATCH v2 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()   Aaron Tomlin
  • [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask   Aaron Tomlin
    • [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask   Paul Moore
      • [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask   Paul Moore
      • [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask   Aaron Tomlin
  • [PATCH v2 3/3] mips: sched: Fix CPUMASK_OFFSTACK memory corruption   Aaron Tomlin
• [syzbot] Monthly lsm report (Apr 2026)   Jarkko Sakkinen
• [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Vitaly Chikunov
  • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Paul Moore
    • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Vitaly Chikunov
      • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Paul Moore
      • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Vitaly Chikunov
      • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Vitaly Chikunov
      • [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL   Paul Moore
• [PATCH 0/2] smack: fix incorrect task context in smack_msg_queue_msgrcv   Konstantin Andreev
  • [PATCH 1/2] smack: fix incorrect task context in smack_msg_queue_msgrcv   Konstantin Andreev
  • [PATCH 2/2] smack: show msgrcv() subject task in audit   Konstantin Andreev
• [PATCH RFC 0/5] memcg: dma-buf per-cgroup accounting via pid_fd   Albert Esteve
  • [PATCH RFC 3/5] security: dma-heap: Add dma_heap_alloc LSM hook   Albert Esteve
• [PATCH RFC 1/5] memcg: Track exported dma-buffers   Albert Esteve
• [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Albert Esteve
  • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Christian König
    • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   T.J. Mercier
      • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Albert Esteve
      • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   T.J. Mercier
      • [Linaro-mm-sig] Re: [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Barry Song
      • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Barry Song
    • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Albert Esteve
      • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   T.J. Mercier
      • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Albert Esteve
  • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Christian Brauner
    • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   T.J. Mercier
  • [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg   Barry Song
• [PATCH RFC 4/5] selinux: Restrict cross-cgroup dma-heap charging   Albert Esteve
  • [PATCH RFC 4/5] selinux: Restrict cross-cgroup dma-heap charging   Paul Moore
• [PATCH RFC 5/5] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests   Albert Esteve
• [linus:master] [selftests] 465b05bae5: kernel-selftests.landlock.audit_test.audit.tsync_override_log_subdomains_off.fail   Thomas Weißschuh
  • [linus:master] [selftests] 465b05bae5: kernel-selftests.landlock.audit_test.audit.tsync_override_log_subdomains_off.fail   Mickaël Salaün
• [PATCH v1 1/2] selftests/landlock: Filter dealloc records in audit_count_records()   Mickaël Salaün
• [PATCH v1 2/2] selftests/landlock: Increase default audit socket timeout   Mickaël Salaün
• [PATCH v1] landlock: Demonstrate best-effort allowed_access filtering   Mickaël Salaün
  • [PATCH v1] landlock: Demonstrate best-effort allowed_access filtering   Günther Noack
• [PATCH v2 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT   Günther Noack
  • [PATCH v2 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT   Günther Noack
• [PATCH v2 2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial   Günther Noack
• [PATCH v2 3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_WHITEOUT   Günther Noack
• [PATCH v1] landlock: Account all audit data allocations to user space   Mickaël Salaün
• [PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()   Stephen Smalley
  • [PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()   Paul Moore
• [linus:master] [landlock] 874c8f8382: kernel-selftests.landlock.audit_test.audit.thread.fail   Mickaël Salaün
• [PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL   Paul Moore
  • [PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL   Blaise Boscaccy
    • [PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL   Paul Moore
• [PATCH] ipe: restore the kdoc comments for evaluate_property()   Paul Moore
  • [PATCH] ipe: restore the kdoc comments for evaluate_property()   Fan Wu
    • [PATCH] ipe: restore the kdoc comments for evaluate_property()   Paul Moore
• [QUESTION] move load_uefi_certs() and keyring initcall to earlier initcall   Yeoreum Yun
• [PATCH net 0/4] net: trust-after-modification fixes for IPv4 options + netlabel   Qi Tang
  • [PATCH net 0/4] net: trust-after-modification fixes for IPv4 options + netlabel   Qi Tang
• [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr   Qi Tang
  • [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr   Casey Schaufler
    • [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr   Qi Tang
  • [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr   Paul Moore
    • [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr   Qi Tang
• [PATCH net 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr   Qi Tang
  • [PATCH net 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr   Paul Moore
    • [PATCH net 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr   Qi Tang
• [PATCH] killswitch: add per-function short-circuit mitigation primitive   Paul Moore
• [PATCH] apparmor: hold peer path references in aa_unix_file_perm()   Zhang Cen
• [PATCH v4 0/7] lsm: Replace security_sb_mount with granular mount hooks   Song Liu
  • [PATCH v4 1/7] lsm: Add granular mount hooks to replace security_sb_mount   Song Liu
  • [PATCH v4 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount   Song Liu
  • [PATCH v4 3/7] apparmor: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v4 4/7] selinux: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v4 5/7] landlock: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v4 6/7] tomoyo: Convert from sb_mount to granular mount hooks   Song Liu
  • [PATCH v4 7/7] lsm: Remove security_sb_mount and security_move_mount   Song Liu

Last message date: Sat May 16 13:36:47 UTC 2026
Archived on: Sat May 16 13:37:12 UTC 2026

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...