October 2026 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Thu Oct 1 07:28:52 UTC 2026
Ending: Mon Oct 26 13:45:46 UTC 2026
Messages: 1110

• [PATCH net] cipso: adjust cached option offsets when removing CIPSO   Ondrej Mosnáček
  • [PATCH net] cipso: adjust cached option offsets when removing CIPSO   Jakub Kicinski
• [PATCH] MAINTAINERS: name the wufan/ipe next branch   Matthias Goergens
• [PATCH RFC 0/3] security: ima: support TSM measurement registers   Roberto Sassu
  • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Roberto Sassu
    • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Yeoreum Yun
      • [PATCH RFC 0/3] security: ima: support TSM measurement registers   GONG Ruiqi
      • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Yeoreum Yun
      • [PATCH RFC 0/3] security: ima: support TSM measurement registers   GONG Ruiqi
      • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Jason Gunthorpe
    • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Jason Gunthorpe
      • [PATCH RFC 0/3] security: ima: support TSM measurement registers   Yeoreum Yun
• [PATCH RFC -next 00/12] landlock: Add READ_METADATA and WRITE_METADATA access rights   Justin Suess
• [PATCH 01/16 net-next v3] ipv4: introduce CONFIG_IPV4 to decouple the IPv4 stack   sashiko-bot at kernel.org
• [PATCH 15/16 net-next v3] netlabel: cipso: introduce CONFIG_CIPSO to decouple IPv4 dependency   sashiko-bot at kernel.org
• [PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces   Stephen Smalley
• [PATCH] KEYS: Fix add_key() race with keyring restriction   Jarkko Sakkinen
• [PATCH v3] keys/trusted/tpm2: Validate TPM2_Create object sizes separately   Jarkko Sakkinen
• [PATCH] keys/trusted_keys: reuse TPM version in option handling   Jarkko Sakkinen
  • [PATCH] keys/trusted_keys: reuse TPM version in option handling   Srish Srinivasan
• [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Srish Srinivasan
  • [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Jarkko Sakkinen
    • [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Srish Srinivasan
      • [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Serge E. Hallyn
      • [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Jarkko Sakkinen
      • [PATCH v2] keys/trusted_keys: reuse TPM version in option handling   Jarkko Sakkinen
• [PATCH v4 0/8] Landlock: Namespace and capability control   Mickaël Salaün
  • [PATCH v4 2/8] landlock: Wrap per-layer access masks in struct layer_config   Mickaël Salaün
    • [PATCH v4 2/8] landlock: Wrap per-layer access masks in struct layer_config   sashiko-bot at kernel.org
  • [PATCH v4 3/8] landlock: Enforce namespace use restrictions   Mickaël Salaün
    • [PATCH v4 3/8] landlock: Enforce namespace use restrictions   sashiko-bot at kernel.org
  • [PATCH v4 4/8] landlock: Enforce capability restrictions   Mickaël Salaün
    • [PATCH v4 4/8] landlock: Enforce capability restrictions   sashiko-bot at kernel.org
  • [PATCH v4 5/8] selftests/landlock: Add namespace restriction tests   Mickaël Salaün
    • [PATCH v4 5/8] selftests/landlock: Add namespace restriction tests   sashiko-bot at kernel.org
      • [PATCH v4 5/8] selftests/landlock: Add namespace restriction tests   Mickaël Salaün
  • [PATCH v4 6/8] selftests/landlock: Add capability restriction tests   Mickaël Salaün
    • [PATCH v4 6/8] selftests/landlock: Add capability restriction tests   sashiko-bot at kernel.org
      • [PATCH v4 6/8] selftests/landlock: Add capability restriction tests   Mickaël Salaün
  • [PATCH v4 8/8] landlock: Add documentation for capability and namespace restrictions   Mickaël Salaün
    • [PATCH v4 8/8] landlock: Add documentation for capability and namespace restrictions   sashiko-bot at kernel.org
• [PATCH v4 1/8] landlock: Rename quiet_masks to quiet_access   Mickaël Salaün
  • [PATCH v4 1/8] landlock: Rename quiet_masks to quiet_access   sashiko-bot at kernel.org
• [PATCH v4 7/8] samples/landlock: Add capability and namespace restriction support   Mickaël Salaün
  • [PATCH v4 7/8] samples/landlock: Add capability and namespace restriction support   sashiko-bot at kernel.org
    • [PATCH v4 7/8] samples/landlock: Add capability and namespace restriction support   Mickaël Salaün
• [PATCH v6 0/8] lsm: Replace security_sb_mount with granular mount hooks   Song Liu
• [PATCH 0/6] ipe: cleanups, an audit fix and updated links   Fan Wu
  • [PATCH 5/6] ipe: fix enforcement audit   Fan Wu
    • [PATCH 5/6] ipe: fix enforcement audit   sashiko-bot at kernel.org
  • [PATCH 6/6] ipe: update the project and test suite links   Fan Wu
    • [PATCH 6/6] ipe: update the project and test suite links   sashiko-bot at kernel.org
  • [PATCH 0/6] ipe: cleanups, an audit fix and updated links   Fan Wu
• [PATCH 1/6] ipe: constify token_default()   Fan Wu
  • [PATCH 1/6] ipe: constify token_default()   sashiko-bot at kernel.org
• [PATCH 2/6] ipe: use designated initializers for audit name tables   Fan Wu
  • [PATCH 2/6] ipe: use designated initializers for audit name tables   sashiko-bot at kernel.org
• [PATCH 3/6] ipe: check parser token table sizes   Fan Wu
  • [PATCH 3/6] ipe: check parser token table sizes   sashiko-bot at kernel.org
• [PATCH 4/6] ipe: correct policy text ownership comment   Fan Wu
  • [PATCH 4/6] ipe: correct policy text ownership comment   sashiko-bot at kernel.org
• [PATCH v4 00/11] seq_buf: Add seq_buf_strlen()   Kees Cook
  • [PATCH v4 01/11] seq_buf: Do not print an empty line from an overflowed seq_buf_do_printk()   Kees Cook
    • [PATCH v4 01/11] seq_buf: Do not print an empty line from an overflowed seq_buf_do_printk()   sashiko-bot at kernel.org
    • [PATCH v4 01/11] seq_buf: Do not print an empty line from an overflowed seq_buf_do_printk()   bot+bpf-ci at kernel.org
      • [PATCH v4 01/11] seq_buf: Do not print an empty line from an overflowed seq_buf_do_printk()   Kees Cook
  • [PATCH v4 02/11] seq_buf: Do not pop from an overflowed seq_buf   Kees Cook
    • [PATCH v4 02/11] seq_buf: Do not pop from an overflowed seq_buf   sashiko-bot at kernel.org
  • [PATCH v4 03/11] seq_buf: Copy what fits when seq_buf_puts() and seq_buf_putmem() overflow   Kees Cook
    • [PATCH v4 03/11] seq_buf: Copy what fits when seq_buf_puts() and seq_buf_putmem() overflow   sashiko-bot at kernel.org
    • [PATCH v4 03/11] seq_buf: Copy what fits when seq_buf_puts() and seq_buf_putmem() overflow   bot+bpf-ci at kernel.org
      • [PATCH v4 03/11] seq_buf: Copy what fits when seq_buf_puts() and seq_buf_putmem() overflow   Kees Cook
  • [PATCH v4 04/11] seq_buf: Clear what a writer did not claim when a seq_buf overflows   Kees Cook
    • [PATCH v4 04/11] seq_buf: Clear what a writer did not claim when a seq_buf overflows   sashiko-bot at kernel.org
    • [PATCH v4 04/11] seq_buf: Clear what a writer did not claim when a seq_buf overflows   bot+bpf-ci at kernel.org
  • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Kees Cook
    • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   sashiko-bot at kernel.org
    • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Andy Shevchenko
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Kees Cook
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Andy Shevchenko
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Kees Cook
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Alejandro Colomar
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Kees Cook
      • [PATCH v4 05/11] seq_buf: Add seq_buf_strlen()   Kees Cook
  • [PATCH v4 06/11] seq_buf: Add seq_buf_terminate()   Kees Cook
    • [PATCH v4 06/11] seq_buf: Add seq_buf_terminate()   sashiko-bot at kernel.org
  • [PATCH v4 07/11] bpf: Remove dead newline stripping from format_disasm_line()   Kees Cook
    • [PATCH v4 07/11] bpf: Remove dead newline stripping from format_disasm_line()   sashiko-bot at kernel.org
  • [PATCH v4 08/11] seq_buf: Add seq_buf_init_append()   Kees Cook
    • [PATCH v4 08/11] seq_buf: Add seq_buf_init_append()   sashiko-bot at kernel.org
    • [PATCH v4 08/11] seq_buf: Add seq_buf_init_append()   bot+bpf-ci at kernel.org
      • [PATCH v4 08/11] seq_buf: Add seq_buf_init_append()   Kees Cook
  • [PATCH v4 09/11] powerpc/papr_scm: Return the string length from the sysfs show functions   Kees Cook
    • [PATCH v4 09/11] powerpc/papr_scm: Return the string length from the sysfs show functions   sashiko-bot at kernel.org
  • [PATCH v4 10/11] nvdimm: ndtest: Return the string length from flags_show()   Kees Cook
    • [PATCH v4 10/11] nvdimm: ndtest: Return the string length from flags_show()   sashiko-bot at kernel.org
  • [PATCH v4 11/11] docs: core-api: Document the seq_buf API   Kees Cook
    • [PATCH v4 11/11] docs: core-api: Document the seq_buf API   sashiko-bot at kernel.org
  • [PATCH v4 00/11] seq_buf: Add seq_buf_strlen()   Alexei Starovoitov
• [syzbot] Monthly lsm report (Oct 2026)   syzbot
• [PATCH 0/2] SafeSetID: use real GID for GID policy lookups   tjdqudcks0424 at naver.com
  • [PATCH 1/2] security: safesetid: use real GID for GID policy lookup   tjdqudcks0424 at naver.com
    • [PATCH 1/2] security: safesetid: use real GID for GID policy lookup   Serge E. Hallyn
• [PATCH 2/2] selftests/safesetid: test GID policy with mismatched real IDs   tjdqudcks0424 at naver.com
  • [PATCH 2/2] selftests/safesetid: test GID policy with mismatched real IDs   sashiko-bot at kernel.org
• [PATCH 1/2] security: safesetid: use real GID for GID policy lookup   sashiko-bot at kernel.org
• [syzbot] [lsm?] general protection fault in smack_inode_permission (4)   syzbot
  • [syzbot] [lsm?] general protection fault in smack_inode_permission (4)   Tetsuo Handa
• [PATCH] tomoyo: Enforce connect policy in TCP Fast Open   Tetsuo Handa
• [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Jarkko Sakkinen
  • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Serge E. Hallyn
    • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Jarkko Sakkinen
      • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Serge Hallyn (AMD)
      • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Jarkko Sakkinen
      • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Serge E. Hallyn
      • [RFC PATCH 0/2] keys: Address lookup_user_key() mutability   Jarkko Sakkinen
• [PATCH v3 1/2] keys: Protect key_user lifetime during ownership changes   Jarkko Sakkinen
• [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting   Jarkko Sakkinen
  • [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting   Jarkko Sakkinen
    • [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting   Chengfeng Ye
      • [PATCH v3 2/2] keys: Serialize ownership transfers with key accounting   Jarkko Sakkinen
• [PATCH v3] keys/trusted_keys: reuse TPM version in option handling   Srish Srinivasan
  • [PATCH v3] keys/trusted_keys: reuse TPM version in option handling   Jarkko Sakkinen
• [GIT PULL] selinux/selinux-pr-20261005   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20261005   pr-tracker-bot at kernel.org
• [PATCH v5 02/12] seq_buf: Do not pop from an overflowed seq_buf   Kees Cook
  • [PATCH v5 02/12] seq_buf: Do not pop from an overflowed seq_buf   sashiko-bot at kernel.org
  • [PATCH v5 02/12] seq_buf: Do not pop from an overflowed seq_buf   Steven Rostedt
• [RFC PATCH bpf-next 00/12] fs: unified VFS ancestor walk for Landlock and BPF   Justin Suess
  • [RFC PATCH bpf-next 01/12] namei: introduce __path_walk_parent()   Justin Suess
    • [RFC PATCH bpf-next 01/12] namei: introduce __path_walk_parent()   sashiko-bot at kernel.org
  • [RFC PATCH bpf-next 02/12] namei: add vfs_walk_ancestors()   Justin Suess
    • [RFC PATCH bpf-next 02/12] namei: add vfs_walk_ancestors()   sashiko-bot at kernel.org
  • [RFC PATCH bpf-next 03/12] landlock: convert ancestor walk to vfs_walk_ancestors()   Justin Suess
    • [RFC PATCH bpf-next 03/12] landlock: convert ancestor walk to vfs_walk_ancestors()   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 03/12] landlock: convert ancestor walk to vfs_walk_ancestors()   bot+bpf-ci at kernel.org
  • [RFC PATCH bpf-next 04/12] bpf: mark struct path trusted   Justin Suess
    • [RFC PATCH bpf-next 04/12] bpf: mark struct path trusted   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 04/12] bpf: mark struct path trusted   bot+bpf-ci at kernel.org
  • [RFC PATCH bpf-next 05/12] namei: make vfs_walk_ancestors() stepwise   Justin Suess
    • [RFC PATCH bpf-next 05/12] namei: make vfs_walk_ancestors() stepwise   sashiko-bot at kernel.org
  • [RFC PATCH bpf-next 06/12] bpf: add a path ancestor iterator   Justin Suess
    • [RFC PATCH bpf-next 06/12] bpf: add a path ancestor iterator   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 06/12] bpf: add a path ancestor iterator   bot+bpf-ci at kernel.org
  • [RFC PATCH bpf-next 07/12] selftests/bpf: exercise the path ancestor iterator   Justin Suess
    • [RFC PATCH bpf-next 07/12] selftests/bpf: exercise the path ancestor iterator   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 07/12] selftests/bpf: exercise the path ancestor iterator   bot+bpf-ci at kernel.org
  • [RFC PATCH bpf-next 08/12] fs: add mnt_undo_legitimize()   Justin Suess
    • [RFC PATCH bpf-next 08/12] fs: add mnt_undo_legitimize()   sashiko-bot at kernel.org
  • [RFC PATCH bpf-next 09/12] namei: add an rcu-walk mode to the ancestor walk   Justin Suess
    • [RFC PATCH bpf-next 09/12] namei: add an rcu-walk mode to the ancestor walk   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 09/12] namei: add an rcu-walk mode to the ancestor walk   bot+bpf-ci at kernel.org
  • [RFC PATCH bpf-next 10/12] bpf: support "__uninit" iterator arguments in generic kfuncs   Justin Suess
    • [RFC PATCH bpf-next 10/12] bpf: support "__uninit" iterator arguments in generic kfuncs   sashiko-bot at kernel.org
      • [RFC PATCH bpf-next 10/12] bpf: support "__uninit" iterator arguments in generic kfuncs   Justin Suess
  • [RFC PATCH bpf-next 11/12] bpf: add a lockless path ancestor iterator   Justin Suess
    • [RFC PATCH bpf-next 11/12] bpf: add a lockless path ancestor iterator   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 11/12] bpf: add a lockless path ancestor iterator   bot+bpf-ci at kernel.org
      • [RFC PATCH bpf-next 11/12] bpf: add a lockless path ancestor iterator   Justin Suess
  • [RFC PATCH bpf-next 12/12] selftests/bpf: exercise the lockless path ancestor iterator   Justin Suess
    • [RFC PATCH bpf-next 12/12] selftests/bpf: exercise the lockless path ancestor iterator   sashiko-bot at kernel.org
    • [RFC PATCH bpf-next 12/12] selftests/bpf: exercise the lockless path ancestor iterator   bot+bpf-ci at kernel.org
• [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO   Daehyeon Ko
  • [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO   netdev-bot+sinfo at kernel.org
  • [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO   sashiko-bot at kernel.org
  • [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO   Paul Moore
  • [PATCH net v2] cipso: adjust cached option offsets when removing CIPSO   patchwork-bot+netdevbpf at kernel.org
• [PATCH] landlock: Fix superblock use-after-free in release_inode()   Günther Noack
  • [PATCH] landlock: Fix superblock use-after-free in release_inode()   sashiko-bot at kernel.org
  • [PATCH] landlock: Fix superblock use-after-free in release_inode()   Mickaël Salaün
• [PATCH RFC -next 07/12] LSM: pass struct path to the inode posix acl hooks   Casey Schaufler
• [PATCH RFC -next 03/12] fs: pass struct path to xattr helpers   Casey Schaufler
• [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
  • [PATCH 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   Josef Bacik
    • [PATCH 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   sashiko-bot at kernel.org
  • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Serge E. Hallyn
    • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
      • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Serge E. Hallyn
      • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Christian Brauner
      • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
      • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Serge E. Hallyn
      • [PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Christian Brauner
• [PATCH 1/5] cred: record how far up CAP_SETFCAP reaches   Josef Bacik
  • [PATCH 1/5] cred: record how far up CAP_SETFCAP reaches   sashiko-bot at kernel.org
• [PATCH 2/5] userns: don't let setns() lend the right to map uid 0   Josef Bacik
  • [PATCH 2/5] userns: don't let setns() lend the right to map uid 0   sashiko-bot at kernel.org
• [PATCH 3/5] userns: check the writer too before mapping uid 0   Josef Bacik
  • [PATCH 3/5] userns: check the writer too before mapping uid 0   sashiko-bot at kernel.org
• [PATCH 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   Josef Bacik
  • [PATCH 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   sashiko-bot at kernel.org
• [PATCH] keys: make keyring indexes independent of kernel addresses   Kyle Zeng
  • [PATCH] keys: make keyring indexes independent of kernel addresses   sashiko-bot at kernel.org
  • [PATCH] keys: make keyring indexes independent of kernel addresses   Jarkko Sakkinen
  • [PATCH] keys: make keyring indexes independent of kernel addresses   Jarkko Sakkinen
• [PATCH v5 0/8] Landlock: Namespace and capability control   Mickaël Salaün
  • [PATCH v5 2/8] landlock: Wrap per-layer access masks in struct layer_config   Mickaël Salaün
    • [PATCH v5 2/8] landlock: Wrap per-layer access masks in struct layer_config   sashiko-bot at kernel.org
  • [PATCH v5 3/8] landlock: Enforce namespace use restrictions   Mickaël Salaün
  • [PATCH v5 4/8] landlock: Enforce capability restrictions   Mickaël Salaün
    • [PATCH v5 4/8] landlock: Enforce capability restrictions   sashiko-bot at kernel.org
  • [PATCH v5 5/8] selftests/landlock: Add namespace restriction tests   Mickaël Salaün
  • [PATCH v5 6/8] selftests/landlock: Add capability restriction tests   Mickaël Salaün
    • [PATCH v5 6/8] selftests/landlock: Add capability restriction tests   sashiko-bot at kernel.org
  • [PATCH v5 7/8] samples/landlock: Add capability and namespace restriction support   Mickaël Salaün
  • [PATCH v5 8/8] landlock: Add documentation for capability and namespace restrictions   Mickaël Salaün
  • [PATCH v5 8/8] landlock: Add documentation for capability and namespace restrictions   sashiko-bot at kernel.org
  • [PATCH v5 7/8] samples/landlock: Add capability and namespace restriction support   sashiko-bot at kernel.org
  • [PATCH v5 3/8] landlock: Enforce namespace use restrictions   sashiko-bot at kernel.org
  • [PATCH v5 5/8] selftests/landlock: Add namespace restriction tests   sashiko-bot at kernel.org
• [PATCH v5 1/8] landlock: Rename quiet_masks to quiet_access   Mickaël Salaün
  • [PATCH v5 1/8] landlock: Rename quiet_masks to quiet_access   sashiko-bot at kernel.org
• [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()   Joas Antonio dos Santos
  • [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()   sashiko-bot at kernel.org
  • [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()   Daniel Machon
  • [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()   patchwork-bot+netdevbpf at kernel.org
    • [PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()   Paul Moore
• [PATCH net] calipso: update payload_len when removing the CALIPSO option   Joas Antonio dos Santos
  • [PATCH net] calipso: update payload_len when removing the CALIPSO option   Eric Dumazet
    • [PATCH net] calipso: update payload_len when removing the CALIPSO option   Paul Moore
      • [PATCH net] calipso: update payload_len when removing the CALIPSO option   Joas Antonio dos Santos
      • [PATCH net] calipso: update payload_len when removing the CALIPSO option   Paul Moore
  • [PATCH net] calipso: update payload_len when removing the CALIPSO option   sashiko-bot at kernel.org
• [PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Andrew Halaney
  • [PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Jarkko Sakkinen
    • [PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Andrew Halaney
      • [PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Jarkko Sakkinen
• [PATCH] landlock: Move the domain layer counter out of the anonymous union   Abel Vesa
  • [PATCH] landlock: Move the domain layer counter out of the anonymous union   sashiko-bot at kernel.org
  • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Nick Desaulniers
    • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Abel Vesa
      • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Nick Desaulniers
      • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Nathan Chancellor
      • Re: [PATCH] landlock: Move the domain layer counter out of the anonymous union   Kees Cook
      • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Michael Bommarito
      • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Mickaël Salaün
      • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Michael Bommarito
  • [PATCH] landlock: Move the domain layer counter out of the anonymous union   Mike Bommarito
• [PATCH 6.6.y 0/2] apparmor: backport CVE-2026-45893, CVE-2026-46254   Artem Dinaburg
  • [PATCH 6.6.y 0/2] apparmor: backport CVE-2026-45893, CVE-2026-46254   Sasha Levin
• [PATCH 6.6.y 1/2] AppArmor: Allow apparmor to handle unaligned dfa tables   Artem Dinaburg
  • [PATCH 6.6.y 1/2] AppArmor: Allow apparmor to handle unaligned dfa tables   sashiko-bot at kernel.org
• [PATCH 6.6.y 2/2] apparmor: Fix & Optimize table creation from possibly unaligned memory   Artem Dinaburg
  • [PATCH 6.6.y 2/2] apparmor: Fix & Optimize table creation from possibly unaligned memory   sashiko-bot at kernel.org
• [PATCH] apparmor: avoid potential double free when remapping DFA tables   lirongqing
  • [PATCH] apparmor: avoid potential double free when remapping DFA tables   sashiko-bot at kernel.org
• [PATCH] keys: Protect the type name while describing a key   Cen Zhang
  • [PATCH] keys: Protect the type name while describing a key   sashiko-bot at kernel.org
  • [PATCH] keys: Protect the type name while describing a key   Jarkko Sakkinen
    • [PATCH] keys: Protect the type name while describing a key   Cen Zhang
• [PATCH] keys: Avoid the owner account dereference in named keyring lookup   Cen Zhang
  • [PATCH] keys: Avoid the owner account dereference in named keyring lookup   sashiko-bot at kernel.org
  • [PATCH] keys: Avoid the owner account dereference in named keyring lookup   Jarkko Sakkinen
    • [PATCH] keys: Avoid the owner account dereference in named keyring lookup   Cen Zhang
• [PATCH 00/27] landlock: Selftest fixes and cleanups   Günther Noack
  • [PATCH 01/27] selftests/landlock: Propagate grandchild failures in unix_scoping   Günther Noack
    • [PATCH 01/27] selftests/landlock: Propagate grandchild failures in unix_scoping   sashiko-bot at kernel.org
  • [PATCH 02/27] selftests/landlock: Propagate EXPECT failures from forked children   Günther Noack
    • [PATCH 02/27] selftests/landlock: Propagate EXPECT failures from forked children   sashiko-bot at kernel.org
  • [PATCH 03/27] selftests/landlock: Check the thread result in audit.thread   Günther Noack
    • [PATCH 03/27] selftests/landlock: Check the thread result in audit.thread   sashiko-bot at kernel.org
  • [PATCH 04/27] selftests/landlock: Zero-initialize the buffer in inconsistent_attr   Günther Noack
    • [PATCH 04/27] selftests/landlock: Zero-initialize the buffer in inconsistent_attr   sashiko-bot at kernel.org
  • [PATCH 05/27] selftests/landlock: Fix the openat() success check in fs_bench   Günther Noack
    • [PATCH 05/27] selftests/landlock: Fix the openat() success check in fs_bench   sashiko-bot at kernel.org
  • [PATCH 06/27] selftests/landlock: Fix the reported clock tick rate in fs_bench   Günther Noack
    • [PATCH 06/27] selftests/landlock: Fix the reported clock tick rate in fs_bench   sashiko-bot at kernel.org
  • [PATCH 07/27] selftests/landlock: Fix the ruleset_fd check in empty_or_same_ruleset   Günther Noack
    • [PATCH 07/27] selftests/landlock: Fix the ruleset_fd check in empty_or_same_ruleset   sashiko-bot at kernel.org
  • [PATCH 08/27] selftests/landlock: Handle a missing control message in recv_fd()   Günther Noack
    • [PATCH 08/27] selftests/landlock: Handle a missing control message in recv_fd()   sashiko-bot at kernel.org
  • [PATCH 09/27] selftests/landlock: Assert tracefs_extract_field() results that are used   Günther Noack
    • [PATCH 09/27] selftests/landlock: Assert tracefs_extract_field() results that are used   sashiko-bot at kernel.org
  • [PATCH 10/27] selftests/landlock: Assert audit initialization in fixture setups   Günther Noack
    • [PATCH 10/27] selftests/landlock: Assert audit initialization in fixture setups   sashiko-bot at kernel.org
  • [PATCH 11/27] selftests/landlock: Assert helper results that are used afterwards   Günther Noack
    • [PATCH 11/27] selftests/landlock: Assert helper results that are used afterwards   sashiko-bot at kernel.org
  • [PATCH 12/27] selftests/landlock: Assert audit_count_records() before using its result   Günther Noack
    • [PATCH 12/27] selftests/landlock: Assert audit_count_records() before using its result   sashiko-bot at kernel.org
  • [PATCH 13/27] selftests/landlock: Fix memory leak in audit_init_filter_exe()   Günther Noack
    • [PATCH 13/27] selftests/landlock: Fix memory leak in audit_init_filter_exe()   sashiko-bot at kernel.org
  • [PATCH 14/27] selftests/landlock: Make audit_message large enough for any exe filter   Günther Noack
    • [PATCH 14/27] selftests/landlock: Make audit_message large enough for any exe filter   sashiko-bot at kernel.org
  • [PATCH 15/27] selftests/landlock: Close leaked file descriptors   Günther Noack
  • [PATCH 16/27] selftests/landlock: Check errno for combined VERSION and ERRATA flags   Günther Noack
  • [PATCH 17/27] selftests/landlock: Fix SIGURG handler setup in scoped_signal_test   Günther Noack
  • [PATCH 18/27] selftests/landlock: Fix regex_escape() error handling in matches_log_fs_extra()   Günther Noack
    • [PATCH 18/27] selftests/landlock: Fix regex_escape() error handling in matches_log_fs_extra()   sashiko-bot at kernel.org
  • [PATCH 19/27] selftests/landlock: Fix off-by-one in regex_escape()   Günther Noack
    • [PATCH 19/27] selftests/landlock: Fix off-by-one in regex_escape()   sashiko-bot at kernel.org
  • [PATCH 20/27] selftests/landlock: Fix the snprintf() error check in matches_log_fs_extra()   Günther Noack
    • [PATCH 20/27] selftests/landlock: Fix the snprintf() error check in matches_log_fs_extra()   sashiko-bot at kernel.org
  • [PATCH 21/27] selftests/landlock: Use _exit() in the named_pipe_ioctl child   Günther Noack
    • [PATCH 21/27] selftests/landlock: Use _exit() in the named_pipe_ioctl child   sashiko-bot at kernel.org
  • [PATCH 22/27] selftests/landlock: Fix messages and comments in helper programs   Günther Noack
    • [PATCH 22/27] selftests/landlock: Fix messages and comments in helper programs   sashiko-bot at kernel.org
  • [PATCH 23/27] selftests/landlock: Fix stale comments in common.h and audit.h   Günther Noack
    • [PATCH 23/27] selftests/landlock: Fix stale comments in common.h and audit.h   sashiko-bot at kernel.org
  • [PATCH 24/27] selftests/landlock: Use ASSERT for syscall failures before errno checks   Günther Noack
    • [PATCH 24/27] selftests/landlock: Use ASSERT for syscall failures before errno checks   sashiko-bot at kernel.org
  • [PATCH 25/27] selftests/landlock: Assert WIFEXITED() before checking the exit status   Günther Noack
    • [PATCH 25/27] selftests/landlock: Assert WIFEXITED() before checking the exit status   sashiko-bot at kernel.org
  • [PATCH 26/27] selftests/landlock: Use EXPECT for closing FDs and stopping threads   Günther Noack
    • [PATCH 26/27] selftests/landlock: Use EXPECT for closing FDs and stopping threads   sashiko-bot at kernel.org
  • [PATCH 27/27] selftests/landlock: Use EXPECT for checks that later steps do not need   Günther Noack
    • [PATCH 27/27] selftests/landlock: Use EXPECT for checks that later steps do not need   sashiko-bot at kernel.org
  • [PATCH 16/27] selftests/landlock: Check errno for combined VERSION and ERRATA flags   sashiko-bot at kernel.org
  • [PATCH 15/27] selftests/landlock: Close leaked file descriptors   sashiko-bot at kernel.org
  • [PATCH 17/27] selftests/landlock: Fix SIGURG handler setup in scoped_signal_test   sashiko-bot at kernel.org
  • [PATCH 00/27] landlock: Selftest fixes and cleanups   Günther Noack
• [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   Joas Antonio dos Santos
  • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   sashiko-bot at kernel.org
    • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   Paul Moore
      • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   Paolo Abeni
      • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   Joas Antonio dos Santos
      • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   Paul Moore
  • [PATCH net v2] calipso: update payload_len when removing the CALIPSO option   patchwork-bot+netdevbpf at kernel.org
• [PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Joas Antonio dos Santos
  • [PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Wang Zhan
    • [PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Joas Antonio dos Santos
  • [PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   sashiko-bot at kernel.org
• [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Andrew Halaney
  • [PATCH bpf-next v2 2/3] keys: add KEY_SPEC_FS_VERITY_KEYRING   Andrew Halaney
    • [PATCH bpf-next v2 2/3] keys: add KEY_SPEC_FS_VERITY_KEYRING   sashiko-bot at kernel.org
  • [PATCH bpf-next v2 3/3] Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY   Andrew Halaney
    • [PATCH bpf-next v2 3/3] Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY   sashiko-bot at kernel.org
  • [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Christian Brauner
    • [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Alexei Starovoitov
      • [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Christian Brauner
      • [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Alexei Starovoitov
      • [PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys   Christian Brauner
• [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Andrew Halaney
  • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   sashiko-bot at kernel.org
  • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   bot+bpf-ci at kernel.org
    • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Andrew Halaney
      • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Manuel Huber
      • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Christian Brauner
      • [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING   Manuel Huber
• [PATCH v2] keys: Protect the type name while describing a key   Cen Zhang
  • [PATCH v2] keys: Protect the type name while describing a key   sashiko-bot at kernel.org
  • [PATCH v2] keys: Protect the type name while describing a key   Jarkko Sakkinen
• [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Cen Zhang
  • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   sashiko-bot at kernel.org
  • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Jarkko Sakkinen
  • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Eric Biggers
    • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Cen Zhang
      • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Jarkko Sakkinen
      • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Jarkko Sakkinen
      • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Cen Zhang
    • [PATCH v2] keys: Avoid the owner account dereference in named keyring lookup   Jarkko Sakkinen
• [PATCH] keys: Check the authorization payload in process keyring searches   Cen Zhang
  • [PATCH] keys: Check the authorization payload in process keyring searches   sashiko-bot at kernel.org
  • [PATCH] keys: Check the authorization payload in process keyring searches   Jarkko Sakkinen
• [PATCH] evm: check return values of crypto_shash functions   Roberto Sassu
  • [PATCH] evm: check return values of crypto_shash functions   sashiko-bot at kernel.org
• [PATCH] ima: bound line scan in ima_read_policy() to fix OOB read   Roberto Sassu
• [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Joas Antonio dos Santos
  • [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   sashiko-bot at kernel.org
  • [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Wang Zhan
    • [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   Paul Moore
  • [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()   patchwork-bot+netdevbpf at kernel.org
• [syzbot] [lsm?] WARNING in landlock_merge_ruleset   syzbot
  • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Nguyen Ngoc Thang
    • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Nathan Chancellor
      • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Nguyen Ngoc Thang
    • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Günther Noack
      • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Mickaël Salaün
      • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Nguyen Ngoc Thang
      • [PATCH] landlock: Drop __counted_by from landlock_domain.layers   Mickaël Salaün
• [PATCH v3 0/4] pidfd: add task path ioctls   Chen Linxuan via B4 Relay
  • [PATCH v3 4/4] pidfd: Add task path ioctls   Chen Linxuan via B4 Relay
    • [PATCH v3 4/4] pidfd: Add task path ioctls   sashiko-bot at kernel.org
• [PATCH v3 1/4] pidfd: restrict task access ioctls to the caller's pid namespace   Chen Linxuan via B4 Relay
  • [PATCH v3 1/4] pidfd: restrict task access ioctls to the caller's pid namespace   sashiko-bot at kernel.org
• [PATCH v3 2/4] fs: Introduce task path helpers   Chen Linxuan via B4 Relay
  • [PATCH v3 2/4] fs: Introduce task path helpers   sashiko-bot at kernel.org
• [PATCH v3 3/4] pidfd: Use scoped cleanup for task access   Chen Linxuan via B4 Relay
  • [PATCH v3 3/4] pidfd: Use scoped cleanup for task access   sashiko-bot at kernel.org
• [GIT PULL] Landlock fix for v7.3-rc7   Mickaël Salaün
  • [GIT PULL] Landlock fix for v7.3-rc7   pr-tracker-bot at kernel.org
• [PATCH] KEYS: Protect user key quota access during instantiation   Cen Zhang
  • [PATCH] KEYS: Protect user key quota access during instantiation   sashiko-bot at kernel.org
  • [PATCH] KEYS: Protect user key quota access during instantiation   Jarkko Sakkinen
  • [PATCH] KEYS: Protect user key quota access during instantiation   Jarkko Sakkinen
    • [PATCH] KEYS: Protect user key quota access during instantiation   Cen Zhang
      • [PATCH] KEYS: Protect user key quota access during instantiation   Jarkko Sakkinen
      • [PATCH] KEYS: Protect user key quota access during instantiation   Cen Zhang
    • [PATCH] KEYS: Protect user key quota access during instantiation   Cen Zhang
      • [PATCH] KEYS: Protect user key quota access during instantiation   Jarkko Sakkinen
      • [PATCH] KEYS: Protect user key quota access during instantiation   Cen Zhang
• [PATCH v4 00/15] sched: introduce for_each_process_rculock and for_each_thread_rculock   Ye Liu
• [BUG REPORT] selinux: general protection fault in avtab_search_node() during an AVC lookup   1sh1ro
  • [BUG REPORT] selinux: general protection fault in avtab_search_node() during an AVC lookup   Stephen Smalley
• [PATCH] apparmor: fix query_data() output overlapping the lookup key   Cen Zhang (Microsoft)
  • [PATCH] apparmor: fix query_data() output overlapping the lookup key   sashiko-bot at kernel.org
• [PATCH v4 0/2] keys: Fix quota-owner reads and ownership accounting   Chengfeng Ye
  • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   Chengfeng Ye
    • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   sashiko-bot at kernel.org
    • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   Jarkko Sakkinen
    • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   Jarkko Sakkinen
      • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   Chengfeng Ye
      • [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters   Jarkko Sakkinen
  • [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting   Chengfeng Ye
    • [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting   sashiko-bot at kernel.org
    • [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting   Jarkko Sakkinen
      • [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting   Jarkko Sakkinen
      • [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting   Chengfeng Ye
  • [PATCH v4 0/2] keys: Fix quota-owner reads and ownership accounting   Jarkko Sakkinen
• [RFC PATCH v2 0/3] security: Add PR_CAPBSET_DROP_MASK   Serge E. Hallyn
• [PATCH] dm-verity: clear LSM integrity state on suspend   Mikulas Patocka
• [PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF   Justin Suess
  • [PATCH bpf-next v1 02/11] namei: add vfs_walk_ancestors()   Justin Suess
  • [PATCH bpf-next v1 04/11] namei: expose the stepwise ancestor walk to fs/   Justin Suess
    • [PATCH bpf-next v1 04/11] namei: expose the stepwise ancestor walk to fs/   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 10/11] bpf: add a lockless path ancestor iterator   Justin Suess
  • [PATCH bpf-next v1 02/11] namei: add vfs_walk_ancestors()   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF   Alexei Starovoitov
    • [PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF   Justin Suess
    • [PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF   Justin Suess
      • [PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF   Mickaël Salaün
• [PATCH bpf-next v1 01/11] namei: introduce __path_walk_parent()   Justin Suess
  • [PATCH bpf-next v1 01/11] namei: introduce __path_walk_parent()   sashiko-bot at kernel.org
• [PATCH bpf-next v1 03/11] landlock: convert ancestor walk to vfs_walk_ancestors()   Justin Suess
  • [PATCH bpf-next v1 03/11] landlock: convert ancestor walk to vfs_walk_ancestors()   sashiko-bot at kernel.org
• [PATCH bpf-next v1 06/11] selftests/bpf: exercise the path ancestor iterator   Justin Suess
  • [PATCH bpf-next v1 06/11] selftests/bpf: exercise the path ancestor iterator   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 06/11] selftests/bpf: exercise the path ancestor iterator   Justin Suess
    • [PATCH bpf-next v1 06/11] selftests/bpf: exercise the path ancestor iterator   Jose E. Marchesi
• [PATCH bpf-next v1 07/11] fs: add mnt_undo_legitimize()   Justin Suess
  • [PATCH bpf-next v1 07/11] fs: add mnt_undo_legitimize()   sashiko-bot at kernel.org
• [PATCH bpf-next v1 08/11] namei: add an rcu-walk mode to the ancestor walk   Justin Suess
  • [PATCH bpf-next v1 08/11] namei: add an rcu-walk mode to the ancestor walk   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 08/11] namei: add an rcu-walk mode to the ancestor walk   Justin Suess
• [PATCH bpf-next v1 11/11] selftests/bpf: exercise the lockless path ancestor iterator   Justin Suess
  • [PATCH bpf-next v1 11/11] selftests/bpf: exercise the lockless path ancestor iterator   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 11/11] selftests/bpf: exercise the lockless path ancestor iterator   bot+bpf-ci at kernel.org
• [PATCH bpf-next v1 10/11] bpf: add a lockless path ancestor iterator   sashiko-bot at kernel.org
• [PATCH bpf-next v1 09/11] bpf: support "__uninit" iterator arguments in generic kfuncs   sashiko-bot at kernel.org
  • [PATCH bpf-next v1 09/11] bpf: support "__uninit" iterator arguments in generic kfuncs   Justin Suess
• [PATCH bpf-next v1 05/11] bpf: add a path ancestor iterator   Justin Suess
  • [PATCH bpf-next v1 05/11] bpf: add a path ancestor iterator   Justin Suess
    • [PATCH bpf-next v1 05/11] bpf: add a path ancestor iterator   sashiko-bot at kernel.org
• Greetings,,   Micheal
• [syzbot] [integrity?] [lsm?] possible deadlock in __configfs_open_file (2)   syzbot
  • [syzbot] [integrity?] [lsm?] possible deadlock in __configfs_open_file (2)   Mimi Zohar
• [PATCH v2] keys: make keyring indexes independent of kernel addresses   Kyle Zeng
  • [PATCH v2] keys: make keyring indexes independent of kernel addresses   sashiko-bot at kernel.org
  • [PATCH v2] keys: make keyring indexes independent of kernel addresses   Jarkko Sakkinen
    • [PATCH v2] keys: make keyring indexes independent of kernel addresses   Jarkko Sakkinen
• 「指示待ち人間」はこう増える   ナレッジリンク
• IT教育で、新規事業   石嶋紗季
• [PATCH mptcp-next 1/2] mptcp: add msk_is_mptcp() helper   Günther Noack
• [PATCH v6 0/8] Landlock: Namespace and capability control   Mickaël Salaün
  • [PATCH v6 7/8] samples/landlock: Add capability and namespace restriction support   Mickaël Salaün
  • [PATCH v6 7/8] samples/landlock: Add capability and namespace restriction support   sashiko-bot at kernel.org
• [PATCH v6 2/8] landlock: Wrap per-layer access masks in struct layer_config   Mickaël Salaün
  • [PATCH v6 2/8] landlock: Wrap per-layer access masks in struct layer_config   sashiko-bot at kernel.org
• [PATCH v6 3/8] landlock: Enforce namespace use restrictions   Mickaël Salaün
  • [PATCH v6 3/8] landlock: Enforce namespace use restrictions   sashiko-bot at kernel.org
• [PATCH v6 4/8] landlock: Enforce capability restrictions   Mickaël Salaün
  • [PATCH v6 4/8] landlock: Enforce capability restrictions   sashiko-bot at kernel.org
• [PATCH v6 5/8] selftests/landlock: Add namespace restriction tests   Mickaël Salaün
  • [PATCH v6 5/8] selftests/landlock: Add namespace restriction tests   sashiko-bot at kernel.org
  • [PATCH v6 5/8] selftests/landlock: Add namespace restriction tests   Günther Noack
    • [PATCH v6 5/8] selftests/landlock: Add namespace restriction tests   Mickaël Salaün
• [PATCH v6 6/8] selftests/landlock: Add capability restriction tests   Mickaël Salaün
  • [PATCH v6 6/8] selftests/landlock: Add capability restriction tests   sashiko-bot at kernel.org
  • [PATCH v6 6/8] selftests/landlock: Add capability restriction tests   Günther Noack
    • [PATCH v6 6/8] selftests/landlock: Add capability restriction tests   Mickaël Salaün
• [PATCH v6 8/8] landlock: Add documentation for capability and namespace restrictions   Mickaël Salaün
  • [PATCH v6 8/8] landlock: Add documentation for capability and namespace restrictions   sashiko-bot at kernel.org
• [PATCH v6 1/8] landlock: Rename quiet_masks to quiet_access   sashiko-bot at kernel.org
  • [PATCH v6 1/8] landlock: Rename quiet_masks to quiet_access   Mickaël Salaün
    • [PATCH v6 1/8] landlock: Rename quiet_masks to quiet_access   Günther Noack
• [syzbot] [lsm?] general protection fault in smack_inode_getattr   syzbot
• [PATCH] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Roberto Sassu
  • [PATCH] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   sashiko-bot at kernel.org
  • [PATCH] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Mimi Zohar
• [PATCH] tomoyo: Use isdigit() in tomoyo_numscan()   Thorsten Blum
  • [PATCH] tomoyo: Use isdigit() in tomoyo_numscan()   sashiko-bot at kernel.org
• [PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()   Artem Dinaburg
  • [PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()   sashiko-bot at kernel.org
  • [PATCH 6.6.y] apparmor: fix cred UAF caused by begin_current_label_crit_section()   Sasha Levin
• [PATCH v2 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
  • [PATCH v2 1/5] userns: record how far up CAP_SETFCAP reaches   Josef Bacik
    • [PATCH v2 1/5] userns: record how far up CAP_SETFCAP reaches   sashiko-bot at kernel.org
    • [PATCH v2 1/5] userns: record how far up CAP_SETFCAP reaches   Bradley Morgan
    • [PATCH v2 1/5] userns: record how far up CAP_SETFCAP reaches   Serge E. Hallyn
  • [PATCH v2 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   Josef Bacik
    • [PATCH v2 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   sashiko-bot at kernel.org
  • [PATCH v2 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   Josef Bacik
    • [PATCH v2 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   sashiko-bot at kernel.org
• [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP   Josef Bacik
  • [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP   Bradley Morgan
  • [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP   sashiko-bot at kernel.org
  • [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP   Serge E. Hallyn
    • [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP   Christian Brauner
• [PATCH v2 3/5] userns: check the opener and the writer before mapping uid 0   Josef Bacik
  • Re: [PATCH v2 3/5] userns: check the opener and the writer before mapping uid 0   Bradley Morgan
  • [PATCH v2 3/5] userns: check the opener and the writer before mapping uid 0   sashiko-bot at kernel.org
• [PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates   Georgia Garcia
  • [PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates   John Johansen
• [PATCH 0/3] vfs: add inode iteration method super_iter_inodes   Huang Shijie
  • [PATCH 1/3] vfs: add inode iteration method super_iter_inodes   Huang Shijie
    • [PATCH 1/3] vfs: add inode iteration method super_iter_inodes   Stephen Smalley
      • [PATCH 1/3] vfs: add inode iteration method super_iter_inodes   Huang Shijie
  • [PATCH 3/3] vfs: convert sb->s_inodes iteration to super_iter_inodes()   Huang Shijie
  • [PATCH 0/3] vfs: add inode iteration method super_iter_inodes   Christian Brauner
• [PATCH 2/3] vfs: convert inode iterators to the unsafe super_iter_inodes()   Huang Shijie
• [PATCH v2 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Cai Xinchen
  • [PATCH v2 -next 05/18] LSM: pass struct path to the inode_setattr hook   sashiko-bot at kernel.org
  • [PATCH v2 -next 17/18] samples/landlock: Add metadata rights to sandboxer   sashiko-bot at kernel.org
  • [PATCH v2 -next 01/18] fs: pass struct path to notify_change()   Cai Xinchen
    • [PATCH v2 -next 01/18] fs: pass struct path to notify_change()   sashiko-bot at kernel.org
    • [PATCH v2 -next 01/18] fs: pass struct path to notify_change()   Christian Brauner
      • [PATCH v2 -next 01/18] fs: pass struct path to notify_change()   Cai Xinchen
  • [PATCH v2 -next 02/18] LSM: pass struct path to the inode_setsecctx hook   Cai Xinchen
    • [PATCH v2 -next 02/18] LSM: pass struct path to the inode_setsecctx hook   sashiko-bot at kernel.org
  • [PATCH v2 -next 03/18] fs: pass struct path to xattr helpers   Cai Xinchen
    • [PATCH v2 -next 03/18] fs: pass struct path to xattr helpers   sashiko-bot at kernel.org
  • [PATCH v2 -next 04/18] fs: pass struct path to POSIX ACL helpers   Cai Xinchen
    • [PATCH v2 -next 04/18] fs: pass struct path to POSIX ACL helpers   sashiko-bot at kernel.org
  • [PATCH v2 -next 05/18] LSM: pass struct path to the inode_setattr hook   Cai Xinchen
  • [PATCH v2 -next 06/18] LSM: pass struct path to the inode xattr hooks   Cai Xinchen
    • [PATCH v2 -next 06/18] LSM: pass struct path to the inode xattr hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 07/18] LSM: pass struct path to the inode posix acl hooks   Cai Xinchen
    • [PATCH v2 -next 07/18] LSM: pass struct path to the inode posix acl hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 08/18] LSM: pass struct path to the inode fileattr hooks   Cai Xinchen
    • [PATCH v2 -next 08/18] LSM: pass struct path to the inode fileattr hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Cai Xinchen
    • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   sashiko-bot at kernel.org
    • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Justin Suess
      • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Günther Noack
      • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Cai Xinchen
      • [PATCH v2 -next 09/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Cai Xinchen
  • [PATCH v2 -next 10/18] LSM: rename inode_getattr to path_getattr   Cai Xinchen
    • [PATCH v2 -next 10/18] LSM: rename inode_getattr to path_getattr   sashiko-bot at kernel.org
  • [PATCH v2 -next 11/18] LSM: rename inode_setattr to path_setattr   Cai Xinchen
    • [PATCH v2 -next 11/18] LSM: rename inode_setattr to path_setattr   sashiko-bot at kernel.org
  • [PATCH v2 -next 12/18] LSM: rename the inode xattr hooks to path_xattr hooks   Cai Xinchen
    • [PATCH v2 -next 12/18] LSM: rename the inode xattr hooks to path_xattr hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 13/18] LSM: rename the inode posix acl hooks to path_*_acl hooks   Cai Xinchen
    • [PATCH v2 -next 13/18] LSM: rename the inode posix acl hooks to path_*_acl hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 14/18] LSM: rename the inode fileattr hooks to path_file_* hooks   Cai Xinchen
    • [PATCH v2 -next 14/18] LSM: rename the inode fileattr hooks to path_file_* hooks   sashiko-bot at kernel.org
  • [PATCH v2 -next 15/18] LSM: rename inode_setsecctx to path_setsecctx   Cai Xinchen
    • [PATCH v2 -next 15/18] LSM: rename inode_setsecctx to path_setsecctx   sashiko-bot at kernel.org
  • [PATCH v2 -next 16/18] selftests/landlock: Add tests for metadata access rights   Cai Xinchen
    • [PATCH v2 -next 16/18] selftests/landlock: Add tests for metadata access rights   sashiko-bot at kernel.org
  • [PATCH v2 -next 17/18] samples/landlock: Add metadata rights to sandboxer   Cai Xinchen
  • [PATCH v2 -next 18/18] Documentation: Update landlock doc for metadata rights   Cai Xinchen
    • [PATCH v2 -next 18/18] Documentation: Update landlock doc for metadata rights   sashiko-bot at kernel.org
  • [PATCH v2 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights   Christian Brauner
• [PATCH] keys: big_key: Reserve the final quota before destroying the payload   Daehyeon Ko
  • [PATCH] keys: big_key: Reserve the final quota before destroying the payload   sashiko-bot at kernel.org
  • [PATCH] keys: big_key: Reserve the final quota before destroying the payload   Jarkko Sakkinen
    • [PATCH] keys: big_key: Reserve the final quota before destroying the payload   Jarkko Sakkinen
      • [PATCH v2] keys: big_key: Remove the redundant quota reservation   Daehyeon Ko
      • [PATCH v2] keys: big_key: Remove the redundant quota reservation   sashiko-bot at kernel.org
      • [PATCH v2] keys: big_key: Remove the redundant quota reservation   Jarkko Sakkinen
• 1日で追いつく Claude Codeを学ぶ入門講座   AI エージェント｜イベント事務局
• [PATCH] selinux: don't label bridged packets in selinux_ip_forward()   Joas Antonio dos Santos
  • [PATCH] selinux: don't label bridged packets in selinux_ip_forward()   Stephen Smalley
  • [PATCH] selinux: don't label bridged packets in selinux_ip_forward()   sashiko-bot at kernel.org
• [PATCH] ima: reject modsig if detached data cannot be supplied   Mimi Zohar
• [RFC PATCH 0/6] KEYS: From assoc_array to rhashtable migration   Jarkko Sakkinen
  • [RFC PATCH 1/6] keys: prevent quota overflow and widen quotalen and datalen to 32 bits   Jarkko Sakkinen
    • [RFC PATCH 1/6] keys: prevent quota overflow and widen quotalen and datalen to 32 bits   Eric Biggers
      • [RFC PATCH 1/6] keys: prevent quota overflow and widen quotalen and datalen to 32 bits   Jarkko Sakkinen
  • [RFC PATCH 2/6] keys: reclaim link quota during keyring garbage collection   Jarkko Sakkinen
    • [RFC PATCH 2/6] keys: reclaim link quota during keyring garbage collection   Eric Biggers
      • [RFC PATCH 2/6] keys: reclaim link quota during keyring garbage collection   Jarkko Sakkinen
  • [RFC PATCH 3/6] keys: verify key identity on unlink and move   Jarkko Sakkinen
  • [RFC PATCH 4/6] keys: Add keyring_is_empty() for {fs,dm}-verity   Jarkko Sakkinen
  • [RFC PATCH 6/6] lib: Remove unused assoc_array   Jarkko Sakkinen
    • [RFC PATCH 6/6] lib: Remove unused assoc_array   David Howells
      • [RFC PATCH 6/6] lib: Remove unused assoc_array   Jarkko Sakkinen
• [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
  • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
  • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Eric Biggers
    • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
      • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
    • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
  • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
    • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
  • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
  • [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index   Jarkko Sakkinen
• [GIT PULL] selinux/selinux-pr-20261015   Paul Moore
  • [GIT PULL] selinux/selinux-pr-20261015   pr-tracker-bot at kernel.org
• [GIT PULL] lsm/lsm-pr-20261016   Paul Moore
  • [GIT PULL] lsm/lsm-pr-20261016   pr-tracker-bot at kernel.org
• [PATCH] keys: Protect the read method check against type removal   Cen Zhang
  • [PATCH] keys: Protect the read method check against type removal   sashiko-bot at kernel.org
  • [PATCH] keys: Protect the read method check against type removal   Jarkko Sakkinen
    • [PATCH] keys: Protect the read method check against type removal   Jarkko Sakkinen
      • [PATCH] keys: Protect the read method check against type removal   Cen Zhang
      • [PATCH] keys: Protect the read method check against type removal   Jarkko Sakkinen
• [PATCH v3 0/6] Extend PKWM to support user-created wrapping keys   Srish Srinivasan
  • [PATCH v3 1/6] pseries/plpks: fix length types for wrapping operations   Srish Srinivasan
    • [PATCH v3 1/6] pseries/plpks: fix length types for wrapping operations   sashiko-bot at kernel.org
  • [PATCH v3 2/6] keys/trusted_keys: propagate wrapping key generation errors   Srish Srinivasan
    • [PATCH v3 2/6] keys/trusted_keys: propagate wrapping key generation errors   sashiko-bot at kernel.org
  • [PATCH v3 3/6] keys/trusted_keys: clear sensitive PKWM buffers   Srish Srinivasan
    • [PATCH v3 3/6] keys/trusted_keys: clear sensitive PKWM buffers   sashiko-bot at kernel.org
  • [PATCH v3 4/6] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   Srish Srinivasan
    • [PATCH v3 4/6] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   sashiko-bot at kernel.org
  • [PATCH v3 5/6] keys/trusted_keys: enable PKWM wrapping key selection by label   Srish Srinivasan
    • [PATCH v3 5/6] keys/trusted_keys: enable PKWM wrapping key selection by label   sashiko-bot at kernel.org
  • [PATCH v3 6/6] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   Srish Srinivasan
    • [PATCH v3 6/6] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   sashiko-bot at kernel.org
• [PATCH] keys: Avoid owner account dereferences in /proc/keys   Cen Zhang
  • [PATCH] keys: Avoid owner account dereferences in /proc/keys   sashiko-bot at kernel.org
  • [PATCH] keys: Avoid owner account dereferences in /proc/keys   Jarkko Sakkinen
• [syzbot] [keyrings?] [lsm?] BUG: workqueue lockup in key_garbage_collector   syzbot
• [PATCH v4 0/9] Extend PKWM to support user-created wrapping keys   Srish Srinivasan
  • [PATCH v4 1/9] pseries/plpks: fix double conversion of write and remove flush errors   Srish Srinivasan
  • [PATCH v4 2/9] pseries/plpks: fix double conversion of wrapping key flush errors   Srish Srinivasan
  • [PATCH v4 3/9] pseries/plpks: fix length types for wrapping operations   Srish Srinivasan
    • [PATCH v4 3/9] pseries/plpks: fix length types for wrapping operations   sashiko-bot at kernel.org
  • [PATCH v4 4/9] keys/trusted_keys: propagate wrapping key generation errors   Srish Srinivasan
    • [PATCH v4 4/9] keys/trusted_keys: propagate wrapping key generation errors   sashiko-bot at kernel.org
  • [PATCH v4 5/9] keys/trusted_keys: fix PKWM output buffer cleanup   Srish Srinivasan
    • [PATCH v4 5/9] keys/trusted_keys: fix PKWM output buffer cleanup   sashiko-bot at kernel.org
  • [PATCH v4 6/9] keys/trusted_keys: clear sensitive PKWM buffers   Srish Srinivasan
    • [PATCH v4 6/9] keys/trusted_keys: clear sensitive PKWM buffers   sashiko-bot at kernel.org
  • [PATCH v4 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   Srish Srinivasan
    • [PATCH v4 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   sashiko-bot at kernel.org
  • [PATCH v4 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label   Srish Srinivasan
    • [PATCH v4 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label   sashiko-bot at kernel.org
  • [PATCH v4 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   Srish Srinivasan
    • [PATCH v4 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   sashiko-bot at kernel.org
  • [PATCH v4 2/9] pseries/plpks: fix double conversion of wrapping key flush errors   sashiko-bot at kernel.org
  • [PATCH v4 1/9] pseries/plpks: fix double conversion of write and remove flush errors   sashiko-bot at kernel.org
• [PATCH v5 0/9] Extend PKWM to support user-created wrapping keys   Srish Srinivasan
  • [PATCH v5 1/9] pseries/plpks: fix double conversion of write and remove flush errors   Srish Srinivasan
    • [PATCH v5 1/9] pseries/plpks: fix double conversion of write and remove flush errors   sashiko-bot at kernel.org
  • [PATCH v5 2/9] pseries/plpks: fix double conversion of wrapping key flush errors   Srish Srinivasan
    • [PATCH v5 2/9] pseries/plpks: fix double conversion of wrapping key flush errors   sashiko-bot at kernel.org
  • [PATCH v5 3/9] pseries/plpks: fix length types for wrapping operations   Srish Srinivasan
    • [PATCH v5 3/9] pseries/plpks: fix length types for wrapping operations   sashiko-bot at kernel.org
  • [PATCH v5 4/9] keys/trusted_keys: propagate wrapping key generation errors   Srish Srinivasan
    • [PATCH v5 4/9] keys/trusted_keys: propagate wrapping key generation errors   sashiko-bot at kernel.org
  • [PATCH v5 5/9] keys/trusted_keys: fix PKWM output buffer cleanup   Srish Srinivasan
    • [PATCH v5 5/9] keys/trusted_keys: fix PKWM output buffer cleanup   sashiko-bot at kernel.org
  • [PATCH v5 6/9] keys/trusted_keys: clear sensitive PKWM buffers   Srish Srinivasan
    • [PATCH v5 6/9] keys/trusted_keys: clear sensitive PKWM buffers   sashiko-bot at kernel.org
  • [PATCH v5 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   Srish Srinivasan
    • [PATCH v5 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management   sashiko-bot at kernel.org
  • [PATCH v5 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label   Srish Srinivasan
    • [PATCH v5 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label   sashiko-bot at kernel.org
  • [PATCH v5 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   Srish Srinivasan
    • [PATCH v5 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs   sashiko-bot at kernel.org
• [PATCH 00/13] cred: gather the "same uid" checks between tasks in one place   Josef Bacik
  • [PATCH 01/13] cred: gather the rules for acting on a task by uid   Josef Bacik
    • [PATCH 01/13] cred: gather the rules for acting on a task by uid   sashiko-bot at kernel.org
    • [PATCH 01/13] cred: gather the rules for acting on a task by uid   Serge Hallyn (AMD)
      • [PATCH 01/13] cred: gather the rules for acting on a task by uid   Josef Bacik
  • [PATCH 02/13] cred: add KUnit tests for the id rules   Josef Bacik
    • [PATCH 02/13] cred: add KUnit tests for the id rules   sashiko-bot at kernel.org
  • [PATCH 03/13] signal: use cred_ids_allow_signal()   Josef Bacik
    • [PATCH 03/13] signal: use cred_ids_allow_signal()   sashiko-bot at kernel.org
  • [PATCH 04/13] fcntl: use cred_ids_allow_sigio()   Josef Bacik
    • [PATCH 04/13] fcntl: use cred_ids_allow_sigio()   sashiko-bot at kernel.org
  • [PATCH 05/13] sched: use cred_ids_allow_sched()   Josef Bacik
    • [PATCH 05/13] sched: use cred_ids_allow_sched()   sashiko-bot at kernel.org
  • [PATCH 06/13] MIPS: use cred_ids_allow_sched()   Josef Bacik
    • [PATCH 06/13] MIPS: use cred_ids_allow_sched()   sashiko-bot at kernel.org
  • [PATCH 07/13] sys: use cred_ids_allow_sched() for setpriority()   Josef Bacik
    • [PATCH 07/13] sys: use cred_ids_allow_sched() for setpriority()   sashiko-bot at kernel.org
  • [PATCH 08/13] sys: use cred_ids_allow_control() for prlimit()   Josef Bacik
    • [PATCH 08/13] sys: use cred_ids_allow_control() for prlimit()   sashiko-bot at kernel.org
  • [PATCH 09/13] block: use cred_ids_allow_ioprio()   Josef Bacik
    • [PATCH 09/13] block: use cred_ids_allow_ioprio()   sashiko-bot at kernel.org
  • [PATCH 10/13] cgroup/v1: use cred_ids_allow_move()   Josef Bacik
    • [PATCH 10/13] cgroup/v1: use cred_ids_allow_move()   sashiko-bot at kernel.org
  • [PATCH 11/13] fs/resctrl: use cred_ids_allow_move()   Josef Bacik
    • [PATCH 11/13] fs/resctrl: use cred_ids_allow_move()   sashiko-bot at kernel.org
  • [PATCH 12/13] ptrace: use cred_ids_allow_control()   Josef Bacik
    • [PATCH 12/13] ptrace: use cred_ids_allow_control()   sashiko-bot at kernel.org
  • [PATCH 13/13] keys: use cred_ids_allow_control()   Josef Bacik
    • [PATCH 13/13] keys: use cred_ids_allow_control()   sashiko-bot at kernel.org
• [RFC PATCH 00/41] UUID and GUID user and group ids (*_r system calls)   Jan Koester
  • [RFC PATCH 04/41] net: sock: read sk_uid through a seqcount   Jan Koester
  • [RFC PATCH 05/41] af_unix: keep sender ids in skb->cb only when they are classic ids   Jan Koester
  • [RFC PATCH 06/41] netlink: keep classic sender ids in skb->cb   Jan Koester
  • [RFC PATCH 07/41] Bluetooth: keep classic sender ids in skb->cb   Jan Koester
  • [RFC PATCH 08/41] smb: client: use __kuid_val() for the unix SIDs of the caller   Jan Koester
  • [RFC PATCH 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID   Jan Koester
    • [RFC PATCH 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID   Andy Lutomirski
    • [RFC PATCH 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID   Eric Biggers
  • [RFC PATCH 10/41] uidgid: convert between kernel ids and the ids of the *_r system calls   Jan Koester
  • [RFC PATCH 11/41] fscrypt: show the whole uid in the description of user key claims   Jan Koester
• [RFC PATCH 01/41] uuid: move uuid_t and guid_t into <linux/uuid_types.h>   Jan Koester
• [RFC PATCH 02/41] uapi: add <linux/uidgid_r.h> for 128 bit capable user and group ids   Jan Koester
• [RFC PATCH 03/41] uidgid: add uid_is_legacy() and gid_is_legacy()   Jan Koester
• [PATCH AUTOSEL 6.18-6.6] apparmor: fix auditing of mount binary data   Sasha Levin
  • [PATCH AUTOSEL 6.18-6.6] apparmor: fix auditing of mount binary data   sashiko-bot at kernel.org
• [RFC PATCH 2/8] KEYS: Change the type of key->datalen to unsigned int   Jarkko Sakkinen
  • [RFC PATCH 2/8] KEYS: Change the type of key->datalen to unsigned int   David Howells
    • [RFC PATCH 2/8] KEYS: Change the type of key->datalen to unsigned int   Jarkko Sakkinen
  • [RFC PATCH 2/8] KEYS: Change the type of key->datalen to unsigned int   sashiko-bot at kernel.org
• [RFC PATCH 4/8] KEYS: Prevent overflow of user->qnkeys in key_alloc()   Jarkko Sakkinen
  • [RFC PATCH 4/8] KEYS: Prevent overflow of user->qnkeys in key_alloc()   sashiko-bot at kernel.org
• [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()   Jarkko Sakkinen
  • [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()   David Howells
    • [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()   Jarkko Sakkinen
  • [RFC PATCH 5/8] KEYS: Prevent overflow of quota in key_alloc()   sashiko-bot at kernel.org
• [RFC PATCH 8/8] KEYS: Verify the key identity in __keyctl_unlink   Jarkko Sakkinen
  • [RFC PATCH 8/8] KEYS: Verify the key identity in __keyctl_unlink   David Howells
    • [RFC PATCH 8/8] KEYS: Verify the key identity in __keyctl_unlink   Jarkko Sakkinen
  • [RFC PATCH 8/8] KEYS: Verify the key identity in __keyctl_unlink   sashiko-bot at kernel.org
• [RFC PATCH 0/8] KEYS: rhashtable bug fixes   Jarkko Sakkinen
  • [RFC PATCH 0/8] KEYS: rhashtable bug fixes   Jarkko Sakkinen
    • [RFC PATCH 1/8] KEYS: Change the type of key->quotalen to unsigned int   Jarkko Sakkinen
    • [RFC PATCH 3/8] KEYS: Reject @desclen values over U16_MAX in key_alloc()   Jarkko Sakkinen
      • [RFC PATCH 3/8] KEYS: Reject @desclen values over U16_MAX in key_alloc()   David Howells
      • [RFC PATCH 3/8] KEYS: Reject @desclen values over U16_MAX in key_alloc()   Jarkko Sakkinen
      • [RFC PATCH 3/8] KEYS: Reject @desclen values over U16_MAX in key_alloc()   sashiko-bot at kernel.org
    • [RFC PATCH 6/8] KEYS: Prevent overflow of user->qnbytes in key_alloc()   Jarkko Sakkinen
      • [RFC PATCH 6/8] KEYS: Prevent overflow of user->qnbytes in key_alloc()   David Howells
      • [RFC PATCH 6/8] KEYS: Prevent overflow of user->qnbytes in key_alloc()   Jarkko Sakkinen
      • [RFC PATCH 6/8] KEYS: Prevent overflow of user->qnbytes in key_alloc()   sashiko-bot at kernel.org
    • [RFC PATCH 7/8] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
      • [RFC PATCH 7/8] KEYS: Reject @datalen values over INT_MAX   David Howells
      • [RFC PATCH 7/8] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
      • [RFC PATCH 7/8] KEYS: Reject @datalen values over INT_MAX   sashiko-bot at kernel.org
    • [RFC PATCH 1/8] KEYS: Change the type of key->quotalen to unsigned int   sashiko-bot at kernel.org
• [PATCH v2 2/2] KEYS: Reject keyring creation with overridden credentials   David Howells
  • [PATCH v2 2/2] KEYS: Reject keyring creation with overridden credentials   sashiko-bot at kernel.org
  • [PATCH v2 2/2] KEYS: Reject keyring creation with overridden credentials   Jarkko Sakkinen
• [PATCH v2] keys: Protect the read method check against type removal   David Howells
  • [PATCH v2] keys: Protect the read method check against type removal   sashiko-bot at kernel.org
• [PATCH v2 1/2] KEYS: Return user session keyring on lookup   sashiko-bot at kernel.org
• [PATCH v2 0/6] KEYS: rhashtable bug fixes   Jarkko Sakkinen
  • [PATCH v2 3/6] KEYS: Prevent overflow of user->{qnkeys, qnbytes} in key_alloc()   Jarkko Sakkinen
  • [PATCH v2 3/6] KEYS: Prevent overflow of user->{qnkeys,qnbytes} in key_alloc()   sashiko-bot at kernel.org
  • [PATCH v2 0/6] KEYS: rhashtable bug fixes   Jarkko Sakkinen
  • [PATCH v2 3/6] KEYS: Prevent overflow of user->{qnkeys,qnbytes} in key_alloc()   Eric Biggers
    • [PATCH v2 3/6] KEYS: Prevent overflow of user->{qnkeys,qnbytes} in key_alloc()   Jarkko Sakkinen
      • [PATCH v2 3/6] KEYS: Prevent overflow of user->{qnkeys,qnbytes} in key_alloc()   Jarkko Sakkinen
• [PATCH v2 1/6] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
  • [PATCH v2 1/6] KEYS: Expand key->{datalen,quotalen} to unsigned int   sashiko-bot at kernel.org
  • [PATCH v2 1/6] KEYS: Expand key->{datalen,quotalen} to unsigned int   Eric Biggers
    • [PATCH v2 1/6] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
• [PATCH v2 2/6] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
  • [PATCH v2 2/6] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   sashiko-bot at kernel.org
  • [PATCH v2 2/6] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Eric Biggers
    • [PATCH v2 2/6] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
      • [PATCH v2 2/6] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
• [PATCH v2 4/6] KEYS: Prevent overflow of quota in key_alloc()   Jarkko Sakkinen
  • [PATCH v2 4/6] KEYS: Prevent overflow of quota in key_alloc()   sashiko-bot at kernel.org
  • [PATCH v2 4/6] KEYS: Prevent overflow of quota in key_alloc()   Eric Biggers
    • [PATCH v2 4/6] KEYS: Prevent overflow of quota in key_alloc()   Jarkko Sakkinen
      • [PATCH v2 4/6] KEYS: Prevent overflow of quota in key_alloc()   Jarkko Sakkinen
• [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
  • [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   sashiko-bot at kernel.org
  • [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   Eric Biggers
    • [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
      • [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
      • [PATCH v2 5/6] KEYS: Reject @datalen values over INT_MAX   Jarkko Sakkinen
• [PATCH v2 6/6] KEYS: Verify the key identity in __keyctl_unlink   Jarkko Sakkinen
  • [PATCH v2 6/6] KEYS: Verify the key identity in __keyctl_unlink   sashiko-bot at kernel.org
  • [PATCH v2 6/6] KEYS: Verify the key identity in __keyctl_unlink   Eric Biggers
    • [PATCH v2 6/6] KEYS: Verify the key identity in __keyctl_unlink   Jarkko Sakkinen
      • [PATCH v2 6/6] KEYS: Verify the key identity in __keyctl_unlink   Jarkko Sakkinen
• [PATCH RFC 0/4] IPE: add a dedicated policy keyring   Manuel Huber via B4 Relay
  • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Manuel Huber via B4 Relay
    • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   sashiko-bot at kernel.org
    • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Randy Dunlap
    • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Fan Wu
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Christian Brauner
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Paul Moore
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Christian Brauner
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Paul Moore
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   luca.boccassi at gmail.com
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Manuel Huber
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Fan Wu
      • [PATCH RFC 1/4] ipe: add the .ipe policy keyring   Christian Brauner
  • [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING   Manuel Huber via B4 Relay
    • [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING   sashiko-bot at kernel.org
    • [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING   Fan Wu
      • [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING   Christian Brauner
  • [PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring   Manuel Huber via B4 Relay
    • [PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring   sashiko-bot at kernel.org
    • [PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring   Fan Wu
      • [PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring   Manuel Huber
  • [PATCH RFC 0/4] IPE: add a dedicated policy keyring   Jarkko Sakkinen
• [PATCH RFC 3/4] Documentation: ipe: document the IPE keyring   Manuel Huber via B4 Relay
  • [PATCH RFC 3/4] Documentation: ipe: document the IPE keyring   sashiko-bot at kernel.org
• [PATCH] lsm: don't call d_path() when current->fs is NULL   Drif Abdelmalek Mohamed Said
  • [PATCH] lsm: don't call d_path() when current->fs is NULL   sashiko-bot at kernel.org
• [PATCH] apparmor: mediate AF_UNSPEC socket disconnects   shaos
  • [PATCH] apparmor: mediate AF_UNSPEC socket disconnects   sashiko-bot at kernel.org
• [PATCH v3 0/3] KEYS: rhashtable bug fixes   Jarkko Sakkinen
  • [PATCH v3 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
    • [PATCH v3 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   sashiko-bot at kernel.org
    • [PATCH v3 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Eric Biggers
      • [PATCH v3 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
  • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
    • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
      • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Eric Biggers
      • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
      • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
      • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Eric Biggers
      • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   Jarkko Sakkinen
    • [PATCH v3 2/3] KEYS: Reject @desclen values >= KEY_MAX_DESC_SIZE in key_alloc()   sashiko-bot at kernel.org
  • [PATCH v3 3/3] KEYS: Verify the key identity in __key_unlink_begin   Jarkko Sakkinen
    • [PATCH v3 3/3] KEYS: Verify the key identity in __key_unlink_begin   sashiko-bot at kernel.org
• [GIT PULL] IPE update for 7.4   Fan Wu
  • [GIT PULL] IPE update for 7.4   pr-tracker-bot at kernel.org
• [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Roberto Sassu
  • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   sashiko-bot at kernel.org
  • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Mimi Zohar
  • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Jonathan McDowell
    • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Krzysztof Kozlowski
  • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Srish Srinivasan
  • [PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)   Catalin Marinas
• [PATCH] apparmor: check address length before reading AF_UNSPEC bind address   sashiko-bot at kernel.org
  • [PATCH] apparmor: check address length before reading AF_UNSPEC bind address   Michail Andreas Michalopoulos
• [PATCH] KEYS: trusted: Reject short TPM2 public areas   Jarkko Sakkinen
  • [PATCH v2] KEYS: trusted: Reject short TPM2 public areas   Daehyeon Ko
    • [PATCH v2] KEYS: trusted: Reject short TPM2 public areas   sashiko-bot at kernel.org
    • [PATCH v2] KEYS: trusted: Reject short TPM2 public areas   Jarkko Sakkinen
• [PATCH] apparmor: fix NULL peer label deref for connected SOCK_DGRAM sockets   Nik Tsytsarkin
  • [PATCH] apparmor: fix NULL peer label deref for connected SOCK_DGRAM sockets   Serge E. Hallyn
    • [PATCH] apparmor: fix NULL peer label deref for connected SOCK_DGRAM sockets   Nik Tsytsarkin
• [PATCH v4 0/3] KEYS: rhashtable bug fixes   Jarkko Sakkinen
  • [PATCH v4 0/3] KEYS: rhashtable bug fixes   Jarkko Sakkinen
    • [PATCH v4 0/3] KEYS: rhashtable bug fixes   Eric Biggers
      • [PATCH v4 0/3] KEYS: rhashtable bug fixes   Jarkko Sakkinen
• [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
  • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   sashiko-bot at kernel.org
  • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
    • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
    • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Eric Biggers
      • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
      • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Eric Biggers
      • [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int   Jarkko Sakkinen
• [PATCH v4 2/3] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   Jarkko Sakkinen
  • [PATCH v4 2/3] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   sashiko-bot at kernel.org
  • [PATCH v4 2/3] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   Jarkko Sakkinen
    • [PATCH v4 2/3] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   Jarkko Sakkinen
• [PATCH v4 3/3] KEYS: Verify the key identity in __key_unlink_begin   Jarkko Sakkinen
  • [PATCH v4 3/3] KEYS: Verify the key identity in __key_unlink_begin   sashiko-bot at kernel.org
• [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)   Jan Koester
  • [RFC PATCH v2 01/41] uuid: move uuid_t and guid_t into <linux/uuid_types.h>   Jan Koester
    • [RFC PATCH v2 01/41] uuid: move uuid_t and guid_t into <linux/uuid_types.h>   sashiko-bot at kernel.org
  • [RFC PATCH v2 02/41] uapi: add <linux/uidgid_r.h> for 128 bit capable user and group ids   Jan Koester
    • [RFC PATCH v2 02/41] uapi: add <linux/uidgid_r.h> for 128 bit capable user and group ids   sashiko-bot at kernel.org
  • [RFC PATCH v2 03/41] uidgid: add uid_is_legacy() and gid_is_legacy()   Jan Koester
    • [RFC PATCH v2 03/41] uidgid: add uid_is_legacy() and gid_is_legacy()   sashiko-bot at kernel.org
  • [RFC PATCH v2 04/41] net: sock: read sk_uid through a seqcount   Jan Koester
    • [RFC PATCH v2 04/41] net: sock: read sk_uid through a seqcount   sashiko-bot at kernel.org
  • [RFC PATCH v2 05/41] af_unix: keep sender ids in skb->cb only when they are classic ids   Jan Koester
    • [RFC PATCH v2 05/41] af_unix: keep sender ids in skb->cb only when they are classic ids   sashiko-bot at kernel.org
  • [RFC PATCH v2 06/41] netlink: keep classic sender ids in skb->cb   Jan Koester
    • [RFC PATCH v2 06/41] netlink: keep classic sender ids in skb->cb   sashiko-bot at kernel.org
  • [RFC PATCH v2 07/41] Bluetooth: keep classic sender ids in skb->cb   Jan Koester
    • [RFC PATCH v2 07/41] Bluetooth: keep classic sender ids in skb->cb   sashiko-bot at kernel.org
  • [RFC PATCH v2 08/41] smb: client: use __kuid_val() for the unix SIDs of the caller   Jan Koester
    • [RFC PATCH v2 08/41] smb: client: use __kuid_val() for the unix SIDs of the caller   sashiko-bot at kernel.org
  • [RFC PATCH v2 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID   Jan Koester
    • [RFC PATCH v2 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID   sashiko-bot at kernel.org
  • [RFC PATCH v2 10/41] uidgid: convert between kernel ids and the ids of the *_r system calls   Jan Koester
    • [RFC PATCH v2 10/41] uidgid: convert between kernel ids and the ids of the *_r system calls   sashiko-bot at kernel.org
  • [RFC PATCH v2 11/41] fscrypt: show the whole uid in the description of user key claims   Jan Koester
    • [RFC PATCH v2 11/41] fscrypt: show the whole uid in the description of user key claims   sashiko-bot at kernel.org
  • [RFC PATCH v2 12/41] keys: name per-user keyrings of UUID and GUID users by the whole uid   Jan Koester
    • [RFC PATCH v2 12/41] keys: name per-user keyrings of UUID and GUID users by the whole uid   sashiko-bot at kernel.org
  • [RFC PATCH v2 13/41] ublk: refuse unprivileged devices to UUID and GUID users   Jan Koester
    • [RFC PATCH v2 13/41] ublk: refuse unprivileged devices to UUID and GUID users   sashiko-bot at kernel.org
  • [RFC PATCH v2 14/41] nfsd: don't hand out uid 0 for read layouts of UUID-owned files   Jan Koester
    • [RFC PATCH v2 14/41] nfsd: don't hand out uid 0 for read layouts of UUID-owned files   sashiko-bot at kernel.org
  • [RFC PATCH v2 15/41] SUNRPC: name UUID and GUID users to gssd as uid_r=   Jan Koester
    • [RFC PATCH v2 15/41] SUNRPC: name UUID and GUID users to gssd as uid_r=   sashiko-bot at kernel.org
  • [RFC PATCH v2 16/41] ecryptfs: hash daemons by kuid_hash()   Jan Koester
    • [RFC PATCH v2 16/41] ecryptfs: hash daemons by kuid_hash()   sashiko-bot at kernel.org
  • [RFC PATCH v2 17/41] quota: don't account UUID and GUID owners   Jan Koester
    • [RFC PATCH v2 17/41] quota: don't account UUID and GUID owners   sashiko-bot at kernel.org
  • [RFC PATCH v2 18/41] fs: keep UUID and GUID owners off filesystems that can't store them   Jan Koester
    • [RFC PATCH v2 18/41] fs: keep UUID and GUID owners off filesystems that can't store them   sashiko-bot at kernel.org
  • [RFC PATCH v2 19/41] cred: add the *_r variants of the get/set*id() system calls   Jan Koester
    • [RFC PATCH v2 19/41] cred: add the *_r variants of the get/set*id() system calls   sashiko-bot at kernel.org
  • [RFC PATCH v2 20/41] groups: add getgroups_r() and setgroups_r()   Jan Koester
    • [RFC PATCH v2 20/41] groups: add getgroups_r() and setgroups_r()   sashiko-bot at kernel.org
  • [RFC PATCH v2 21/41] fs: add chown_r(), lchown_r(), fchown_r() and fchownat_r()   Jan Koester
    • [RFC PATCH v2 21/41] fs: add chown_r(), lchown_r(), fchown_r() and fchownat_r()   sashiko-bot at kernel.org
  • [RFC PATCH v2 22/41] arch: wire up the *_r uid and gid system calls   Jan Koester
    • [RFC PATCH v2 22/41] arch: wire up the *_r uid and gid system calls   sashiko-bot at kernel.org
  • [RFC PATCH v2 23/41] statx: report UUID and GUID owners   Jan Koester
    • [RFC PATCH v2 23/41] statx: report UUID and GUID owners   sashiko-bot at kernel.org
  • [RFC PATCH v2 24/41] shmem, ramfs: allow UUID and GUID owners   Jan Koester
    • [RFC PATCH v2 24/41] shmem, ramfs: allow UUID and GUID owners   sashiko-bot at kernel.org
  • [RFC PATCH v2 25/41] uidgid: parse and print ids in their text form   Jan Koester
    • [RFC PATCH v2 25/41] uidgid: parse and print ids in their text form   sashiko-bot at kernel.org
  • [RFC PATCH v2 26/41] proc: show UUID and GUID ids in status, accept them for loginuid   Jan Koester
    • [RFC PATCH v2 26/41] proc: show UUID and GUID ids in status, accept them for loginuid   sashiko-bot at kernel.org
  • [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full   Jan Koester
    • [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full   sashiko-bot at kernel.org
  • [RFC PATCH v2 28/41] net: add SO_PEERCRED_R, SO_PEERGROUPS_R and SCM_CREDENTIALS_R   Jan Koester
    • [RFC PATCH v2 28/41] net: add SO_PEERCRED_R, SO_PEERGROUPS_R and SCM_CREDENTIALS_R   sashiko-bot at kernel.org
  • [RFC PATCH v2 29/41] signal: report the sender's UUID or GUID uid in si_uid_r   Jan Koester
    • [RFC PATCH v2 29/41] signal: report the sender's UUID or GUID uid in si_uid_r   sashiko-bot at kernel.org
  • [RFC PATCH v2 30/41] ipc: add IPC_STAT_R and IPC_SET_R   Jan Koester
    • [RFC PATCH v2 30/41] ipc: add IPC_STAT_R and IPC_SET_R   sashiko-bot at kernel.org
  • [RFC PATCH v2 31/41] ext4: add the uid_r feature for UUID and GUID owners   Jan Koester
    • [RFC PATCH v2 31/41] ext4: add the uid_r feature for UUID and GUID owners   sashiko-bot at kernel.org
  • [RFC PATCH v2 32/41] ext4: let uid_r be turned on while the filesystem is mounted   Jan Koester
    • [RFC PATCH v2 32/41] ext4: let uid_r be turned on while the filesystem is mounted   sashiko-bot at kernel.org
  • [RFC PATCH v2 33/41] posix_acl: support UUID and GUID entries   Jan Koester
    • [RFC PATCH v2 33/41] posix_acl: support UUID and GUID entries   sashiko-bot at kernel.org
  • [RFC PATCH v2 34/41] ext4: store ACLs with UUID and GUID entries on uid_r filesystems   Jan Koester
    • [RFC PATCH v2 34/41] ext4: store ACLs with UUID and GUID entries on uid_r filesystems   sashiko-bot at kernel.org
  • [RFC PATCH v2 35/41] Documentation: describe UUID and GUID user and group ids   Jan Koester
    • [RFC PATCH v2 35/41] Documentation: describe UUID and GUID user and group ids   sashiko-bot at kernel.org
  • [RFC PATCH v2 36/41] selftests: add tests for UUID and GUID ids   Jan Koester
    • [RFC PATCH v2 36/41] selftests: add tests for UUID and GUID ids   sashiko-bot at kernel.org
  • [RFC PATCH v2 37/41] ovl: allow UUID and GUID owners when the upper layer does   Jan Koester
    • [RFC PATCH v2 37/41] ovl: allow UUID and GUID owners when the upper layer does   sashiko-bot at kernel.org
  • [RFC PATCH v2 38/41] devpts: allow UUID and GUID owners   Jan Koester
    • [RFC PATCH v2 38/41] devpts: allow UUID and GUID owners   sashiko-bot at kernel.org
  • [RFC PATCH v2 39/41] ksmbd: log in UUID and GUID users and map them to SIDs   Jan Koester
    • [RFC PATCH v2 39/41] ksmbd: log in UUID and GUID users and map them to SIDs   sashiko-bot at kernel.org
  • [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form   Jan Koester
    • [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form   Chuck Lever
      • [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form   Takeshi Nishimura
    • [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form   sashiko-bot at kernel.org
  • [RFC PATCH v2 41/41] Documentation: uid_r: describe SMB and NFSv4   Jan Koester
    • [RFC PATCH v2 41/41] Documentation: uid_r: describe SMB and NFSv4   sashiko-bot at kernel.org
  • [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)   jan Koester
  • Adding dreaded Windows SID-style, or. Repeating history, the bad chapters. UUID/GUIDRe: [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)   Lionel Cons
  • [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)   Casey Schaufler
    • [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)   Theodore Tso
• [syzbot ci] Re: KEYS: Return user session keyring on lookup   syzbot ci
  • [syzbot ci] Re: KEYS: Return user session keyring on lookup   Jarkko Sakkinen
• [PATCH slab/for-next 00/14] mm/slab: mandate SLAB_MAY_ACCOUNT for __GFP_ACCOUNT allocations to avoid wasting memory for slab metadata   Harry Yoo (Meta)
  • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   Harry Yoo (Meta)
    • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   Casey Schaufler
      • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   Harry Yoo
      • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   Casey Schaufler
      • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   Harry Yoo
    • [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache   sashiko-bot at kernel.org
• [GIT PULL] KEYS: changes for v7.4-rc1   Jarkko Sakkinen
  • [GIT PULL] KEYS: changes for v7.4-rc1   Linus Torvalds
    • [GIT PULL] KEYS: changes for v7.4-rc1   Jarkko Sakkinen
  • [GIT PULL] KEYS: changes for v7.4-rc1   pr-tracker-bot at kernel.org
• [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops   Serge E. Hallyn
  • [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops   Andrew G. Morgan
• [PATCH RFC v2 0/8] memcg: dma-buf cgroup accounting and charge transfer   Albert Esteve
  • [PATCH RFC v2 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure   Albert Esteve
    • [PATCH RFC v2 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure   sashiko-bot at kernel.org
  • [PATCH RFC v2 2/8] dma-heap: charge dma-buf memory via explicit memcg   Albert Esteve
    • [PATCH RFC v2 2/8] dma-heap: charge dma-buf memory via explicit memcg   sashiko-bot at kernel.org
  • [PATCH RFC v2 4/8] security: dma-buf: Add dma_buf_charge_cgroup LSM hook   Albert Esteve
    • [PATCH RFC v2 4/8] security: dma-buf: Add dma_buf_charge_cgroup LSM hook   sashiko-bot at kernel.org
  • [PATCH RFC v2 6/8] selinux: Restrict dma-buf direct cgroup charging   Albert Esteve
    • [PATCH RFC v2 6/8] selinux: Restrict dma-buf direct cgroup charging   sashiko-bot at kernel.org
  • [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE   Albert Esteve
    • [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE   Christian König
    • [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE   sashiko-bot at kernel.org
  • [PATCH RFC v2 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests   Albert Esteve
    • [PATCH RFC v2 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests   sashiko-bot at kernel.org
• [PATCH RFC v2 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook   Albert Esteve
  • [PATCH RFC v2 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook   sashiko-bot at kernel.org
• [PATCH RFC v2 5/8] selinux: Restrict cross-cgroup dma-buf charging   Albert Esteve
  • [PATCH RFC v2 5/8] selinux: Restrict cross-cgroup dma-buf charging   sashiko-bot at kernel.org
• [GIT PULL] Landlock update for v7.4-rc1   Mickaël Salaün
  • [GIT PULL] Landlock update for v7.4-rc1   Jann Horn
    • [GIT PULL] Landlock update for v7.4-rc1   Mickaël Salaün
  • [GIT PULL] Landlock update for v7.4-rc1   pr-tracker-bot at kernel.org
• [RFC PATCH] docs: security: Describe the Kernel Assurance Plane design   Ketan Bhardwaj
  • [RFC PATCH] docs: security: Describe the Kernel Assurance Plane design   sashiko-bot at kernel.org
  • [RFC PATCH] docs: security: Describe the Kernel Assurance Plane design   Randy Dunlap
    • [RFC PATCH] docs: security: Describe the Kernel Assurance Plane design   Harihara Sudhan
• [PATCH v3 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
• [PATCH v3 1/5] userns: record how far up CAP_SETFCAP reaches   Josef Bacik
  • [PATCH v3 1/5] userns: record how far up CAP_SETFCAP reaches   sashiko-bot at kernel.org
• [PATCH v3 2/5] userns: don't let setns() lend CAP_SETFCAP   Josef Bacik
  • [PATCH v3 2/5] userns: don't let setns() lend CAP_SETFCAP   sashiko-bot at kernel.org
• [PATCH v3 3/5] userns: check the opener and the writer before mapping uid 0   Josef Bacik
  • [PATCH v3 3/5] userns: check the opener and the writer before mapping uid 0   sashiko-bot at kernel.org
• [PATCH v3 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   Josef Bacik
  • [PATCH v3 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   sashiko-bot at kernel.org
• [PATCH v3 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   Josef Bacik
  • [PATCH v3 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   sashiko-bot at kernel.org
• [PATCH v3 0/2] ima: reject modsig when detached data cannot be supplied   Jérémy Jean
• [PATCH v3 1/2] ima: discard modsig when detached data cannot be supplied   Jérémy Jean
  • [PATCH v3 1/2] ima: discard modsig when detached data cannot be supplied   sashiko-bot at kernel.org
  • [PATCH v3 1/2] ima: discard modsig when detached data cannot be supplied   Mimi Zohar
• [PATCH v3 2/2] ima: audit failure to supply detached data for modsig   Jérémy Jean
  • [PATCH v3 2/2] ima: audit failure to supply detached data for modsig   sashiko-bot at kernel.org
  • [PATCH v3 2/2] ima: audit failure to supply detached data for modsig   Mimi Zohar
    • [PATCH v3 2/2] ima: audit failure to supply detached data for modsig   Jérémy Jean
• [GIT PULL] BPF changes for 7.4   Paul Moore
  • [GIT PULL] BPF changes for 7.4   Alexei Starovoitov
    • [GIT PULL] BPF changes for 7.4   Paul Moore
      • [GIT PULL] BPF changes for 7.4   Alexei Starovoitov
      • [GIT PULL] BPF changes for 7.4   Christian Brauner
• [PATCH v2] security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid()   Serge Hallyn (AMD)
• [PATCH v4 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
  • [PATCH v4 1/5] userns: record how far up CAP_SETFCAP reaches   Josef Bacik
  • [PATCH v4 2/5] userns: don't let setns() lend CAP_SETFCAP   Josef Bacik
    • [PATCH v4 2/5] userns: don't let setns() lend CAP_SETFCAP   sashiko-bot at kernel.org
  • [PATCH v4 3/5] userns: check the opener and the writer before mapping uid 0   Josef Bacik
    • [PATCH v4 3/5] userns: check the opener and the writer before mapping uid 0   sashiko-bot at kernel.org
  • [PATCH v4 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   Josef Bacik
    • [PATCH v4 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   sashiko-bot at kernel.org
  • [PATCH v4 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   Josef Bacik
    • [PATCH v4 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   sashiko-bot at kernel.org
  • [PATCH v4 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Serge E. Hallyn
• [PATCH v4 1/5] userns: record how far up CAP_SETFCAP reaches   sashiko-bot at kernel.org
• [PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes   Eric Biggers
  • [PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes   sashiko-bot at kernel.org
  • [PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes   Andrey Albershteyn
• [PATCH v2 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   Jarkko Sakkinen
  • [PATCH v2 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   sashiko-bot at kernel.org
• [PATCH v2 4/6] KEYS: Introduce keyring_is_empty()   Jarkko Sakkinen
  • [PATCH v2 4/6] KEYS: Introduce keyring_is_empty()   sashiko-bot at kernel.org
• [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
  • [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   sashiko-bot at kernel.org
  • [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
  • [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
  • [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
    • [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
• [PATCH v2 3/6] KEYS: Verify the key identity in __key_unlink_begin   sashiko-bot at kernel.org
  • [PATCH v2 3/6] KEYS: Verify the key identity in __key_unlink_begin   Jarkko Sakkinen
• [PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation   Weijie Yuan
  • [PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation   Dongliang Mu
• [PATCH v5 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0   Josef Bacik
  • [PATCH v5 1/5] userns: record how far up CAP_SETFCAP reaches   Josef Bacik
    • [PATCH v5 1/5] userns: record how far up CAP_SETFCAP reaches   sashiko-bot at kernel.org
  • [PATCH v5 2/5] userns: don't let setns() lend CAP_SETFCAP   Josef Bacik
    • [PATCH v5 2/5] userns: don't let setns() lend CAP_SETFCAP   sashiko-bot at kernel.org
  • [PATCH v5 3/5] userns: check the opener and the writer before mapping uid 0   Josef Bacik
    • [PATCH v5 3/5] userns: check the opener and the writer before mapping uid 0   sashiko-bot at kernel.org
      • [PATCH v5 3/5] userns: check the opener and the writer before mapping uid 0   Jarkko Sakkinen
  • [PATCH v5 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   Josef Bacik
    • [PATCH v5 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches   sashiko-bot at kernel.org
  • [PATCH v5 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   Josef Bacik
    • [PATCH v5 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP   sashiko-bot at kernel.org
• [RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only   Amelia Crate
  • [RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only   sashiko-bot at kernel.org
  • [RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only   Randy Dunlap
• [PATCH] keys: use long workqueue for garbage collection   Eduard Zateev
  • [PATCH] keys: use long workqueue for garbage collection   sashiko-bot at kernel.org
  • [PATCH] keys: use long workqueue for garbage collection   Jarkko Sakkinen
    • [PATCH] keys: use long workqueue for garbage collection   Jarkko Sakkinen
      • [PATCH] keys: use long workqueue for garbage collection   Jarkko Sakkinen
• [PATCH v4 0/2] ima: reject modsig when detached data cannot be supplied   Jérémy Jean
  • [PATCH v4 1/2] ima: discard modsig when detached data cannot be supplied   Jérémy Jean
    • [PATCH v4 1/2] ima: discard modsig when detached data cannot be supplied   sashiko-bot at kernel.org
    • [PATCH v4 1/2] ima: discard modsig when detached data cannot be supplied   Jérémy Jean
• [PATCH v4 2/2] ima: audit failure to supply detached data for modsig   Jérémy Jean
  • [PATCH v4 2/2] ima: audit failure to supply detached data for modsig   sashiko-bot at kernel.org
• [PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation   Yan Zhu
• [PATCH RFC 0/3] landlock: Add access rights on created files   Farid Zakaria
  • [PATCH RFC 1/3] lsm: Call inode_init_security hooks without xattrs   Farid Zakaria
    • [PATCH RFC 1/3] lsm: Call inode_init_security hooks without xattrs   sashiko-bot at kernel.org
  • [PATCH RFC 2/3] landlock: Add access rights on created files   Farid Zakaria
    • [PATCH RFC 2/3] landlock: Add access rights on created files   sashiko-bot at kernel.org
  • [PATCH RFC 3/3] selftests/landlock: Test LANDLOCK_ADD_RULE_CREATED   Farid Zakaria
    • [PATCH RFC 3/3] selftests/landlock: Test LANDLOCK_ADD_RULE_CREATED   sashiko-bot at kernel.org
  • [PATCH RFC 0/3] landlock: Add access rights on created files   Justin Suess
    • [PATCH RFC 0/3] landlock: Add access rights on created files   Justin Suess
      • [PATCH RFC 0/3] landlock: Add access rights on created files   Farid Zakaria
  • [PATCH RFC 0/3] landlock: Add access rights on created files   Günther Noack
    • [PATCH RFC 0/3] landlock: Add access rights on created files   Günther Noack
      • [PATCH RFC 0/3] landlock: Add access rights on created files   Farid Zakaria
      • [PATCH RFC 0/3] landlock: Add access rights on created files   Günther Noack
    • [PATCH RFC 0/3] landlock: Add access rights on created files   Farid Zakaria
• [PATCH v3 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   Jarkko Sakkinen
  • [PATCH v3 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE   sashiko-bot at kernel.org
• [PATCH v3 3/6] KEYS: Verify the key identity in __key_unlink_begin   Jarkko Sakkinen
  • [PATCH v3 3/6] KEYS: Verify the key identity in __key_unlink_begin   sashiko-bot at kernel.org
• [PATCH v3 4/6] KEYS: Introduce keyring_is_empty()   Jarkko Sakkinen
  • [PATCH v3 4/6] KEYS: Introduce keyring_is_empty()   sashiko-bot at kernel.org
• [PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
  • [PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable   sashiko-bot at kernel.org
    • [PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
      • [PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable   Jarkko Sakkinen
• [PATCH] fsverity: Tell LSMs about signature only after verity is enabled   Eric Biggers
  • [PATCH] fsverity: Tell LSMs about signature only after verity is enabled   sashiko-bot at kernel.org
  • [PATCH] fsverity: Tell LSMs about signature only after verity is enabled   Fan Wu
• [PATCH] KEYS: dispatch key_gc_work to system_wq.   Jarkko Sakkinen
  • [PATCH] KEYS: dispatch key_gc_work to system_wq.   Jarkko Sakkinen
  • [PATCH] KEYS: dispatch key_gc_work to system_wq.   Jarkko Sakkinen
  • [PATCH] KEYS: dispatch key_gc_work to system_wq.   sashiko-bot at kernel.org
  • [PATCH] KEYS: dispatch key_gc_work to system_wq.   Hillf Danton
• [PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation   Dongliang Mu
• [PATCH 0/8] ns: fixes for the namespace LSM hooks   Christian Brauner
  • [PATCH 5/8] ns: allocate the namespace id before the namespace_init hook   Christian Brauner
    • [PATCH 5/8] ns: allocate the namespace id before the namespace_init hook   sashiko-bot at kernel.org
  • [PATCH 6/8] nstree: drop ns_tree_add_raw()   Christian Brauner
    • [PATCH 6/8] nstree: drop ns_tree_add_raw()   sashiko-bot at kernel.org
  • [PATCH 8/8] selftests/bpf: add a lifecycle test for the namespace LSM hooks   Christian Brauner
    • [PATCH 8/8] selftests/bpf: add a lifecycle test for the namespace LSM hooks   sashiko-bot at kernel.org
• [PATCH 1/8] lsm: always call the namespace_free hook   Christian Brauner
  • [PATCH 1/8] lsm: always call the namespace_free hook   sashiko-bot at kernel.org
• [PATCH 2/8] bpf: don't mark namespace_init and namespace_free arguments as trusted   Christian Brauner
  • [PATCH 2/8] bpf: don't mark namespace_init and namespace_free arguments as trusted   sashiko-bot at kernel.org
• [PATCH 3/8] selftests/bpf: add verifier tests for the namespace LSM hooks   Christian Brauner
  • [PATCH 3/8] selftests/bpf: add verifier tests for the namespace LSM hooks   sashiko-bot at kernel.org
• [PATCH 4/8] landlock: pass the namespace id to log to check_ns_type()   Christian Brauner
  • [PATCH 4/8] landlock: pass the namespace id to log to check_ns_type()   sashiko-bot at kernel.org
• [PATCH 7/8] lsm: fix the security_namespace_init() kernel-doc   Christian Brauner
  • [PATCH 7/8] lsm: fix the security_namespace_init() kernel-doc   sashiko-bot at kernel.org
• [PATCH 10/10] docs/zh_CN: add LSM/landlock Chinese translation   Dongliang Mu
• [PATCH v3] security: commoncap: drop stale CAP_FS_MASK FIXME   Adriano Cordova
  • [PATCH v3] security: commoncap: drop stale CAP_FS_MASK FIXME   sashiko-bot at kernel.org
• [PATCH] apparmor: handle diff-encoded states in leftmatch_fb()   Patrick Grössing
  • [PATCH] apparmor: handle diff-encoded states in leftmatch_fb()   sashiko-bot at kernel.org

Last message date: Mon Oct 26 13:45:46 UTC 2026
Archived on: Mon Oct 26 13:54:57 UTC 2026

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...