linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2017-04-06 13:55:23 to 2017-04-18 22:23:02 UTC [more...]

[PATCH net-next v6 00/11] Landlock LSM: Toward unprivileged sandboxing
 2017-04-18 22:23 UTC  (13+ messages)
` [PATCH net-next v6 01/11] bpf: Add eBPF program subtype and is_valid_subtype() verifier
` [PATCH net-next v6 02/11] bpf, landlock: Define an eBPF program type for Landlock
  ` [PATCH net-next v6 02/11] bpf,landlock: "
` [PATCH net-next v6 04/11] landlock: Add LSM hooks related to filesystem
` [PATCH net-next v6 05/11] seccomp: Split put_seccomp_filter() with put_seccomp()
` [PATCH net-next v6 07/11] landlock: Add ptrace restrictions
  ` [kernel-hardening] "

[PATCH 0/6] Appended signatures support for IMA appraisal
 2017-04-18 20:17 UTC  (7+ messages)
` [PATCH 1/6] integrity: Small code improvements
` [PATCH 2/6] ima: Tidy up constant strings
` [PATCH 3/6] ima: Simplify policy_func_show
` [PATCH 4/6] ima: Log the same audit cause whenever a file has no signature
` [PATCH 5/6] MODSIGN: Export module signature definitions
` [PATCH 6/6] ima: Support appended signatures for appraisal

[PULL] Smack changes for 4.12
 2017-04-18 20:16 UTC 

[GIT PULL] SELinux patches for 4.12
 2017-04-18 19:20 UTC 

[PATCH 20/24] bpf: Restrict kernel image access functions when the kernel is locked down
 2017-04-18 17:50 UTC  (64+ messages)
` [PATCH 00/24] Kernel lockdown
  ` [PATCH 06/24] Add a sysrq option to exit secure boot mode
  ` [PATCH 07/24] kexec: Disable at runtime if the kernel is locked down
  ` [PATCH 09/24] kexec_file: Disable at runtime if securelevel has been set
  ` [PATCH 11/24] uswsusp: Disable when the kernel is locked down
  ` [PATCH 12/24] PCI: Lock down BAR access "
  ` [PATCH 13/24] x86: Lock down IO port "
  ` [PATCH 14/24] x86: Restrict MSR "
  ` [PATCH 15/24] asus-wmi: Restrict debugfs interface "
  ` [PATCH 17/24] acpi: Ignore acpi_rsdp kernel param when the kernel has been "
  ` Why kernel lockdown?

[PATCH 0/3] Extend the vTPM proxy driver to pass locality to emulator
 2017-04-18 16:47 UTC  (5+ messages)
` [PATCH 1/3] tpm: vtpm_proxy: Add ioctl to get supported flags
` [PATCH 2/3] tpm: vtpm_proxy: Implement request_locality
` [PATCH 3/3] tpm: vtpm_proxy: Add ioctl to request locality prepended to command

[PATCH 00/38] Annotate hw config module params for future lockdown
 2017-04-18 16:34 UTC  (36+ messages)
` [PATCH 02/38] Annotate hardware config module parameters in arch/x86/mm/
` [PATCH 05/38] Annotate hardware config module parameters in drivers/char/
` [PATCH 06/38] Annotate hardware config module parameters in drivers/clocksource/
` [PATCH 07/38] Annotate hardware config module parameters in drivers/cpufreq/
` [PATCH 08/38] Annotate hardware config module parameters in drivers/gpio/
` [PATCH 14/38] Annotate hardware config module parameters in drivers/misc/
` [PATCH 18/38] Annotate hardware config module parameters in drivers/net/can/
` [PATCH 28/38] Annotate hardware config module parameters in drivers/staging/media/
` [PATCH 29/38] Annotate hardware config module parameters in drivers/staging/speakup/
` [PATCH 31/38] Annotate hardware config module parameters in drivers/tty/
` [PATCH 32/38] Annotate hardware config module parameters in drivers/video/
` [PATCH 35/38] Annotate hardware config module parameters in sound/drivers/

Patchset to Restrict Unprivileged TIOCSTI TTY Command Injection
 2017-04-18 15:49 UTC  (13+ messages)
` [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config
      ` [kernel-hardening] "
` [PATCH 2/4] add tiocsti_restrict variable
` [PATCH 3/4] restrict unprivileged TIOCSTI tty ioctl
    ` [kernel-hardening] "
` [PATCH 4/4] added kernel.tiocsti_restrict sysctl

[PATCH v4 2/6] usb: fix some references for /proc/bus/usb
 2017-04-18 14:51 UTC  (3+ messages)

[tpmdd-devel] Intel NUC and fTPM issue on 4.9.2
 2017-04-18 14:49 UTC 

[PATCH] tpm: Fix reference count to main device
 2017-04-18  1:58 UTC 

[GIT PULL] KEYS: Blacklisting, restrictions and DH
 2017-04-17 21:38 UTC  (2+ messages)

[PATCH] KEYS: fix dereferencing NULL payload with nonzero length
 2017-04-17 17:29 UTC  (2+ messages)
  ` [lkp-robot] [KEYS] bdf7c0f8bf: ltp.add_key02.fail

[backport v4.9] tpm_tis: use default timeout value if chip reports it as zero
 2017-04-16 19:14 UTC  (3+ messages)
  ` [tpmdd-devel] "

No subject
 2017-04-16 15:11 UTC 

[PATCH 00/12] Delete CURRENT_TIME, CURRENT_TIME_SEC and current_fs_time
 2017-04-15 10:29 UTC  (20+ messages)
` [PATCH 01/12] fs: f2fs: Use ktime_get_real_seconds for sit_info times
` [PATCH 02/12] trace: Make trace_hwlat timestamp y2038 safe
` [PATCH 03/12] fs: cifs: Replace CURRENT_TIME by other appropriate apis
` [PATCH 04/12] fs: ceph: CURRENT_TIME with ktime_get_real_ts()
` [PATCH 05/12] fs: ufs: Use ktime_get_real_ts64() for birthtime
` [PATCH 06/12] audit: Use timespec64 to represent audit timestamps
` [PATCH 07/12] fs: btrfs: Use ktime_get_real_ts for root ctime
` [PATCH 08/12] fs: ubifs: Replace CURRENT_TIME_SEC with current_time
` [PATCH 09/12] lustre: Replace CURRENT_TIME macro
` [PATCH 10/12] apparmorfs: Replace CURRENT_TIME with current_time()
` [PATCH 11/12] time: Delete CURRENT_TIME_SEC and CURRENT_TIME
` [PATCH 12/12] time: Delete current_fs_time() function

Greetings
 2017-04-14  9:19 UTC 

[PATCH] capabilities: do not audit log BPRM_FCAPS on set*id
 2017-04-13 19:36 UTC  (8+ messages)

[PATCH] selinux: add selinux_is_enforced() function
 2017-04-13  0:12 UTC  (14+ messages)

[PATCH RFC v2 0/3] security: Add ModAutoRestrict LSM
 2017-04-12 20:41 UTC  (20+ messages)
` [PATCH RFC v2 1/3] LSM: Allow per LSM module per "struct task_struct" blob
          ` [kernel-hardening] "
` [PATCH RFC v2 2/3] security: add the ModAutoRestrict Linux Security Module
` [PATCH RFC v2 3/3] Documentation: add ModAutoRestrict LSM documentation

[PATCH] selinux: add selinux_status_get_seq() function
 2017-04-12 12:31 UTC  (3+ messages)

[PATCH RFC 00/11] LSM: Stacking for major security modules
 2017-04-10 22:07 UTC  (10+ messages)
` [PATCH RFC 04/11] LSM: general but not extreme module stacking

Out this week
 2017-04-10 10:47 UTC 

No subject
 2017-04-09 10:46 UTC 

[RFC][PATCH] audit: add ambient capabilities to CAPSET and BPRM_FCAPS records
 2017-04-07 19:32 UTC  (2+ messages)

[PATCH 00/24] Kernel lockdown
 2017-04-07 16:32 UTC  (2+ messages)

[GIT PULL] AppArmor fixes for 4.12
 2017-04-06 22:58 UTC  (4+ messages)
` [PATCH 5/6] apparmor: fix parameters so that the permission test is bypassed at boot
` [PATCH 6/6] apparmor: Make path_max parameter readonly

[PATCH 1/5] efi: Move the x86 secure boot switch to generic code
 2017-04-06 22:45 UTC  (3+ messages)
` [PATCH 3/5] Add the ability to lock down access to the running kernel image

[PATCH 02/24] Add the ability to lock down access to the running kernel image
 2017-04-06 21:55 UTC  (5+ messages)
` [PATCH 00/24] Kernel lockdown

[tpmdd-devel] [RFC PATCH] tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver
 2017-04-06 15:27 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).