linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2020-10-23 14:33:27 to 2020-11-01 22:27:12 UTC [more...]

[PATCH v5 0/7] IMA: Infrastructure for measurement of critical kernel data
 2020-11-01 22:26 UTC  (8+ messages)
` [PATCH v5 1/7] IMA: generalize keyring specific measurement constructs
` [PATCH v5 2/7] IMA: update process_buffer_measurement to measure buffer hash
` [PATCH v5 3/7] IMA: add hook to measure critical data
` [PATCH v5 4/7] IMA: add policy "
` [PATCH v5 5/7] IMA: validate supported kernel data sources before measurement
` [PATCH v5 6/7] IMA: add critical_data to the built-in policy rules
` [PATCH v5 7/7] selinux: measure state and hash of the policy using IMA

[PATCH 00/34] fs: idmapped mounts
 2020-11-01 14:48 UTC  (60+ messages)
` [PATCH 01/34] namespace: take lock_mount_hash() directly when changing flags
` [PATCH 02/34] namespace: only take read lock in do_reconfigure_mnt()
` [PATCH 03/34] fs: add mount_setattr()
` [PATCH 04/34] tests: add mount_setattr() selftests
` [PATCH 05/34] fs: introduce MOUNT_ATTR_IDMAP
` [PATCH 06/34] fs: add id translation helpers
` [PATCH 07/34] capability: handle idmapped mounts
` [PATCH 08/34] namei: add idmapped mount aware permission helpers
` [PATCH 09/34] inode: add idmapped mount aware init and "
` [PATCH 10/34] attr: handle idmapped mounts
` [PATCH 11/34] acl: "
` [PATCH 12/34] xattr: "
` [PATCH 13/34] selftests: add idmapped mounts xattr selftest
` [PATCH 14/34] commoncap: handle idmapped mounts
` [PATCH 15/34] stat: add mapped_generic_fillattr()
` [PATCH 16/34] namei: handle idmapped mounts in may_*() helpers
` [PATCH 17/34] namei: introduce struct renamedata
` [PATCH 18/34] namei: prepare for idmapped mounts
` [PATCH 19/34] namei: add lookup helpers with idmapped mounts aware permission checking
` [PATCH 20/34] open: handle idmapped mounts in do_truncate()
` [PATCH 21/34] open: handle idmapped mounts
` [PATCH 22/34] af_unix: "
` [PATCH 23/34] utimes: "
` [PATCH 24/34] would_dump: "
` [PATCH 25/34] exec: "
` [PATCH 26/34] fs: add helpers for idmap mounts
` [PATCH 27/34] apparmor: handle idmapped mounts
` [PATCH 28/34] audit: "
` [PATCH 29/34] ima: "
` [PATCH 30/34] ext4: support "
` [PATCH 31/34] expfs: handle "
` [PATCH 32/34] overlayfs: handle idmapped lower directories
` [PATCH 33/34] overlayfs: handle idmapped merged mounts
` [PATCH 34/34] fat: handle idmapped mounts

[PATCH] xfrm: redact SA secret with lockdown confidentiality
 2020-10-31 10:49 UTC  (2+ messages)

general protection fault in security_inode_getattr
 2020-10-30 19:56 UTC  (7+ messages)

[RESEND PATCH v18 0/4] overlayfs override_creds=off & nested get xattr fix
 2020-10-30 16:00 UTC  (4+ messages)
` [RESEND PATCH v18 2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method

[PATCH v22 00/12] Landlock LSM
 2020-10-30 12:41 UTC  (34+ messages)
` [PATCH v22 01/12] landlock: Add object management
` [PATCH v22 02/12] landlock: Add ruleset and domain management
` [PATCH v22 03/12] landlock: Set up the security framework and manage credentials
` [PATCH v22 04/12] landlock: Add ptrace restrictions
` [PATCH v22 05/12] LSM: Infrastructure management of the superblock
` [PATCH v22 06/12] fs,security: Add sb_delete hook
` [PATCH v22 07/12] landlock: Support filesystem access-control
` [PATCH v22 08/12] landlock: Add syscall implementations
` [PATCH v22 09/12] arch: Wire up Landlock syscalls
` [PATCH v22 10/12] selftests/landlock: Add user space tests
` [PATCH v22 11/12] samples/landlock: Add a sandbox manager example
` [PATCH v22 12/12] landlock: Add user and kernel documentation

[PATCH v3 0/3] add ima_arch support for ARM64
 2020-10-30 11:53 UTC  (7+ messages)
` [PATCH v3 1/3] efi: generalize efi_get_secureboot
` [PATCH v3 2/3] ima: replace arch-specific get_sb_mode() with a common helper ima_get_efi_secureboot()
` [PATCH v3 3/3] arm64/ima: add ima_arch support

[PATCH v4 1/3,RESEND] KEYS: trusted: Fix incorrect handling of tpm_get_random()
 2020-10-30  8:52 UTC  (3+ messages)
` [PATCH v4 2/3,RESEND] KEYS: trusted: Fix migratable=1 failing
` [PATCH v4 3/3,RESEND] KEYS: trusted: Reserve TPM for seal and unseal operations

[PATCH v3 0/2] security: add fault injection to LSM hooks
 2020-10-29 18:35 UTC  (3+ messages)
` [PATCH v3 1/2] security: add fault injection capability
` [PATCH v3 2/2] docs: add fail_lsm_hooks info to fault-injection.rst

[PATCH v21 00/23] LSM: Module stacking for AppArmor
 2020-10-29 11:26 UTC  (2+ messages)

[PATCH] tomoyo: fix clang pointer arithmetic warning
 2020-10-28 14:18 UTC  (4+ messages)

[RFC PATCH v2 0/2] security: add fault injection to LSM hooks
 2020-10-28  9:41 UTC  (9+ messages)
` [RFC PATCH v2 1/2] security: add fault injection capability
` [RFC PATCH v2 2/2] docs: add fail_lsm_hooks info to fault-injection.rst

[RFC PATCH] lsm,selinux: pass the family information along with xfrm flow
 2020-10-28  5:27 UTC  (5+ messages)

[PATCH ghak120 V5] audit: trigger accompanying records when no rules present
 2020-10-28  1:26 UTC  (5+ messages)

Inconsistent capability requirements for prctl_set_mm_exe_file()
 2020-10-27 19:37 UTC  (5+ messages)

selinux_file_permission() on pipes/pseudo-files - performance issue
 2020-10-27 18:14 UTC  (2+ messages)

[PATCH v4 0/6] IMA: Infrastructure for measurement of critical kernel data
 2020-10-27 17:30 UTC  (15+ messages)
` [PATCH v4 1/6] IMA: generalize keyring specific measurement constructs
` [PATCH v4 2/6] IMA: conditionally allow empty rule data
` [PATCH v4 4/6] IMA: add policy to measure critical data from kernel components
` [PATCH v4 5/6] IMA: add hook "

[RESEND PATCH v11 0/3] Add trusted_for(2) (was O_MAYEXEC)
 2020-10-27 17:19 UTC  (2+ messages)

[PATCH v2] perf_event_open.2: update the man page with CAP_PERFMON related information
 2020-10-27 17:11 UTC  (4+ messages)

[PATCH v33 11/21] x86/sgx: Linux Enclave Driver
 2020-10-27 15:37 UTC  (7+ messages)

[GIT PULL] SafeSetID changes for v5.10
 2020-10-27 16:14 UTC  (8+ messages)

[PATCH v39 15/24] x86/sgx: Add SGX_IOC_ENCLAVE_PROVISION
 2020-10-27 10:38 UTC  (10+ messages)

[PATCH] security: remove unneeded break
 2020-10-27  1:24 UTC  (2+ messages)

[REGRESSION] mm: process_vm_readv testcase no longer works after compat_prcoess_vm_readv removed
 2020-10-27  0:09 UTC  (4+ messages)

[PATCH] vsock: use ns_capable_noaudit() on socket create
 2020-10-26 23:22 UTC  (3+ messages)

[PATCH v10 0/3] SELinux support for anonymous inodes and UFFD
 2020-10-26 16:57 UTC  (2+ messages)

[PATCH v2 0/8] Fork brute force attack mitigation
 2020-10-25 13:45 UTC  (9+ messages)
` [PATCH v2 1/8] security: Add LSM hook at the point where a task gets a fatal signal
` [PATCH v2 2/8] security/brute: Define a LSM and manage statistical data
` [PATCH v2 3/8] security/brute: Add sysctl attributes to allow detection fine tuning
` [PATCH v2 4/8] security/brute: Detect a fork brute force attack
` [PATCH v2 5/8] security/brute: Mitigate "
` [PATCH v2 6/8] security/brute: Add prctls to enable/disable the fork attack detection
` [PATCH v2 7/8] Documentation: Add documentation for the Brute LSM
` [PATCH v2 8/8] MAINTAINERS: Add a new entry "

[RFC PATCH 00/30] ima: Introduce IMA namespace
 2020-10-25 15:00 UTC  (7+ messages)

Buggy commit tracked to: "Re: [PATCH 2/9] iov_iter: move rw_copy_check_uvector() into lib/iov_iter.c"
 2020-10-24 21:12 UTC  (22+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).