linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2020-11-11 21:35:09 to 2020-11-20 20:20:10 UTC [more...]

[PATCH v22 00/23] LSM: Module stacking for AppArmor
 2020-11-20 20:14 UTC  (5+ messages)
  ` [PATCH v23 01/23] LSM: Infrastructure management of the sock security
  ` [PATCH v23 02/23] LSM: Create and manage the lsmblob data structure
  ` [PATCH v23 03/23] LSM: Use lsmblob in security_audit_rule_match
  ` [PATCH v23 04/23] LSM: Use lsmblob in security_kernel_act_as

[PATCH 000/141] Fix fall-through warnings for Clang
 2020-11-20 19:51 UTC  (9+ messages)
` [PATCH 010/141] ima: "
` [PATCH 052/141] security: keys: "

[PATCH bpf-next 1/3] ima: Implement ima_inode_hash
 2020-11-20 18:11 UTC  (6+ messages)
` [PATCH bpf-next 2/3] bpf: Add a BPF helper for getting the IMA hash of an inode
` [PATCH bpf-next 3/3] bpf: Update LSM selftests for bpf_ima_inode_hash

[PATCH v1 0/9] Enable root to update the blacklist keyring
 2020-11-20 18:04 UTC  (10+ messages)
` [PATCH v1 1/9] certs: Fix blacklisted hexadecimal hash string check
` [PATCH v1 2/9] certs: Make blacklist_vet_description() more strict
` [PATCH v1 3/9] certs: Factor out the blacklist hash creation
` [PATCH v1 4/9] certs: Check that builtin blacklist hashes are valid
` [PATCH v1 5/9] PKCS#7: Fix missing include
` [PATCH v1 6/9] certs: Fix blacklist flag type confusion
` [PATCH v1 7/9] certs: Allow root user to append signed hashes to the blacklist keyring
` [PATCH v1 8/9] certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID
` [PATCH v1 9/9] tools/certs: Add print-cert-tbs-hash.sh

[PATCH v6 0/8] IMA: support for measuring kernel integrity critical data
 2020-11-20 15:49 UTC  (12+ messages)
` [PATCH v6 1/8] IMA: generalize keyring specific measurement constructs
` [PATCH v6 2/8] IMA: add support to measure buffer data hash
` [PATCH v6 3/8] IMA: define a hook to measure kernel integrity critical data
` [PATCH v6 4/8] IMA: add policy rule to measure "
` [PATCH v6 5/8] IMA: extend policy to add data sources as a critical data measurement constraint
` [PATCH v6 6/8] IMA: add support to critical data hook to limit data sources for measurement
` [PATCH v6 7/8] IMA: add a built-in policy rule for critical data measurement
` [PATCH v6 8/8] selinux: measure state and hash of the policy using IMA

[RESEND][PATCH] ima: Set and clear FMODE_CAN_READ in ima_calc_file_hash()
 2020-11-20 12:52 UTC  (21+ messages)

[PATCH v2 00/39] fs: idmapped mounts
 2020-11-20 11:58 UTC  (45+ messages)
` [PATCH v2 01/39] namespace: take lock_mount_hash() directly when changing flags
` [PATCH v2 02/39] mount: make {lock,unlock}_mount_hash() static
` [PATCH v2 03/39] namespace: only take read lock in do_reconfigure_mnt()
` [PATCH v2 04/39] fs: add mount_setattr()
` [PATCH v2 05/39] tests: add mount_setattr() selftests
` [PATCH v2 06/39] fs: add id translation helpers
` [PATCH v2 07/39] mount: attach mappings to mounts
` [PATCH v2 08/39] capability: handle idmapped mounts
` [PATCH v2 09/39] namei: add idmapped mount aware permission helpers
` [PATCH v2 10/39] inode: add idmapped mount aware init and "
` [PATCH v2 11/39] attr: handle idmapped mounts
` [PATCH v2 12/39] acl: "
` [PATCH v2 13/39] xattr: "
` [PATCH v2 14/39] commoncap: "
` [PATCH v2 15/39] stat: "
` [PATCH v2 16/39] namei: handle idmapped mounts in may_*() helpers
` [PATCH v2 17/39] namei: introduce struct renamedata
` [PATCH v2 18/39] namei: prepare for idmapped mounts
` [PATCH v2 19/39] open: handle idmapped mounts in do_truncate()
` [PATCH v2 20/39] open: handle idmapped mounts
` [PATCH v2 21/39] af_unix: "
` [PATCH v2 22/39] utimes: "
` [PATCH v2 23/39] fcntl: "
` [PATCH v2 24/39] notify: "
` [PATCH v2 25/39] init: "
` [PATCH v2 26/39] ioctl: "
` [PATCH v2 27/39] would_dump: "
` [PATCH v2 28/39] exec: "
` [PATCH v2 30/39] apparmor: "
` [PATCH v2 31/39] audit: "
` [PATCH v2 32/39] ima: "
` [PATCH v2 33/39] fat: "
` [PATCH v2 34/39] ext4: support "
` [PATCH v2 35/39] ecryptfs: do not mount on top of "
` [PATCH v2 36/39] overlayfs: "
` [PATCH v2 37/39] fs: introduce MOUNT_ATTR_IDMAP
` [PATCH v2 38/39] selftests: add idmapped mounts xattr selftest

[PATCH] fix namespaced fscaps when !CONFIG_SECURITY
 2020-11-20  5:03 UTC  (4+ messages)

[PATCH] lsm,selinux: pass flowi_common instead of flowi to the LSM hooks
 2020-11-20  3:02 UTC  (2+ messages)

[PATCH v24 00/12] Landlock LSM
 2020-11-20  1:52 UTC  (15+ messages)
` [PATCH v24 01/12] landlock: Add object management
` [PATCH v24 02/12] landlock: Add ruleset and domain management
` [PATCH v24 03/12] landlock: Set up the security framework and manage credentials
` [PATCH v24 04/12] landlock: Add ptrace restrictions
` [PATCH v24 05/12] LSM: Infrastructure management of the superblock
` [PATCH v24 06/12] fs,security: Add sb_delete hook
` [PATCH v24 07/12] landlock: Support filesystem access-control
` [PATCH v24 08/12] landlock: Add syscall implementations
` [PATCH v24 09/12] arch: Wire up Landlock syscalls
` [PATCH v24 10/12] selftests/landlock: Add user space tests
` [PATCH v24 11/12] samples/landlock: Add a sandbox manager example
` [PATCH v24 12/12] landlock: Add user and kernel documentation

[PATCH v1 0/9] Landlock fixes
 2020-11-20  1:37 UTC  (10+ messages)
` [PATCH v1 1/9] landlock: Fix memory allocation error handling
` [PATCH v1 2/9] landlock: Cosmetic fixes for filesystem management
` [PATCH v1 3/9] landlock: Enforce deterministic interleaved path rules
` [PATCH v1 4/9] landlock: Always intersect access rights
` [PATCH v1 5/9] landlock: Add extra checks when inserting a rule
` [PATCH v1 6/9] selftests/landlock: Extend layout1.inherit_superset
` [PATCH v1 7/9] landlock: Clean up get_ruleset_from_fd()

Re: Question about security_file_open contract
 2020-11-18 22:47 UTC 

[PATCH v12 0/4] SELinux support for anonymous inodes and UFFD
 2020-11-18 22:39 UTC  (8+ messages)
` [PATCH v12 3/4] selinux: teach SELinux about anonymous inodes

Question about security_file_open contract
 2020-11-18 21:25 UTC  (2+ messages)

[PATCH v4 0/2] security: add fault injection to LSM hooks
 2020-11-18 21:20 UTC  (2+ messages)

[PATCH v3 08/11] evm: Allow setxattr() and setattr() for unmodified metadata
 2020-11-18 17:58 UTC  (2+ messages)

[PATCH v41 11/24] x86/sgx: Add SGX misc driver interface
 2020-11-18 17:18 UTC  (3+ messages)
` [PATCH v41 15/24] x86/sgx: Add SGX_IOC_ENCLAVE_PROVISION
  ` [tip: x86/sgx] "

[PATCH] vfs: fix fsconfig(2) LSM mount option handling for btrfs
 2020-11-18 16:48 UTC  (4+ messages)

[PATCH] xfrm: redact SA secret with lockdown confidentiality
 2020-11-17 16:47 UTC  (4+ messages)
  ` [PATCH ipsec-next v5] "

[PATCH cryptodev] crypto: lib/chacha20poly1305 - allow users to specify 96bit nonce
 2020-11-17 10:06 UTC  (8+ messages)

[PATCH] security/smack: remove unused varible 'rc'
 2020-11-16 22:31 UTC  (2+ messages)

[PATCH v22 00/12] Landlock LSM
 2020-11-16 21:36 UTC  (4+ messages)
` [PATCH v22 01/12] landlock: Add object management

Corporate and Personal Loan/
 2020-11-10 14:10 UTC 

[PATCH v22 19/23] audit: add support for non-syscall auxiliary records
 2020-11-16  0:13 UTC  (2+ messages)

Corporate and Personal Loan *
 2020-11-15 16:43 UTC 

[PATCH v2 0/8] Fork brute force attack mitigation
 2020-11-15 15:00 UTC  (3+ messages)

[GIT PULL] SELinux fixes for v5.10 (#1)
 2020-11-14 20:51 UTC  (2+ messages)

[PATCH] netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
 2020-11-14 20:09 UTC  (3+ messages)

[PATCH v2 00/13] Introduce seqnum_ops
 2020-11-14 16:11 UTC  (3+ messages)
` [PATCH v2 13/13] security/integrity/ima: converts stats to seqnum_ops

[RFC PATCH] docs: ABI: ABI documentation for procfs attribute files used by multiple LSMs
 2020-11-13 22:02 UTC  (2+ messages)

[PATCH v5 0/7] IMA: Infrastructure for measurement of critical kernel data
 2020-11-13 17:23 UTC  (22+ messages)
` [PATCH v5 2/7] IMA: update process_buffer_measurement to measure buffer hash
` [PATCH v5 3/7] IMA: add hook to measure critical data
` [PATCH v5 4/7] IMA: add policy "
` [PATCH v5 5/7] IMA: validate supported kernel data sources before measurement

general protection fault in tomoyo_socket_sendmsg_permission
 2020-11-13 17:14 UTC  (3+ messages)

[PATCH] Smack: fix kernel-doc interface on functions
 2020-11-13 16:36 UTC  (2+ messages)

[PATCH] ima: Set and clear FMODE_CAN_READ in ima_calc_file_hash()
 2020-11-12 16:10 UTC 

[PATCH v13 0/4] SELinux support for anonymous inodes and UFFD
 2020-11-12  1:53 UTC  (5+ messages)
` [PATCH v13 1/4] security: add inode_init_security_anon() LSM hook
` [PATCH v13 2/4] fs: add LSM-supporting anon-inode interface
` [PATCH v13 3/4] selinux: teach SELinux about anonymous inodes
` [PATCH v13 4/4] userfaultfd: use secure anon inodes for userfaultfd

Smack kernel test suite
 2020-11-11 23:57 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).