linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2023-10-18 12:32:25 to 2023-10-27 08:40:25 UTC [more...]

[PATCH v4 00/23] security: Move IMA and EVM to the LSM infrastructure
 2023-10-27  8:35 UTC  (12+ messages)
` [PATCH v4 01/23] ima: Align ima_inode_post_setattr() definition with "
` [PATCH v4 02/23] ima: Align ima_file_mprotect() "
` [PATCH v4 03/23] ima: Align ima_inode_setxattr() "
` [PATCH v4 04/23] ima: Align ima_inode_removexattr() "
` [PATCH v4 05/23] ima: Align ima_post_read_file() "
` [PATCH v4 06/23] evm: Align evm_inode_post_setattr() "
` [PATCH v4 07/23] evm: Align evm_inode_setxattr() "
` [PATCH v4 08/23] evm: Align evm_inode_post_setxattr() "
` [PATCH v4 09/23] security: Align inode_setattr hook definition with EVM
` [PATCH v4 10/23] security: Introduce inode_post_setattr hook
` [PATCH v4 11/23] security: Introduce inode_post_removexattr hook

[PATCH v4 0/6] querying mount attributes
 2023-10-27  8:17 UTC  (9+ messages)
` [PATCH v4 1/6] add unique mount ID
` [PATCH v4 2/6] mounts: keep list of mounts in an rbtree
` [PATCH v4 3/6] namespace: extract show_path() helper
` [PATCH v4 4/6] add statmount(2) syscall
` [PATCH v4 5/6] add listmount(2) syscall
` [PATCH v4 6/6] wire up syscalls for statmount/listmount

[RFC PATCH v11 05/19] ipe: introduce 'boot_verified' as a trust provider
 2023-10-26 22:12 UTC  (4+ messages)
` [PATCH RFC v11 5/19] "

[RFC PATCH v11 02/19] ipe: add policy parser
 2023-10-26 21:36 UTC  (4+ messages)
` [PATCH RFC v11 2/19] "

[PATCH] security: Don't yet account for IMA in LSM_CONFIG_COUNT calculation
 2023-10-26 16:36 UTC  (5+ messages)

[RFC PATCH 0/3] LSM syscall tweaks
 2023-10-26 15:38 UTC  (13+ messages)
` [RFC PATCH 1/3] lsm: cleanup the size counters in security_getselfattr()
` [RFC PATCH 2/3] lsm: correct error codes "
` [RFC PATCH 3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx()

[PATCH v3 0/5] Landlock: IOCTL support
 2023-10-26 14:55 UTC  (13+ messages)

ANN: kernel git branches and process changes
 2023-10-26 10:53 UTC  (4+ messages)

[PATCH] lsm: drop LSM_ID_IMA
 2023-10-26  8:49 UTC  (17+ messages)

apparmor: global buffers spin lock may get contended
 2023-10-26  5:13 UTC  (10+ messages)
  ` [PATCH v3] "
                ` [PATCH v5 0/4] apparmor: cache buffers on percpu list if there is lock, contention

[PATCH v13 00/12] Network support for Landlock
 2023-10-26  2:02 UTC  (39+ messages)
` [PATCH v13 01/12] landlock: Make ruleset's access masks more generic
` [PATCH v13 07/12] landlock: Refactor landlock_add_rule() syscall
` [PATCH v13 08/12] landlock: Add network rules and TCP hooks support
` [PATCH v13 10/12] selftests/landlock: Add 7 new test variants dedicated to network
` [PATCH v13 11/12] samples/landlock: Add network demo
` [PATCH v13 12/12] landlock: Document Landlock's network support

[PATCH v14 00/12] Network support for Landlock
 2023-10-26  1:47 UTC  (13+ messages)
` [PATCH v14 01/12] landlock: Make ruleset's access masks more generic
` [PATCH v14 02/12] landlock: Allow FS topology changes for domains without such rule type
` [PATCH v14 03/12] landlock: Refactor landlock_find_rule/insert_rule
` [PATCH v14 04/12] landlock: Refactor merge/inherit_ruleset functions
` [PATCH v14 05/12] landlock: Move and rename layer helpers
` [PATCH v14 06/12] landlock: Refactor "
` [PATCH v14 07/12] landlock: Refactor landlock_add_rule() syscall
` [PATCH v14 08/12] landlock: Add network rules and TCP hooks support
` [PATCH v14 09/12] selftests/landlock: Share enforce_ruleset()
` [PATCH v14 10/12] selftests/landlock: Add network tests
` [PATCH v14 11/12] samples/landlock: Support TCP restrictions
` [PATCH v14 12/12] landlock: Document network support

[RFC PATCH v11 03/19] ipe: add evaluation loop
 2023-10-26  0:15 UTC  (3+ messages)
` [PATCH RFC v11 3/19] "

[RESEND RFC PATCH v2 00/14] device_cgroup: guard mknod for non-initial user namespace
 2023-10-25 18:11 UTC  (2+ messages)

[PATCH v4 0/5] DCP as trusted keys backend
 2023-10-25 17:49 UTC  (8+ messages)
` [PATCH v4 1/5] crypto: mxs-dcp: Add support for hardware-bound keys
` [PATCH v4 2/5] KEYS: trusted: Introduce NXP DCP-backed trusted keys
` [PATCH v4 3/5] MAINTAINERS: add entry for DCP-based "
` [PATCH v4 4/5] docs: document DCP-backed trusted keys kernel params
` [PATCH v4 5/5] docs: trusted-encrypted: add DCP as new trust source

Isolating abstract sockets
 2023-10-25 11:54 UTC 

[PATCH] ima: Add __counted_by for struct modsig and use struct_size()
 2023-10-24 21:18 UTC  (3+ messages)

[PATCH v8 bpf-next 00/18] BPF token and BPF FS-based delegation
 2023-10-24 19:38 UTC  (6+ messages)

[PATCH v4 0/4] vduse: add support for networking devices
 2023-10-24 15:30 UTC  (15+ messages)
` [PATCH v4 1/4] vduse: validate block features only with block devices
` [PATCH v4 2/4] vduse: enable Virtio-net device type
` [PATCH v4 3/4] vduse: Temporarily disable control queue features
` [PATCH v4 4/4] vduse: Add LSM hooks to check Virtio device type

[robertosassu:ima-evm-lsms-v4-devel-v7] [evm] ea31d8b249: Kernel_panic-not_syncing:security_add_hooks_Too_many_LSMs_registered
 2023-10-24 14:58 UTC 

[PATCH v3 0/4] querying mount attributes
 2023-10-24 13:57 UTC  (9+ messages)
` [PATCH v3 4/4] add listmount(2) syscall

Wycena paneli fotowoltaicznych
 2023-10-24  8:10 UTC 

[RFC PATCH v11 18/19] ipe: kunit test for parser
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 17/19] scripts: add boot policy generation program
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 16/19] ipe: enable support for fs-verity as a trust provider
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 14/19] ipe: add support for dm-verity as a trust provider
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 15/19] fsverity: consume builtin signature via LSM hook
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 13/19] dm verity: consume root hash digest and signature data via LSM hook
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 12/19] dm: add finalize hook to target_type
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 11/19] dm verity: set DM_TARGET_SINGLETON feature flag
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v11 08/19] uapi|audit|ipe: add ipe auditing support
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC v11 8/19] "

[RFC PATCH v11 09/19] ipe: add permissive toggle
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC v11 9/19] "

[RFC PATCH v11 04/19] ipe: add LSM hooks on execution and kernel read
 2023-10-24  3:52 UTC  (2+ messages)
` [PATCH RFC v11 4/19] "

[PATCH v3 2/6] tpm: Store TPM buffer length
 2023-10-24  1:15 UTC  (4+ messages)
` [PATCH v3 3/6] tpm: Detach tpm_buf_reset() from tpm_buf_init()
` [PATCH v3 4/6] tpm: Support TPM2 sized buffers (TPM2B)
` [PATCH v3 6/6] KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers

Sandbox escape through missing restrictions for unix socket abstract namespace
 2023-10-23 20:42 UTC 

[PATCH -next 1/2] apparmor: Fix one kernel-doc comment
 2023-10-23  1:11 UTC  (2+ messages)
` [PATCH -next 2/2] apparmor: Fix some kernel-doc comments

[PATCH -next] apparmor: Fix some kernel-doc comments
 2023-10-23  0:55 UTC 

[PATCH] apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256
 2023-10-22 19:40 UTC 

[RFC PATCH 1/2] LSM: Allow dynamically appendable LSM modules
 2023-10-22 13:34 UTC  (15+ messages)

[PATCH] apparmor: mark new functions static
 2023-10-22  7:46 UTC  (2+ messages)

[PATCH v15 00/11] LSM: Three basic syscalls
 2023-10-21 14:11 UTC  (26+ messages)
  ` [PATCH v15 01/11] LSM: Identify modules by more than name
  ` [PATCH v15 08/11] Smack: implement setselfattr and getselfattr hooks

[PATCH] certs: Restrict blacklist updates to the secondary trusted keyring
 2023-10-20 15:53 UTC  (16+ messages)
  ` RFC: New LSM to control usage of x509 certificates

[PATCH] capabilities: add a option PR_SET_CAPS for sys_prctl
 2023-10-19 18:57 UTC  (2+ messages)

[RFC V2] IMA Log Snapshotting Design Proposal
 2023-10-19 18:49 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).