messages from 2024-01-24 02:22:12 to 2024-02-02 19:12:25 UTC [more...]
[PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef
2024-02-02 19:12 UTC (3+ messages)
[RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE)
2024-02-02 18:51 UTC (22+ messages)
` [RFC PATCH v12 01/20] security: add ipe lsm
` [RFC PATCH v12 02/20] ipe: add policy parser
` [RFC PATCH v12 03/20] ipe: add evaluation loop
` [RFC PATCH v12 04/20] ipe: add LSM hooks on execution and kernel read
` [RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack
` [RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider
` [RFC PATCH v12 07/20] security: add new securityfs delete function
` [RFC PATCH v12 08/20] ipe: add userspace interface
` [RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support
` [RFC PATCH v12 10/20] ipe: add permissive toggle
` [RFC PATCH v12 11/20] block|security: add LSM blob to block_device
` [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag
` [RFC PATCH v12 13/20] dm: add finalize hook to target_type
` [RFC PATCH v12 14/20] dm verity: consume root hash digest and signature data via LSM hook
` [RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider
` [RFC PATCH v12 16/20] fsverity: consume builtin signature via LSM hook
` [RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider
` [RFC PATCH v12 18/20] scripts: add boot policy generation program
` [RFC PATCH v12 19/20] ipe: kunit test for parser
` [RFC PATCH v12 20/20] documentation: add ipe documentation
Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks
2024-02-02 16:31 UTC (3+ messages)
[PATCH 0/5] evm: Support signatures on stacked filesystem
2024-02-02 16:30 UTC (39+ messages)
` [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs
` [PATCH 2/5] evm: Implement per signature type decision in security_inode_copy_up_xattr
` [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file
` [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash
` [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
[PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr()
2024-02-02 2:50 UTC (7+ messages)
[PATCH v39 00/42] LSM: General module stacking
2024-02-02 0:24 UTC (2+ messages)
[PATCH] KEYS: encrypted: Add check for strsep
2024-02-02 0:05 UTC (13+ messages)
[GIT PULL] lsm/lsm-pr-20240131
2024-02-01 18:23 UTC (2+ messages)
Starting to work on liblsm
2024-02-01 18:23 UTC
[PATCH bpf-next] bpf: minor clean-up to sleepable_lsm_hooks BTF set
2024-02-01 17:50 UTC (2+ messages)
[PATCH] apparmor: use kvfree_sensitive to free data->data
2024-02-01 14:24 UTC
[PATCH bpf-next] bpf: add security_file_mprotect() to sleepable_lsm_hooks BTF set
2024-02-01 13:38 UTC (2+ messages)
[PATCH v8 0/9] Landlock: IOCTL support
2024-01-31 16:52 UTC (7+ messages)
` [PATCH v8 4/9] landlock: Add IOCTL access right
` "
[PATCH] lsm: fix default return value of the socket_getpeersec_* hooks
2024-01-30 22:01 UTC (7+ messages)
[PATCH] security: use default hook return value in call_int_hook()
2024-01-30 16:47 UTC (2+ messages)
[PATCH] security: fix the logic in security_inode_getsecctx()
2024-01-30 16:31 UTC (11+ messages)
[PATCH 0/3] fs/exec: remove current->in_execve flag
2024-01-30 10:42 UTC (8+ messages)
` [PATCH 1/3] LSM: add security_bprm_aborting_creds() hook
` [PATCH 2/3] tomoyo: replace current->in_execve flag with "
` [PATCH 3/3] fs/exec: remove current->in_execve flag
[PATCH] mm: init_mlocked_on_free_v2
2024-01-29 5:18 UTC
[6.8-rc1 Regression] Unable to exec apparmor_parser from virt-aa-helper
2024-01-27 11:23 UTC (18+ messages)
[PATCH] apparmor: Fix null pointer deref when receiving skb during sock creation
2024-01-27 8:20 UTC (4+ messages)
[PATCH] exec: Check __FMODE_EXEC instead of in_execve for LSMs
2024-01-27 4:53 UTC (15+ messages)
` "
[PATCH v3 0/5] Smack transmute fixes
2024-01-26 16:27 UTC (7+ messages)
` [PATCH v3 5/5] ramfs: Initialize security of in-memory inodes
security_file_free contract/expectations
2024-01-25 19:26 UTC (9+ messages)
` [External] "
[PATCH v1 0/2] Fix Landlock's net_test for non-root users
2024-01-25 15:32 UTC (3+ messages)
` [PATCH v1 1/2] selftests/landlock: Fix capability for net_test
` [PATCH v1 2/2] selftests/landlock: Clean up error logs related to capabilities
[PATCH v2 bpf-next 00/30] BPF token
2024-01-25 0:10 UTC (22+ messages)
` [PATCH v2 bpf-next 11/30] bpf,lsm: add BPF token LSM hooks
` [PATCH v2 bpf-next 12/30] libbpf: add bpf_token_create() API
` [PATCH v2 bpf-next 13/30] libbpf: add BPF token support to bpf_map_create() API
` [PATCH v2 bpf-next 14/30] libbpf: add BPF token support to bpf_btf_load() API
` [PATCH v2 bpf-next 15/30] libbpf: add BPF token support to bpf_prog_load() API
` [PATCH v2 bpf-next 16/30] selftests/bpf: add BPF token-enabled tests
` [PATCH v2 bpf-next 17/30] bpf,selinux: allocate bpf_security_struct per BPF token
` [PATCH v2 bpf-next 18/30] bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS
` [PATCH v2 bpf-next 19/30] bpf: support symbolic BPF FS delegation mount options
` [PATCH v2 bpf-next 20/30] selftests/bpf: utilize string values for delegate_xxx "
` [PATCH v2 bpf-next 21/30] libbpf: split feature detectors definitions from cached results
` [PATCH v2 bpf-next 22/30] libbpf: further decouple feature checking logic from bpf_object
` [PATCH v2 bpf-next 23/30] libbpf: move feature detection code into its own file
` [PATCH v2 bpf-next 24/30] libbpf: wire up token_fd into feature probing logic
` [PATCH v2 bpf-next 25/30] libbpf: wire up BPF token support at BPF object level
` [PATCH v2 bpf-next 26/30] selftests/bpf: add BPF object loading tests with explicit token passing
` [PATCH v2 bpf-next 27/30] selftests/bpf: add tests for BPF object load with implicit token
` [PATCH v2 bpf-next 28/30] libbpf: support BPF token path setting through LIBBPF_BPF_TOKEN_PATH envvar
` [PATCH v2 bpf-next 29/30] selftests/bpf: add tests for "
` [PATCH v2 bpf-next 30/30] selftests/bpf: incorporate LSM policy to token-based tests
[PATCH] selftests/landlock:Fix fs_test build issues with old libc
2024-01-24 13:13 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).