linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2024-07-11 11:14:00 to 2024-07-20 09:30:09 UTC [more...]

[PATCH bpf-next v4 00/20] Add return value range check for BPF LSM
 2024-07-20  9:30 UTC  (40+ messages)
` [PATCH bpf-next v4 01/20] lsm: Refactor return value of LSM hook vm_enough_memory
  ` [PATCH v4 1/20] "
` [PATCH bpf-next v4 02/20] lsm: Refactor return value of LSM hook inode_need_killpriv
  ` [PATCH v4 2/20] "
` [PATCH bpf-next v4 03/20] lsm: Refactor return value of LSM hook inode_getsecurity
  ` [PATCH v4 3/20] "
` [PATCH bpf-next v4 04/20] lsm: Refactor return value of LSM hook inode_listsecurity
  ` [PATCH v4 4/20] "
` [PATCH bpf-next v4 05/20] lsm: Refactor return value of LSM hook inode_copy_up_xattr
  ` [PATCH v4 5/20] "
` [PATCH bpf-next v4 06/20] lsm: Refactor return value of LSM hook getselfattr
  ` [PATCH v4 6/20] "
` [PATCH bpf-next v4 07/20] lsm: Refactor return value of LSM hook setprocattr
  ` [PATCH v4 7/20] "
` [PATCH bpf-next v4 08/20] lsm: Refactor return value of LSM hook getprocattr
  ` [PATCH v4 8/20] "
` [PATCH bpf-next v4 09/20] lsm: Refactor return value of LSM hook key_getsecurity
  ` [PATCH v4 9/20] "
` [PATCH bpf-next v4 10/20] lsm: Refactor return value of LSM hook audit_rule_match
  ` [PATCH "
` [PATCH bpf-next v4 11/20] bpf, lsm: Add disabled BPF LSM hook list
` [PATCH bpf-next v4 12/20] bpf, lsm: Enable BPF LSM prog to read/write return value parameters

[GIT PULL] Landlock fix for v6.11
 2024-07-20  9:08 UTC 

[RFC PATCH v19 0/5] Script execution control (was O_MAYEXEC)
 2024-07-20  2:06 UTC  (45+ messages)
` [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
` [RFC PATCH v19 2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits

[PATCH v7 0/4] Landlock: Abstract Unix Socket Scoping Support
 2024-07-19 18:14 UTC  (6+ messages)
` [PATCH v7 1/4] Landlock: Add abstract unix socket connect restriction
` [PATCH v7 2/4] selftests/landlock: Abstract unix socket restriction tests
` [PATCH v7 3/4] samples/landlock: Support abstract unix socket restriction
` [PATCH v7 4/4] documentation/landlock: Adding scoping mechanism documentation

[RFC PATCH v1 0/3] Use socket's Landlock domain
 2024-07-19 15:06 UTC  (4+ messages)
` [RFC PATCH v1 1/3] landlock: Use socket's domain instead of current's domain
` [RFC PATCH v1 2/3] selftests/landlock: Add test for socket's domain
` [RFC PATCH v1 3/3] landlock: Document network restrictions tied to sockets

[PATCH bpf-next v2 0/9] Add BPF LSM return value range check, BPF part
 2024-07-19 11:00 UTC  (10+ messages)
` [PATCH bpf-next v2 1/9] bpf, lsm: Add disabled BPF LSM hook list
` [PATCH bpf-next v2 2/9] bpf, lsm: Add check for BPF LSM return value
` [PATCH bpf-next v2 3/9] bpf: Prevent tail call between progs attached to different hooks
` [PATCH bpf-next v2 4/9] bpf: Fix compare error in function retval_range_within
` [PATCH bpf-next v2 5/9] bpf, verifier: improve signed ranges inference for BPF_AND
` [PATCH bpf-next v2 6/9] selftests/bpf: Avoid load failure for token_lsm.c
` [PATCH bpf-next v2 7/9] selftests/bpf: Add return value checks for failed tests
` [PATCH bpf-next v2 8/9] selftests/bpf: Add test for lsm tail call
` [PATCH bpf-next v2 9/9] selftests/bpf: Add verifier tests for bpf lsm

[PATCH -next v1 0/9] Add BPF LSM return value range check, BPF part
 2024-07-19  8:41 UTC  (12+ messages)
` [PATCH bpf-next v1 1/9] bpf, lsm: Add disabled BPF LSM hook list
` [PATCH bpf-next v1 2/9] bpf, lsm: Add check for BPF LSM return value
` [PATCH bpf-next v1 3/9] bpf: Prevent tail call between progs attached to different hooks
` [PATCH bpf-next v1 4/9] bpf: Fix compare error in function retval_range_within
` [PATCH bpf-next v1 5/9] bpf, verifier: improve signed ranges inference for BPF_AND
` [PATCH bpf-next v1 6/9] selftests/bpf: Avoid load failure for token_lsm.c
` [PATCH bpf-next v1 7/9] selftests/bpf: Add return value checks for failed tests
` [PATCH bpf-next v1 8/9] selftests/bpf: Add test for lsm tail call
` [PATCH bpf-next v1 9/9] selftests/bpf: Add verifier tests for bpf lsm

[PATCH v2] tpm: Add new device/vendor ID 0x50666666
 2024-07-18 20:23 UTC 

[PATCH] proc: add config to block FOLL_FORCE in mem writes
 2024-07-18 15:58 UTC  (8+ messages)

[PATCH v5 16/21] mm/mmap: Use vms accounted pages in mmap_region()
 2024-07-17 20:07 UTC 

[PATCH] cred: separate the refcount from frequently read fields
 2024-07-17 19:29 UTC 

[PATCH v12 00/10] Add support for x509 certs with NIST P384/256/192 keys
 2024-07-17 16:17 UTC  (3+ messages)
` [PATCH v12 02/10] crypto: Add support for ECDSA signature verification

[PATCH v2 1/2] KEYS: trusted: fix DCP blob payload length assignment
 2024-07-17 13:33 UTC  (3+ messages)
` [PATCH v2 2/2] KEYS: trusted: dcp: fix leak of blob encryption key

[PATCH 1/2] KEYS: trusted: fix DCP blob payload length assignment
 2024-07-17 11:27 UTC  (8+ messages)
` [PATCH 2/2] KEYS: trusted: dcp: fix leak of blob encryption key

[PATCH v3] tpm: Relocate buf->handles to appropriate place
 2024-07-17 11:23 UTC  (8+ messages)

[syzbot] [lsm?] WARNING in current_check_refer_path
 2024-07-17  3:22 UTC  (5+ messages)
  ` [syzbot] [lsm?] WARNING in current_check_refer_path - bcachefs bug

[PATCH testsuite] tests/task_setscheduler: add cgroup v2 case for moving proc to root cgroup
 2024-07-17  2:18 UTC 

[GIT PULL] lsm/lsm-pr-20240715
 2024-07-16 21:59 UTC  (2+ messages)

[GIT PULL] Smack patches for 6.11
 2024-07-16 21:59 UTC  (2+ messages)

[GIT PULL] selinux/selinux-pr-20240715
 2024-07-16 21:59 UTC  (2+ messages)

[PATCH v2] tpm: Relocate buf->handles to appropriate place
 2024-07-16 17:27 UTC 

[PATCH] tpm: Fix alignment of buf->handles
 2024-07-16 16:13 UTC 

Landlock news #4
 2024-07-16 15:27 UTC 

[RFC PATCH v19 2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits
 2024-07-16 15:18 UTC  (15+ messages)

[PATCH] landlock: Various documentation improvements
 2024-07-16 14:37 UTC  (2+ messages)

[PATCH v2] landlock: Clarify documentation for struct landlock_ruleset_attr
 2024-07-16 14:37 UTC  (2+ messages)

CVE-2024-40938: landlock: Fix d_parent walk
 2024-07-16  7:17 UTC  (8+ messages)

[RFC PATCH] lsm: add the inode_free_security_rcu() LSM implementation hook
 2024-07-15 21:23 UTC  (10+ messages)

[PATCH v2 1/4] net: Split a __sys_bind helper for io_uring
 2024-07-15 13:59 UTC  (2+ messages)

[syzbot] [io-uring] general protection fault in tomoyo_socket_bind_permission
 2024-07-13  8:21 UTC 

[PATCH v2 1/2] Unify error wording
 2024-07-12 17:53 UTC  (4+ messages)
` [PATCH v2 2/2] landlock: Mention -1 return code on failure

[PATCH 1/1] landlock: Mention -1 return code on failure
 2024-07-12 13:35 UTC  (5+ messages)

[PATCH v14 3/3] security: Replace indirect LSM hook calls with static calls
 2024-07-11 20:19 UTC  (5+ messages)

[PATCH v2 0/6] LSM: Infrastructure blob allocation
 2024-07-11 20:15 UTC  (2+ messages)

[PATCH] apparmor: test: add MODULE_DESCRIPTION()
 2024-07-11 17:45 UTC  (3+ messages)

[PATCH] landlock: Clarify documentation for struct landlock_ruleset_attr
 2024-07-11 16:50 UTC  (3+ messages)

[RFC] integrity: wait for completion of i2c initialization using late_initcall_sync()
 2024-07-11 14:06 UTC  (5+ messages)

[syzbot] [lsm?] general protection fault in hook_inode_free_security
 2024-07-11 14:06 UTC  (8+ messages)

[PATCH bpf-next v4 13/20] bpf, lsm: Add check for BPF LSM return value
 2024-07-11 11:38 UTC  (8+ messages)
` [PATCH bpf-next v4 14/20] bpf: Prevent tail call between progs attached to different hooks
` [PATCH bpf-next v4 15/20] bpf: Fix compare error in function retval_range_within
` [PATCH bpf-next v4 16/20] bpf: Add a special case for bitwise AND on range [-1, 0]
` [PATCH bpf-next v4 17/20] selftests/bpf: Avoid load failure for token_lsm.c
` [PATCH bpf-next v4 18/20] selftests/bpf: Add return value checks for failed tests
` [PATCH bpf-next v4 19/20] selftests/bpf: Add test for lsm tail call
` [PATCH bpf-next v4 20/20] selftests/bpf: Add verifier tests for bpf lsm


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).