linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2025-05-07 18:16:18 to 2025-05-14 18:22:07 UTC [more...]

[PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
 2025-05-14 18:21 UTC  (7+ messages)
` [PATCH v5 1/7] fs: split fileattr related helpers into separate file
` [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr

[PATCH v3 0/4] Introducing Hornet LSM
 2025-05-14 17:45 UTC  (16+ messages)

[PATCH v3 0/9] module: Introduce hash-based integrity checking
 2025-05-14 17:37 UTC  (14+ messages)
` [PATCH v3 1/9] powerpc/ima: Drop unnecessary check for CONFIG_MODULE_SIG
` [PATCH v3 2/9] ima: efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG

[PATCH 0/2] fs/exec: Explicitly unshare fs_struct on exec
 2025-05-14 15:42 UTC  (14+ messages)
` [PATCH 1/2] "

[PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
 2025-05-14 15:10 UTC  (11+ messages)
` [PATCH v5 1/7] fs: split fileattr related helpers into separate file
` [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
` [PATCH v5 3/7] selinux: implement inode_file_[g|s]etattr hooks
` [PATCH v5 4/7] fs: split fileattr/fsxattr converters into helpers
` [PATCH v5 5/7] fs: make vfs_fileattr_[get|set] return -EOPNOSUPP
` [PATCH v5 6/7] fs: prepare for extending file_get/setattr()
` [PATCH v5 7/7] fs: introduce file_getattr and file_setattr syscalls

[syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry (3)
 2025-05-14 14:54 UTC 

[RFC PATCH 0/29] Rework the LSM initialization
 2025-05-14 13:38 UTC  (28+ messages)
` [RFC PATCH 14/29] lsm: add missing function header comment blocks in lsm_init.c
` [RFC PATCH 16/29] lsm: output available LSMs when debugging
` [RFC PATCH 17/29] lsm: introduce an initcall mechanism into the LSM framework
` [RFC PATCH 18/29] loadpin: move initcalls to "
` [RFC PATCH 19/29] ipe: "
` [RFC PATCH 21/29] tomoyo: "
` [RFC PATCH 22/29] safesetid: "
` [RFC PATCH 23/29] apparmor: "
` [RFC PATCH 24/29] lockdown: "
` [RFC PATCH 25/29] ima,evm: "
` [RFC PATCH 27/29] lsm: consolidate all of the LSM framework initcalls
` [RFC PATCH 28/29] lsm: add a LSM_STARTED_ALL notification event
` [RFC PATCH 29/29] lsm: add support for counting lsm_prop support among LSMs

[PATCH V2] ima: do not copy measurement list to kdump kernel
 2025-05-14 12:40 UTC  (2+ messages)

[PATCH] apparmor: Remove obsolete config SECURITY_APPARMOR_DEBUG_MESSAGES
 2025-05-14  7:14 UTC 

[PATCH] ipe: use SHA-256 library API instead of crypto_shash API
 2025-05-14  5:05 UTC 

[PATCH] apparmor: use SHA-256 library API instead of crypto_shash API
 2025-05-14  4:21 UTC  (2+ messages)

[PATCH v3] securityfs: fix missing of d_delete() in securityfs_remove()
 2025-05-13 23:13 UTC  (18+ messages)
  ` [PATCH 1/8] securityfs: don't pin dentries twice, once is enough
  ` [PATCH 2/8] securityfs: pin filesystem only for objects directly in root
  ` [PATCH 3/8] fix locking in efi_secret_unlink()
  ` [PATCH 4/8] make securityfs_remove() remove the entire subtree
  ` [PATCH 5/8] efi_secret: clean securityfs use up
  ` [PATCH 6/8] ima_fs: don't bother with removal of files in directory we'll be removing
  ` [PATCH 7/8] ima_fs: get rid of lookup-by-dentry stuff
  ` [PATCH 8/8] evm_secfs: clear securityfs interactions

[PATCH 0/2] Allow individual features to be locked down
 2025-05-13 23:07 UTC  (7+ messages)

[PATCH] ima: Kdump kernel doesn't need IMA to do integrity measurement
 2025-05-13 15:31 UTC  (6+ messages)

[PATCH v6 0/9] coredump: add coredump socket
 2025-05-13 12:08 UTC  (17+ messages)
` [PATCH v6 1/9] coredump: massage format_corname()
` [PATCH v6 2/9] coredump: massage do_coredump()
` [PATCH v6 3/9] coredump: reflow dump helpers a little
` [PATCH v6 4/9] coredump: add coredump socket
` [PATCH v6 5/9] pidfs, coredump: add PIDFD_INFO_COREDUMP
` [PATCH v6 6/9] coredump: show supported coredump modes
` [PATCH v6 7/9] coredump: validate socket name as it is written
` [PATCH v6 8/9] selftests/pidfd: add PIDFD_INFO_COREDUMP infrastructure
` [PATCH v6 9/9] selftests/coredump: add tests for AF_UNIX coredumps

[PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
 2025-05-13  8:24 UTC  (7+ messages)
` [PATCH v5 1/7] fs: split fileattr related helpers into separate file
` [PATCH v5 2/7] lsm: introduce new hooks for setting/getting inode fsxattr
` [PATCH v5 3/7] selinux: implement inode_file_[g|s]etattr hooks
` [PATCH v5 4/7] fs: split fileattr/fsxattr converters into helpers

[PATCH v5 5/7] fs: make vfs_fileattr_[get|set] return -EOPNOSUPP
 2025-05-12 13:28 UTC  (2+ messages)

[v2 PATCH] KEYS: Invert FINAL_PUT bit
 2025-05-12 12:07 UTC  (7+ messages)
  ` [v3 "

[PATCH v2] landlock: Improve bit operations in audit code
 2025-05-12 11:00 UTC  (2+ messages)

[PATCH 0/3] lsm: introduce lsm_manage_policy() syscall
 2025-05-12 10:20 UTC  (31+ messages)
` [PATCH 1/3] Wire up the lsm_manage_policy syscall
` [PATCH 2/3] lsm: introduce security_lsm_manage_policy hook

[PATCH v1] landlock: Use bitops macros in audit code
 2025-05-12  9:31 UTC  (3+ messages)

[syzbot] [lsm?] [keyrings?] KCSAN: data-race in key_garbage_collector / key_set_expiry
 2025-05-12  6:34 UTC 

[PATCH] security/commoncap: don't assume "setid" if all ids are identical
 2025-05-09 20:17 UTC  (17+ messages)
              ` [PATCH] Documentation/no_new_privs.rst: document dropping effective ids

[PATCH v5 0/9] coredump: add coredump socket
 2025-05-09 17:30 UTC  (16+ messages)
` [PATCH v5 1/9] coredump: massage format_corname()
` [PATCH v5 2/9] coredump: massage do_coredump()
` [PATCH v5 3/9] coredump: reflow dump helpers a little
` [PATCH v5 4/9] coredump: add coredump socket
` [PATCH v5 5/9] pidfs, coredump: add PIDFD_INFO_COREDUMP
` [PATCH v5 6/9] coredump: show supported coredump modes
` [PATCH v5 7/9] coredump: validate socket name as it is written
` [PATCH v5 8/9] selftests/pidfd: add PIDFD_INFO_COREDUMP infrastructure
` [PATCH v5 9/9] selftests/coredump: add tests for AF_UNIX coredumps

[PATCH v1 bpf-next 4/5] bpf: Add kfunc to scrub SCM_RIGHTS at security_unix_may_send()
 2025-05-09 15:06 UTC  (2+ messages)

[PATCH v1 bpf-next 3/5] af_unix: Remove redundant scm->fp check in __scm_destroy()
 2025-05-09 14:13 UTC  (2+ messages)

[PATCH v2] securityfs: fix missing of d_delete() in securityfs_remove()
 2025-05-09  2:41 UTC  (6+ messages)
      ` [PATCH v3] "

[RFC] LSM deprecation / removal policies
 2025-05-08 15:03 UTC  (8+ messages)

[PATCH 0/8] stackleak: Support Clang stack depth tracking
 2025-05-08 12:25 UTC  (14+ messages)
` [PATCH 1/8] nvme-pci: Make nvme_pci_npages_prp() __always_inline
` [PATCH 2/8] init.h: Disable sanitizer coverage for __init and __head
` [PATCH 3/8] stackleak: Rename CONFIG_GCC_PLUGIN_STACKLEAK to CONFIG_STACKLEAK
` [PATCH 5/8] stackleak: Split STACKLEAK_CFLAGS from GCC_PLUGINS_CFLAGS
` [PATCH 6/8] stackleak: Support Clang stack depth tracking
` [PATCH 7/8] configs/hardening: Enable CONFIG_STACKLEAK
` [PATCH 8/8] configs/hardening: Enable CONFIG_INIT_ON_FREE_DEFAULT_ON

[PATCH RFC v7 0/8] Add NUMA mempolicy support for KVM guest-memfd
 2025-05-08  6:37 UTC  (5+ messages)
` [PATCH RFC v7 3/8] security: Export security_inode_init_security_anon for KVM guest_memfd

[PATCH RFC v3 08/10] net, pidfs, coredump: only allow coredumping tasks to connect to coredump socket
 2025-05-07 22:10 UTC  (2+ messages)

[PATCH v4 09/11] pidfs, coredump: allow to verify coredump connection
 2025-05-07 18:34 UTC 


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).