Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-05-11 19:52:45 to 2026-05-21 13:33:28 UTC [more...]

[PATCH 00/11] Convert moduleparams to seq_buf
 2026-05-21 13:33 UTC  (8+ messages)
` [PATCH 01/11] params: bound array element output to the caller's page buffer
` [PATCH 02/11] panic: Replace panic_print_get() with generic helper
` [PATCH 03/11] moduleparam: Add DEFINE_KERNEL_PARAM_OPS macro family
` [PATCH 04/11] treewide: Convert struct kernel_param_ops initializers to DEFINE_KERNEL_PARAM_OPS
` [PATCH 05/11] moduleparam: Rename .get field to .get_str
` [PATCH 06/11] moduleparam: Add seq_buf-based .get callback alongside .get_str
` [PATCH 07/11] moduleparam: Route DEFINE_KERNEL_PARAM_OPS get pointer via _Generic

[PATCH v5 00/13] ima: Introduce staging mechanism
 2026-05-21  8:30 UTC  (25+ messages)
` [PATCH v5 01/13] ima: Remove ima_h_table structure
` [PATCH v5 02/13] ima: Replace static htable queue with dynamically allocated array
` [PATCH v5 03/13] ima: Introduce per binary measurements list type ima_num_entries counter
` [PATCH v5 04/13] ima: Introduce per binary measurements list type binary_runtime_size value
` [PATCH v5 05/13] ima: Introduce _ima_measurements_start() and _ima_measurements_next()
` [PATCH v5 06/13] ima: Mediate open/release method of the measurements list
` [PATCH v5 07/13] ima: Use snprintf() in create_securityfs_measurement_lists
` [PATCH v5 08/13] ima: Introduce ima_dump_measurement()

[PATCH] apparmor: Fix inverted comparison in cache_hold_inc()
 2026-05-21  6:57 UTC 

[QUESTION] move load_uefi_certs() and keyring initcall to earlier initcall
 2026-05-20 16:02 UTC  (2+ messages)

[GIT PULL] lsm/lsm-pr-20260519
 2026-05-20 15:24 UTC  (2+ messages)

[PATCH] landlock: avoid memcpy static check warning
 2026-05-20 11:45 UTC  (3+ messages)

[PATCH 0/3] security: replace __get_free_pages() call with kmalloc()
 2026-05-20  8:18 UTC  (4+ messages)
` [PATCH 1/3] selinux: use k[mz]alloc() to allocate temporary buffers
` [PATCH 2/3] selinux: hooks: use __getname() to allocate path buffer
` [PATCH 3/3] apparmor: replace get_zeroed_page() with kzalloc()

[PATCH v2] bpf: reject NULL data/sig in bpf_verify_pkcs7_signature
 2026-05-20  3:30 UTC  (3+ messages)

[PATCH] bpf, libbpf: reject non-exclusive metadata maps in the signed loader
 2026-05-19 22:50 UTC  (2+ messages)

[PATCH] bpf: reject NULL data/sig in bpf_verify_pkcs7_signature
 2026-05-19 22:44 UTC  (4+ messages)

[RFC] TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ)
 2026-05-19 21:41 UTC  (2+ messages)

[PATCH] killswitch: add per-function short-circuit mitigation primitive
 2026-05-19 20:50 UTC  (14+ messages)

[PATCH v5 00/14] module: Introduce hash-based integrity checking
 2026-05-19 18:19 UTC  (3+ messages)

[PATCH RFC 0/5] memcg: dma-buf per-cgroup accounting via pid_fd
 2026-05-19 18:07 UTC  (42+ messages)
` [PATCH RFC 1/5] memcg: Track exported dma-buffers
` [PATCH RFC 2/5] dma-heap: charge dma-buf memory via explicit memcg
          ` [Linaro-mm-sig] "
` [PATCH RFC 3/5] security: dma-heap: Add dma_heap_alloc LSM hook
` [PATCH RFC 4/5] selinux: Restrict cross-cgroup dma-heap charging
` [PATCH RFC 5/5] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[bug report] keys: request_key_auth payload use-after-free in keyctl_instantiate_key_common()
 2026-05-19 14:44 UTC 

[PATCH] keys/trusted_keys: mark 'migratable' as __ro_after_init
 2026-05-19  8:15 UTC  (2+ messages)

[PATCH v2 00/16] Bump minimum version of LLVM for building the kernel to 17.0.1
 2026-05-18 21:05 UTC  (6+ messages)
` [PATCH v2 02/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_ZERO_CALL_USED_REGS
` [PATCH v2 03/16] security/Kconfig.hardening: Remove tautological condition from FORTIFY_SOURCE
` [PATCH v2 04/16] security/Kconfig.hardening: Remove tautological condition from CC_HAS_RANDSTRUCT

[PATCH v2 00/17] Landlock tracepoints
 2026-05-18 10:26 UTC  (3+ messages)
` [PATCH v2 05/17] tracing: Add __print_untrusted_str()

[linus:master] [selftests] 465b05bae5: kernel-selftests.landlock.audit_test.audit.tsync_override_log_subdomains_off.fail
 2026-05-18 10:01 UTC  (5+ messages)

[PATCH 0/4] firmware: arm_ffa: Move core init to platform driver probe
 2026-05-17 11:54 UTC  (4+ messages)

[PATCH v1 1/2] selftests/landlock: Filter dealloc records in audit_count_records()
 2026-05-16 19:21 UTC  (4+ messages)
` [PATCH v1 2/2] selftests/landlock: Increase default audit socket timeout

[PATCH] landlock: Documentation wording cleanups
 2026-05-16 19:19 UTC  (2+ messages)

[PATCH v2 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
 2026-05-16 13:36 UTC  (6+ messages)
` [PATCH v2 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask

[PATCH v4 0/7] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-15 20:01 UTC  (8+ messages)
` [PATCH v4 1/7] lsm: Add granular mount hooks to replace security_sb_mount
` [PATCH v4 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
` [PATCH v4 3/7] apparmor: Convert from sb_mount to granular mount hooks
` [PATCH v4 4/7] selinux: "
` [PATCH v4 5/7] landlock: "
` [PATCH v4 6/7] tomoyo: "
` [PATCH v4 7/7] lsm: Remove security_sb_mount and security_move_mount

[PATCH] rust: cred: add safe abstractions for capable() and ns_capable()
 2026-05-15 19:07 UTC 

[PATCH v1] landlock: Demonstrate best-effort allowed_access filtering
 2026-05-15 17:53 UTC  (2+ messages)

[PATCH] Documentation: fix typo and formattting in security/credentials.rst
 2026-05-15 14:10 UTC  (2+ messages)

[PATCH] apparmor: hold peer path references in aa_unix_file_perm()
 2026-05-15  5:01 UTC 

[PATCH net 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr
 2026-05-15  2:42 UTC  (3+ messages)

[PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr
 2026-05-15  2:42 UTC  (5+ messages)

[PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()
 2026-05-14 20:47 UTC  (2+ messages)

[PATCH net 0/4] net: trust-after-modification fixes for IPv4 options + netlabel
 2026-05-14 17:06 UTC  (2+ messages)

[PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL
 2026-05-14 16:57 UTC  (3+ messages)

[PATCH] ipe: restore the kdoc comments for evaluate_property()
 2026-05-14 16:57 UTC  (3+ messages)

[PATCH] ima: debugging late_initcall_sync measurements
 2026-05-14 14:53 UTC  (12+ messages)

[linus:master] [landlock] 874c8f8382: kernel-selftests.landlock.audit_test.audit.thread.fail
 2026-05-13 18:36 UTC  (2+ messages)

[PATCH v7 10/10] ipe: Add BPF program load policy enforcement via Hornet integration
 2026-05-13 18:36 UTC  (2+ messages)

[PATCH v7 09/10] selftests/hornet: Add a selftest for the Hornet LSM
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 9/10] "

[PATCH v7 08/10] hornet: Add a light skeleton data extractor scripts
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 8/10] "

[PATCH v7 07/10] hornet: Introduce gen_sig
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 7/10] "

[PATCH v7 06/10] security: Hornet LSM
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 6/10] "

[PATCH v7 05/10] lsm: security: Add additional enum values for bpf integrity checks
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 5/10] "

[PATCH v7 04/10] lsm: framework for BPF integrity verification
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 4/10] "

[PATCH v7 03/10] crypto: pkcs7: add tests for pkcs7_get_authattr
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 3/10] "

[PATCH v7 02/10] crypto: pkcs7: add ability to extract signed attributes by OID
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 2/10] "

[PATCH v7 01/10] crypto: pkcs7: add flag for validated trust on a signed info block
 2026-05-13 18:36 UTC  (2+ messages)
` [PATCH v7 1/10] "

[PATCH v1] landlock: Account all audit data allocations to user space
 2026-05-13 18:03 UTC 

[PATCH v2 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT
 2026-05-13 16:05 UTC  (4+ messages)
` [PATCH v2 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT
` [PATCH v2 2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial
` [PATCH v2 3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_WHITEOUT

[PATCH] rust: cred: add safe abstractions for capable() and ns_capable()
 2026-05-13 15:39 UTC  (3+ messages)

[PATCH 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
 2026-05-12 19:37 UTC  (7+ messages)
` [PATCH 1/3] cgroup/cpuset: Fix deadline bandwidth leak in cpuset_can_attach()

[BUG] lsm= with bpf before selinux breaks fscreate with EINVAL
 2026-05-12 19:17 UTC  (7+ messages)

[PATCH v3 0/7] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-12 18:07 UTC  (6+ messages)
` [PATCH v3 6/7] tomoyo: Convert from sb_mount to "

[PATCH v2 0/4] Firmware LSM hook
 2026-05-12  8:51 UTC  (11+ messages)

[PATCH v3 7/7] lsm: Remove security_sb_mount and security_move_mount
 2026-05-11 21:06 UTC  (3+ messages)

[PATCH v3 5/7] landlock: Convert from sb_mount to granular mount hooks
 2026-05-11 19:52 UTC  (2+ messages)

[PATCH v3 3/7] apparmor: Convert from sb_mount to granular mount hooks
 2026-05-11 19:52 UTC  (2+ messages)

[PATCH v3 2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
 2026-05-11 19:52 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox