Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-05-27 01:01:28 to 2026-05-30 16:50:01 UTC [more...]

[PATCH] keys: Pin request_key_auth payload in instantiate paths
 2026-05-30 16:49 UTC  (4+ messages)

[PATCH 00/11] hornet: security, tooling and selftest fixes
 2026-05-30  1:11 UTC  (19+ messages)
` [PATCH 01/11] hornet: fix TOCTOU in signed program verification
` [PATCH 02/11] hornet: invert map set check logic
` [PATCH 03/11] hornet: fix off-by-one bug in max used maps check
` [PATCH 04/11] selftests: hornet: handle cross compilation and test skipping
` [PATCH 05/11] hornet: gen_sig: fix off-by-one check for used maps
` [PATCH 06/11] hornet: gen_sig: fix error string allocations
` [PATCH 07/11] hornet: gen_sig: check for bad allocations
` [PATCH 08/11] hornet: gen_sig: fix missing command line switches
` [PATCH 09/11] hornet: scripts: set a non-zero error code for usage
` [PATCH 10/11] hornet: scripts: harden scripts to handle trailing whitespace
` [PATCH 11/11] hornet: scripts: Improve argument handling and error messages

[PATCH] KEYS: Use acquire when reading state in keyring search
 2026-05-30  1:02 UTC  (2+ messages)

security_task_prctl: why -ENOSYS
 2026-05-29 22:58 UTC  (5+ messages)

[PATCH v4 0/3] introduce IMA_INIT_LATE_SYNC option
 2026-05-29 22:46 UTC  (6+ messages)
` [PATCH v4 2/3] security: ima: "
` [PATCH v4 3/3] tpm: tpm_crb_ffa: revert defered_probed when tpm_crb_ffa is built-in

[PATCH] tpm-buf: memory-safe allocations
 2026-05-29 22:37 UTC  (7+ messages)

[PATCH] selftests/landlock: explicitly disable audit
 2026-05-29 20:03 UTC 

[syzbot] [lsm?] KASAN: slab-use-after-free Read in security_inode_follow_link
 2026-05-29 20:01 UTC 

[PATCH v3 2/2] selftests/landlock: test SCOPE_SIGNAL on the SIGIO/fowner pgid path
 2026-05-29 19:08 UTC 

[PATCH v3 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid
 2026-05-29 19:07 UTC 

[REPORT] landlock: SCOPE_SIGNAL bypass via F_SETOWN to invoker pgid -> SIGIO/SIGKILL to non-sandboxed targets
 2026-05-29 19:03 UTC  (3+ messages)

[PATCH bpf v3 0/2] gen_loader fixes
 2026-05-29 15:01 UTC  (5+ messages)
` [PATCH bpf v3 2/2] bpf, libbpf: reject non-exclusive metadata maps in the signed loader

[PATCH v5 00/13] ima: Introduce staging mechanism
 2026-05-29 14:59 UTC  (5+ messages)
` [PATCH v5 12/13] ima: Return error on deleting measurements already copied during kexec

[PATCH v4 0/2] Delete task_euid()
 2026-05-29 12:17 UTC  (4+ messages)
` [PATCH v4 1/2] rust: task: clarify comments on task UID accessors
` [PATCH v4 2/2] cred: delete task_euid()

[BUG] apparmor: AA_BUG aa_policy_destroy on aa_alloc_profile error path
 2026-05-29  3:32 UTC 

[PATCH] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid
 2026-05-29  3:25 UTC  (2+ messages)

[PATCH v9 0/9] Implement LANDLOCK_ADD_RULE_QUIET
 2026-05-29  2:34 UTC  (12+ messages)
` [PATCH v9 1/9] landlock: Add a place for flags to layer rules
` [PATCH v9 2/9] landlock: Add API support and docs for the quiet flags
` [PATCH v9 3/9] landlock: Suppress logging when quiet flag is present
` [PATCH v9 4/9] samples/landlock: Add quiet flag support to sandboxer
` [PATCH v9 5/9] selftests/landlock: Replace hard-coded 16 with a constant
` [PATCH v9 6/9] selftests/landlock: add tests for quiet flag with fs rules
` [PATCH v9 7/9] selftests/landlock: add tests for quiet flag with net rules
` [PATCH v9 8/9] selftests/landlock: Add tests for quiet flag with scope
` [PATCH v9 9/9] selftests/landlock: Add tests for invalid use of quiet flag

[PATCH v8 00/10] Implement LANDLOCK_ADD_RULE_NO_INHERIT
 2026-05-29  1:52 UTC  (11+ messages)
` [PATCH v8 01/10] landlock: Add landlock_walk_path_up() helper
` [PATCH v8 02/10] landlock: Use landlock_walk_path_up() in is_access_to_paths_allowed()
` [PATCH v8 03/10] landlock: Use landlock_walk_path_up() in collect_domain_accesses()
` [PATCH v8 04/10] landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT user API
` [PATCH v8 05/10] landlock: Return inserted rule from landlock_insert_rule()
` [PATCH v8 06/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT
` [PATCH v8 07/10] landlock: Add documentation for LANDLOCK_ADD_RULE_NO_INHERIT
` [PATCH v8 08/10] samples/landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT to landlock-sandboxer
` [PATCH v8 09/10] selftests/landlock: Add selftests for LANDLOCK_ADD_RULE_NO_INHERIT
` [PATCH v8 10/10] landlock: Add KUnit tests "

[PATCH v5 0/8] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-28 18:26 UTC  (9+ messages)
` [PATCH v5 1/8] lsm: Add "
` [PATCH v5 2/8] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount
` [PATCH v5 3/8] apparmor: Convert from sb_mount to granular mount hooks
` [PATCH v5 4/8] selinux: "
` [PATCH v5 5/8] landlock: "
` [PATCH v5 6/8] tomoyo: "
` [PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks
` [PATCH v5 8/8] lsm: Remove security_sb_mount and security_move_mount

[PATCH 6.12.y] landlock: Fix TCP handling of short AF_UNSPEC addresses
 2026-05-28 12:14 UTC 

[PATCH net v2] netlabel: validate unlabeled mask attribute length
 2026-05-28  1:59 UTC 

[PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
 2026-05-28  1:19 UTC  (7+ messages)

[PATCH v4 0/7] lsm: Replace security_sb_mount with granular mount hooks
 2026-05-27 21:08 UTC  (6+ messages)
` [PATCH v4 1/7] lsm: Add granular mount hooks to replace security_sb_mount

[PATCH v2 0/9] Landlock: Namespace and capability control
 2026-05-27 18:11 UTC  (10+ messages)
` [PATCH v2 1/9] security: add LSM blob and hooks for namespaces
` [PATCH v2 2/9] security: Add LSM_AUDIT_DATA_NS for namespace audit records
` [PATCH v2 3/9] landlock: Wrap per-layer access masks in struct layer_config
` [PATCH v2 4/9] landlock: Enforce namespace use restrictions
` [PATCH v2 5/9] landlock: Enforce capability restrictions
` [PATCH v2 6/9] selftests/landlock: Add namespace restriction tests
` [PATCH v2 7/9] selftests/landlock: Add capability "
` [PATCH v2 8/9] samples/landlock: Add capability and namespace restriction support
` [PATCH v2 9/9] landlock: Add documentation for capability and namespace restrictions

[PATCH] firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss
 2026-05-27  9:16 UTC  (4+ messages)

[syzbot] Monthly lsm report (May 2026)
 2026-05-27  4:32 UTC 

[PATCH v8 0/9] Implement LANDLOCK_ADD_RULE_QUIET
 2026-05-27  1:07 UTC  (4+ messages)
` [PATCH v8 2/9] landlock: Add API support and docs for the quiet flags


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox