messages from 2026-07-17 21:54:49 to 2026-07-23 17:12:21 UTC [more...]
[PATCH] apparmor: update website link
2026-07-23 17:12 UTC (6+ messages)
[PATCH] capability: remove non-kernel-doc comments
2026-07-23 17:08 UTC (2+ messages)
[RFC PATCH 0/4] Introduce capable_noaudit
2026-07-23 13:29 UTC (3+ messages)
` [RFC PATCH 3/4] xfs: replace ns_capable_noaudit()
[PATCH v3 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
2026-07-23 12:53 UTC (6+ messages)
` [PATCH v3 1/3] keys: fix out-of-bounds read in keyring_get_key_chunk()
` [PATCH v3 2/3] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
` [PATCH v3 3/3] assoc_array: trim the final shortcut word using the current chunk end
[PATCH v1] selftests/landlock: Add tests for O_TMPFILE
2026-07-23 12:04 UTC (2+ messages)
[RFC PATCH 0/3] coredump, net: fix layer violation with direct connection
2026-07-23 9:53 UTC (10+ messages)
` [RFC PATCH 2/3] af_unix: factor out kernel_unix_connect_direct()
` unix_stream_connect and socket address resolution
[PATCH v3 00/20] Landlock tracepoints
2026-07-22 21:12 UTC (22+ messages)
` [PATCH v3 01/20] landlock: Prepare ruleset and domain type split
` [PATCH v3 02/20] landlock: Move domain query functions to domain.c
` [PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset
` [PATCH v3 04/20] landlock: Split denial logging from audit into common framework
` [PATCH v3 05/20] landlock: Decouple the per-denial logging decision from CONFIG_AUDIT
` [PATCH v3 06/20] landlock: Consolidate access-right and scope names in a shared header
` [PATCH v3 07/20] tracing: Add __print_untrusted_str()
` [PATCH v3 08/20] landlock: Add create_ruleset and free_ruleset tracepoints
` [PATCH v3 09/20] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
` [PATCH v3 10/20] landlock: Add create_domain and free_domain tracepoints
` [PATCH v3 11/20] landlock: Add landlock_enforce_domain tracepoint
` [PATCH v3 12/20] landlock: Add tracepoints for rule checking
` [PATCH v3 13/20] landlock: Add landlock_deny_access_fs and landlock_deny_access_net
` [PATCH v3 14/20] landlock: Add tracepoints for ptrace and scope denials
` [PATCH v3 15/20] selftests/landlock: Add trace event test infrastructure and tests
` [PATCH v3 16/20] selftests/landlock: Add filesystem tracepoint tests
` [PATCH v3 17/20] selftests/landlock: Add network "
` [PATCH v3 18/20] selftests/landlock: Add scope and ptrace "
` [PATCH v3 19/20] selftests/landlock: Add landlock_enforce_domain trace tests
` [PATCH v3 20/20] landlock: Document tracepoints
[PATCH 0/6] landlock: Add POSIX message queue scoping
2026-07-22 15:14 UTC (9+ messages)
` [PATCH 1/6] ipc: Move mqueue fs magic to uapi magic header
` [PATCH 2/6] landlock: Scope POSIX message queue opens
` [PATCH 3/6] landlock: Bump ABI for LANDLOCK_SCOPE_POSIX_MSG_QUEUE
` [PATCH 4/6] selftests/landlock: Test POSIX message queue scoping
` [PATCH 5/6] samples/landlock: Support "
` [PATCH 6/6] landlock: Document "
[RFC PATCH 00/20] BPF interface for applying Landlock rulesets
2026-07-21 21:55 UTC (9+ messages)
` [RFC PATCH 06/20] bpf: lsm: Add Landlock kfuncs
[PATCH v3 0/2] Add Apple T2 NHI device links
2026-07-21 15:29 UTC (6+ messages)
` [PATCH v3 1/2] treewide: Add a flag to detect the Apple T2 chip
` [PATCH v3 2/2] thunderbolt: Add device links for Apple T2 NHI
[PATCH v4] security: Expand task_setscheduler LSM hook
2026-07-21 14:45 UTC (2+ messages)
[PATCH v2 0/3] Bring includes in linux/kmod.h up to date
2026-07-21 13:11 UTC (4+ messages)
` [PATCH v2 1/3] umh, treewide: Explicitly include linux/umh.h where needed
` [PATCH v2 2/3] time/jiffies: Include linux/sysctl.h for proc_int_u2k_conv_uop(),
` [PATCH v2 3/3] module: Bring includes in linux/kmod.h up to date
[PATCH v2 0/2] Add Apple T2 NHI device links
2026-07-21 10:56 UTC (4+ messages)
` [PATCH v2 1/2] treewide: Add a flag to detect the Apple T2 chip
` [PATCH v2 2/2] thunderbolt: Add device links for Apple T2 NHI
[PATCH] apparmor: leverage audit_log_n_untrustedstring() when possible
2026-07-21 1:53 UTC (6+ messages)
[PATCH v5 bpf-next 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
2026-07-20 22:47 UTC (9+ messages)
` [PATCH v5 "
[PATCH v5 bpf-next 1/3] security: rework inode_init_security xattr handling
2026-07-20 20:41 UTC (4+ messages)
` [PATCH v5 "
[PATCH v1] landlock: Document the threat model
2026-07-20 12:59 UTC (3+ messages)
[PATCH v3 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT
2026-07-20 10:58 UTC (5+ messages)
` [PATCH v3 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT
[PATCH 0/2] Add Apple T2 NHI device links
2026-07-19 18:03 UTC (3+ messages)
` [PATCH 1/2] treewide: Add a flag to detect the Apple T2 chip
` [PATCH 2/2] thunderbolt: Add device links for Apple T2 NHI
[PATCH v2 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
2026-07-18 22:18 UTC (10+ messages)
` [PATCH v2 1/3] keys: fix out-of-bounds read in keyring_get_key_chunk()
` [PATCH v2 2/3] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
` [PATCH v2 3/3] assoc_array: trim the final shortcut word using the current chunk end
[PATCH 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
2026-07-18 18:34 UTC (9+ messages)
` [PATCH 1/3] keys: fix out-of-bounds read in keyring_get_key_chunk()
` [PATCH 2/3] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
` [PATCH 3/3] assoc_array: trim the final shortcut word when skip_to_level is chunk-aligned
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV is bypassable via io_uring IORING_OP_URING_CMD (confirmed on real NVMe hardware)
2026-07-18 15:01 UTC (2+ messages)
Landlock: mount_setattr(2) is unmediated by LSMs (ro-mount confinement bypass)
2026-07-18 10:14 UTC
[PATCH v2 0/3] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-07-17 22:03 UTC (4+ messages)
` [PATCH v2 1/3] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 2/3] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 3/3] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
page: | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox