messages from 2026-07-31 02:21:33 to 2026-08-11 13:43:56 UTC [more...]
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
2026-08-11 13:43 UTC (6+ messages)
` [PATCH 1/4] of/kexec: fix typo in comment (usable-memory-range)
` [PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe secrets before kdump
` [PATCH 3/4] mm/secretmem: zeroize secret pages "
` [PATCH 4/4] security/keys: zeroize key payloads "
[PATCH v4 00/19] Landlock tracepoints
2026-08-11 9:43 UTC (20+ messages)
` [PATCH v4 01/19] landlock: Prepare ruleset and domain type split
` [PATCH v4 02/19] landlock: Move domain query functions to domain.c
` [PATCH v4 03/19] landlock: Split struct landlock_domain from struct landlock_ruleset
` [PATCH v4 04/19] landlock: Split denial logging from audit into common framework
` [PATCH v4 05/19] landlock: Decouple the per-denial logging decision from CONFIG_AUDIT
` [PATCH v4 06/19] landlock: Consolidate access-right and scope names in a shared header
` [PATCH v4 07/19] landlock: Add create_ruleset and free_ruleset tracepoints
` [PATCH v4 08/19] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints
` [PATCH v4 09/19] landlock: Add create_domain and free_domain tracepoints
` [PATCH v4 10/19] landlock: Add landlock_enforce_domain tracepoint
` [PATCH v4 11/19] landlock: Add tracepoints for rule checking
` [PATCH v4 12/19] landlock: Add landlock_deny_access_fs and landlock_deny_access_net
` [PATCH v4 13/19] landlock: Add tracepoints for ptrace and scope denials
` [PATCH v4 14/19] selftests/landlock: Add trace event test infrastructure and tests
` [PATCH v4 15/19] selftests/landlock: Add filesystem tracepoint tests
` [PATCH v4 16/19] selftests/landlock: Add network "
` [PATCH v4 17/19] selftests/landlock: Add scope and ptrace "
` [PATCH v4 18/19] selftests/landlock: Add landlock_enforce_domain trace tests
` [PATCH v4 19/19] landlock: Document tracepoints
keys: request_key_auth shows a global pid in /proc/keys across pid namespaces
2026-08-11 8:34 UTC (4+ messages)
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-08-11 7:19 UTC (8+ messages)
` [PATCH v4 1/5] landlock: Check landlock_restrict_self(2)'s flags before privileges
` [PATCH v4 3/5] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v4 4/5] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v4 5/5] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler
` [PATCH v4 2/5] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
[PATCH v3 0/4] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-08-11 7:16 UTC (11+ messages)
` [PATCH v3 1/4] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 2/4] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 3/4] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v3 4/4] samples/landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS to sampler
[PATCH] apparmor: fix out-of-bounds write when null terminating a label vec
2026-08-10 23:56 UTC (2+ messages)
[PATCH] cred: clarify that task_struct::cred is only for the current task
2026-08-10 19:41 UTC (2+ messages)
[PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
2026-08-10 15:31 UTC (10+ messages)
` [PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe "
` [PATCH 4/4] security/keys: zeroize key payloads "
[PATCH] KEYS: trusted: Fix TPM teardown ordering
2026-08-10 15:25 UTC (2+ messages)
[PATCH] apparmor: fix integer overflow in verify_tags() bounds check
2026-08-10 7:26 UTC (3+ messages)
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets
2026-08-09 19:45 UTC (13+ messages)
` [PATCH bpf-next 13/13] lsm: Document the LSM policy kptr hooks
[PATCH v3 00/12] Landlock: Namespace and capability control
2026-08-09 16:01 UTC (11+ messages)
` [PATCH v3 04/12] landlock: Rename quiet_masks to quiet_access
` [PATCH v3 05/12] landlock: Wrap per-layer access masks in struct layer_config
` [PATCH v3 06/12] landlock: Copy the quiet mask in the ruleset merge helper
` [PATCH v3 07/12] landlock: Enforce namespace use restrictions
` [PATCH v3 08/12] landlock: Enforce capability restrictions
[syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate
2026-08-09 0:20 UTC
[PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit
2026-08-07 10:04 UTC (15+ messages)
` [PATCH v4 1/5] xfs: fix capability check in xfs
` [PATCH v4 2/5] capability: Add new capable_noaudit
` [PATCH v4 3/5] quota: Don't issue audit messages on quota enforcing
` [PATCH v4 4/5] xfs: replace ns_capable_noaudit
` [PATCH v4 5/5] capability: unexport has_capability_noaudit
[PATCH v5 0/2] Add Apple T2 NHI device links
2026-08-07 1:31 UTC (4+ messages)
` [PATCH v5 1/2] treewide: Add a flag to detect the Apple T2 chip
[PATCH v2] apparmor: fix cred UAF caused by begin_current_label_crit_section()
2026-08-07 1:11 UTC (2+ messages)
[PATCH] smack: fix cred UAF in smack_file_send_sigiotask()
2026-08-06 19:46 UTC (2+ messages)
[PATCH v2 00/17] Landlock tracepoints
2026-08-06 18:22 UTC (7+ messages)
` [PATCH v2 01/17] landlock: Prepare ruleset and domain type split
` [PATCH v2 03/17] landlock: Split struct landlock_domain from struct landlock_ruleset
[PATCH v3 00/20] Landlock tracepoints
2026-08-06 17:41 UTC (6+ messages)
` [PATCH v3 03/20] landlock: Split struct landlock_domain from struct landlock_ruleset
` [PATCH v3 07/20] tracing: Add __print_untrusted_str()
[GIT PULL] selinux/selinux-pr-20260805
2026-08-06 16:01 UTC (2+ messages)
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section()
2026-08-06 13:14 UTC (8+ messages)
[REGRESSION] apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7
2026-08-05 23:45 UTC (2+ messages)
[PATCH v7] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
2026-08-05 18:29 UTC (2+ messages)
[PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support
2026-08-05 17:24 UTC (2+ messages)
[PATCH v6] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
2026-08-05 17:20 UTC (3+ messages)
[PATCH v4] security: Expand task_setscheduler LSM hook
2026-08-05 12:32 UTC (3+ messages)
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder
2026-08-04 20:25 UTC (2+ messages)
[PATCH] fs: fix user path of nested backing files
2026-08-04 17:00 UTC
Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8
2026-08-04 14:08 UTC (2+ messages)
[PATCH v5 00/14] module: Introduce hash-based integrity checking
2026-08-04 12:44 UTC (5+ messages)
` [PATCH v5 13/14] kbuild: move handling of module stripping to Makefile.lib
` [PATCH v5 14/14] kbuild: make CONFIG_MODULE_HASHES compatible with module stripping
[syzbot] [lsm?] memory leak in prepare_creds (7)
2026-08-04 0:09 UTC
[PATCH net v2] netlabel: check register_netdevice_notifier() error in netlbl_unlabel_init()
2026-08-03 23:32 UTC (2+ messages)
[PATCH v2] ima: fix out-of-bounds read in xattr_verify()
2026-08-03 13:50 UTC
[PATCH] ima: fix out-of-bounds read in xattr_verify()
2026-08-03 12:36 UTC (2+ messages)
[PATCH v6 bpf-next 0/4] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
2026-08-02 14:50 UTC (35+ messages)
` [PATCH v6 bpf-next 3/4] "
[PATCH -next,v3] ima: add cond_resched() in ima_calc_file_hash_tfm loop
2026-08-01 10:50 UTC (3+ messages)
[PATCH v2 0/3] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-07-31 22:43 UTC (9+ messages)
` [PATCH v2 1/3] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 2/3] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
` [PATCH v2 3/3] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
[PATCH bpf-next 07/13] bpf: Add the LSM policy kfunc infrastructure
2026-07-31 22:24 UTC (2+ messages)
[PATCH bpf-next 05/13] landlock: Factor the credential restriction out of landlock_restrict_self()
2026-07-31 22:24 UTC (2+ messages)
[PATCH v6 bpf-next 1/4] security: introduce struct lsm_xattrs
2026-07-31 22:12 UTC (2+ messages)
[PATCH 0/3] Implement LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
2026-07-31 21:28 UTC (7+ messages)
[PATCH v5 0/5] landlock: Restrict whiteout object creation
2026-07-31 21:35 UTC (7+ messages)
` [PATCH v5 1/5] selftests/landlock: Use an actual chardev for MAKE_CHAR audit test
` [PATCH v5 2/5] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
` [PATCH v5 3/5] selftests/landlock: Add tests for whiteout object creation
` [PATCH v5 4/5] selftests/landlock: Test whiteout object behaviour in OverlayFS renames
` [PATCH v5 5/5] landlock: Link the erratum documentation for whiteout objects
[PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface
2026-07-31 20:24 UTC (7+ messages)
[PATCH v4 0/5] landlock: Restrict whiteout object creation
2026-07-31 15:14 UTC (13+ messages)
` [PATCH v4 2/5] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
` [PATCH v4 3/5] selftests/landlock: Add tests for whiteout object creation
` [PATCH v4 4/5] selftests/landlock: Test whiteout object behaviour in OverlayFS renames
Landlock: mount_setattr(2) is unmediated by LSMs (ro-mount confinement bypass)
2026-07-31 13:46 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox