messages from 2026-08-22 09:44:17 to 2026-08-31 14:59:58 UTC [more...]
[PATCH v2 00/15] BPF interface for applying Landlock rulesets
2026-08-31 14:58 UTC (5+ messages)
` [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks
` [PATCH v2 02/15] lsm: Add the bprm_apply_policy_object LSM hook
` [PATCH v2 03/15] lsm: Move the lsm_for_each_hook() macro to security/lsm.h
` [PATCH v2 04/15] lsm: Add the bpf_lsm_policy_release kfunc and policy object destructor
[PATCH AUTOSEL 6.18-5.10] ima: return error early if file xattr cannot be changed
2026-08-31 13:27 UTC (4+ messages)
` [PATCH AUTOSEL 6.18-5.15] integrity: Check for NULL returned by asymmetric_key_public_key
` [PATCH AUTOSEL 6.18-6.12] apparmor: propagate -ENOMEM correctly in unpack_table
` [PATCH AUTOSEL 6.18-5.10] netlabel: fix IPv6 unlabeled address add error handling
[PATCH bpf-next 0/7] Add new way to add BPF LSM hooks
2026-08-31 13:22 UTC (18+ messages)
` [PATCH bpf-next 1/7] bpf: Allow BPF LSM programs to attach to more hooks
` [PATCH bpf-next 2/7] net, bpf: Add a generic netlink hook on msg_rcv
` [PATCH bpf-next 3/7] net, bpf: Add bpf hooks for ethtool control path
` [PATCH bpf-next 4/7] selftests/bpf: Extract some helpers from tests to the netlink library
` [PATCH bpf-next 5/7] selftests/bpf: Add netdevsim helper library
` [PATCH bpf-next 6/7] selftests/bpf: Add tests for the generic netlink BPF hook
` [PATCH bpf-next 7/7] selftests/bpf: Add tests for BPF ethtool hooks
[PATCH v2 00/10] Extend PKWM to support user-created wrapping keys
2026-08-31 11:17 UTC (11+ messages)
` [PATCH v2 01/10] pseries/plpks: update PKS documentation and maintainer entry
` [PATCH v2 02/10] pseries/plpks: fix error handling in plpks_read_var()
` [PATCH v2 03/10] pseries/plpks: improve type consistency and parameter validation
` [PATCH v2 04/10] keys/trusted_keys: propagate wrapping key generation errors
` [PATCH v2 05/10] pseries/plpks: rename the default wrapping key macro
` [PATCH v2 06/10] pseries/plpks: fix self-reference in plpks_var initializer
` [PATCH v2 07/10] pseries/plpks: hide wrapping_features when unsupported
` [PATCH v2 08/10] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH v2 09/10] keys/trusted_keys: enable PKWM wrapping key selection by label
` [PATCH v2 10/10] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs
[PATCH 0/8] Extend PKWM to support user-created wrapping keys
2026-08-31 11:15 UTC (10+ messages)
` [PATCH 1/8] pseries/plpks: update PKS documentation and maintainer entry
` [PATCH 2/8] pseries/plpks: fix error handling in plpks_read_var()
` [PATCH 3/8] pseries/plpks: improve type consistency and parameter validation
` [PATCH 4/8] pseries/plpks: rename the default wrapping key macro
` [PATCH 5/8] pseries/plpks: hide wrapping_features when unsupported
` [PATCH 6/8] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
` [PATCH 8/8] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs
[PATCH v2 0/3] pidfd: add task path ioctls
2026-08-31 8:49 UTC (5+ messages)
` [PATCH v2 1/3] fs: Introduce task path helpers
` [PATCH v2 2/3] pidfd: Use scoped cleanup for task access
` [PATCH v2 3/3] pidfd: Add task path ioctls
[PATCH 0/6] landlock: Support MPTCP bind and connect restrictions
2026-08-31 4:09 UTC (8+ messages)
` [PATCH 1/6] samples/landlock: Implement best-effort fallback for network rules
` [PATCH 2/6] selftests/landlock: Generalize net test helpers for multiple socket types
` [PATCH 3/6] landlock: Add MPTCP bind and connect access rights
` [PATCH 4/6] selftests/landlock: Add MPTCP network access tests
` [PATCH 5/6] samples/landlock: Support MPTCP access rights
` [PATCH 6/6] landlock: Document "
[PATCH] keys: set persistent keyring timeout before destination linking
2026-08-30 18:20 UTC
SafeSetID: GID transition policy lookup uses RUID as source, allowlist can be bypassed (setgid to any group including 0)
2026-08-30 16:18 UTC
[syzbot] [audit?] BUG: unable to handle kernel paging request in integrity_audit_message
2026-08-29 18:27 UTC (3+ messages)
[PATCH v4] security: Expand task_setscheduler LSM hook
2026-08-29 15:55 UTC (2+ messages)
[PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
2026-08-29 13:09 UTC
[PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
2026-08-28 21:10 UTC (15+ messages)
` [PATCH v2 1/3] proc: refactor /proc/$pid/mem to use struct as private_data
` [PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)
` [PATCH v2 3/3] selinux: require PROCESS__PTRACE for FOLL_FORCE introspection
[PATCH v1] selftests/landlock: Test abstract socket trace name limits
2026-08-28 19:00 UTC
[Bug] landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader
2026-08-28 19:12 UTC (2+ messages)
[BUG] general protection fault in security_path_post_mknod
2026-08-28 18:48 UTC (2+ messages)
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets
2026-08-28 18:28 UTC (9+ messages)
[PATCH] keys: Pin request_key_auth payload in instantiate paths
2026-08-28 16:23 UTC (2+ messages)
[PATCH v6 0/6] landlock: Restrict whiteout object creation
2026-08-28 15:45 UTC (3+ messages)
` [PATCH v6 2/6] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
[PATCH v1] landlock: Demonstrate best-effort allowed_access filtering
2026-08-28 15:43 UTC (3+ messages)
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-08-28 15:40 UTC (3+ messages)
` [PATCH v4 4/5] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
[PATCH v11 0/9] Implement LANDLOCK_ADD_RULE_QUIET
2026-08-28 15:38 UTC (3+ messages)
` [PATCH v11 2/9] landlock: Add API support and docs for the quiet flags
[PATCH v5 0/6] landlock: Add UDP access control support
2026-08-28 15:35 UTC (3+ messages)
` [PATCH v5 6/6] landlock: Add documentation for UDP support
[PATCH] selftests/landlock: prevent mount propagation from test namespaces
2026-08-28 12:13 UTC
[PATCH] keys: reject descriptions that exceed the index length
2026-08-28 10:12 UTC (5+ messages)
` [PATCH v2] "
[PATCH] rust: security: replace `core::mem::zeroed` with `pin_init::zeroed`
2026-08-28 6:15 UTC (2+ messages)
[BUG] security/keys: out-of-bounds in tpm2_unseal_trusted()
2026-08-28 5:17 UTC (2+ messages)
[PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len
2026-08-28 1:59 UTC (4+ messages)
[PATCH] keys: Fix key_user use-after-free during ownership changes
2026-08-27 22:05 UTC (2+ messages)
[PATCH] ima: select the SHA384 PCR bank for the boot aggregate
2026-08-27 20:03 UTC (8+ messages)
[PATCH] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
2026-08-27 17:43 UTC
[PATCH v2 -next 2/2] security: Fix call security_backing_file_free second time
2026-08-27 16:30 UTC (2+ messages)
` [PATCH v2 "
[PATCH v2 -next 1/2] security: Delete dumplicate assignment
2026-08-27 16:30 UTC (2+ messages)
` [PATCH v2 "
[GIT PULL] AppArmor updates for v7.3
2026-08-26 18:40 UTC (2+ messages)
[PATCH 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
2026-08-26 16:17 UTC (29+ messages)
` [PATCH 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)
` [PATCH 3/3] selinux: require EXECMEM or PTRACE for FOLL_FORCE introspection
[PATCH] selftests/landlock: Fix snprintf truncation checks in test files
2026-08-26 10:44 UTC (3+ messages)
[PATCH] ima: bound line scan in ima_read_policy() to fix OOB read
2026-08-26 9:51 UTC (2+ messages)
[PATCH v20 0/8] rust: add `Ownable` trait and `Owned` type
2026-08-26 9:29 UTC (17+ messages)
` [PATCH v20 1/8] rust: alloc: add `KBox::into_non_null`
` [PATCH v20 2/8] rust: types: Add Ownable/Owned types
` [PATCH v20 3/8] rust: implement `ForeignOwnable` for `Owned`
` [PATCH v20 4/8] rust: page: convert to `Ownable`
` [PATCH v20 4/8] rust: page: convert to `Ownable`'
` [PATCH v20 5/8] rust: rename `AlwaysRefCounted` to `RefCounted`
` [PATCH v20 6/8] rust: Add missing SAFETY documentation for `ARef` example
` [PATCH v20 7/8] rust: Add `OwnableRefCounted`
` [PATCH v20 8/8] rust: page: add `from_raw()`
[PATCH v2 0/2] ima: don't measure/appraise files on configfs
2026-08-26 8:07 UTC (6+ messages)
` [PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h
[RFC PATCH] smack: preserve low-integrity labels on copy via whitelist
2026-08-26 3:33 UTC
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder
2026-08-25 21:27 UTC (4+ messages)
[PATCH] keys: translate request_key_auth pid for the reading procfs instance
2026-08-25 14:10 UTC (2+ messages)
[PATCH v2] keys: fix lost wakeup when reaping a dead key type
2026-08-25 14:07 UTC (2+ messages)
[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
2026-08-24 21:32 UTC (2+ messages)
[RFC PATCH 0/3] smack: add file label preserve mechanism
2026-08-24 17:57 UTC (3+ messages)
` 回复: "
` 回复: "
[PATCH] ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX
2026-08-24 16:22 UTC
[PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues
2026-08-24 16:03 UTC (10+ messages)
` [PATCH v2 4/6] selftests/landlock: Test LANDLOCK_SCOPE_SYSV_MSG_QUEUE
[PATCH] ima: reject modsig if detached data cannot be supplied
2026-08-24 16:00 UTC (2+ messages)
[PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig
2026-08-24 15:54 UTC (3+ messages)
[RFC] IMA: periodic runtime re-measurement of process .text/GOT
2026-08-24 14:22 UTC (6+ messages)
[PATCH 0/2] lsm: expose mount idmaps to inode hooks
2026-08-24 13:28 UTC (3+ messages)
` [PATCH 1/2] "
` [PATCH 2/2] selftests/bpf: verify mount idmaps reach "
[syzbot] [apparmor?] WARNING in aa_policy_destroy
2026-08-24 6:07 UTC
[PATCH] keys: Fix key_user use-after-free during ownership changes
2026-08-23 17:08 UTC (2+ messages)
[GIT PULL] capabilities update for v7.3
2026-08-22 21:06 UTC (4+ messages)
[PATCH] landlock: Fix use-after-free of the source's parent directory
2026-08-22 12:29 UTC
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox