messages from 2026-08-27 06:25:38 to 2026-09-02 14:08:54 UTC [more...]
[PATCH 00/27] fs: port to const struct mnt_idmap
2026-09-02 14:08 UTC (31+ messages)
` [PATCH 01/27] userns: pass const uid_gid_map in lookup helpers
` [PATCH 02/27] fs: port mnt_idmap_{get,put}() to const mnt_idmap
` [PATCH 03/27] fs: port vfs{g,u}id helpers "
` [PATCH 04/27] fs: port fs{g,u}id "
` [PATCH 05/27] fs: port i_{g,u}id_into_vfs{g,u}id() "
` [PATCH 06/27] fs: port i_{g,u}id_{needs_}update() "
` [PATCH 07/27] quota: port "
` [PATCH 08/27] fs: port privilege checking helpers "
` [PATCH 09/27] fs: port inode_owner_or_capable() "
` [PATCH 10/27] fs: port inode_init_owner() "
` [PATCH 11/27] fs: port acl "
` [PATCH 12/27] fs: port ->permission() to pass "
` [PATCH 13/27] fs: port xattr to "
` [PATCH 14/27] fs: port ->fileattr_set() to pass "
` [PATCH 15/27] fs: port ->set_acl() "
` [PATCH 16/27] fs: port ->get_acl() "
` [PATCH 17/27] fs: port ->tmpfile() "
` [PATCH 18/27] fs: port ->mknod() "
` [PATCH 19/27] fs: port ->rename() "
` [PATCH 20/27] fs: port ->mkdir() "
` [PATCH 21/27] fs: port ->symlink() "
` [PATCH 22/27] fs: port ->create() "
` [PATCH 23/27] fs: port ->getattr() "
` [PATCH 24/27] fs: port ->setattr() "
` [PATCH 25/27] fs: port vfs_*() helpers to "
` [PATCH 26/27] fs: port mnt_idmap() and file_mnt_idmap() "
` [PATCH 27/27] fs: make nop_mnt_idmap and invalid_mnt_idmap const
[PATCH v2 00/15] BPF interface for applying Landlock rulesets
2026-09-02 13:05 UTC (20+ messages)
` [PATCH v2 01/15] lsm: Add the LSM policy object lifetime hooks
` [PATCH v2 02/15] lsm: Add the bprm_apply_policy_object LSM hook
` [PATCH v2 03/15] lsm: Move the lsm_for_each_hook() macro to security/lsm.h
` [PATCH v2 04/15] lsm: Add the bpf_lsm_policy_release kfunc and policy object destructor
` [PATCH v2 05/15] lsm: Add the bpf_lsm_policy_from_fd kfunc
` [PATCH v2 06/15] lsm: Add the bpf_lsm_policy_acquire kfunc
` [PATCH v2 07/15] lsm: Add the bpf_lsm_policy_apply_bprm kfunc
` [PATCH v2 08/15] lsm: Document the LSM policy object interface
` [PATCH v2 09/15] selftests/bpf: Add tests for the LSM policy object kfuncs
` [PATCH v2 10/15] landlock: Expose the ruleset fd lookup to the rest of Landlock
` [PATCH v2 11/15] landlock: Factor the credential restriction out of landlock_restrict_self()
` [PATCH v2 12/15] landlock: Free rulesets after an RCU grace period
` [PATCH v2 13/15] landlock: Implement the LSM policy object hooks
` [PATCH v2 14/15] selftests/bpf: Test the LSM policy object kfuncs with Landlock
` [PATCH v2 15/15] landlock: Document the BPF policy interface
[Resend PATCH v2] ipe: fix typo
2026-09-02 12:46 UTC
[PATCH] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
2026-09-02 12:27 UTC (3+ messages)
[PATCH] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
2026-09-02 11:43 UTC
[PATCH] ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX
2026-09-02 11:38 UTC (3+ messages)
[PATCH v5] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
2026-09-02 11:03 UTC (3+ messages)
[PATCH v6 0/2] Move TPM-specific fields out of trusted_key_options
2026-09-02 10:31 UTC (3+ messages)
` [PATCH 1/2] keys/trusted_keys: return immediately after TPM unseal failure
` [PATCH v6 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
[PATCH] KEYS: trusted: Fix tpm2_load_cmd() boundary check
2026-09-02 9:24 UTC (2+ messages)
[PATCH v2 0/3] pidfd: add task path ioctls
2026-09-02 6:47 UTC (6+ messages)
` [PATCH v2 1/3] fs: Introduce task path helpers
` [PATCH v2 2/3] pidfd: Use scoped cleanup for task access
` [PATCH v2 3/3] pidfd: Add task path ioctls
[PATCH bpf-next 0/7] Add new way to add BPF LSM hooks
2026-09-02 0:49 UTC (24+ messages)
` [PATCH bpf-next 1/7] bpf: Allow BPF LSM programs to attach to more hooks
` [PATCH bpf-next 2/7] net, bpf: Add a generic netlink hook on msg_rcv
` [PATCH bpf-next 3/7] net, bpf: Add bpf hooks for ethtool control path
` [PATCH bpf-next 4/7] selftests/bpf: Extract some helpers from tests to the netlink library
` [PATCH bpf-next 5/7] selftests/bpf: Add netdevsim helper library
` [PATCH bpf-next 6/7] selftests/bpf: Add tests for the generic netlink BPF hook
` [PATCH bpf-next 7/7] selftests/bpf: Add tests for BPF ethtool hooks
[PATCH v4] hardening: Default randstruct off with rust for better allmodconfig support
2026-09-01 23:07 UTC (5+ messages)
[PATCH v3] keys: finalize persistent keyring timeout after link attempt
2026-09-01 23:00 UTC (2+ messages)
[PATCH v2] keys: finalize persistent keyring timeout after link attempt
2026-09-01 17:27 UTC (2+ messages)
[PATCH] keys: set persistent keyring timeout before destination linking
2026-09-01 17:03 UTC (4+ messages)
[PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
2026-09-01 15:37 UTC (3+ messages)
[PATCH] apparmor: convert duplicated dfa transitions to match_char()
2026-09-01 14:07 UTC
[PATCH v2] lsm: expose mount idmaps to inode hooks
2026-09-01 12:50 UTC
[PATCH] keys: reject descriptions that exceed the index length
2026-09-01 12:29 UTC (6+ messages)
` [PATCH v2] "
[PATCH 0/2] lsm: expose mount idmaps to inode hooks
2026-09-01 12:28 UTC (2+ messages)
[PATCH 0/7] Change skb secmarks to x-array indexes
2026-08-31 22:37 UTC (8+ messages)
` [PATCH 1/7] net, smack: Create a function to set secmarks
` [PATCH 2/7] LSM: Implement x array functions for secmarks
` [PATCH 3/7] LSM: Two hooks for manipulating struct lsm_prop
` [PATCH 4/7] SELinux: hooks for secctx_to_lsmprop and update_lsmprop
` [PATCH 5/7] Smack: "
` [PATCH 6/7] Apparmor: "
` [PATCH 7/7] net, lsm: Change skb secmarks to x-array indexes
[PATCH v2 -next 2/2] security: Fix call security_backing_file_free second time
2026-08-31 21:29 UTC (3+ messages)
` [PATCH v2 "
[PATCH v2 -next 1/2] security: Delete dumplicate assignment
2026-08-31 21:28 UTC (3+ messages)
` [PATCH v2 "
[PATCH] lsm: update the BUILD_BUG_ON() in audit_log_lsm_data()
2026-08-31 21:27 UTC (3+ messages)
[PATCH v3 03/12] security: Add LSM_AUDIT_DATA_NS for namespace audit records
2026-08-31 21:26 UTC (3+ messages)
` [PATCH v3 3/12] "
[PATCH] cred: clarify that task_struct::cred is only for the current task
2026-08-31 21:22 UTC (3+ messages)
[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
2026-08-31 20:25 UTC (3+ messages)
[PATCH AUTOSEL 6.18-5.10] ima: return error early if file xattr cannot be changed
2026-08-31 13:27 UTC (4+ messages)
` [PATCH AUTOSEL 6.18-5.15] integrity: Check for NULL returned by asymmetric_key_public_key
` [PATCH AUTOSEL 6.18-6.12] apparmor: propagate -ENOMEM correctly in unpack_table
` [PATCH AUTOSEL 6.18-5.10] netlabel: fix IPv6 unlabeled address add error handling
[PATCH v2 00/10] Extend PKWM to support user-created wrapping keys
2026-08-31 11:17 UTC (11+ messages)
` [PATCH v2 01/10] pseries/plpks: update PKS documentation and maintainer entry
` [PATCH v2 02/10] pseries/plpks: fix error handling in plpks_read_var()
` [PATCH v2 03/10] pseries/plpks: improve type consistency and parameter validation
` [PATCH v2 04/10] keys/trusted_keys: propagate wrapping key generation errors
` [PATCH v2 05/10] pseries/plpks: rename the default wrapping key macro
` [PATCH v2 06/10] pseries/plpks: fix self-reference in plpks_var initializer
` [PATCH v2 07/10] pseries/plpks: hide wrapping_features when unsupported
` [PATCH v2 08/10] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH v2 09/10] keys/trusted_keys: enable PKWM wrapping key selection by label
` [PATCH v2 10/10] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs
[PATCH 0/8] Extend PKWM to support user-created wrapping keys
2026-08-31 11:15 UTC (4+ messages)
` [PATCH 6/8] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH 8/8] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs
[PATCH 0/6] landlock: Support MPTCP bind and connect restrictions
2026-08-31 4:09 UTC (8+ messages)
` [PATCH 1/6] samples/landlock: Implement best-effort fallback for network rules
` [PATCH 2/6] selftests/landlock: Generalize net test helpers for multiple socket types
` [PATCH 3/6] landlock: Add MPTCP bind and connect access rights
` [PATCH 4/6] selftests/landlock: Add MPTCP network access tests
` [PATCH 5/6] samples/landlock: Support MPTCP access rights
` [PATCH 6/6] landlock: Document "
SafeSetID: GID transition policy lookup uses RUID as source, allowlist can be bypassed (setgid to any group including 0)
2026-08-30 16:18 UTC
[syzbot] [audit?] BUG: unable to handle kernel paging request in integrity_audit_message
2026-08-29 18:27 UTC (3+ messages)
[PATCH v4] security: Expand task_setscheduler LSM hook
2026-08-29 15:55 UTC (2+ messages)
[PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
2026-08-28 21:10 UTC (12+ messages)
` [PATCH v2 2/3] proc: query LSMs for introspective mem access (if PROC_MEM_FORCE_ALWAYS)
` [PATCH v2 3/3] selinux: require PROCESS__PTRACE for FOLL_FORCE introspection
[PATCH v1] selftests/landlock: Test abstract socket trace name limits
2026-08-28 19:00 UTC
[Bug] landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader
2026-08-28 19:12 UTC (2+ messages)
[BUG] general protection fault in security_path_post_mknod
2026-08-28 18:48 UTC (2+ messages)
[PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets
2026-08-28 18:28 UTC (9+ messages)
[PATCH] keys: Pin request_key_auth payload in instantiate paths
2026-08-28 16:23 UTC (2+ messages)
[PATCH v6 0/6] landlock: Restrict whiteout object creation
2026-08-28 15:45 UTC (3+ messages)
` [PATCH v6 2/6] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation
[PATCH v1] landlock: Demonstrate best-effort allowed_access filtering
2026-08-28 15:43 UTC (3+ messages)
[PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
2026-08-28 15:40 UTC (3+ messages)
` [PATCH v4 4/5] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
[PATCH v11 0/9] Implement LANDLOCK_ADD_RULE_QUIET
2026-08-28 15:38 UTC (3+ messages)
` [PATCH v11 2/9] landlock: Add API support and docs for the quiet flags
[PATCH v5 0/6] landlock: Add UDP access control support
2026-08-28 15:35 UTC (3+ messages)
` [PATCH v5 6/6] landlock: Add documentation for UDP support
[PATCH] selftests/landlock: prevent mount propagation from test namespaces
2026-08-28 12:13 UTC
[PATCH] rust: security: replace `core::mem::zeroed` with `pin_init::zeroed`
2026-08-28 6:15 UTC (2+ messages)
[BUG] security/keys: out-of-bounds in tpm2_unseal_trusted()
2026-08-28 5:17 UTC (2+ messages)
[PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len
2026-08-28 1:59 UTC (4+ messages)
[PATCH] keys: Fix key_user use-after-free during ownership changes
2026-08-27 22:05 UTC (2+ messages)
[PATCH] ima: select the SHA384 PCR bank for the boot aggregate
2026-08-27 20:03 UTC (8+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox