Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-09-18 18:57:42 to 2026-09-25 22:49:15 UTC [more...]

[PATCH] KEYS: trusted: Fix blob allocation size in tpm2_key_decode()
 2026-09-25 22:49 UTC  (3+ messages)

[PATCH v2] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
 2026-09-25 22:44 UTC  (6+ messages)

[GIT PULL] IPE fixes for 7.3-rc5
 2026-09-25 21:54 UTC 

[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
 2026-09-25 21:41 UTC  (4+ messages)

[PATCH v2 0/2] apparmor: check connect permission for SCTP
 2026-09-25 20:54 UTC  (3+ messages)
` [PATCH v2 1/2] "
` [PATCH v2 2/2] tests: add SCTP connect mediation regression test

[PATCH v4 0/2] integrity: Return error codes in audit messages
 2026-09-25 20:35 UTC  (6+ messages)
` [PATCH v4 1/2] integrity: Report error code in integrity_audit_msg() call sites
` [PATCH v4 2/2] integrity: Replace integrity_audit_message() with integrity_audit_msg()

[PATCH] apparmor: check connect permission for SCTP
 2026-09-25 20:00 UTC  (3+ messages)

[PATCH RFC -next 00/12] landlock: Add READ_METADATA and WRITE_METADATA access rights
 2026-09-25 18:03 UTC  (17+ messages)
` [PATCH RFC -next 01/12] fs: pass struct path to notify_change()
` [PATCH RFC -next 02/12] LSM: pass struct path to the inode_setsecctx hook
` [PATCH RFC -next 03/12] fs: pass struct path to xattr helpers
` [PATCH RFC -next 04/12] fs: pass struct path to POSIX ACL helpers
` [PATCH RFC -next 05/12] LSM: pass struct path to the inode_setattr hook
` [PATCH RFC -next 06/12] LSM: pass struct path to the inode xattr hooks
` [PATCH RFC -next 07/12] LSM: pass struct path to the inode posix acl hooks
` [PATCH RFC -next 08/12] landlock: Add READ_METADATA and WRITE_METADATA access rights
` [PATCH RFC -next 09/12] landlock: Implement metadata access hooks
` [PATCH RFC -next 10/12] selftests/landlock: Add tests for metadata access rights
` [PATCH RFC -next 11/12] samples/landlock: Add metadata rights to sandboxer
` [PATCH RFC -next 12/12] Documentation: Update landlock doc for metadata rights

[PATCH] netlabel: calipso, x509: clean up ADDRSELECT on DOI removal and check AKID len
 2026-09-25 15:50 UTC  (6+ messages)
  ` [PATCH v2] certs: x509: duplicate cert->tbs when sig->algo_takes_data is set

[PATCH v2 0/3] pidfd: add task path ioctls
 2026-09-25 15:12 UTC  (13+ messages)
` [PATCH v2 1/3] fs: Introduce task path helpers

[RFC PATCH] security: Allow dropping bounding set process-wide
 2026-09-25 14:42 UTC  (10+ messages)

[PATCH] KEYS: reject descriptions exceeding U16_MAX in __key_create_or_update()
 2026-09-25 14:21 UTC  (3+ messages)

[PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces
 2026-09-25 13:58 UTC  (2+ messages)

[PATCH] selftests: binderfs: skip the stress test without binderfs
 2026-09-25 13:40 UTC  (2+ messages)

[RFC] Proposal for a standard Competitive / Protected Session API in Linux
 2026-09-25 13:06 UTC  (2+ messages)

[PATCH] KEYS: trusted: Reject short TPM2 public areas
 2026-09-25 10:03 UTC  (2+ messages)

[PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING
 2026-09-25  8:39 UTC  (6+ messages)
` [PATCH 0/3] keys: Add well known IDs for fs-verity/dm-verity keys

[PATCH bpf-next 4/8] bpf, lsm: Let BPF LSM provide xattrs at inode creation
 2026-09-24 19:34 UTC  (11+ messages)

[GIT PULL] Landlock fix for v7.3-rc5
 2026-09-24 17:59 UTC  (2+ messages)

[PATCH 5.15.y 2/2] selftests/landlock: Add tests for whiteout object creation
 2026-09-24 17:13 UTC  (5+ messages)
  ` [PATCH 5.15.y v2] "

[PATCH] landlock: Fix domain leak on concurrent F_SETOWN and file release
 2026-09-24 10:20 UTC  (2+ messages)

[PATCH v2] ima: discard modsig on detached-data binding failure
 2026-09-24  9:05 UTC  (2+ messages)

[RFC PATCH 0/2] keys: Address lookup_user_key() mutability
 2026-09-24  6:03 UTC  (5+ messages)
` [RFC PATCH 1/2] keys: Return user session keyring on lookup
` [RFC PATCH 2/2] keys: Reject keyring creation with overridden credentials

[PATCH v3 0/2] landlock: clarify TTY signal scoping
 2026-09-23 16:42 UTC  (5+ messages)
` [PATCH v3 1/2] docs: "
` [PATCH v3 2/2] selftests/landlock: cover "

[PATCH 0/6] landlock: Support MPTCP bind and connect restrictions
 2026-09-23 14:27 UTC  (5+ messages)
` [PATCH 3/6] landlock: Add MPTCP bind and connect access rights

[PATCH v2] docs: landlock: clarify TTY signal scoping
 2026-09-23 14:11 UTC  (4+ messages)

[RFC PATCH 0/2] Landlock signal scope and TIOCSIG
 2026-09-23 10:03 UTC  (4+ messages)

[PATCH security v1] apparmor: fix a use-after-free in aa_lookupn_ns()
 2026-09-23  5:56 UTC  (2+ messages)

[PATCH 0/2] ipe: fix two use-after-frees
 2026-09-23  3:37 UTC  (6+ messages)
` [PATCH 1/2] ipe: fix use-after-free when auditing a newly loaded policy
` [PATCH 2/2] ipe: protect the dm-verity root hash with RCU

[PATCH v2] security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid()
 2026-09-22 17:02 UTC  (3+ messages)

[REGRESSION] apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7
 2026-09-22 16:27 UTC  (3+ messages)

[PATCH] smackfs: fix IPv6 netlabel prefix mask for non-16-aligned lengths
 2026-09-22 14:57 UTC  (2+ messages)

[PATCH v1] landlock: Widen ruleset versions to 64 bits
 2026-09-22 13:32 UTC  (3+ messages)

[PATCH v3 0/3] Bring includes in linux/kmod.h up to date
 2026-09-22 12:39 UTC  (4+ messages)
` [PATCH v3 1/3] umh, treewide: Explicitly include linux/umh.h where needed

[RFC PATCH] smack: preserve low-integrity labels on copy via whitelist
 2026-09-22 11:07 UTC 

[PATCH] dm-verity: clear LSM integrity state on suspend
 2026-09-21 23:55 UTC  (3+ messages)

[PATCH v4 00/15] sched: introduce for_each_process_rculock and for_each_thread_rculock
 2026-09-21 20:12 UTC  (35+ messages)
` [PATCH v4 01/15] "
` [PATCH v4 02/15] mm/oom_kill: convert process/thread iterators to for_each_*_rculock
` [PATCH v4 03/15] mm/ksm: convert process iterator to for_each_process_rculock
` [PATCH v4 04/15] mm/memory-failure: "
` [PATCH v4 05/15] cpu/hotplug: "
` [PATCH v4 06/15] freezer: convert thread iterator to for_each_thread_rculock
` [PATCH v4 07/15] hung_task: convert process/thread iterators to for_each_*_rculock
` [PATCH v4 08/15] locking/lockdep: "
` [PATCH v4 09/15] rcu: convert process/thread iterator to for_each_process_thread_rculock
` [PATCH v4 10/15] sched: convert process/thread iterators to for_each_*_rculock
` [PATCH v4 11/15] tracing/fgraph: convert process/thread iterator to for_each_process_thread_rculock
` [PATCH v4 12/15] unwind: "
` [PATCH v4 13/15] fs: convert process/thread iterators to for_each_*_rculock
` [PATCH v4 14/15] lib: convert process iterator to for_each_process_rculock
` [PATCH v4 15/15] security/landlock: convert thread iterator to for_each_thread_rculock

[PATCH v2 00/10] Extend PKWM to support user-created wrapping keys
 2026-09-21 19:26 UTC  (2+ messages)

[PATCH bpf-next v3 04/15] lsm: Add the bpf_lsm_policy_release kfunc and policy object destructor
 2026-09-21  2:44 UTC  (12+ messages)
        ` LSM boundaries. Was: "

[PATCH v3 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
 2026-09-21  2:33 UTC  (5+ messages)

[PATCH] smackfs: reject out-of-range IPv4 octets in netlabel writes
 2026-09-21  1:55 UTC  (2+ messages)

[PATCH] tomoyo: Enforce connect policy in TCP Fast Open
 2026-09-20 22:34 UTC  (3+ messages)

[PATCH] netlabel: cipso_v4: reject empty MLS level/cat lists and zero tail in cipso_v4_delopt()
 2026-09-20 21:55 UTC  (4+ messages)

[PATCH] security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid()
 2026-09-20 16:17 UTC  (3+ messages)

[GIT PULL] selinux/selinux-pr-20260919
 2026-09-20 15:10 UTC  (2+ messages)

[PATCH v3 0/2] integrity: Return error codes in audit messages
 2026-09-20 13:16 UTC  (7+ messages)
` [PATCH v3 1/2] integrity: Report error code in integrity_audit_msg() call sites
` [PATCH v3 2/2] integrity: Replace integrity_audit_message() with integrity_audit_msg()

[PATCH] ipv6: calipso: fix 8-bit hdrlen overflow and missing pskb_may_pull() in hop-by-hop options
 2026-09-20  1:27 UTC  (3+ messages)

[RFC] bpf-lsm: scoped one-shot userspace authorization binding for exec
 2026-09-20  1:05 UTC 

[PATCH] KEYS: asymmetric: fix out_len bounds check and in2_len union clobber in keyctl_pkey
 2026-09-19 22:27 UTC  (2+ messages)

[PATCH] smack: reject relabel-self writes from io_uring workers
 2026-09-19  4:04 UTC  (2+ messages)

[PATCH v2 2/9] seq_buf: Do not pop from an overflowed seq_buf
 2026-09-19  0:34 UTC  (2+ messages)

[PATCH v1 0/9] landlock: Fix tracepoint policy context
 2026-09-18 19:02 UTC  (12+ messages)
` [PATCH v1 3/9] landlock: Fix rule tracepoint context
` [PATCH v1 4/9] landlock: Fix network denial trace context
` [PATCH v1 6/9] landlock: Report the effective signal number
` [PATCH v1 7/9] selftests/landlock: Test filesystem denial blockers
` [PATCH v1 8/9] selftests/landlock: Test network denial context
` [PATCH v1 9/9] landlock: Fix tracepoint contract documentation


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox