Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-10-07 10:03:13 to 2026-10-13 16:48:15 UTC [more...]

[PATCH bpf-next v1 00/11] fs: unified VFS ancestor walk for Landlock and BPF
 2026-10-13 16:47 UTC 

[PATCH] dm-verity: clear LSM integrity state on suspend
 2026-10-13 14:15 UTC  (2+ messages)

[RFC PATCH v2 0/3] security: Add PR_CAPBSET_DROP_MASK
 2026-10-13 14:09 UTC  (2+ messages)

[PATCH RFC 0/3] security: ima: support TSM measurement registers
 2026-10-13 13:37 UTC  (8+ messages)

[PATCH] landlock: Move the domain layer counter out of the anonymous union
 2026-10-13 13:07 UTC  (11+ messages)

[PATCH net-next] calipso: hash the cache key, not the option start, in calipso_cache_add()
 2026-10-13 10:10 UTC  (4+ messages)

[PATCH v4 0/2] keys: Fix quota-owner reads and ownership accounting
 2026-10-13  9:39 UTC  (5+ messages)
` [PATCH v4 1/2] keys: Protect quota-owner reads in namespace filters
` [PATCH v4 2/2] keys: Serialize ownership transfers with key accounting

[PATCH] apparmor: fix query_data() output overlapping the lookup key
 2026-10-12 22:06 UTC  (2+ messages)

[PATCH bpf-next v2 0/3] keys: Add well known IDs for fs-verity/dm-verity keys
 2026-10-12 17:14 UTC  (13+ messages)
` [PATCH bpf-next v2 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING
` [PATCH bpf-next v2 2/3] keys: add KEY_SPEC_FS_VERITY_KEYRING
` [PATCH bpf-next v2 3/3] Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY

[BUG REPORT] selinux: general protection fault in avtab_search_node() during an AVC lookup
 2026-10-12 15:23 UTC  (2+ messages)

[PATCH] KEYS: Protect user key quota access during instantiation
 2026-10-12 15:01 UTC  (9+ messages)

[PATCH v4 00/11] seq_buf: Add seq_buf_strlen()
 2026-10-12  9:15 UTC  (11+ messages)
` [PATCH v4 05/11] "

[PATCH v4 00/15] sched: introduce for_each_process_rculock and for_each_thread_rculock
 2026-10-12  8:22 UTC  (2+ messages)

[GIT PULL] Landlock fix for v7.3-rc7
 2026-10-11 18:55 UTC  (2+ messages)

[syzbot] [lsm?] WARNING in landlock_merge_ruleset
 2026-10-11 16:16 UTC  (9+ messages)
` [PATCH] landlock: Drop __counted_by from landlock_domain.layers

[PATCH] keys: Check the authorization payload in process keyring searches
 2026-10-10 21:24 UTC  (3+ messages)

[PATCH] keys: make keyring indexes independent of kernel addresses
 2026-10-10 20:55 UTC  (3+ messages)

[PATCH v2] keys: Avoid the owner account dereference in named keyring lookup
 2026-10-10 20:50 UTC  (3+ messages)

[PATCH v2] keys: Protect the type name while describing a key
 2026-10-10 19:53 UTC  (3+ messages)

[PATCH v3 0/4] pidfd: add task path ioctls
 2026-10-10 10:32 UTC  (9+ messages)
` [PATCH v3 1/4] pidfd: restrict task access ioctls to the caller's pid namespace
` [PATCH v3 2/4] fs: Introduce task path helpers
` [PATCH v3 3/4] pidfd: Use scoped cleanup for task access
` [PATCH v3 4/4] pidfd: Add task path ioctls

[PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
 2026-10-10  9:05 UTC  (3+ messages)

[PATCH net] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
 2026-10-09 15:57 UTC  (4+ messages)

[PATCH net v2] calipso: update payload_len when removing the CALIPSO option
 2026-10-09 15:28 UTC  (2+ messages)

[PATCH] ima: bound line scan in ima_read_policy() to fix OOB read
 2026-10-09 13:21 UTC  (3+ messages)

[PATCH] evm: check return values of crypto_shash functions
 2026-10-09 11:39 UTC  (2+ messages)

[PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-09  7:41 UTC  (5+ messages)

[PATCH] keys: Protect the type name while describing a key
 2026-10-09  5:07 UTC  (4+ messages)

[PATCH] keys: Avoid the owner account dereference in named keyring lookup
 2026-10-09  5:05 UTC  (4+ messages)

[PATCH 1/3] keys: add KEY_SPEC_DM_VERITY_KEYRING
 2026-10-08 20:15 UTC  (10+ messages)
` [PATCH 0/3] keys: Add well known IDs for fs-verity/dm-verity keys

[RFC PATCH 0/2] keys: Address lookup_user_key() mutability
 2026-10-08 20:00 UTC  (8+ messages)

[PATCH net] calipso: update payload_len when removing the CALIPSO option
 2026-10-08 15:26 UTC  (3+ messages)

[PATCH 00/27] landlock: Selftest fixes and cleanups
 2026-10-08 14:44 UTC  (56+ messages)
` [PATCH 01/27] selftests/landlock: Propagate grandchild failures in unix_scoping
` [PATCH 02/27] selftests/landlock: Propagate EXPECT failures from forked children
` [PATCH 03/27] selftests/landlock: Check the thread result in audit.thread
` [PATCH 04/27] selftests/landlock: Zero-initialize the buffer in inconsistent_attr
` [PATCH 05/27] selftests/landlock: Fix the openat() success check in fs_bench
` [PATCH 06/27] selftests/landlock: Fix the reported clock tick rate "
` [PATCH 07/27] selftests/landlock: Fix the ruleset_fd check in empty_or_same_ruleset
` [PATCH 08/27] selftests/landlock: Handle a missing control message in recv_fd()
` [PATCH 09/27] selftests/landlock: Assert tracefs_extract_field() results that are used
` [PATCH 10/27] selftests/landlock: Assert audit initialization in fixture setups
` [PATCH 11/27] selftests/landlock: Assert helper results that are used afterwards
` [PATCH 12/27] selftests/landlock: Assert audit_count_records() before using its result
` [PATCH 13/27] selftests/landlock: Fix memory leak in audit_init_filter_exe()
` [PATCH 14/27] selftests/landlock: Make audit_message large enough for any exe filter
` [PATCH 15/27] selftests/landlock: Close leaked file descriptors
` [PATCH 16/27] selftests/landlock: Check errno for combined VERSION and ERRATA flags
` [PATCH 17/27] selftests/landlock: Fix SIGURG handler setup in scoped_signal_test
` [PATCH 18/27] selftests/landlock: Fix regex_escape() error handling in matches_log_fs_extra()
` [PATCH 19/27] selftests/landlock: Fix off-by-one in regex_escape()
` [PATCH 20/27] selftests/landlock: Fix the snprintf() error check in matches_log_fs_extra()
` [PATCH 21/27] selftests/landlock: Use _exit() in the named_pipe_ioctl child
` [PATCH 22/27] selftests/landlock: Fix messages and comments in helper programs
` [PATCH 23/27] selftests/landlock: Fix stale comments in common.h and audit.h
` [PATCH 24/27] selftests/landlock: Use ASSERT for syscall failures before errno checks
` [PATCH 25/27] selftests/landlock: Assert WIFEXITED() before checking the exit status
` [PATCH 26/27] selftests/landlock: Use EXPECT for closing FDs and stopping threads
` [PATCH 27/27] selftests/landlock: Use EXPECT for checks that later steps do not need

[PATCH 6.6.y 0/2] apparmor: backport CVE-2026-45893, CVE-2026-46254
 2026-10-08  5:56 UTC  (6+ messages)
` [PATCH 6.6.y 1/2] AppArmor: Allow apparmor to handle unaligned dfa tables
` [PATCH 6.6.y 2/2] apparmor: Fix & Optimize table creation from possibly unaligned memory

[PATCH] apparmor: avoid potential double free when remapping DFA tables
 2026-10-08  3:31 UTC  (2+ messages)

[PATCH net v2] cipso: adjust cached option offsets when removing CIPSO
 2026-10-08  2:30 UTC  (2+ messages)

[syzbot] [lsm?] general protection fault in smack_inode_permission (4)
 2026-10-07 15:22 UTC  (2+ messages)

[PATCH v5 0/8] Landlock: Namespace and capability control
 2026-10-07 10:23 UTC  (17+ messages)
` [PATCH v5 1/8] landlock: Rename quiet_masks to quiet_access
` [PATCH v5 2/8] landlock: Wrap per-layer access masks in struct layer_config
` [PATCH v5 3/8] landlock: Enforce namespace use restrictions
` [PATCH v5 4/8] landlock: Enforce capability restrictions
` [PATCH v5 5/8] selftests/landlock: Add namespace restriction tests
` [PATCH v5 6/8] selftests/landlock: Add capability "
` [PATCH v5 7/8] samples/landlock: Add capability and namespace restriction support
` [PATCH v5 8/8] landlock: Add documentation for capability and namespace restrictions


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox