Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-10-21 10:25:30 to 2026-10-24 20:39:39 UTC [more...]

[PATCH RFC 0/3] landlock: Add access rights on created files
 2026-10-24 20:39 UTC  (2+ messages)
` [PATCH RFC 1/3] lsm: Call inode_init_security hooks without xattrs

[PATCH v2 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE
 2026-10-24 16:26 UTC  (12+ messages)
` [PATCH v2 3/6] KEYS: Verify the key identity in __key_unlink_begin
` [PATCH v2 4/6] KEYS: Introduce keyring_is_empty()
` [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable

[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
 2026-10-24 15:07 UTC  (2+ messages)

[PATCH v4 0/2] ima: reject modsig when detached data cannot be supplied
 2026-10-24 13:47 UTC  (6+ messages)
` [PATCH v4 1/2] ima: discard "
` [PATCH v4 2/2] ima: audit failure to supply detached data for modsig

[PATCH v3 0/2] ima: reject modsig when detached data cannot be supplied
 2026-10-24  9:40 UTC  (8+ messages)
` [PATCH v3 1/2] ima: discard "
` [PATCH v3 2/2] ima: audit failure to supply detached data for modsig

[PATCH] keys: use long workqueue for garbage collection
 2026-10-24  5:43 UTC  (5+ messages)

[RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only
 2026-10-24  1:38 UTC  (3+ messages)

[PATCH v5 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-23 18:42 UTC  (12+ messages)
` [PATCH v5 1/5] userns: record how far up CAP_SETFCAP reaches
` [PATCH v5 2/5] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v5 3/5] userns: check the opener and the writer before mapping uid 0
` [PATCH v5 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v5 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP

[PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation
 2026-10-23 15:38 UTC  (3+ messages)

[PATCH 00/13] cred: gather the "same uid" checks between tasks in one place
 2026-10-23 13:03 UTC  (4+ messages)
` [PATCH 01/13] cred: gather the rules for acting on a task by uid

[GIT PULL] Landlock update for v7.4-rc1
 2026-10-23 12:12 UTC  (4+ messages)

[PATCH RFC 0/4] IPE: add a dedicated policy keyring
 2026-10-23 11:59 UTC  (16+ messages)
` [PATCH RFC 1/4] ipe: add the .ipe "
` [PATCH RFC 2/4] keys: add KEY_SPEC_IPE_KEYRING
` [PATCH RFC 4/4] selftests/ipe: test the IPE policy keyring

[PATCH v2 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
 2026-10-23  6:31 UTC  (5+ messages)
` [PATCH v2 -next 01/18] fs: pass struct path to notify_change()

[RFC PATCH 0/6] KEYS: From assoc_array to rhashtable migration
 2026-10-22 23:23 UTC  (9+ messages)
` [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index

[PATCH v4 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-22 22:42 UTC  (12+ messages)
` [PATCH v4 1/5] userns: record how far up CAP_SETFCAP reaches
` [PATCH v4 2/5] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v4 3/5] userns: check the opener and the writer before mapping uid 0
` [PATCH v4 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v4 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP

[PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes
 2026-10-22 21:18 UTC  (2+ messages)

[GIT PULL] KEYS: changes for v7.4-rc1
 2026-10-22 20:53 UTC  (4+ messages)

[GIT PULL] IPE update for 7.4
 2026-10-22 20:50 UTC  (2+ messages)

[RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)
 2026-10-22 18:26 UTC  (88+ messages)
` [RFC PATCH v2 01/41] uuid: move uuid_t and guid_t into <linux/uuid_types.h>
` [RFC PATCH v2 02/41] uapi: add <linux/uidgid_r.h> for 128 bit capable user and group ids
` [RFC PATCH v2 03/41] uidgid: add uid_is_legacy() and gid_is_legacy()
` [RFC PATCH v2 04/41] net: sock: read sk_uid through a seqcount
` [RFC PATCH v2 05/41] af_unix: keep sender ids in skb->cb only when they are classic ids
` [RFC PATCH v2 06/41] netlink: keep classic sender ids in skb->cb
` [RFC PATCH v2 07/41] Bluetooth: "
` [RFC PATCH v2 08/41] smb: client: use __kuid_val() for the unix SIDs of the caller
` [RFC PATCH v2 09/41] uidgid: let kuid_t and kgid_t hold a UUID or a GUID
` [RFC PATCH v2 10/41] uidgid: convert between kernel ids and the ids of the *_r system calls
` [RFC PATCH v2 11/41] fscrypt: show the whole uid in the description of user key claims
` [RFC PATCH v2 12/41] keys: name per-user keyrings of UUID and GUID users by the whole uid
` [RFC PATCH v2 13/41] ublk: refuse unprivileged devices to UUID and GUID users
` [RFC PATCH v2 14/41] nfsd: don't hand out uid 0 for read layouts of UUID-owned files
` [RFC PATCH v2 15/41] SUNRPC: name UUID and GUID users to gssd as uid_r=
` [RFC PATCH v2 16/41] ecryptfs: hash daemons by kuid_hash()
` [RFC PATCH v2 17/41] quota: don't account UUID and GUID owners
` [RFC PATCH v2 18/41] fs: keep UUID and GUID owners off filesystems that can't store them
` [RFC PATCH v2 19/41] cred: add the *_r variants of the get/set*id() system calls
` [RFC PATCH v2 20/41] groups: add getgroups_r() and setgroups_r()
` [RFC PATCH v2 21/41] fs: add chown_r(), lchown_r(), fchown_r() and fchownat_r()
` [RFC PATCH v2 22/41] arch: wire up the *_r uid and gid system calls
` [RFC PATCH v2 23/41] statx: report UUID and GUID owners
` [RFC PATCH v2 24/41] shmem, ramfs: allow "
` [RFC PATCH v2 25/41] uidgid: parse and print ids in their text form
` [RFC PATCH v2 26/41] proc: show UUID and GUID ids in status, accept them for loginuid
` [RFC PATCH v2 27/41] audit: log UUID and GUID ids in full
` [RFC PATCH v2 28/41] net: add SO_PEERCRED_R, SO_PEERGROUPS_R and SCM_CREDENTIALS_R
` [RFC PATCH v2 29/41] signal: report the sender's UUID or GUID uid in si_uid_r
` [RFC PATCH v2 30/41] ipc: add IPC_STAT_R and IPC_SET_R
` [RFC PATCH v2 31/41] ext4: add the uid_r feature for UUID and GUID owners
` [RFC PATCH v2 32/41] ext4: let uid_r be turned on while the filesystem is mounted
` [RFC PATCH v2 33/41] posix_acl: support UUID and GUID entries
` [RFC PATCH v2 34/41] ext4: store ACLs with UUID and GUID entries on uid_r filesystems
` [RFC PATCH v2 35/41] Documentation: describe UUID and GUID user and group ids
` [RFC PATCH v2 36/41] selftests: add tests for UUID and GUID ids
` [RFC PATCH v2 37/41] ovl: allow UUID and GUID owners when the upper layer does
` [RFC PATCH v2 38/41] devpts: allow UUID and GUID owners
` [RFC PATCH v2 39/41] ksmbd: log in UUID and GUID users and map them to SIDs
` [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form
` [RFC PATCH v2 41/41] Documentation: uid_r: describe SMB and NFSv4
` Adding dreaded Windows SID-style, or. Repeating history, the bad chapters. UUID/GUIDRe: [RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)

[PATCH RFC v2 0/8] memcg: dma-buf cgroup accounting and charge transfer
 2026-10-22 15:44 UTC  (18+ messages)
` [PATCH RFC v2 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH RFC v2 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH RFC v2 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH RFC v2 4/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH RFC v2 5/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH RFC v2 6/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH RFC v2 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[PATCH v2] security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid()
 2026-10-22 15:21 UTC  (2+ messages)

[PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)
 2026-10-22 14:21 UTC  (5+ messages)

[PATCH slab/for-next 00/14] mm/slab: mandate SLAB_MAY_ACCOUNT for __GFP_ACCOUNT allocations to avoid wasting memory for slab metadata
 2026-10-22 12:54 UTC  (7+ messages)
` [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache

[RFC PATCH] docs: security: Describe the Kernel Assurance Plane design
 2026-10-22 12:18 UTC  (4+ messages)

[GIT PULL] BPF changes for 7.4
 2026-10-22 11:04 UTC  (5+ messages)

[PATCH] apparmor: fix NULL peer label deref for connected SOCK_DGRAM sockets
 2026-10-21 22:17 UTC  (3+ messages)

[PATCH v3 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-21 21:07 UTC  (11+ messages)
` [PATCH v3 1/5] userns: record how far up CAP_SETFCAP reaches
` [PATCH v3 2/5] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v3 3/5] userns: check the opener and the writer before mapping uid 0
` [PATCH v3 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v3 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP

[PATCH v4 0/3] KEYS: rhashtable bug fixes
 2026-10-21 21:07 UTC  (10+ messages)
` [PATCH v4 1/3] KEYS: Expand key->{datalen,quotalen} to unsigned int

[RFC PATCH v2 0/3] security: Add PR_CAPBSET_DROP_MASK
 2026-10-21 14:42 UTC  (4+ messages)
` [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops

[PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
 2026-10-21 14:12 UTC  (2+ messages)

[PATCH v2 1/2] KEYS: Return user session keyring on lookup
 2026-10-21 11:51 UTC  (3+ messages)
` [syzbot ci] "

[PATCH 0/3] vfs: add inode iteration method super_iter_inodes
 2026-10-21 10:58 UTC  (2+ messages)

[PATCH v2 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-21 10:41 UTC  (4+ messages)
` [PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP

[PATCH 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-10-21 10:28 UTC  (8+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox