messages from 2026-10-22 03:18:06 to 2026-10-26 23:55:31 UTC [more...]
[PATCH v3 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE
2026-10-26 23:55 UTC (11+ messages)
` [PATCH v3 3/6] KEYS: Verify the key identity in __key_unlink_begin
` [PATCH v3 4/6] KEYS: Introduce keyring_is_empty()
` [PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable
[PATCH] KEYS: dispatch key_gc_work to system_wq
2026-10-26 23:42 UTC (11+ messages)
[PATCH 0/8] ns: fixes for the namespace LSM hooks
2026-10-26 23:31 UTC (19+ messages)
` [PATCH 1/8] lsm: always call the namespace_free hook
` [PATCH 2/8] bpf: don't mark namespace_init and namespace_free arguments as trusted
` [PATCH 3/8] selftests/bpf: add verifier tests for the namespace LSM hooks
` [PATCH 4/8] landlock: pass the namespace id to log to check_ns_type()
` [PATCH 5/8] ns: allocate the namespace id before the namespace_init hook
` [PATCH 6/8] nstree: drop ns_tree_add_raw()
` [PATCH 7/8] lsm: fix the security_namespace_init() kernel-doc
` [PATCH 8/8] selftests/bpf: add a lifecycle test for the namespace LSM hooks
[PATCH v7 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-10-26 21:36 UTC (13+ messages)
` [PATCH v7 1/6] userns: record how far up CAP_SETFCAP reaches
` [PATCH v7 2/6] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v7 3/6] userns: check the opener and the writer before mapping uid 0
` [PATCH v7 4/6] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v7 5/6] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v7 6/6] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces
[PATCH] apparmor: check address length before reading AF_UNSPEC bind address
2026-10-26 19:48 UTC (2+ messages)
[PATCH] apparmor: mediate AF_UNSPEC socket disconnects
2026-10-26 19:47 UTC (2+ messages)
[PATCH] apparmor: fix NULL peer label deref for connected SOCK_DGRAM sockets
2026-10-26 19:13 UTC (2+ messages)
[PATCH v6 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-10-26 16:05 UTC (13+ messages)
` [PATCH v6 1/6] userns: record how far up CAP_SETFCAP reaches
` [PATCH v6 2/6] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v6 3/6] userns: check the opener and the writer before mapping uid 0
` [PATCH v6 4/6] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v6 5/6] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v6 6/6] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces
[PATCH RFC v2 0/8] memcg: dma-buf cgroup accounting and charge transfer
2026-10-26 14:53 UTC (19+ messages)
` [PATCH RFC v2 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH RFC v2 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH RFC v2 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH RFC v2 4/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH RFC v2 5/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH RFC v2 6/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH RFC v2 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH RFC v2 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests
[PATCH] apparmor: handle diff-encoded states in leftmatch_fb()
2026-10-26 13:45 UTC (2+ messages)
[PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes
2026-10-26 13:36 UTC (3+ messages)
[PATCH v3] security: commoncap: drop stale CAP_FS_MASK FIXME
2026-10-26 13:12 UTC (2+ messages)
[PATCH RFC 0/4] IPE: add a dedicated policy keyring
2026-10-26 12:57 UTC (14+ messages)
` [PATCH RFC 1/4] ipe: add the .ipe "
` [PATCH RFC 4/4] selftests/ipe: test the IPE "
[PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation
2026-10-26 10:12 UTC (9+ messages)
` [PATCH 09/10] docs/zh_CN: add LSM/ipe "
` [PATCH 10/10] docs/zh_CN: add LSM/landlock "
[PATCH RFC 0/3] landlock: Add access rights on created files
2026-10-26 7:22 UTC (15+ messages)
` [PATCH RFC 1/3] lsm: Call inode_init_security hooks without xattrs
` [PATCH RFC 2/3] landlock: Add access rights on created files
` [PATCH RFC 3/3] selftests/landlock: Test LANDLOCK_ADD_RULE_CREATED
[PATCH] fsverity: Tell LSMs about signature only after verity is enabled
2026-10-25 21:58 UTC (3+ messages)
[PATCH v2 2/6] KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE
2026-10-24 16:26 UTC (12+ messages)
` [PATCH v2 3/6] KEYS: Verify the key identity in __key_unlink_begin
` [PATCH v2 4/6] KEYS: Introduce keyring_is_empty()
` [PATCH v2 5/6] KEYS: Replace assoc_array with rhashtable
[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
2026-10-24 15:07 UTC (2+ messages)
[PATCH v4 0/2] ima: reject modsig when detached data cannot be supplied
2026-10-24 13:47 UTC (6+ messages)
` [PATCH v4 1/2] ima: discard "
` [PATCH v4 2/2] ima: audit failure to supply detached data for modsig
[PATCH v3 0/2] ima: reject modsig when detached data cannot be supplied
2026-10-24 9:40 UTC (6+ messages)
` [PATCH v3 1/2] ima: discard "
` [PATCH v3 2/2] ima: audit failure to supply detached data for modsig
[PATCH] keys: use long workqueue for garbage collection
2026-10-24 5:43 UTC (5+ messages)
[RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only
2026-10-24 1:38 UTC (3+ messages)
[PATCH v5 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-10-23 18:42 UTC (12+ messages)
` [PATCH v5 1/5] userns: record how far up CAP_SETFCAP reaches
` [PATCH v5 2/5] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v5 3/5] userns: check the opener and the writer before mapping uid 0
` [PATCH v5 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v5 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP
[PATCH 00/13] cred: gather the "same uid" checks between tasks in one place
2026-10-23 13:03 UTC (4+ messages)
` [PATCH 01/13] cred: gather the rules for acting on a task by uid
[GIT PULL] Landlock update for v7.4-rc1
2026-10-23 12:12 UTC (4+ messages)
[PATCH v2 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
2026-10-23 6:31 UTC (4+ messages)
` [PATCH v2 -next 01/18] fs: pass struct path to notify_change()
[RFC PATCH 0/6] KEYS: From assoc_array to rhashtable migration
2026-10-22 23:23 UTC (9+ messages)
` [RFC PATCH 5/6] KEYS: Replace assoc_array with struct keyring_index
[PATCH v4 0/5] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-10-22 22:42 UTC (12+ messages)
` [PATCH v4 1/5] userns: record how far up CAP_SETFCAP reaches
` [PATCH v4 2/5] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v4 3/5] userns: check the opener and the writer before mapping uid 0
` [PATCH v4 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v4 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP
[GIT PULL] KEYS: changes for v7.4-rc1
2026-10-22 20:53 UTC (4+ messages)
[GIT PULL] IPE update for 7.4
2026-10-22 20:50 UTC (2+ messages)
[RFC PATCH v2 00/41] UUID and GUID user and group ids (*_r system calls)
2026-10-22 18:26 UTC (13+ messages)
` [RFC PATCH v2 37/41] ovl: allow UUID and GUID owners when the upper layer does
` [RFC PATCH v2 38/41] devpts: allow UUID and GUID owners
` [RFC PATCH v2 39/41] ksmbd: log in UUID and GUID users and map them to SIDs
` [RFC PATCH v2 40/41] nfsd, nfs: carry UUID and GUID owners as their text form
` [RFC PATCH v2 41/41] Documentation: uid_r: describe SMB and NFSv4
[PATCH v2] security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid()
2026-10-22 15:21 UTC (2+ messages)
[PATCH v2] kexec: Select ima_get/free_kexec_buffer() with CONFIG_HAVE_IMA_KEXEC(_OF)
2026-10-22 14:21 UTC (5+ messages)
[PATCH slab/for-next 00/14] mm/slab: mandate SLAB_MAY_ACCOUNT for __GFP_ACCOUNT allocations to avoid wasting memory for slab metadata
2026-10-22 12:54 UTC (7+ messages)
` [PATCH slab/for-next 11/14] smack: specify SLAB_MAY_ACCOUNT for smack_rule cache
[RFC PATCH] docs: security: Describe the Kernel Assurance Plane design
2026-10-22 12:18 UTC (3+ messages)
[GIT PULL] BPF changes for 7.4
2026-10-22 11:04 UTC (5+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox