messages from 2026-10-27 14:06:57 to 2026-10-29 15:21:25 UTC [more...]
[RFC PATCH] loadpin: allow untoggleable enforcement on filesystems which don't appear to be read-only
2026-10-29 15:21 UTC (3+ messages)
` [RFC PATCH v2] "
[PATCH] keys: Protect the update method check against type removal
2026-10-29 15:04 UTC (5+ messages)
[PATCH] evm: Bound writes in evm_read_protected_xattrs() to buffer_size
2026-10-29 14:35 UTC (3+ messages)
[PATCH v4] KEYS: key_garbage_collector(): process in chunks
2026-10-29 14:33 UTC (3+ messages)
[PATCH] apparmor: fix race on NULL ctx->peer in update_sk_ctx()
2026-10-29 14:26 UTC (2+ messages)
[PATCH v3 0/8] memcg: dma-buf cgroup accounting and charge transfer
2026-10-29 14:16 UTC (21+ messages)
` [PATCH v3 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH v3 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH v3 3/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH v3 4/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH v3 5/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH v3 6/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH v3 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH v3 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests
[PATCH net v4] cipso: fix optlen corruption in cipso_v4_delopt()
2026-10-29 13:55 UTC (4+ messages)
[RFC PATCH 00/14] Add macsmc support for Intel Macs, replacing applesmc
2026-10-29 13:30 UTC (31+ messages)
` [RFC PATCH 01/14] treewide: Add backend for macsmc
` [RFC PATCH 02/14] platform/x86: add backend for macsmc in intel macs
` [RFC PATCH 03/14] watchdog: add driver for apple smc
` [RFC PATCH 04/14] iio/light: add new driver for macsmc
` [RFC PATCH 05/14] iio/accel: add driver for apple SMS
` [RFC PATCH 06/14] leds: add support for macsmc kbl
` [RFC PATCH 07/14] rtc: add support for x86 macs in macsmc-rtc
` [RFC PATCH 08/14] treewide: Add a flag to detect the Apple T2 chip
` [RFC PATCH 09/14] treewide: disable other rtc's in t2 macs
` [RFC PATCH 10/14] power/supply: add support for x86 macs in macsmc-power
` [RFC PATCH 11/14] acpi: disable battery and adapter for x86 apple machines
` [RFC PATCH 12/14] hwmon/macsmc: add more types
` [RFC PATCH 13/14] hwmon: add support for x86 macs in macsmc-hwmon
` [RFC PATCH 14/14] mfd/macsmc: add ioctl to access smc keys
[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
2026-10-29 12:11 UTC (12+ messages)
` [PATCH 1/8] net: introduce CLONE_NEWNET_LOOPBACK to auto-enable loopback
` [PATCH 2/8] userns: introduce capability bounding set for user namespaces
` [PATCH 3/8] userns: allow restricting capability bounding set via clone3()
` [PATCH 4/8] nsfs: add NS_USER_GET_INFO ioctl to inspect user namespace capabilities
` [PATCH 5/8] selftests/net: add test suite for CLONE_NEWNET_LOOPBACK
` [PATCH 6/8] selftests/capabilities: tests for user namespace capability bounding set
` [PATCH 7/8] selftests/capabilities: add clone3() tests for CLONE_NEWUSER_BSET
` [PATCH 8/8] selftests/nsfs: add tests for NS_USER_GET_INFO ioctl
[PATCH 0/8] ns: fixes for the namespace LSM hooks
2026-10-29 11:27 UTC (9+ messages)
` [PATCH 4/8] landlock: pass the namespace id to log to check_ns_type()
[PATCH v3 5/6] KEYS: Replace assoc_array with rhashtable
2026-10-29 8:43 UTC (4+ messages)
[PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages()
2026-10-29 8:07 UTC (2+ messages)
[PATCH 5.15.y] mm: call the security_mmap_file() LSM hook in remap_file_pages()
2026-10-29 7:43 UTC (2+ messages)
[PATCH v3] KEYS: key_garbage_collector(): process in chunks
2026-10-29 5:20 UTC (2+ messages)
[PATCH v2] KEYS: key_garbage_collector(): process in chunks
2026-10-29 2:03 UTC (5+ messages)
[PATCH v2 0/3] IPE: add a dedicated policy keyring
2026-10-29 0:50 UTC (7+ messages)
` [PATCH v2 1/3] ipe: add the .ipe "
` [PATCH v2 2/3] keys: add KEY_SPEC_IPE_KEYRING
` [PATCH v2 3/3] Documentation: ipe: document the IPE keyring
[PATCH] apparmor: handle diff-encoded states in leftmatch_fb()
2026-10-28 22:54 UTC (2+ messages)
[PATCH] apparmor: fix query_data() output overlapping the lookup key
2026-10-28 22:49 UTC (2+ messages)
[PATCH] apparmor: avoid potential double free when remapping DFA tables
2026-10-28 22:42 UTC (2+ messages)
[PATCH RFC 0/4] IPE: add a dedicated policy keyring
2026-10-28 19:03 UTC (15+ messages)
` [PATCH RFC 1/4] ipe: add the .ipe "
[PATCH] fsverity: Tell LSMs about signature only after verity is enabled
2026-10-28 18:06 UTC (2+ messages)
[PATCH] fsverity: Explicitly require FMODE_READ to retrieve hashes
2026-10-28 18:06 UTC (2+ messages)
[PATCH v3] smack: preserve low-integrity labels across file copy via whitelist
2026-10-28 16:37 UTC (2+ messages)
[RFC PATCH v2 0/6] security: introduce Kernel Assurance Plane
2026-10-28 16:36 UTC (14+ messages)
` [RFC PATCH v2 1/6] docs: security: Describe the Kernel Assurance Plane design
` [RFC PATCH v2 2/6] security: kap: add the LSM ID and internal headers
` [RFC PATCH v2 3/6] security: add the Kernel Assurance Plane LSM
` [RFC PATCH v2 4/6] security: kap: add the securityfs control plane
` [RFC PATCH v2 5/6] kernel: add KAP checks for unshare and setns
` [RFC PATCH v2 6/6] MAINTAINERS: add an entry for the Kernel Assurance Plane
[PATCH 0/3] mseal sysmap: Choose system mapping sealing at boot
2026-10-28 15:34 UTC (23+ messages)
` [PATCH 1/3] mseal sysmap: Add mseal_system_mappings= boot parameter
` [PATCH 2/3] mseal sysmap: Allow with CHECKPOINT_RESTORE, default off
` [PATCH 3/3] selftests/mseal_system_mappings: Test vdso unmap and remap
[PATCH v3 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
2026-10-28 10:51 UTC (21+ messages)
` [PATCH v3 -next 06/18] LSM: pass struct path and struct file to the inode xattr hooks
` [PATCH v3 -next 11/18] LSM: rename the inode xattr hooks to path_xattr hooks
` [PATCH v3 -next 12/18] LSM: rename the inode posix acl hooks to path_*_acl hooks
` [PATCH v3 -next 13/18] LSM: rename the inode fileattr hooks to path_file_* hooks
` [PATCH v3 -next 14/18] LSM: rename inode_setsecctx to path_setsecctx
` [PATCH v3 -next 15/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
` [PATCH v3 -next 16/18] selftests/landlock: Add tests for metadata "
` [PATCH v3 -next 17/18] samples/landlock: Add metadata rights to sandboxer
` [PATCH v3 -next 18/18] Documentation: Update landlock doc for metadata rights
[PATCH v4 0/3] pidfd: add task path ioctls
2026-10-28 8:46 UTC (7+ messages)
` [PATCH v4 1/3] fs: Introduce task path helpers
` [PATCH v4 2/3] pidfd: Use scoped cleanup for task access
` [PATCH v4 3/3] pidfd: Add task path ioctls
[PATCH] KEYS: key_garbage_collector(): process in chunks
2026-10-28 1:35 UTC (3+ messages)
[PATCH security v1] apparmor: fix a use-after-free in aa_lookupn_ns()
2026-10-27 21:54 UTC (3+ messages)
[PATCH] apparmor: Fix namespace reference leak in __aa_find_or_create_ns()
2026-10-27 21:06 UTC (2+ messages)
[PATCH] apparmor: check accept index + 1 is in bounds
2026-10-27 20:27 UTC (2+ messages)
[PATCH] apparmor: Fix the return value in split_token_from_name() kernel-doc
2026-10-27 20:20 UTC (2+ messages)
[PATCH] apparmor: convert duplicated dfa transitions to match_char()
2026-10-27 17:14 UTC (2+ messages)
[PATCH] apparmor: fix table_size() integer overflow on 32 bit
2026-10-27 17:07 UTC (2+ messages)
[PATCH v8 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-10-27 14:41 UTC (13+ messages)
` [PATCH v8 1/6] userns: record how far up CAP_SETFCAP reaches
` [PATCH v8 2/6] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v8 3/6] userns: check the opener and the writer before mapping uid 0
` [PATCH v8 4/6] capabilities: limit fscaps to where CAP_SETFCAP reaches
` [PATCH v8 5/6] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v8 6/6] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces
page: | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox