Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-03 07:54:31 to 2026-11-04 15:53:06 UTC [more...]

[RFC PATCH v2 00/11] KEYS: Sanitize the garbage collector
 2026-11-04 15:53 UTC  (40+ messages)
` [RFC PATCH v2 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [RFC PATCH v2 02/11] nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
` [RFC PATCH v2 03/11] dns_resolver: Clear .dns_resolver cache when the last client unloads
` [RFC PATCH v2 04/11] NFSv4: Clear idmap keyring "
` [RFC PATCH v2 05/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [RFC PATCH v2 06/11] s390/cert_store: Track subsystem keys instead of re-registering key_type
` [RFC PATCH v2 07/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [RFC PATCH v2 08/11] KEYS: trusted: TEE: Synchronize session lifetime
` [RFC PATCH v2 09/11] KEYS: Pin the backing kernel module for a key type
` [RFC PATCH v2 10/11] KEYS: Remove key_type_dead
` [RFC PATCH v2 11/11] KEYS: key_garbage_collector(): process in chunks

[PATCH v3] security: commoncap: drop stale CAP_FS_MASK FIXME
 2026-11-04 15:12 UTC  (2+ messages)

[PATCH net] calipso: do not charge request socket options to the listener
 2026-11-04 15:09 UTC  (2+ messages)

[PATCH] KEYS: Protect pkey method checks against type removal
 2026-11-04 14:49 UTC  (5+ messages)
  ` [PATCH v2] "

[PATCH v2 00/13] cred: gather the "same uid" checks between tasks in one place
 2026-11-04 14:31 UTC  (27+ messages)
` [PATCH v2 01/13] cred: gather the rules for acting on a task by uid
` [PATCH v2 02/13] cred: add KUnit tests for the id rules
` [PATCH v2 03/13] signal: use cred_ids_allow_signal()
` [PATCH v2 04/13] fcntl: use cred_ids_allow_sigio()
` [PATCH v2 05/13] sched: use cred_ids_allow_sched()
` [PATCH v2 06/13] MIPS: "
` [PATCH v2 07/13] sys: use cred_ids_allow_sched() for setpriority()
` [PATCH v2 08/13] sys: use cred_ids_allow_control() for prlimit()
` [PATCH v2 09/13] block: use cred_ids_allow_ioprio()
` [PATCH v2 10/13] cgroup/v1: use cred_ids_allow_move()
` [PATCH v2 11/13] fs/resctrl: "
` [PATCH v2 12/13] ptrace: use cred_ids_allow_control()
` [PATCH v2 13/13] keys: "

[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
 2026-11-04 14:09 UTC  (7+ messages)

[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
 2026-11-04 13:51 UTC  (10+ messages)
` [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH v4 4/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH v4 5/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH v4 6/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH v4 7/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH v4 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[PATCH] ima: hold ima_extend_list_mutex while locating the trim position
 2026-11-04 12:34 UTC  (3+ messages)

[RFC] Curated eBPF/LSM mitigations for high-impact fixed CVEs
 2026-11-04  3:12 UTC 

[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
 2026-11-04  2:25 UTC  (4+ messages)

[PATCH] selftests/landlock: fix the regex_escape() error check
 2026-11-03 21:49 UTC  (4+ messages)

[PATCH] lsm: don't call d_path() when current->fs is NULL
 2026-11-03 20:57 UTC  (3+ messages)

[PATCH] selftests/landlock: print st_ino as unsigned long long
 2026-11-03 20:34 UTC  (3+ messages)

[syzbot] Monthly lsm report (Nov 2026)
 2026-11-03 20:33 UTC 

[PATCH v8] KEYS: key_garbage_collector(): process in chunks
 2026-11-03 15:30 UTC  (4+ messages)
` [PATCH v9] "

[PATCH v2 0/8] mseal sysmap: Choose system mapping sealing at boot
 2026-11-03 15:19 UTC  (9+ messages)
` [PATCH v2 1/8] selftests/mm: Move sysmap_is_sealed into mm
` [PATCH v2 2/8] selftests/mm: Skip sysmap_is_sealed when system mappings aren't sealed
` [PATCH v2 3/8] selftests/mm: Test that the seal on system mappings is enforced
` [PATCH v2 4/8] mm/mseal: Move MSEAL_SYSTEM_MAPPINGS to mm/Kconfig
` [PATCH v2 5/8] uprobes/x86: Leave sealed trampolines in place on optimisation failure
` [PATCH v2 6/8] mm/mseal: Seal system mappings in __install_special_mapping()
` [PATCH v2 7/8] mm/mseal: Add no_mseal_sys_mappings boot parameter
` [PATCH v2 8/8] selftests/mm: Check that no_mseal_sys_mappings unseals system mappings

[RFC PATCH] af_unix: introduce MSG_CMSG_SEALED
 2026-11-03 13:05 UTC  (2+ messages)

[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
 2026-11-03  8:24 UTC  (17+ messages)
` [PATCH -next 1/9] lockdown: Add break in lockdown_write
` [PATCH -next 2/9] lockdown: remove useless decrement operation
` [PATCH -next 4/9] lockdown: select SECURITYFS
` [PATCH -next 5/9] lsm: remove unused lockdown audit data
` [PATCH -next 6/9] lockdown: drop an unused include and simplify secfs init
` [PATCH -next 7/9] lockdown: move lockdown_reasons next to its only user
` [PATCH -next 8/9] Documentation/ABI: document the lockdown securityfs file
` [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox