messages from 2026-10-29 22:18:26 to 2026-11-03 15:18:39 UTC [more...]
[PATCH v2 0/8] mseal sysmap: Choose system mapping sealing at boot
2026-11-03 15:18 UTC (6+ messages)
` [PATCH v2 1/8] selftests/mm: Move sysmap_is_sealed into mm
` [PATCH v2 2/8] selftests/mm: Skip sysmap_is_sealed when system mappings aren't sealed
` [PATCH v2 3/8] selftests/mm: Test that the seal on system mappings is enforced
` [PATCH v2 4/8] mm/mseal: Move MSEAL_SYSTEM_MAPPINGS to mm/Kconfig
` [PATCH v2 5/8] uprobes/x86: Leave sealed trampolines in place on optimisation failure
[PATCH] KEYS: Protect pkey method checks against type removal
2026-11-03 15:17 UTC (3+ messages)
[RFC PATCH v2 00/11] KEYS: Sanitize the garbage collector
2026-11-03 15:06 UTC (21+ messages)
` [RFC PATCH v2 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [RFC PATCH v2 02/11] nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
` [RFC PATCH v2 03/11] dns_resolver: Clear .dns_resolver cache when the last client unloads
` [RFC PATCH v2 04/11] NFSv4: Clear idmap keyring "
` [RFC PATCH v2 05/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [RFC PATCH v2 06/11] s390/cert_store: Track subsystem keys instead of re-registering key_type
` [RFC PATCH v2 07/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [RFC PATCH v2 08/11] KEYS: trusted: TEE: Synchronize session lifetime
` [RFC PATCH v2 09/11] KEYS: Pin the backing kernel module for a key type
` [RFC PATCH v2 10/11] KEYS: Remove key_type_dead
` [RFC PATCH v2 11/11] KEYS: key_garbage_collector(): process in chunks
[RFC PATCH] af_unix: introduce MSG_CMSG_SEALED
2026-11-03 13:05 UTC (6+ messages)
[PATCH v8] KEYS: key_garbage_collector(): process in chunks
2026-11-03 12:47 UTC (5+ messages)
` [PATCH v9] "
[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
2026-11-03 12:37 UTC (16+ messages)
` [PATCH 2/8] userns: introduce capability bounding set for user namespaces
` [PATCH 3/8] userns: allow restricting capability bounding set via clone3()
` [PATCH 4/8] nsfs: add NS_USER_GET_INFO ioctl to inspect user namespace capabilities
` [PATCH 5/8] selftests/net: add test suite for CLONE_NEWNET_LOOPBACK
` [PATCH 6/8] selftests/capabilities: tests for user namespace capability bounding set
` [PATCH 7/8] selftests/capabilities: add clone3() tests for CLONE_NEWUSER_BSET
` [PATCH 8/8] selftests/nsfs: add tests for NS_USER_GET_INFO ioctl
[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
2026-11-03 11:37 UTC (3+ messages)
[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
2026-11-03 8:24 UTC (19+ messages)
` [PATCH -next 1/9] lockdown: Add break in lockdown_write
` [PATCH -next 2/9] lockdown: remove useless decrement operation
` [PATCH -next 3/9] lockdown: bound the status string with scnprintf
` [PATCH -next 4/9] lockdown: select SECURITYFS
` [PATCH -next 5/9] lsm: remove unused lockdown audit data
` [PATCH -next 6/9] lockdown: drop an unused include and simplify secfs init
` [PATCH -next 7/9] lockdown: move lockdown_reasons next to its only user
` [PATCH -next 8/9] Documentation/ABI: document the lockdown securityfs file
` [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test
[PATCH v2 0/4] Landlock: Restrict POSIX message queue creation and access
2026-11-03 5:22 UTC (12+ messages)
` [PATCH v2 1/4] ipc: Move MQUEUE_MAGIC to a shared header
` [PATCH v2 2/4] Landlock: Enforce MAKE_REG for POSIX message queue creation
` [PATCH v2 3/4] Landlock: Add POSIX message queue scoping
` [PATCH v2 4/4] samples/landlock: Add POSIX message queue scoping to sandboxer
[PATCH v2] ima: initialize the real inode attributes of the iint cache
2026-11-03 3:43 UTC (2+ messages)
[RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior
2026-11-03 0:42 UTC (17+ messages)
` [RFC PATCH 1/4] KEYS: trusted: Disable sysfs bind attributes for TEE driver
` [RFC PATCH 2/4] KEYS: Pin the backing module for struct key_type
` [RFC PATCH 3/4] KEYS: Remove key_type_dead
` [RFC PATCH 4/4] KEYS: key_garbage_collector(): process in chunks
[PATCH] ima: initialize the real inode attributes of the iint cache
2026-11-02 15:03 UTC (5+ messages)
[PATCH 0/2] lockdown: Prevent booting with lockdown enabled but IOMMU disabled
2026-11-02 14:28 UTC (5+ messages)
` [PATCH 1/2] iommu: Add iommu_is_available() API
` [PATCH 2/2] security: lockdown: Prevent boot with lockdown but no IOMMU
[PATCH v3 0/8] memcg: dma-buf cgroup accounting and charge transfer
2026-11-02 14:02 UTC (9+ messages)
` [PATCH v3 7/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
[PATCH net v4] cipso: fix optlen corruption in cipso_v4_delopt()
2026-11-02 13:00 UTC (4+ messages)
[PATCH v4] smack: preserve low-integrity labels across file copy via whitelist
2026-11-02 9:06 UTC (2+ messages)
[PATCH v3] keys: Protect the update method check against type removal
2026-11-02 7:27 UTC (6+ messages)
` [PATCH v3] keys: Protect the update method check against type removalg
[BUG] landlock: get_current_exe() WARNs on long exe paths
2026-11-02 2:20 UTC
[PATCH v4 1/3] KEYS: Introduce keyring_is_empty()
2026-11-02 1:08 UTC (8+ messages)
` [PATCH v4 2/3] KEYS: Replace assoc_array with rhashtable
[PATCH 0/3] landlock: Fix REFER in layered domains
2026-11-01 16:55 UTC (10+ messages)
` [PATCH 1/3] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
` [PATCH 2/3] selftests/landlock: Test that layering does not break refer
` [PATCH 3/3] landlock: Simplify landlock_get_fs_access_mask()
[PATCH] cred: mark the copy in prepare_creds() as a data race
2026-11-01 2:25 UTC (3+ messages)
[RFC PATCH 00/14] Add macsmc support for Intel Macs, replacing applesmc
2026-11-01 1:38 UTC (8+ messages)
` [RFC PATCH 04/14] iio/light: add new driver for macsmc
` [RFC PATCH 05/14] iio/accel: add driver for apple SMS
` [RFC PATCH 14/14] mfd/macsmc: add ioctl to access smc keys
[PATCH v5 0/4] initramfs: add support for xattrs in the initial ram disk
2026-10-31 21:10 UTC (9+ messages)
` [PATCH v5 1/4] ima: skip algorithm availability check until initramfs unpacking is finished
` [PATCH v5 2/4] initramfs: add file metadata
` [PATCH v5 3/4] initramfs: read metadata from special file METADATA!!!
` [PATCH v5 4/4] gen_init_cpio: add support for file metadata
[PATCH] apparmor: fix race on NULL ctx->peer in update_sk_ctx()
2026-10-31 10:11 UTC (3+ messages)
[PATCH] KEYS: Reject restricted dest_keyring in construct_alloc_key()
2026-10-31 9:49 UTC (5+ messages)
[PATCH] KEYS: request_key: enforce keyring restrictions on constructed keys
2026-10-31 9:19 UTC (9+ messages)
[PATCH v2] keys: Protect the update method check against type removal
2026-10-31 9:17 UTC (3+ messages)
[GIT PULL] AppArmor bugfixes for 7.4
2026-10-31 5:21 UTC (2+ messages)
[GIT PULL] fsverity fixes for v7.4-rc1
2026-10-31 0:10 UTC (2+ messages)
[PATCH v7] KEYS: key_garbage_collector(): process in chunks
2026-10-30 20:44 UTC (3+ messages)
[PATCH v6] KEYS: key_garbage_collector(): process in chunks
2026-10-30 20:03 UTC (4+ messages)
landlock bug: procfs denials because inodes have unstable identity
2026-10-30 15:45 UTC
[PATCH v5] KEYS: key_garbage_collector(): process in chunks
2026-10-30 15:26 UTC (8+ messages)
[PATCH RFC 0/3] landlock: Add access rights on created files
2026-10-30 12:09 UTC (2+ messages)
[PATCH 11/13 RFC net-next] net: cipso: guard IPv4 packet manipulation functions
2026-10-30 4:54 UTC (2+ messages)
[PATCH v4 4/7] selftests/landlock: Add UDP bind/connect tests
2026-10-30 4:53 UTC (2+ messages)
[PATCH v4 5/7] selftests/landlock: Add tests for sendmsg()
2026-10-30 4:53 UTC (2+ messages)
[PATCH v4 2/7] landlock: Add UDP connect() access control
2026-10-30 4:53 UTC (2+ messages)
[PATCH v4 3/7] landlock: Add UDP send access control
2026-10-30 4:53 UTC (2+ messages)
[PATCH v4 1/7] landlock: Add UDP bind() access control
2026-10-30 4:53 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox