Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-04 21:09:00 to 2026-11-05 16:07:10 UTC [more...]

[PATCH] ima: hold ima_extend_list_mutex while locating the trim position
 2026-11-05 16:06 UTC  (3+ messages)

[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
 2026-11-05 15:37 UTC  (3+ messages)

[PATCH v6 0/9] Extend PKWM to support user-created wrapping keys
 2026-11-05 15:02 UTC  (19+ messages)
` [PATCH v6 1/9] keys/trusted_keys: propagate wrapping key generation errors
` [PATCH v6 2/9] keys/trusted_keys: fix PKWM output buffer cleanup
` [PATCH v6 3/9] keys/trusted_keys: clear sensitive PKWM buffers
` [PATCH v6 4/9] pseries/plpks: fix double conversion of write and remove flush errors
` [PATCH v6 5/9] pseries/plpks: fix double conversion of wrapping key "
` [PATCH v6 6/9] pseries/plpks: fix length types for wrapping operations
` [PATCH v6 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH v6 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label
` [PATCH v6 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs

[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
 2026-11-05 11:12 UTC  (17+ messages)
` [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH v4 4/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH v4 5/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH v4 6/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH v4 7/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH v4 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[PATCH] KEYS: Protect pkey method checks against type removal
 2026-11-05  4:48 UTC  (7+ messages)
` [PATCH v2] "
        ` [PATCH v3] "

[PATCH v5 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-05  3:14 UTC  (4+ messages)
` [PATCH v5 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v5 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v5 3/3] lib: Remove assoc_array

[RFC PATCH v3 00/11] KEYS: Sanitize the garbage collector
 2026-11-05  1:04 UTC  (13+ messages)
` [RFC PATCH v3 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [RFC PATCH v3 02/11] dns_resolver: Move the key type into a separate module
` [RFC PATCH v3 03/11] NFSv4: Clear idmap keyring cache when the last client unloads
` [RFC PATCH v3 04/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [RFC PATCH v3 05/11] s390/cert_store: Start tracking subsystem keys
` [RFC PATCH v3 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [RFC PATCH v3 07/11] KEYS: trusted: TEE: Synchronize session lifetime
` [RFC PATCH v3 08/11] rxrpc: Move key types to their own module
` [RFC PATCH v3 09/11] KEYS: Pin the backing kernel module for a key type
` [RFC PATCH v3 10/11] KEYS: Remove key_type_dead
` [RFC PATCH v3 11/11] KEYS: key_garbage_collector(): process in chunks

[PATCH v2 0/3] IPE: add a dedicated policy keyring
 2026-11-05  0:10 UTC  (4+ messages)
` [PATCH v2 1/3] ipe: add the .ipe "

[RFC PATCH v2 00/11] KEYS: Sanitize the garbage collector
 2026-11-04 23:48 UTC  (9+ messages)
` [RFC PATCH v2 02/11] nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
    ` (subset) "

[PATCH v3] lsm,nscommon: initialize the security blob for the initial namespaces
 2026-11-04 22:21 UTC  (5+ messages)

[PATCH v2 00/27] landlock: Selftest fixes and cleanups
 2026-11-04 21:25 UTC  (55+ messages)
` [PATCH v2 01/27] selftests/landlock: Propagate grandchild failures in unix_scoping
` [PATCH v2 02/27] selftests/landlock: Propagate EXPECT failures from forked children
` [PATCH v2 03/27] selftests/landlock: Check the thread result in audit.thread
` [PATCH v2 04/27] selftests/landlock: Zero-initialize the buffer in inconsistent_attr
` [PATCH v2 05/27] selftests/landlock: Fix the openat() success check in fs_bench
` [PATCH v2 06/27] selftests/landlock: Fix the reported clock tick rate "
` [PATCH v2 07/27] selftests/landlock: Fix the ruleset_fd check in empty_or_same_ruleset
` [PATCH v2 08/27] selftests/landlock: Handle a missing control message in recv_fd()
` [PATCH v2 09/27] selftests/landlock: Assert tracefs_extract_field() results that are used
` [PATCH v2 10/27] selftests/landlock: Assert audit initialization in fixture setups
` [PATCH v2 11/27] selftests/landlock: Assert helper results that are used afterwards
` [PATCH v2 12/27] selftests/landlock: Assert audit_count_records() before using its result
` [PATCH v2 13/27] selftests/landlock: Fix memory leak in audit_init_filter_exe()
` [PATCH v2 14/27] selftests/landlock: Make audit_message large enough for any exe filter
` [PATCH v2 15/27] selftests/landlock: Close leaked file descriptors
` [PATCH v2 16/27] selftests/landlock: Check errno for combined VERSION and ERRATA flags
` [PATCH v2 17/27] selftests/landlock: Fix SIGURG handler setup in scoped_signal_test
` [PATCH v2 18/27] selftests/landlock: Fix regex_escape() error handling in matches_log_fs_extra()
` [PATCH v2 19/27] selftests/landlock: Fix off-by-one in regex_escape()
` [PATCH v2 20/27] selftests/landlock: Fix the snprintf() error check in matches_log_fs_extra()
` [PATCH v2 21/27] selftests/landlock: Use _exit() in the named_pipe_ioctl child
` [PATCH v2 22/27] selftests/landlock: Fix messages and comments in helper programs
` [PATCH v2 23/27] selftests/landlock: Fix stale comments in common.h and audit.h
` [PATCH v2 24/27] selftests/landlock: Use ASSERT for syscall failures before errno checks
` [PATCH v2 25/27] selftests/landlock: Assert WIFEXITED() before checking the exit status
` [PATCH v2 26/27] selftests/landlock: Use EXPECT for closing FDs and stopping threads
` [PATCH v2 27/27] selftests/landlock: Use EXPECT for checks that later steps do not need


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox