Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-02 15:03:32 to 2026-11-04 21:14:44 UTC [more...]

[PATCH v2 00/27] landlock: Selftest fixes and cleanups
 2026-11-04 21:14 UTC  (42+ messages)
` [PATCH v2 01/27] selftests/landlock: Propagate grandchild failures in unix_scoping
` [PATCH v2 02/27] selftests/landlock: Propagate EXPECT failures from forked children
` [PATCH v2 03/27] selftests/landlock: Check the thread result in audit.thread
` [PATCH v2 04/27] selftests/landlock: Zero-initialize the buffer in inconsistent_attr
` [PATCH v2 05/27] selftests/landlock: Fix the openat() success check in fs_bench
` [PATCH v2 06/27] selftests/landlock: Fix the reported clock tick rate "
` [PATCH v2 07/27] selftests/landlock: Fix the ruleset_fd check in empty_or_same_ruleset
` [PATCH v2 08/27] selftests/landlock: Handle a missing control message in recv_fd()
` [PATCH v2 09/27] selftests/landlock: Assert tracefs_extract_field() results that are used
` [PATCH v2 10/27] selftests/landlock: Assert audit initialization in fixture setups
` [PATCH v2 11/27] selftests/landlock: Assert helper results that are used afterwards
` [PATCH v2 12/27] selftests/landlock: Assert audit_count_records() before using its result
` [PATCH v2 13/27] selftests/landlock: Fix memory leak in audit_init_filter_exe()
` [PATCH v2 14/27] selftests/landlock: Make audit_message large enough for any exe filter
` [PATCH v2 15/27] selftests/landlock: Close leaked file descriptors
` [PATCH v2 16/27] selftests/landlock: Check errno for combined VERSION and ERRATA flags
` [PATCH v2 17/27] selftests/landlock: Fix SIGURG handler setup in scoped_signal_test
` [PATCH v2 18/27] selftests/landlock: Fix regex_escape() error handling in matches_log_fs_extra()
` [PATCH v2 19/27] selftests/landlock: Fix off-by-one in regex_escape()
` [PATCH v2 20/27] selftests/landlock: Fix the snprintf() error check in matches_log_fs_extra()
` [PATCH v2 21/27] selftests/landlock: Use _exit() in the named_pipe_ioctl child
` [PATCH v2 22/27] selftests/landlock: Fix messages and comments in helper programs
` [PATCH v2 23/27] selftests/landlock: Fix stale comments in common.h and audit.h
` [PATCH v2 24/27] selftests/landlock: Use ASSERT for syscall failures before errno checks
` [PATCH v2 25/27] selftests/landlock: Assert WIFEXITED() before checking the exit status
` [PATCH v2 26/27] selftests/landlock: Use EXPECT for closing FDs and stopping threads
` [PATCH v2 27/27] selftests/landlock: Use EXPECT for checks that later steps do not need

[PATCH] tomoyo: Use isdigit() in tomoyo_numscan()
 2026-11-04 20:58 UTC  (2+ messages)

[PATCH v2 0/3] IPE: add a dedicated policy keyring
 2026-11-04 20:14 UTC  (3+ messages)
` [PATCH v2 1/3] ipe: add the .ipe "

[PATCH v2 0/8] mseal sysmap: Choose system mapping sealing at boot
 2026-11-04 20:14 UTC  (10+ messages)
` [PATCH v2 1/8] selftests/mm: Move sysmap_is_sealed into mm
` [PATCH v2 2/8] selftests/mm: Skip sysmap_is_sealed when system mappings aren't sealed
` [PATCH v2 3/8] selftests/mm: Test that the seal on system mappings is enforced
` [PATCH v2 4/8] mm/mseal: Move MSEAL_SYSTEM_MAPPINGS to mm/Kconfig
` [PATCH v2 5/8] uprobes/x86: Leave sealed trampolines in place on optimisation failure
` [PATCH v2 6/8] mm/mseal: Seal system mappings in __install_special_mapping()
` [PATCH v2 7/8] mm/mseal: Add no_mseal_sys_mappings boot parameter
` [PATCH v2 8/8] selftests/mm: Check that no_mseal_sys_mappings unseals system mappings

[RFC PATCH 14/14] mfd/macsmc: add ioctl to access smc keys
 2026-11-04 19:53 UTC  (2+ messages)

landlock bug: procfs denials because inodes have unstable identity
 2026-11-04 19:47 UTC  (2+ messages)

[RFC PATCH 00/14] Add macsmc support for Intel Macs, replacing applesmc
 2026-11-04 19:45 UTC  (2+ messages)

[RFC PATCH v2 00/11] KEYS: Sanitize the garbage collector
 2026-11-04 15:53 UTC  (40+ messages)
` [RFC PATCH v2 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [RFC PATCH v2 02/11] nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup()
` [RFC PATCH v2 03/11] dns_resolver: Clear .dns_resolver cache when the last client unloads
` [RFC PATCH v2 04/11] NFSv4: Clear idmap keyring "
` [RFC PATCH v2 05/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [RFC PATCH v2 06/11] s390/cert_store: Track subsystem keys instead of re-registering key_type
` [RFC PATCH v2 07/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [RFC PATCH v2 08/11] KEYS: trusted: TEE: Synchronize session lifetime
` [RFC PATCH v2 09/11] KEYS: Pin the backing kernel module for a key type
` [RFC PATCH v2 10/11] KEYS: Remove key_type_dead
` [RFC PATCH v2 11/11] KEYS: key_garbage_collector(): process in chunks

[PATCH v3] security: commoncap: drop stale CAP_FS_MASK FIXME
 2026-11-04 15:12 UTC  (2+ messages)

[PATCH net] calipso: do not charge request socket options to the listener
 2026-11-04 15:09 UTC  (2+ messages)

[PATCH] KEYS: Protect pkey method checks against type removal
 2026-11-04 14:49 UTC  (6+ messages)
  ` [PATCH v2] "

[PATCH v2 00/13] cred: gather the "same uid" checks between tasks in one place
 2026-11-04 14:31 UTC  (27+ messages)
` [PATCH v2 01/13] cred: gather the rules for acting on a task by uid
` [PATCH v2 02/13] cred: add KUnit tests for the id rules
` [PATCH v2 03/13] signal: use cred_ids_allow_signal()
` [PATCH v2 04/13] fcntl: use cred_ids_allow_sigio()
` [PATCH v2 05/13] sched: use cred_ids_allow_sched()
` [PATCH v2 06/13] MIPS: "
` [PATCH v2 07/13] sys: use cred_ids_allow_sched() for setpriority()
` [PATCH v2 08/13] sys: use cred_ids_allow_control() for prlimit()
` [PATCH v2 09/13] block: use cred_ids_allow_ioprio()
` [PATCH v2 10/13] cgroup/v1: use cred_ids_allow_move()
` [PATCH v2 11/13] fs/resctrl: "
` [PATCH v2 12/13] ptrace: use cred_ids_allow_control()
` [PATCH v2 13/13] keys: "

[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
 2026-11-04 14:09 UTC  (7+ messages)

[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
 2026-11-04 13:51 UTC  (10+ messages)
` [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH v4 4/8] security: dma-buf: Add dma_buf_charge_task LSM hook
` [PATCH v4 5/8] security: dma-buf: Add dma_buf_charge_cgroup "
` [PATCH v4 6/8] selinux: Restrict cross-cgroup dma-buf charging
` [PATCH v4 7/8] selinux: Restrict dma-buf direct cgroup charging
` [PATCH v4 8/8] selftests/dmabuf-heaps: Add dma-buf memcg accounting tests

[PATCH] ima: hold ima_extend_list_mutex while locating the trim position
 2026-11-04 12:34 UTC  (3+ messages)

[RFC] Curated eBPF/LSM mitigations for high-impact fixed CVEs
 2026-11-04  3:12 UTC 

[PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
 2026-11-04  2:25 UTC  (4+ messages)

[PATCH] selftests/landlock: fix the regex_escape() error check
 2026-11-03 21:49 UTC  (4+ messages)

[PATCH] lsm: don't call d_path() when current->fs is NULL
 2026-11-03 20:57 UTC  (3+ messages)

[PATCH] selftests/landlock: print st_ino as unsigned long long
 2026-11-03 20:34 UTC  (3+ messages)

[syzbot] Monthly lsm report (Nov 2026)
 2026-11-03 20:33 UTC 

[PATCH v8] KEYS: key_garbage_collector(): process in chunks
 2026-11-03 15:30 UTC  (4+ messages)
` [PATCH v9] "

[RFC PATCH] af_unix: introduce MSG_CMSG_SEALED
 2026-11-03 13:05 UTC  (5+ messages)

[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
 2026-11-03  8:24 UTC  (19+ messages)
` [PATCH -next 1/9] lockdown: Add break in lockdown_write
` [PATCH -next 2/9] lockdown: remove useless decrement operation
` [PATCH -next 3/9] lockdown: bound the status string with scnprintf
` [PATCH -next 4/9] lockdown: select SECURITYFS
` [PATCH -next 5/9] lsm: remove unused lockdown audit data
` [PATCH -next 6/9] lockdown: drop an unused include and simplify secfs init
` [PATCH -next 7/9] lockdown: move lockdown_reasons next to its only user
` [PATCH -next 8/9] Documentation/ABI: document the lockdown securityfs file
` [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test

[PATCH v2 0/4] Landlock: Restrict POSIX message queue creation and access
 2026-11-03  5:22 UTC  (10+ messages)
` [PATCH v2 2/4] Landlock: Enforce MAKE_REG for POSIX message queue creation
` [PATCH v2 3/4] Landlock: Add POSIX message queue scoping
` [PATCH v2 4/4] samples/landlock: Add POSIX message queue scoping to sandboxer

[PATCH v2] ima: initialize the real inode attributes of the iint cache
 2026-11-03  3:43 UTC  (2+ messages)

[RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior
 2026-11-03  0:42 UTC  (3+ messages)

[PATCH] ima: initialize the real inode attributes of the iint cache
 2026-11-02 15:03 UTC  (4+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox