Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-08 07:42:48 to 2026-11-10 05:33:32 UTC [more...]

[PATCH v9 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  5:33 UTC  (2+ messages)
` [PATCH v9 1/3] KEYS: Introduce keyring_is_empty()

[PATCH v8 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  5:21 UTC  (8+ messages)
` [PATCH v8 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v8 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v8 3/3] lib: Remove assoc_array

[PATCH v7 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  4:11 UTC  (8+ messages)
` [PATCH v7 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v7 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v7 3/3] lib: Remove assoc_array

[PATCH 0/3] vfs: add inode iteration method super_iter_inodes
 2026-11-10  4:01 UTC  (11+ messages)
` [PATCH 1/3] "
` [PATCH 2/3] vfs: convert inode iterators to the unsafe super_iter_inodes()
` [PATCH 3/3] vfs: convert sb->s_inodes iteration to super_iter_inodes()

[PATCH v6 0/9] Extend PKWM to support user-created wrapping keys
 2026-11-10  3:44 UTC  (13+ messages)
` [PATCH v6 1/9] keys/trusted_keys: propagate wrapping key generation errors
` [PATCH v6 2/9] keys/trusted_keys: fix PKWM output buffer cleanup
` [PATCH v6 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH v6 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs

[PATCH v3] KEYS: Protect pkey method checks against type removal
 2026-11-10  3:13 UTC  (16+ messages)
` [PATCH v4] "
    ` [PATCH v5] "
        ` [PATCH v6] "
            ` [PATCH v7] "

[PATCH net-next 00/14] net: annotate data-races around sysctl knobs
 2026-11-10  3:01 UTC  (32+ messages)
` [PATCH net-next 01/14] ipv4: annotate data-races around ip_rt_* sysctls
` [PATCH net-next 02/14] inet: frags: annotate data-races around fqdir->timeout and fqdir->max_dist
` [PATCH net-next 03/14] ipv6: annotate data-races around addrconf sysctls
` [PATCH net-next 04/14] ipv6: annotate data-races around icmpv6 reply sysctls
` [PATCH net-next 05/14] calipso: annotate data-races around cache sysctls
` [PATCH net-next 06/14] sctp: annotate data-races around sctp sysctls
` [PATCH net-next 07/14] mptcp: annotate data-races around pernet sysctls
` [PATCH net-next 08/14] rds: annotate data-races around core rds sysctls
` [PATCH net-next 09/14] netfilter: conntrack: annotate data-races around conntrack sysctls
` [PATCH net-next 10/14] netfilter: bridge: annotate data-races around br_netfilter and nf_log sysctls
` [PATCH net-next 11/14] ipvs: annotate data-races around lblc_expiration and lblcr_expiration
` [PATCH net-next 12/14] net/smc: annotate data-races around smc sysctls
` [PATCH net-next 13/14] netfilter: conntrack: annotate data-races around timeout and tcp sysctls
` [PATCH net-next 14/14] netfilter: cttimeout: annotate data-races around the default timeouts

[PATCH] sched/psi: Check CAP_SYS_RESOURCE in the initial user namespace
 2026-11-10  0:49 UTC  (2+ messages)

[GIT PULL] KEYS: changes for v7.4-rc3
 2026-11-10  0:43 UTC  (3+ messages)

[PATCH] selinux: don't label bridged packets in selinux_ip_forward()
 2026-11-09 23:56 UTC  (2+ messages)

[PATCH v3 1/2] KEYS: Return user session keyring on lookup
 2026-11-09 23:54 UTC  (2+ messages)

[PATCH v5 00/12] KEYS: Sanitize the garbage collector
 2026-11-09 23:13 UTC  (29+ messages)
` [PATCH v5 01/12] KEYS: Add key_gc_flush() for draining RCU callbacks
` [PATCH v5 02/12] dns_resolver: Move the key type into a separate module
` [PATCH v5 03/12] NFSv4: Clear idmap keyring cache when the last client unloads
` [PATCH v5 04/12] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [PATCH v5 05/12] s390/cert_store: Start tracking subsystem keys
` [PATCH v5 06/12] KEYS: trusted: TEE: Synchronize session lifetime
` [PATCH v5 07/12] KEYS: trusted: TEE: Disable sysfs bind attributes
` [PATCH v5 08/12] rxrpc: Release conn->key when init_connection_security() fails
` [PATCH v5 09/12] rxrpc: Move key types to their own module
` [PATCH v5 10/12] KEYS: Pin the backing kernel module for a key type
` [PATCH v5 11/12] KEYS: Remove key_type_dead
` [PATCH v5 12/12] KEYS: key_garbage_collector(): process in chunks

[PATCH net v2 0/2] ipv4: do not write shared IP options when sending ICMP errors
 2026-11-09 21:43 UTC  (4+ messages)
` [PATCH net v2 1/2] ipv4: recompile IP options on a private copy in ipv4_send_dest_unreach()
` [PATCH net v2 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()

[PATCH net 0/2] ipv4: unclone skbs before recompiling IP options
 2026-11-09 21:41 UTC  (3+ messages)
` [PATCH net 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()

[RFC v2+] Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix)
 2026-11-09 20:46 UTC 

[PATCH net] cipso: stop modifying live ip_options_rcu
 2026-11-09 20:14 UTC  (4+ messages)

[PATCH] keys/trusted/tpm2: rename "bool" to "boolean"
 2026-11-09 20:13 UTC  (6+ messages)

[PATCH v2] evm: fix TOCTOU heap OOB in protected xattr reads
 2026-11-09 20:05 UTC  (3+ messages)

[PATCH v9 0/3] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-11-09 19:49 UTC  (4+ messages)
` [PATCH v9 1/3] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v9 2/3] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v9 3/3] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces

[RFC PATCH v2 0/3] security: Add PR_CAPBSET_DROP_MASK
 2026-11-09 18:46 UTC  (8+ messages)
` [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops

[PATCH 00/13] mm: continue vma_flags_t conversion
 2026-11-09 17:50 UTC  (25+ messages)
` [PATCH 02/13] mm/filemap: convert fault and readahead logic to use vma_flags_t
` [PATCH 05/13] mm: convert THP VMA flag tests "
` [PATCH 07/13] mm/madvise: convert madvise_vma_behavior() "
` [PATCH 08/13] mm: convert miscellaneous VMA flag tests "

[BUG] bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs
 2026-11-09 15:07 UTC  (4+ messages)

[PATCH v2] KEYS: do not let an unmatched key decide the search result
 2026-11-09 15:02 UTC  (3+ messages)

[PATCH 01/13] mm/gup: convert GUP code to use vma_flags_t
 2026-11-09 13:32 UTC  (2+ messages)

[PATCH 03/13] mm/rmap: convert remaining VMA flag tests to use vma_flags_t
 2026-11-09 13:31 UTC  (2+ messages)

[PATCH 04/13] mm/migrate: convert VMA flag tests to use vma_flags_t
 2026-11-09 13:31 UTC  (2+ messages)

[PATCH 06/13] mm/ksm: convert VMA flag tests to use vma_flags_t
 2026-11-09 13:30 UTC  (2+ messages)

[PATCH net 1/2] ipv4: unshare headers before recompiling IP options in ipv4_send_dest_unreach()
 2026-11-09 13:09 UTC  (3+ messages)

[PATCH v2] ima: fix races when deleting measurement list entries
 2026-11-09 13:06 UTC  (5+ messages)

[RFC] IMA: periodic runtime re-measurement of process .text/GOT
 2026-11-09 11:03 UTC  (6+ messages)

[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
 2026-11-09  9:10 UTC  (6+ messages)
` [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test

[PATCH] apparmor: fix double d_instantiate() in ns_mkdir_op()
 2026-11-09  3:35 UTC  (2+ messages)

[PATCH] KEYS: do not let an unmatched key decide the search result
 2026-11-09  1:17 UTC  (5+ messages)

[PATCH v2 0/4] landlock: Fix REFER in layered domains
 2026-11-08 20:34 UTC  (9+ messages)
` [PATCH v2 1/4] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
` [PATCH v2 2/4] selftests/landlock: Test that layering does not break refer
` [PATCH v2 3/4] landlock: Simplify landlock_get_fs_access_mask()
` [PATCH v2 4/4] landlock: Clarify implicit handling of LANDLOCK_ACCESS_FS_REFER

[PATCH v5 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-08 20:05 UTC  (5+ messages)
` [PATCH v5 2/3] "

[PATCH] ima: fix kexec measurement buffer overflow after failed loads
 2026-11-08 19:19 UTC  (2+ messages)

[RFC] landlock: clarify signal scoping for pre-existing f_owner registrations
 2026-11-08 16:21 UTC  (3+ messages)
` [PATCH] docs: landlock: clarify F_SETOWN signal scoping

[PATCH v8 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-11-08 14:06 UTC  (2+ messages)

[PATCH v4 00/11] KEYS: Sanitize the garbage collector
 2026-11-08 13:36 UTC  (24+ messages)
` [PATCH v4 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [PATCH v4 02/11] dns_resolver: Move the key type into a separate module
` [PATCH v4 03/11] NFSv4: Clear idmap keyring cache when the last client unloads
` [PATCH v4 04/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [PATCH v4 05/11] s390/cert_store: Start tracking subsystem keys
` [PATCH v4 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [PATCH v4 07/11] KEYS: trusted: TEE: Synchronize session lifetime
` [PATCH v4 08/11] rxrpc: Move key types to their own module
` [PATCH v4 09/11] KEYS: Pin the backing kernel module for a key type
` [PATCH v4 10/11] KEYS: Remove key_type_dead
` [PATCH v4 11/11] KEYS: key_garbage_collector(): process in chunks

[PATCH v6 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-08 12:54 UTC  (5+ messages)

[PATCH] apparmor: Fix label reference leak in aa_unix_file_perm()
 2026-11-08 12:40 UTC  (6+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox