messages from 2026-11-05 21:16:53 to 2026-11-08 19:19:08 UTC [more...]
[PATCH] ima: fix kexec measurement buffer overflow after failed loads
2026-11-08 19:19 UTC (2+ messages)
[PATCH] KEYS: do not let an unmatched key decide the search result
2026-11-08 19:01 UTC (3+ messages)
[RFC] landlock: clarify signal scoping for pre-existing f_owner registrations
2026-11-08 16:21 UTC (4+ messages)
` [PATCH] docs: landlock: clarify F_SETOWN signal scoping
[PATCH v3] KEYS: Protect pkey method checks against type removal
2026-11-08 15:45 UTC (7+ messages)
` [PATCH v4] "
` [PATCH v5] "
[PATCH v8 0/6] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-11-08 14:06 UTC (2+ messages)
[PATCH v4 00/11] KEYS: Sanitize the garbage collector
2026-11-08 13:36 UTC (24+ messages)
` [PATCH v4 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [PATCH v4 02/11] dns_resolver: Move the key type into a separate module
` [PATCH v4 03/11] NFSv4: Clear idmap keyring cache when the last client unloads
` [PATCH v4 04/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [PATCH v4 05/11] s390/cert_store: Start tracking subsystem keys
` [PATCH v4 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [PATCH v4 07/11] KEYS: trusted: TEE: Synchronize session lifetime
` [PATCH v4 08/11] rxrpc: Move key types to their own module
` [PATCH v4 09/11] KEYS: Pin the backing kernel module for a key type
` [PATCH v4 10/11] KEYS: Remove key_type_dead
` [PATCH v4 11/11] KEYS: key_garbage_collector(): process in chunks
[PATCH v6 0/3] KEYS: Replace assoc_array with rhashtable
2026-11-08 12:54 UTC (8+ messages)
` [PATCH v6 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v6 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v6 3/3] lib: Remove assoc_array
[PATCH] apparmor: Fix label reference leak in aa_unix_file_perm()
2026-11-08 12:40 UTC (6+ messages)
[PATCH 00/13] mm: continue vma_flags_t conversion
2026-11-08 7:42 UTC (62+ messages)
` [PATCH 01/13] mm/gup: convert GUP code to use vma_flags_t
` [PATCH 02/13] mm/filemap: convert fault and readahead logic "
` [PATCH 03/13] mm/rmap: convert remaining VMA flag tests "
` [PATCH 04/13] mm/migrate: convert "
` [PATCH 05/13] mm: convert THP "
` [PATCH 06/13] mm/ksm: convert "
` [PATCH 07/13] mm/madvise: convert madvise_vma_behavior() "
` [PATCH 08/13] mm: convert miscellaneous VMA flag tests "
` [PATCH 09/13] fs/proc/task_mmu: convert "
` [PATCH 10/13] fs/coredump: convert vma_dump_size() "
` [PATCH 11/13] uprobes: convert VMA flag tests "
` [PATCH 12/13] perf: "
` [PATCH 13/13] security: "
[RFC PATCH 14/14] mfd/macsmc: add ioctl to access smc keys
2026-11-08 1:35 UTC (3+ messages)
[PATCH net 0/2] ipv4: unclone skbs before recompiling IP options
2026-11-08 0:12 UTC (6+ messages)
` [PATCH net 1/2] ipv4: unshare headers before recompiling IP options in ipv4_send_dest_unreach()
` [PATCH net 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()
[PATCH v2] evm: fix TOCTOU heap OOB in protected xattr reads
2026-11-07 23:13 UTC (2+ messages)
[PATCH] evm: fix TOCTOU heap OOB in protected xattr reads
2026-11-07 20:02 UTC (2+ messages)
[PATCH 6.12] fsverity: Tell LSMs about signature only after verity is enabled
2026-11-07 19:40 UTC (2+ messages)
[PATCH 6.18] fsverity: Tell LSMs about signature only after verity is enabled
2026-11-07 19:37 UTC (2+ messages)
[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
2026-11-07 18:47 UTC (7+ messages)
[PATCH] apparmor: hold candidate profile reference during attachment lookup
2026-11-07 18:46 UTC (2+ messages)
[RFC PATCH 1/2] apparmor: mediate file-generated signals
2026-11-07 16:00 UTC (4+ messages)
` [RFC PATCH 2/2] fcntl: recheck signal permissions before falling back to SIGIO
[RFC PATCH 0/2] apparmor: mediate asynchronous file signals
2026-11-07 15:49 UTC
[PATCH v3 0/2] landlock: clarify TTY signal scoping
2026-11-07 14:02 UTC (3+ messages)
` [PATCH v3 1/2] docs: "
[PATCH v5 0/3] KEYS: Replace assoc_array with rhashtable
2026-11-07 12:44 UTC (12+ messages)
` [PATCH v5 2/3] "
[PATCH] apparmor: safely acquire the cached label in aa_file_perm()
2026-11-07 10:40 UTC (2+ messages)
[PATCH net] cipso: stop modifying live ip_options_rcu
2026-11-06 23:06 UTC (2+ messages)
[PATCH net] calipso: do not charge request socket options to the listener
2026-11-06 22:50 UTC (4+ messages)
[PATCH v5] security: Expand task_setscheduler LSM hook
2026-11-06 19:59 UTC (4+ messages)
[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
2026-11-06 19:55 UTC (2+ messages)
[BUG] bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs
2026-11-06 19:33 UTC (3+ messages)
[PATCH] apparmor: fix out-of-bounds read in unix socket address audit
2026-11-06 19:09 UTC (2+ messages)
[PATCH v4 1/3] KEYS: Introduce keyring_is_empty()
2026-11-06 19:00 UTC (3+ messages)
[PATCH RFC 0/3] landlock: Add access rights on created files
2026-11-06 18:42 UTC (3+ messages)
[RFC idea] Kernel API Firewall (kaf): subsystem-level attack surface reduction for the post-AI-CVE era
2026-11-06 15:53 UTC (2+ messages)
[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
2026-11-06 15:21 UTC (7+ messages)
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [PATCH v4 6/8] selinux: Restrict cross-cgroup dma-buf charging
[PATCH v2] lsm: don't call d_path() when current->fs is NULL
2026-11-06 11:15 UTC (2+ messages)
[PATCH v2 0/4] Landlock: Restrict POSIX message queue creation and access
2026-11-06 9:14 UTC (3+ messages)
` [PATCH v2 1/4] ipc: Move MQUEUE_MAGIC to a shared header
[PATCH 0/3] Add offsetofp() and offsetofendp() for pointer arithmetic
2026-11-06 8:29 UTC (3+ messages)
[PATCH v5 0/3] pidfd: Add task path ioctls
2026-11-06 7:12 UTC (4+ messages)
` [PATCH v5 1/3] fs: Introduce task path helpers
` [PATCH v5 2/3] pidfd: Use scoped cleanup for task access
` [PATCH v5 3/3] pidfd: Add task path ioctls
[PATCH v2 00/13] cred: gather the "same uid" checks between tasks in one place
2026-11-06 4:00 UTC (4+ messages)
` [PATCH v2 01/13] cred: gather the rules for acting on a task by uid
[RFC PATCH v3 00/11] KEYS: Sanitize the garbage collector
2026-11-06 0:54 UTC (23+ messages)
` [RFC PATCH v3 01/11] KEYS: Add key_gc_flush() for draining RCU callbacks
` [RFC PATCH v3 02/11] dns_resolver: Move the key type into a separate module
` [RFC PATCH v3 03/11] NFSv4: Clear idmap keyring cache when the last client unloads
` [RFC PATCH v3 04/11] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [RFC PATCH v3 05/11] s390/cert_store: Start tracking subsystem keys
` [RFC PATCH v3 06/11] KEYS: trusted: TEE: Disable sysfs bind attributes
` [RFC PATCH v3 07/11] KEYS: trusted: TEE: Synchronize session lifetime
` [RFC PATCH v3 08/11] rxrpc: Move key types to their own module
` [RFC PATCH v3 09/11] KEYS: Pin the backing kernel module for a key type
` [RFC PATCH v3 10/11] KEYS: Remove key_type_dead
` [RFC PATCH v3 11/11] KEYS: key_garbage_collector(): process in chunks
[PATCH 0/2] SafeSetID: use real GID for GID policy lookups
2026-11-06 0:25 UTC (4+ messages)
` [PATCH 1/2] security: safesetid: use real GID for GID policy lookup
[PATCH v3 1/2] KEYS: Return user session keyring on lookup
2026-11-05 22:11 UTC (4+ messages)
` [PATCH v3 2/2] KEYS: Reject keyring creation with overridden credentials
[PATCH v4 0/3] pidfd: add task path ioctls
2026-11-05 21:42 UTC (4+ messages)
` [PATCH v4 3/3] pidfd: Add "
landlock bug: procfs denials because inodes have unstable identity
2026-11-05 21:34 UTC (3+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox