Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-09 05:39:30 to 2026-11-10 09:25:35 UTC [more...]

[PATCH RFC 00/41] fs: don't use pseudo filesystem files as storage
 2026-11-10  9:25 UTC  (58+ messages)
` [PATCH RFC 01/41] loop: refuse backing files that aren't open for reading
` [PATCH RFC 02/41] nvmet: check that the file backend supports ->{read,write}_iter
` [PATCH RFC 03/41] target: fileio: check that the backing file "
` [PATCH RFC 04/41] fs: add SB_I_PSEUDO
` [PATCH RFC 05/41] kernfs: use fc_init_pseudo()
` [PATCH RFC 06/41] proc: "
` [PATCH RFC 07/41] binfmt_misc: "
` [PATCH RFC 08/41] mqueue: "
` [PATCH RFC 09/41] bpf: use fc_init_pseudo() for bpffs
` [PATCH RFC 10/41] nullfs: use fc_init_pseudo()
` [PATCH RFC 11/41] failfs: "
` [PATCH RFC 12/41] rust_binderfs: "
` [PATCH RFC 13/41] devpts: "
` [PATCH RFC 14/41] debugfs: "
` [PATCH RFC 15/41] tracefs: "
` [PATCH RFC 16/41] configfs: "
` [PATCH RFC 17/41] securityfs: "
` [PATCH RFC 18/41] selinux: use fc_init_pseudo() for selinuxfs
` [PATCH RFC 19/41] smack: use fc_init_pseudo() for smackfs
` [PATCH RFC 20/41] apparmor: use fc_init_pseudo() for apparmorfs
` [PATCH RFC 21/41] nfsd: use fc_init_pseudo()
` [PATCH RFC 22/41] sunrpc: use fc_init_pseudo() for rpc_pipefs
` [PATCH RFC 23/41] fuse: use fc_init_pseudo() for fusectl
` [PATCH RFC 24/41] efivarfs: use fc_init_pseudo()
` [PATCH RFC 25/41] pstore: "
` [PATCH RFC 26/41] xenfs: "
` [PATCH RFC 27/41] openpromfs: "
` [PATCH RFC 28/41] ocfs2: use fc_init_pseudo() for dlmfs
` [PATCH RFC 29/41] s390/hypfs: use fc_init_pseudo()
` [PATCH RFC 30/41] powerpc/spufs: "
` [PATCH RFC 31/41] usb: gadget: f_fs: "
` [PATCH RFC 32/41] usb: gadget: gadgetfs: "
` [PATCH RFC 33/41] fs: add file_is_pseudo()
` [PATCH RFC 34/41] loop: refuse files on pseudo filesystems as backing files
` [PATCH RFC 35/41] zloop: refuse zone files on pseudo filesystems
` [PATCH RFC 36/41] nvmet: refuse files on pseudo filesystems as namespace backing files
` [PATCH RFC 37/41] target: fileio: refuse files on pseudo filesystems as "
` [PATCH RFC 38/41] fuse: refuse files on pseudo filesystems as passthrough "
` [PATCH RFC 39/41] usb: gadget: f_mass_storage: refuse files on pseudo filesystems
` [PATCH RFC 40/41] erofs: refuse files on pseudo filesystems as backing files
` [PATCH RFC 41/41] selftests/filesystems: add backing file tests for pseudo files

[PATCH -next 0/9] lockdown: fix the securityfs interface and add tests
 2026-11-10  8:35 UTC  (5+ messages)
` [PATCH -next 9/9] selftests/lsm: add lockdown securityfs test

[PATCH v2] evm: fix TOCTOU heap OOB in protected xattr reads
 2026-11-10  8:28 UTC  (4+ messages)

[PATCH v3] ima: fix races when deleting measurement list entries
 2026-11-10  7:31 UTC  (2+ messages)

[PATCH 0/3] vfs: add inode iteration method super_iter_inodes
 2026-11-10  6:29 UTC  (12+ messages)
` [PATCH 1/3] "
` [PATCH 2/3] vfs: convert inode iterators to the unsafe super_iter_inodes()
` [PATCH 3/3] vfs: convert sb->s_inodes iteration to super_iter_inodes()

[PATCH v9 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  6:06 UTC  (8+ messages)
` [PATCH v9 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v9 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v9 3/3] lib: Remove assoc_array

[PATCH net-next 00/14] net: annotate data-races around sysctl knobs
 2026-11-10  5:53 UTC  (37+ messages)
` [PATCH net-next 01/14] ipv4: annotate data-races around ip_rt_* sysctls
` [PATCH net-next 02/14] inet: frags: annotate data-races around fqdir->timeout and fqdir->max_dist
` [PATCH net-next 03/14] ipv6: annotate data-races around addrconf sysctls
` [PATCH net-next 04/14] ipv6: annotate data-races around icmpv6 reply sysctls
` [PATCH net-next 05/14] calipso: annotate data-races around cache sysctls
` [PATCH net-next 06/14] sctp: annotate data-races around sctp sysctls
` [PATCH net-next 07/14] mptcp: annotate data-races around pernet sysctls
` [PATCH net-next 08/14] rds: annotate data-races around core rds sysctls
` [PATCH net-next 09/14] netfilter: conntrack: annotate data-races around conntrack sysctls
` [PATCH net-next 10/14] netfilter: bridge: annotate data-races around br_netfilter and nf_log sysctls
` [PATCH net-next 11/14] ipvs: annotate data-races around lblc_expiration and lblcr_expiration
` [PATCH net-next 12/14] net/smc: annotate data-races around smc sysctls
` [PATCH net-next 13/14] netfilter: conntrack: annotate data-races around timeout and tcp sysctls
` [PATCH net-next 14/14] netfilter: cttimeout: annotate data-races around the default timeouts

[PATCH v8 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  5:21 UTC  (8+ messages)
` [PATCH v8 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v8 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v8 3/3] lib: Remove assoc_array

[PATCH v7 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-10  4:11 UTC  (8+ messages)
` [PATCH v7 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v7 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v7 3/3] lib: Remove assoc_array

[PATCH v6 0/9] Extend PKWM to support user-created wrapping keys
 2026-11-10  3:44 UTC  (13+ messages)
` [PATCH v6 1/9] keys/trusted_keys: propagate wrapping key generation errors
` [PATCH v6 2/9] keys/trusted_keys: fix PKWM output buffer cleanup
` [PATCH v6 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
` [PATCH v6 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs

[PATCH v5] KEYS: Protect pkey method checks against type removal
 2026-11-10  3:13 UTC  (10+ messages)
` [PATCH v6] "
    ` [PATCH v7] "

[PATCH] sched/psi: Check CAP_SYS_RESOURCE in the initial user namespace
 2026-11-10  0:49 UTC  (2+ messages)

[GIT PULL] KEYS: changes for v7.4-rc3
 2026-11-10  0:43 UTC  (3+ messages)

[PATCH] selinux: don't label bridged packets in selinux_ip_forward()
 2026-11-09 23:56 UTC  (2+ messages)

[PATCH v3 1/2] KEYS: Return user session keyring on lookup
 2026-11-09 23:54 UTC  (2+ messages)

[PATCH v5 00/12] KEYS: Sanitize the garbage collector
 2026-11-09 23:13 UTC  (29+ messages)
` [PATCH v5 01/12] KEYS: Add key_gc_flush() for draining RCU callbacks
` [PATCH v5 02/12] dns_resolver: Move the key type into a separate module
` [PATCH v5 03/12] NFSv4: Clear idmap keyring cache when the last client unloads
` [PATCH v5 04/12] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [PATCH v5 05/12] s390/cert_store: Start tracking subsystem keys
` [PATCH v5 06/12] KEYS: trusted: TEE: Synchronize session lifetime
` [PATCH v5 07/12] KEYS: trusted: TEE: Disable sysfs bind attributes
` [PATCH v5 08/12] rxrpc: Release conn->key when init_connection_security() fails
` [PATCH v5 09/12] rxrpc: Move key types to their own module
` [PATCH v5 10/12] KEYS: Pin the backing kernel module for a key type
` [PATCH v5 11/12] KEYS: Remove key_type_dead
` [PATCH v5 12/12] KEYS: key_garbage_collector(): process in chunks

[PATCH net v2 0/2] ipv4: do not write shared IP options when sending ICMP errors
 2026-11-09 21:43 UTC  (4+ messages)
` [PATCH net v2 1/2] ipv4: recompile IP options on a private copy in ipv4_send_dest_unreach()
` [PATCH net v2 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()

[PATCH net 0/2] ipv4: unclone skbs before recompiling IP options
 2026-11-09 21:41 UTC  (3+ messages)
` [PATCH net 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()

[RFC v2+] Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix)
 2026-11-09 20:46 UTC 

[PATCH net] cipso: stop modifying live ip_options_rcu
 2026-11-09 20:14 UTC  (4+ messages)

[PATCH] keys/trusted/tpm2: rename "bool" to "boolean"
 2026-11-09 20:13 UTC  (6+ messages)

[PATCH v9 0/3] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-11-09 19:49 UTC  (4+ messages)
` [PATCH v9 1/3] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v9 2/3] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v9 3/3] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces

[RFC PATCH v2 0/3] security: Add PR_CAPBSET_DROP_MASK
 2026-11-09 18:46 UTC  (8+ messages)
` [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops

[PATCH 00/13] mm: continue vma_flags_t conversion
 2026-11-09 17:50 UTC  (25+ messages)
` [PATCH 02/13] mm/filemap: convert fault and readahead logic to use vma_flags_t
` [PATCH 05/13] mm: convert THP VMA flag tests "
` [PATCH 07/13] mm/madvise: convert madvise_vma_behavior() "
` [PATCH 08/13] mm: convert miscellaneous VMA flag tests "

[BUG] bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs
 2026-11-09 15:07 UTC  (4+ messages)

[PATCH v2] KEYS: do not let an unmatched key decide the search result
 2026-11-09 15:02 UTC  (2+ messages)

[PATCH 01/13] mm/gup: convert GUP code to use vma_flags_t
 2026-11-09 13:32 UTC  (2+ messages)

[PATCH 03/13] mm/rmap: convert remaining VMA flag tests to use vma_flags_t
 2026-11-09 13:31 UTC  (2+ messages)

[PATCH 04/13] mm/migrate: convert VMA flag tests to use vma_flags_t
 2026-11-09 13:31 UTC  (2+ messages)

[PATCH 06/13] mm/ksm: convert VMA flag tests to use vma_flags_t
 2026-11-09 13:30 UTC  (2+ messages)

[PATCH net 1/2] ipv4: unshare headers before recompiling IP options in ipv4_send_dest_unreach()
 2026-11-09 13:09 UTC  (3+ messages)

[PATCH v2] ima: fix races when deleting measurement list entries
 2026-11-09 13:06 UTC  (5+ messages)

[RFC] IMA: periodic runtime re-measurement of process .text/GOT
 2026-11-09 11:03 UTC  (6+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox