messages from 2026-11-10 20:24:55 to 2026-11-12 10:05:04 UTC [more...]
[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
2026-11-12 10:04 UTC (11+ messages)
` [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
` [Linaro-mm-sig] "
` [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg
` [Linaro-mm-sig] "
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
` [Linaro-mm-sig] "
[PATCH] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
2026-11-12 8:33 UTC (12+ messages)
` [RFC PATCH v2 1/2] "
` [RFC PATCH v2 2/2] landlock: Add a test for REFER layer composition with network layer
` [PATCH v3 1/2] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
` [PATCH v3 2/2] landlock: Add a test for REFER layer composition with network layer
[PATCH v6 00/13] KEYS: Sanitize the garbage collector
2026-11-12 8:11 UTC (28+ messages)
` [PATCH v6 01/13] KEYS: Add key_gc_flush() for draining RCU callbacks
` [PATCH v6 02/13] dns_resolver: Move the key type into a separate module
` [PATCH v6 03/13] NFSv4: Clear idmap keyring cache when the last client unloads
` [PATCH v6 04/13] smb: client: Clear idmap/SPNEGO caches when the last session is unloaded
` [PATCH v6 05/13] s390/cert_store: Start tracking subsystem keys
` [PATCH v6 06/13] KEYS: trusted: Update static calls before init
` [PATCH v6 07/13] KEYS: trusted: TEE: Synchronize session lifetime
` [PATCH v6 08/13] KEYS: trusted: TEE: Disable sysfs bind attributes
` [PATCH v6 09/13] rxrpc: Release conn->key when init_connection_security() fails
` [PATCH v6 10/13] rxrpc: Move key types to their own module
` [PATCH v6 11/13] KEYS: Pin the backing kernel module for a key type
` [PATCH v6 12/13] KEYS: Remove key_type_dead
` [PATCH v6 13/13] KEYS: key_garbage_collector(): process in chunks
[PATCH] ima: reject duplicate fsname= in a policy rule
2026-11-12 7:05 UTC (2+ messages)
[PATCH 00/13] mm: continue vma_flags_t conversion
2026-11-12 5:36 UTC (3+ messages)
` [PATCH 08/13] mm: convert miscellaneous VMA flag tests to use vma_flags_t
[PATCH net-next 00/14] net: annotate data-races around sysctl knobs
2026-11-12 4:54 UTC (3+ messages)
` [PATCH net-next 12/14] net/smc: annotate data-races around smc sysctls
[PATCH] ima: fix kexec measurement buffer overflow after failed loads
2026-11-12 2:07 UTC (2+ messages)
[PATCH RFC 00/41] fs: don't use pseudo filesystem files as storage
2026-11-12 1:50 UTC (29+ messages)
` [PATCH RFC 01/41] loop: refuse backing files that aren't open for reading
` [PATCH RFC 02/41] nvmet: check that the file backend supports ->{read,write}_iter
` [PATCH RFC 03/41] target: fileio: check that the backing file "
` [PATCH RFC 04/41] fs: add SB_I_PSEUDO
` [PATCH RFC 05/41] kernfs: use fc_init_pseudo()
` [PATCH RFC 06/41] proc: "
` [PATCH RFC 08/41] mqueue: "
` [PATCH RFC 09/41] bpf: use fc_init_pseudo() for bpffs
` [PATCH RFC 10/41] nullfs: use fc_init_pseudo()
` [PATCH RFC 11/41] failfs: "
` [PATCH RFC 16/41] configfs: "
` [PATCH RFC 19/41] smack: use fc_init_pseudo() for smackfs
` [apparmor] "
` [PATCH RFC 38/41] fuse: refuse files on pseudo filesystems as passthrough backing files
` [PATCH RFC 40/41] erofs: refuse files on pseudo filesystems as "
[PATCH 0/2] KEYS: two fixes for the asymmetric keyctl operations
2026-11-11 23:01 UTC (7+ messages)
` [PATCH 1/2] KEYS: fix signature length passed to KEYCTL_PKEY_VERIFY
` [PATCH 2/2] KEYS: asymmetric: Fix PKCS#1 decryption of an empty message
[PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM
2026-11-11 21:17 UTC (2+ messages)
[PATCH bpf] bpf, lsm: Mark backing_file_alloc/free LSM hooks as untrusted
2026-11-11 21:02 UTC (2+ messages)
[PATCH] userns: security: Inform LSMs of capability check during userns creation
2026-11-11 20:58 UTC
[PATCH] security: smack: fix typo in kernel-doc
2026-11-11 19:27 UTC (2+ messages)
[PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk
2026-11-11 18:44 UTC (4+ messages)
[PATCH 0/6] Fix Landlock mediation of commoncap's capability checks
2026-11-11 18:28 UTC (14+ messages)
` [PATCH 1/6] landlock: Factor out capability denial checks
` [PATCH 2/6] landlock: Mediate CAP_SYS_RAWIO for mappings below mmap_min_addr
` [PATCH 3/6] landlock: Mediate CAP_SETPCAP for inheritable capabilities
` [PATCH 4/6] landlock: Mediate CAP_SYS_ADMIN for the admin memory reserve
` [PATCH 5/6] selftests/landlock: Test capability checks outside the capable hook
` [PATCH 6/6] landlock: Fix capability restriction documentation
[PATCH] selftests/capabilities: test_execve: drop supplementary groups
2026-11-11 16:58 UTC (2+ messages)
[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
2026-11-11 15:20 UTC (6+ messages)
[PATCH] userns: Let LSMs deny the CAP_SETFCAP snapshot for mapping uid 0
2026-11-11 14:23 UTC (3+ messages)
landlock bug: procfs denials because inodes have unstable identity
2026-11-11 11:50 UTC (4+ messages)
[PATCH 0/2] lockdown: Prevent booting with lockdown enabled but IOMMU disabled
2026-11-11 7:30 UTC (2+ messages)
RFC v3 Case Study Verification Results and Request for Reconsideration
2026-11-11 6:46 UTC
[PATCH 0/2] landlock: Fix landlock_restrict_self() on long executable paths
2026-11-11 5:00 UTC (5+ messages)
` [PATCH 1/2] landlock: Fix landlock_restrict_self() failure "
` [PATCH 2/2] selftests/landlock: Test a long executable path
[PATCH 0/2] Fix LSM mediation of PR_SET_SECUREBITS
2026-11-11 2:06 UTC (5+ messages)
` [PATCH 1/2] capabilities: Check PR_SET_SECUREBITS with ns_capable()
` [PATCH 2/2] selftests/landlock: Test PR_SET_SECUREBITS mediation
[PATCH net] cipso: stop modifying live ip_options_rcu
2026-11-11 0:50 UTC (2+ messages)
[PATCH v9 0/3] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-11-10 23:52 UTC (7+ messages)
` [PATCH v9 1/3] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v9 2/3] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v9 3/3] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces
[Case Study] CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation
2026-11-10 21:52 UTC (2+ messages)
[PATCH 0/6] Fix Landlock mediation of capabilities guarding LSM policies
2026-11-10 21:02 UTC (13+ messages)
` [PATCH 1/6] lsm: Add a capable_lsm hook for capabilities guarding an LSM's policy
` [PATCH 2/6] landlock: Restrict capabilities guarding other LSMs' policies
` [PATCH 3/6] apparmor: Use security_capable_lsm() for policy capabilities
` [PATCH 4/6] smack: Use security_capable_lsm() for privilege checks
` [PATCH 5/6] selinux: Use security_capable_lsm() for CAP_MAC_ADMIN checks
` [PATCH 6/6] selftests/landlock: Test capabilities guarding other LSMs' policies
[RFC PATCH v3 0/6] security: introduce Kernel Assurance Plane
2026-11-10 20:51 UTC (11+ messages)
` [RFC PATCH v3 1/6] docs: security: Describe the Kernel Assurance Plane design
` [RFC PATCH v3 2/6] security: kap: add the LSM ID and internal headers
` [RFC PATCH v3 3/6] security: add the Kernel Assurance Plane LSM
` [RFC PATCH v3 4/6] security: kap: add the securityfs control plane
` [RFC PATCH v3 5/6] kernel: add KAP checks for unshare and setns
page: | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox