messages from 2026-11-10 09:16:18 to 2026-11-11 15:04:41 UTC [more...]
[PATCH RFC 00/41] fs: don't use pseudo filesystem files as storage
2026-11-11 15:04 UTC (107+ messages)
` [PATCH RFC 01/41] loop: refuse backing files that aren't open for reading
` [PATCH RFC 02/41] nvmet: check that the file backend supports ->{read,write}_iter
` [PATCH RFC 03/41] target: fileio: check that the backing file "
` [PATCH RFC 04/41] fs: add SB_I_PSEUDO
` [PATCH RFC 05/41] kernfs: use fc_init_pseudo()
` [PATCH RFC 06/41] proc: "
` [PATCH RFC 07/41] binfmt_misc: "
` [PATCH RFC 08/41] mqueue: "
` [PATCH RFC 09/41] bpf: use fc_init_pseudo() for bpffs
` [PATCH RFC 10/41] nullfs: use fc_init_pseudo()
` [PATCH RFC 11/41] failfs: "
` [PATCH RFC 12/41] rust_binderfs: "
` [PATCH RFC 13/41] devpts: "
` [PATCH RFC 14/41] debugfs: "
` [PATCH RFC 15/41] tracefs: "
` [PATCH RFC 16/41] configfs: "
` [PATCH RFC 17/41] securityfs: "
` [PATCH RFC 18/41] selinux: use fc_init_pseudo() for selinuxfs
` [PATCH RFC 19/41] smack: use fc_init_pseudo() for smackfs
` [PATCH RFC 20/41] apparmor: use fc_init_pseudo() for apparmorfs
` [PATCH RFC 21/41] nfsd: use fc_init_pseudo()
` [PATCH RFC 22/41] sunrpc: use fc_init_pseudo() for rpc_pipefs
` [PATCH RFC 23/41] fuse: use fc_init_pseudo() for fusectl
` [PATCH RFC 24/41] efivarfs: use fc_init_pseudo()
` [PATCH RFC 25/41] pstore: "
` [PATCH RFC 26/41] xenfs: "
` [PATCH RFC 27/41] openpromfs: "
` [PATCH RFC 28/41] ocfs2: use fc_init_pseudo() for dlmfs
` [PATCH RFC 29/41] s390/hypfs: use fc_init_pseudo()
` [PATCH RFC 30/41] powerpc/spufs: "
` [PATCH RFC 31/41] usb: gadget: f_fs: "
` [PATCH RFC 32/41] usb: gadget: gadgetfs: "
` [PATCH RFC 33/41] fs: add file_is_pseudo()
` [PATCH RFC 34/41] loop: refuse files on pseudo filesystems as backing files
` [PATCH RFC 35/41] zloop: refuse zone files on pseudo filesystems
` [PATCH RFC 36/41] nvmet: refuse files on pseudo filesystems as namespace backing files
` [PATCH RFC 37/41] target: fileio: refuse files on pseudo filesystems as "
` [PATCH RFC 38/41] fuse: refuse files on pseudo filesystems as passthrough "
` [PATCH RFC 39/41] usb: gadget: f_mass_storage: refuse files on pseudo filesystems
` [PATCH RFC 40/41] erofs: refuse files on pseudo filesystems as backing files
` [PATCH RFC 41/41] selftests/filesystems: add backing file tests for pseudo files
[PATCH] userns: Let LSMs deny the CAP_SETFCAP snapshot for mapping uid 0
2026-11-11 14:23 UTC (7+ messages)
[PATCH v6 0/4] initramfs: add support for xattrs in the initial ram disk
2026-11-11 13:45 UTC (3+ messages)
landlock bug: procfs denials because inodes have unstable identity
2026-11-11 11:50 UTC (4+ messages)
[PATCH 0/2] lockdown: Prevent booting with lockdown enabled but IOMMU disabled
2026-11-11 7:30 UTC (2+ messages)
RFC v3 Case Study Verification Results and Request for Reconsideration
2026-11-11 6:46 UTC
[PATCH 0/2] landlock: Fix landlock_restrict_self() on long executable paths
2026-11-11 5:00 UTC (5+ messages)
` [PATCH 1/2] landlock: Fix landlock_restrict_self() failure "
` [PATCH 2/2] selftests/landlock: Test a long executable path
[PATCH 0/2] Fix LSM mediation of PR_SET_SECUREBITS
2026-11-11 2:06 UTC (5+ messages)
` [PATCH 1/2] capabilities: Check PR_SET_SECUREBITS with ns_capable()
` [PATCH 2/2] selftests/landlock: Test PR_SET_SECUREBITS mediation
[PATCH net] cipso: stop modifying live ip_options_rcu
2026-11-11 0:50 UTC (7+ messages)
[PATCH v9 0/3] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
2026-11-10 23:52 UTC (7+ messages)
` [PATCH v9 1/3] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v9 2/3] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v9 3/3] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces
[Case Study] CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation
2026-11-10 21:52 UTC (2+ messages)
[PATCH 0/6] Fix Landlock mediation of capabilities guarding LSM policies
2026-11-10 21:02 UTC (13+ messages)
` [PATCH 1/6] lsm: Add a capable_lsm hook for capabilities guarding an LSM's policy
` [PATCH 2/6] landlock: Restrict capabilities guarding other LSMs' policies
` [PATCH 3/6] apparmor: Use security_capable_lsm() for policy capabilities
` [PATCH 4/6] smack: Use security_capable_lsm() for privilege checks
` [PATCH 5/6] selinux: Use security_capable_lsm() for CAP_MAC_ADMIN checks
` [PATCH 6/6] selftests/landlock: Test capabilities guarding other LSMs' policies
[PATCH 0/6] Fix Landlock mediation of commoncap's capability checks
2026-11-10 20:55 UTC (13+ messages)
` [PATCH 1/6] landlock: Factor out capability denial checks
` [PATCH 2/6] landlock: Mediate CAP_SYS_RAWIO for mappings below mmap_min_addr
` [PATCH 3/6] landlock: Mediate CAP_SETPCAP for inheritable capabilities
` [PATCH 4/6] landlock: Mediate CAP_SYS_ADMIN for the admin memory reserve
` [PATCH 5/6] selftests/landlock: Test capability checks outside the capable hook
` [PATCH 6/6] landlock: Fix capability restriction documentation
[RFC PATCH v3 0/6] security: introduce Kernel Assurance Plane
2026-11-10 20:51 UTC (12+ messages)
` [RFC PATCH v3 1/6] docs: security: Describe the Kernel Assurance Plane design
` [RFC PATCH v3 2/6] security: kap: add the LSM ID and internal headers
` [RFC PATCH v3 3/6] security: add the Kernel Assurance Plane LSM
` [RFC PATCH v3 4/6] security: kap: add the securityfs control plane
` [RFC PATCH v3 5/6] kernel: add KAP checks for unshare and setns
` [RFC PATCH v3 6/6] MAINTAINERS: add an entry for the Kernel Assurance Plane
[PATCH] ima: fix kexec measurement buffer overflow after failed loads
2026-11-10 20:07 UTC (2+ messages)
[PATCH v3 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
2026-11-10 16:52 UTC (2+ messages)
[PATCH 0/8] userns: per-namespace capability bounding set and opt-in netns loopback
2026-11-10 15:31 UTC (5+ messages)
[PATCH net v2 0/2] ipv4: do not write shared IP options when sending ICMP errors
2026-11-10 14:04 UTC (6+ messages)
` [PATCH net v2 1/2] ipv4: recompile IP options on a private copy in ipv4_send_dest_unreach()
` [PATCH net v2 2/2] cipso: unshare headers before recompiling IP options in cipso_v4_error()
[PATCH -next -v2 0/8] lockdown: fix the securityfs interface and add tests
2026-11-10 13:42 UTC (18+ messages)
` [PATCH -next -v2 1/8] lockdown: Add break in lockdown_write
` [PATCH -next -v2 2/8] lockdown: remove useless decrement operation
` [PATCH -next -v2 3/8] lockdown: select SECURITYFS
` [PATCH -next -v2 4/8] lsm: remove unused lockdown audit data
` [PATCH -next -v2 5/8] lockdown: drop an unused include and move lockdown_reasons
` [PATCH -next -v2 6/8] lockdown: bound the status string with scnprintf
` [PATCH -next -v2 7/8] Documentation/ABI: document the lockdown securityfs file
` [PATCH -next -v2 8/8] selftests/lsm: add lockdown securityfs test
[PATCH] keys/trusted/tpm2: rename "bool" to "boolean"
2026-11-10 12:38 UTC (3+ messages)
[PATCH net-next 00/14] net: annotate data-races around sysctl knobs
2026-11-10 11:28 UTC (3+ messages)
` [PATCH net-next 07/14] mptcp: annotate data-races around pernet sysctls
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox