Linux Security Modules development
 help / color / mirror / Atom feed
 messages from 2026-11-12 07:01:14 to 2026-11-14 13:20:02 UTC [more...]

[PATCH RFC v2 00/42] fs: don't use pseudo filesystem files as storage
 2026-11-14 13:20 UTC  (63+ messages)
` [PATCH RFC v2 01/42] loop: refuse backing files that aren't open for reading
` [PATCH RFC v2 02/42] nvmet: check that the file backend supports ->{read,write}_iter
` [PATCH RFC v2 03/42] target: fileio: check that the backing file "
` [PATCH RFC v2 04/42] fs: add SB_I_PSEUDO
` [PATCH RFC v2 05/42] kernfs: use fc_init_pseudo()
` [PATCH RFC v2 06/42] proc: "
` [PATCH RFC v2 07/42] binfmt_misc: "
` [PATCH RFC v2 08/42] mqueue: "
` [PATCH RFC v2 09/42] bpf: use fc_init_pseudo() for bpffs
` [PATCH RFC v2 10/42] nullfs: use fc_init_pseudo()
` [PATCH RFC v2 11/42] failfs: "
` [PATCH RFC v2 12/42] rust_binderfs: "
` [PATCH RFC v2 13/42] devpts: "
` [PATCH RFC v2 14/42] debugfs: "
` [PATCH RFC v2 15/42] tracefs: "
` [PATCH RFC v2 16/42] configfs: "
` [PATCH RFC v2 17/42] securityfs: "
` [PATCH RFC v2 18/42] selinux: use fc_init_pseudo() for selinuxfs
` [PATCH RFC v2 19/42] smack: use fc_init_pseudo() for smackfs
` [PATCH RFC v2 20/42] apparmor: use fc_init_pseudo() for apparmorfs
` [PATCH RFC v2 21/42] nfsd: use fc_init_pseudo()
` [PATCH RFC v2 22/42] sunrpc: use fc_init_pseudo() for rpc_pipefs
` [PATCH RFC v2 23/42] fuse: use fc_init_pseudo() for fusectl
` [PATCH RFC v2 24/42] efivarfs: use fc_init_pseudo()
` [PATCH RFC v2 25/42] pstore: "
` [PATCH RFC v2 26/42] xenfs: "
` [PATCH RFC v2 27/42] openpromfs: "
` [PATCH RFC v2 28/42] ocfs2: use fc_init_pseudo() for dlmfs
` [PATCH RFC v2 29/42] s390/hypfs: use fc_init_pseudo()
` [PATCH RFC v2 30/42] powerpc/spufs: "
` [PATCH RFC v2 31/42] usb: gadget: f_fs: "
` [PATCH RFC v2 32/42] usb: gadget: gadgetfs: "
` [PATCH RFC v2 33/42] fs: add file_check_backing()
` [PATCH RFC v2 34/42] loop: refuse files on pseudo filesystems as backing files
` [PATCH RFC v2 35/42] zloop: refuse zone files on pseudo filesystems
` [PATCH RFC v2 36/42] nvmet: refuse files on pseudo filesystems as namespace backing files
` [PATCH RFC v2 37/42] target: fileio: refuse files on pseudo filesystems as "
` [PATCH RFC v2 38/42] fuse: refuse files on pseudo filesystems as passthrough "
` [PATCH RFC v2 39/42] usb: gadget: f_mass_storage: refuse files on pseudo filesystems
` [PATCH RFC v2 40/42] erofs: refuse files on pseudo filesystems as backing files
` [PATCH RFC v2 41/42] acct: refuse files on pseudo filesystems
` [PATCH RFC v2 42/42] selftests/filesystems: add backing file tests for pseudo files

[PATCH v2] cred: annotate data race on non_rcu when copying a cred
 2026-11-14 12:46 UTC  (3+ messages)

[PATCH RFC 00/41] fs: don't use pseudo filesystem files as storage
 2026-11-14 11:55 UTC  (60+ messages)
` [PATCH RFC 01/41] loop: refuse backing files that aren't open for reading
` [PATCH RFC 04/41] fs: add SB_I_PSEUDO
` [PATCH RFC 05/41] kernfs: use fc_init_pseudo()
` [PATCH RFC 06/41] proc: "
` [PATCH RFC 07/41] binfmt_misc: "
` [PATCH RFC 08/41] mqueue: "
` [PATCH RFC 09/41] bpf: use fc_init_pseudo() for bpffs
` [PATCH RFC 10/41] nullfs: use fc_init_pseudo()
` [PATCH RFC 13/41] devpts: "
` [PATCH RFC 14/41] debugfs: "
` [PATCH RFC 15/41] tracefs: "
` [PATCH RFC 16/41] configfs: "
` [PATCH RFC 17/41] securityfs: "
` [PATCH RFC 18/41] selinux: use fc_init_pseudo() for selinuxfs
` [PATCH RFC 19/41] smack: use fc_init_pseudo() for smackfs
` [PATCH RFC 20/41] apparmor: use fc_init_pseudo() for apparmorfs
` [PATCH RFC 22/41] sunrpc: use fc_init_pseudo() for rpc_pipefs
` [PATCH RFC 23/41] fuse: use fc_init_pseudo() for fusectl
` [PATCH RFC 24/41] efivarfs: use fc_init_pseudo()
` [PATCH RFC 25/41] pstore: "
` [PATCH RFC 33/41] fs: add file_is_pseudo()
` [PATCH RFC 34/41] loop: refuse files on pseudo filesystems as backing files
` [PATCH RFC 35/41] zloop: refuse zone files on pseudo filesystems
` [PATCH RFC 38/41] fuse: refuse files on pseudo filesystems as passthrough backing files
` [PATCH RFC 39/41] usb: gadget: f_mass_storage: refuse files on pseudo filesystems
` [PATCH RFC 40/41] erofs: refuse files on pseudo filesystems as backing files
` [PATCH RFC 41/41] selftests/filesystems: add backing file tests for pseudo files

[PATCH bpf] bpf, lsm: Mark backing_file_alloc/free LSM hooks as untrusted
 2026-11-14  6:10 UTC  (2+ messages)

[PATCH v10 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-14  3:32 UTC  (9+ messages)
` [PATCH v10 1/3] KEYS: Introduce keyring_is_empty()
` [PATCH v10 2/3] KEYS: Replace assoc_array with rhashtable
` [PATCH v10 3/3] lib: Remove assoc_array

ima/evm: security.ima and security.evm get written to frozen filesystems
 2026-11-13 23:55 UTC 

[PATCH] userns: security: Inform LSMs of capability check during userns creation
 2026-11-13 21:54 UTC  (3+ messages)

[PATCH v2 0/3] ima: keep kexec dump state tied to installed image
 2026-11-13 20:50 UTC  (8+ messages)
` [PATCH v2 1/3] kexec_file: update IMA after machine post-load
` [PATCH v2 2/3] ima: keep kexec dump state tied to installed image
` [PATCH v2 3/3] ima: clear kexec state when replacing file image

[PATCH v3 0/5] landlock: Fix REFER in layered domains
 2026-11-13 20:49 UTC  (11+ messages)
` [PATCH v3 1/5] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
` [PATCH v3 2/5] landlock: Add KUnit test for landlock_get_fs_access_mask()
` [PATCH v3 3/5] selftests/landlock: Test that layering does not break refer
` [PATCH v3 4/5] landlock: Simplify landlock_get_fs_access_mask()
` [PATCH v3 5/5] landlock: Clarify implicit handling of LANDLOCK_ACCESS_FS_REFER

[PATCH v2 0/4] landlock: Fix REFER in layered domains
 2026-11-13 20:16 UTC  (14+ messages)
` [PATCH v2 1/4] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
` [PATCH v2 2/4] selftests/landlock: Test that layering does not break refer
` [PATCH v2 3/4] landlock: Simplify landlock_get_fs_access_mask()
` [PATCH v2 4/4] landlock: Clarify implicit handling of LANDLOCK_ACCESS_FS_REFER

[PATCH v10 0/3] capabilities: close the ways around the CAP_SETFCAP rule for uid 0
 2026-11-13 20:16 UTC  (8+ messages)
` [PATCH v10 1/3] userns: don't let setns() lend CAP_SETFCAP
` [PATCH v10 2/3] capabilities: don't let ptrace borrow CAP_SETFCAP
` [PATCH v10 3/3] selftests/namespaces: test the CAP_SETFCAP rule for user namespaces

[PATCH net] cipso: stop modifying live ip_options_rcu
 2026-11-13 19:26 UTC  (3+ messages)

[GIT PULL] KEYS: changes for v7.4-rc3-2
 2026-11-13 19:14 UTC 

[PATCH net-next 14/14] netfilter: cttimeout: annotate data-races around the default timeouts
 2026-11-13 17:20 UTC  (3+ messages)

[PATCH net-next 00/14] net: annotate data-races around sysctl knobs
 2026-11-13 17:19 UTC  (15+ messages)
` [PATCH net-next 02/14] inet: frags: annotate data-races around fqdir->timeout and fqdir->max_dist
` [PATCH net-next 03/14] ipv6: annotate data-races around addrconf sysctls
` [PATCH net-next 04/14] ipv6: annotate data-races around icmpv6 reply sysctls
` [PATCH net-next 08/14] rds: annotate data-races around core rds sysctls
` [PATCH net-next 09/14] netfilter: conntrack: annotate data-races around conntrack sysctls
` [PATCH net-next 11/14] ipvs: annotate data-races around lblc_expiration and lblcr_expiration
` [PATCH net-next 13/14] netfilter: conntrack: annotate data-races around timeout and tcp sysctls

[PATCH net-next 10/14] netfilter: bridge: annotate data-races around br_netfilter and nf_log sysctls
 2026-11-13 17:16 UTC  (3+ messages)

[PATCH net-next 06/14] sctp: annotate data-races around sctp sysctls
 2026-11-13 17:14 UTC  (3+ messages)

[PATCH net-next 05/14] calipso: annotate data-races around cache sysctls
 2026-11-13 17:14 UTC  (3+ messages)

[PATCH net-next 01/14] ipv4: annotate data-races around ip_rt_* sysctls
 2026-11-13 17:09 UTC  (3+ messages)

[PATCH v4] ima: fix races when deleting measurement list records
 2026-11-13 15:06 UTC  (2+ messages)

[PATCH v2 0/3] vfs: add inode iteration methods
 2026-11-13 12:23 UTC  (5+ messages)
` [PATCH v2 1/3] "
` [PATCH v2 2/3] vfs: convert inode iterators to super_iter_inodes_unsafe()
` [PATCH v2 3/3] vfs: convert sb->s_inodes iteration to super_iter_inodes()

[BUG] bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs
 2026-11-13  2:41 UTC  (6+ messages)

[PATCH v3 -next 00/18] landlock: Add READ_METADATA and WRITE_METADATA access rights
 2026-11-13  2:07 UTC  (3+ messages)

[PATCH] security: update lockdown_reasons[] reference
 2026-11-13  1:50 UTC  (4+ messages)

社長の会社の「エース」、いつ辞めますか?【経営者限定セミナー】
 2026-11-13  0:33 UTC 

[PATCH 0/3] landlock: Fix REFER in layered domains
 2026-11-12 23:24 UTC  (3+ messages)

[PATCH v5] security: Expand task_setscheduler LSM hook
 2026-11-12 22:46 UTC  (2+ messages)

[PATCH 0/2] lockdown: Prevent booting with lockdown enabled but IOMMU disabled
 2026-11-12 19:27 UTC  (3+ messages)

[PATCH] ima: bound line scan in ima_read_policy() to fix OOB read
 2026-11-12 14:38 UTC  (3+ messages)
` [PATCH] ima: Fix out-of-bounds read in ima_read_policy()

[PATCH net v2 0/2] ipv4: do not write shared IP options when sending ICMP errors
 2026-11-12 14:28 UTC  (4+ messages)
` [PATCH net v2 1/2] ipv4: recompile IP options on a private copy in ipv4_send_dest_unreach()

[PATCH v9 0/3] KEYS: Replace assoc_array with rhashtable
 2026-11-12 14:19 UTC  (2+ messages)

[PATCH 0/2] Fix LSM mediation of PR_SET_SECUREBITS
 2026-11-12 13:02 UTC  (3+ messages)
` [PATCH 1/2] capabilities: Check PR_SET_SECUREBITS with ns_capable()

[PATCH] ima: fix kexec measurement buffer overflow after failed loads
 2026-11-12 12:56 UTC  (3+ messages)

[PATCH v4 0/8] memcg: dma-buf cgroup accounting and charge transfer
 2026-11-12 10:35 UTC  (12+ messages)
` [PATCH v4 1/8] memcg: Add MEMCG_DMABUF accounting infrastructure
  ` [Linaro-mm-sig] "
` [PATCH v4 2/8] dma-heap: charge dma-buf memory via explicit memcg
  ` [Linaro-mm-sig] "
` [PATCH v4 3/8] dma-buf: transfer memcg charges via DMA_BUF_IOCTL_XFER_CHARGE
  ` [Linaro-mm-sig] "

[PATCH v3] ima: fix races when deleting measurement list entries
 2026-11-12 10:34 UTC  (2+ messages)

[PATCH] landlock: Fix layer composition of LANDLOCK_ACCESS_FS_REFER
 2026-11-12  8:33 UTC  (7+ messages)
` [PATCH v3 1/2] "
  ` [PATCH v3 2/2] landlock: Add a test for REFER layer composition with network layer

[PATCH v6 00/13] KEYS: Sanitize the garbage collector
 2026-11-12  8:11 UTC  (2+ messages)

[PATCH] ima: reject duplicate fsname= in a policy rule
 2026-11-12  7:05 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox