messages from 2024-03-28 20:46:56 to 2024-04-30 03:21:15 UTC [more...]
[PATCHBOMB v5.6] fs-verity support for XFS
2024-04-30 3:21 UTC (12+ messages)
` [PATCHSET v5.6 1/2] fs-verity: support merkle tree access by blocks
` [PATCH 01/18] fs: add FS_XFLAG_VERITY for verity files
` [PATCH 02/18] fsverity: pass tree_blocksize to end_enable_verity()
` [PATCH 03/18] fsverity: convert verification to use byte instead of page offsets
` [PATCH 04/18] fsverity: support block-based Merkle tree caching
` [PATCH 05/18] fsverity: pass the merkle tree block level to fsverity_read_merkle_tree_block
` [PATCH 06/18] fsverity: add per-sb workqueue for post read processing
` [PATCH 07/18] fsverity: add tracepoints
` [PATCHSET v5.6 2/2] xfs: fs-verity support
` [PATCHSET v5.6] xfsprogs: fs-verity support for XFS
` [PATCHSET v5.6] fstests: "
[PATCHBOMB v5.5] fs-verity support for XFS
2024-04-29 16:35 UTC (111+ messages)
` [PATCHSET v5.5 1/2] fs-verity: support merkle tree access by blocks
` [PATCH 01/13] fs: add FS_XFLAG_VERITY for verity files
` [PATCH 02/13] fsverity: pass tree_blocksize to end_enable_verity()
` [PATCH 03/13] fsverity: support block-based Merkle tree caching
` [PATCH 04/13] fsverity: add per-sb workqueue for post read processing
` [PATCH 05/13] fsverity: add tracepoints
` [PATCH 06/13] fsverity: send the level of the merkle tree block to ->read_merkle_tree_block
` [PATCH 07/13] fsverity: pass the new tree size and block size to ->begin_enable_verity
` [PATCH 08/13] fsverity: expose merkle tree geometry to callers
` [PATCH 09/13] fsverity: box up the write_merkle_tree_block parameters too
` [PATCH 10/13] fsverity: pass the zero-hash value to the implementation
` [PATCH 11/13] fsverity: report validation errors back to the filesystem
` [PATCH 12/13] fsverity: remove system-wide workqueue
` [PATCH 13/13] iomap: integrate fs-verity verification into iomap's read path
` [PATCHSET v5.5 2/2] xfs: fs-verity support
` [PATCH 01/29] xfs: use unsigned ints for non-negative quantities in xfs_attr_remote.c
` [PATCH 02/29] xfs: turn XFS_ATTR3_RMT_BUF_SPACE into a function
` [PATCH 03/29] xfs: create a helper to compute the blockcount of a max sized remote value
` [PATCH 04/29] xfs: minor cleanups of xfs_attr3_rmt_blocks
` [PATCH 05/29] xfs: add attribute type for fs-verity
` [PATCH 06/29] xfs: do not use xfs_attr3_rmt_hdr for remote verity value blocks
` [PATCH 07/29] xfs: add fs-verity ro-compat flag
` [PATCH 08/29] xfs: add inode on-disk VERITY flag
` [PATCH 09/29] xfs: initialize fs-verity on file open and cleanup on inode destruction
` [PATCH 10/29] xfs: don't allow to enable DAX on fs-verity sealed inode
` [PATCH 11/29] xfs: disable direct read path for fs-verity files
` [PATCH 12/29] xfs: widen flags argument to the xfs_iflags_* helpers
` [PATCH 13/29] xfs: add fs-verity support
` [PATCH 14/29] xfs: create a per-mount shrinker for verity inodes merkle tree blocks
` [PATCH 15/29] xfs: create an icache tag for files with cached "
` [PATCH 16/29] xfs: shrink verity blob cache
` [PATCH 17/29] xfs: only allow the verity iflag for regular files
` [PATCH 18/29] xfs: don't store trailing zeroes of merkle tree blocks
` [PATCH 19/29] xfs: use merkle tree offset as attr hash
` [PATCH 20/29] xfs: don't bother storing merkle tree blocks for zeroed data blocks
` [PATCH 21/29] xfs: add fs-verity ioctls
` [PATCH 22/29] xfs: advertise fs-verity being available on filesystem
` [PATCH 23/29] xfs: make scrub aware of verity dinode flag
` [PATCH 24/29] xfs: teach online repair to evaluate fsverity xattrs
` [PATCH 25/29] xfs: report verity failures through the health system
` [PATCH 26/29] xfs: clear the verity iflag when not appropriate
` [PATCH 27/29] xfs: make it possible to disable fsverity
` [PATCH 28/29] xfs: allow verity files to be opened even if the fsverity metadata is damaged
` [PATCH 29/29] xfs: enable ro-compat fs-verity flag
[bug report] kmemleak observed after system boots up
2024-04-29 1:47 UTC (2+ messages)
[RFC PATCH 0/8] Optimize dm-verity and fsverity using multibuffer hashing
2024-04-26 8:56 UTC (12+ messages)
` [RFC PATCH 1/8] crypto: shash - add support for finup2x
` [RFC PATCH 2/8] crypto: testmgr - generate power-of-2 lengths more often
` [RFC PATCH 3/8] crypto: testmgr - add tests for finup2x
` [RFC PATCH 4/8] crypto: x86/sha256-ni - add support "
` [RFC PATCH 5/8] crypto: arm64/sha256-ce "
` [RFC PATCH 6/8] fsverity: improve performance by using multibuffer hashing
` [RFC PATCH 7/8] dm-verity: hash blocks with shash import+finup when possible
` [RFC PATCH 8/8] dm-verity: improve performance by using multibuffer hashing
[PATCH v17 00/21] Integrity Policy Enforcement LSM (IPE)
2024-04-25 20:23 UTC (32+ messages)
` [PATCH v17 01/21] security: add ipe lsm
` [PATCH v17 02/21] ipe: add policy parser
` [PATCH v17 03/21] ipe: add evaluation loop
` [PATCH v17 04/21] ipe: add LSM hooks on execution and kernel read
` [PATCH v17 05/21] initramfs|security: Add a security hook to do_populate_rootfs()
` [PATCH v17 06/21] ipe: introduce 'boot_verified' as a trust provider
` [PATCH v17 07/21] security: add new securityfs delete function
` [PATCH v17 08/21] ipe: add userspace interface
` [PATCH v17 09/21] uapi|audit|ipe: add ipe auditing support
` [PATCH v17 10/21] ipe: add permissive toggle
` [PATCH v17 11/21] block,lsm: add LSM blob and new LSM hooks for block device
` [PATCH v17 12/21] dm: add finalize hook to target_type
` [PATCH v17 13/21] dm verity: consume root hash digest and expose signature data via LSM hook
` [PATCH v17 14/21] ipe: add support for dm-verity as a trust provider
` [PATCH v17 15/21] security: add security_inode_setintegrity() hook
` [PATCH v17 16/21] fsverity: expose verified fsverity built-in signatures to LSMs
` [PATCH v17 17/21] ipe: enable support for fs-verity as a trust provider
` [PATCH v17 18/21] scripts: add boot policy generation program
` [PATCH v17 19/21] ipe: kunit test for parser
` [PATCH v17 20/21] Documentation: add ipe documentation
` [PATCH v17 21/21] MAINTAINERS: ipe: add ipe maintainer information
[PATCH 1/1] fuse: Add initial support for fs-verity
2024-04-23 18:41 UTC (10+ messages)
` [PATCH v2] "
[PATCH v2 0/8] Optimize dm-verity and fsverity using multibuffer hashing
2024-04-22 20:35 UTC (9+ messages)
` [PATCH v2 1/8] crypto: shash - add support for finup2x
` [PATCH v2 2/8] crypto: testmgr - generate power-of-2 lengths more often
` [PATCH v2 3/8] crypto: testmgr - add tests for finup2x
` [PATCH v2 4/8] crypto: x86/sha256-ni - add support "
` [PATCH v2 5/8] crypto: arm64/sha256-ce "
` [PATCH v2 6/8] fsverity: improve performance by using multibuffer hashing
` [PATCH v2 7/8] dm-verity: hash blocks with shash import+finup when possible
` [PATCH v2 8/8] dm-verity: improve performance by using multibuffer hashing
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE)
2024-04-03 5:10 UTC (14+ messages)
` [PATCH v16 01/20] security: add ipe lsm
` [PATCH v16 02/20] ipe: add policy parser
` [PATCH v16 03/20] ipe: add evaluation loop
` [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook
` [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider
[PATCH v16 15/20] security: add security_inode_setintegrity() hook
2024-04-02 1:26 UTC (2+ messages)
[PATCH v16 14/20] ipe: add support for dm-verity as a trust provider
2024-04-02 1:26 UTC (2+ messages)
[PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook
2024-04-02 1:26 UTC (2+ messages)
[PATCH v16 11/20] block|security: add LSM blob to block_device
2024-04-02 1:26 UTC (3+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).