Linux-Security-Module Archive mirror
 help / color / mirror / Atom feed
 messages from 2023-11-30 09:28:12 to 2023-12-07 17:08:42 UTC [more...]

[PATCH 0/11] vfs: inode cache scalability improvements
 2023-12-07 17:08 UTC  (34+ messages)
` [PATCH 01/11] lib/dlock-list: Distributed and lock-protected lists
` [PATCH 02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants
` [PATCH 03/11] vfs: Use dlock list for superblock's inode list
` [PATCH 04/11] lib/dlock-list: Make sibling CPUs share the same linked list
` [PATCH 05/11] selinux: use dlist for isec inode list
` [PATCH 06/11] vfs: factor out inode hash head calculation
` [PATCH 07/11] hlist-bl: add hlist_bl_fake()
` [PATCH 08/11] vfs: inode cache conversion to hash-bl
` [PATCH 09/11] hash-bl: explicitly initialise hash-bl heads
` [PATCH 10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep
` [PATCH 11/11] hlist-bl: introduced nested locking for dm-snap

[PATCH 0/3] arch/x86: Remove unnecessary dependencies on bootparam.h
 2023-12-07 15:38 UTC  (7+ messages)
` [PATCH 1/3] arch/x86: Move struct pci_setup_rom into pci_setup.h
` [PATCH 2/3] arch/x86: Add <asm/ima-efi.h> for arch_ima_efi_boot_mode
` [PATCH 3/3] arch/x86: Do not include <asm/bootparam.h> in several header files

[PATCH 00/16] fs: use type-safe uid representation for filesystem capabilities
 2023-12-07 14:42 UTC  (34+ messages)
` [PATCH 03/16] capability: rename cpu_vfs_cap_data to vfs_caps
  ` [PATCH 3/16] "
` [PATCH 05/16] capability: provide helpers for converting between xattrs and vfs_caps
` [PATCH 06/16] capability: provide a helper for converting vfs_caps to xattr for userspace
` [PATCH 07/16] fs: add inode operations to get/set/remove fscaps
` [PATCH 08/16] fs: add vfs_get_fscaps()
` [PATCH 09/16] fs: add vfs_set_fscaps()
` [PATCH 11/16] ovl: add fscaps handlers
` [PATCH 12/16] ovl: use vfs_{get,set}_fscaps() for copy-up
` [PATCH 16/16] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr()

BPF LSM prevent program unload
 2023-12-07  9:25 UTC  (2+ messages)

[PATCH 1/2] iouring: one capable call per iouring instance
 2023-12-07  1:23 UTC  (13+ messages)

[PATCH 0/4] listmount changes
 2023-12-06 20:24 UTC  (4+ messages)
` [PATCH 3/4] listmount: small changes in semantics

Apparmor move_mount mediation breaks mount tool in containers
 2023-12-06 19:21 UTC  (9+ messages)

[RFC PATCH v2 00/19] Hypervisor-Enforced Kernel Integrity
 2023-12-06 18:51 UTC  (11+ messages)
` [RFC PATCH v2 17/19] heki: x86: Update permissions counters during text patching

[PATCH v12 bpf-next 00/17] BPF token and BPF FS-based delegation
 2023-12-06 18:24 UTC  (21+ messages)
` [PATCH v12 bpf-next 01/17] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach
` [PATCH v12 bpf-next 02/17] bpf: add BPF token delegation mount options to BPF FS
` [PATCH v12 bpf-next 03/17] bpf: introduce BPF token object
` [PATCH v12 bpf-next 04/17] bpf: add BPF token support to BPF_MAP_CREATE command
` [PATCH v12 bpf-next 05/17] bpf: add BPF token support to BPF_BTF_LOAD command
` [PATCH v12 bpf-next 06/17] bpf: add BPF token support to BPF_PROG_LOAD command
` [PATCH v12 bpf-next 07/17] bpf: take into account BPF token when fetching helper protos
` [PATCH v12 bpf-next 08/17] bpf: consistently use BPF token throughout BPF verifier logic
` [PATCH v12 bpf-next 09/17] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks
` [PATCH v12 bpf-next 10/17] bpf,lsm: refactor bpf_map_alloc/bpf_map_free "
` [PATCH v12 bpf-next 11/17] bpf,lsm: add BPF token "
` [PATCH v12 bpf-next 12/17] libbpf: add bpf_token_create() API
` [PATCH v12 bpf-next 13/17] libbpf: add BPF token support to bpf_map_create() API
` [PATCH v12 bpf-next 14/17] libbpf: add BPF token support to bpf_btf_load() API
` [PATCH v12 bpf-next 15/17] libbpf: add BPF token support to bpf_prog_load() API
` [PATCH v12 bpf-next 16/17] selftests/bpf: add BPF token-enabled tests
` [PATCH v12 bpf-next 17/17] bpf,selinux: allocate bpf_security_struct per BPF token

[PATCH v5 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache
 2023-12-06 16:50 UTC  (28+ messages)

[PATCH net v2] calipso: Fix memory leak in netlbl_calipso_add_pass()
 2023-12-06 15:55 UTC  (5+ messages)

Fw: [PATCH] proc: Update inode upon changing task security attribute
 2023-12-05 22:31 UTC  (5+ messages)

[PATCH 14/16] commoncap: remove cap_inode_getsecurity()
 2023-12-05 21:25 UTC  (2+ messages)

[PATCH 04/16] capability: use vfsuid_t for vfs_caps rootids
 2023-12-05 21:25 UTC  (2+ messages)
` [PATCH 4/16] "

[PATCH] mm: init_mlocked_on_free
 2023-12-05 17:22 UTC  (3+ messages)

[PATCH v11 bpf-next 00/17] BPF token and BPF FS-based delegation
 2023-12-05  9:13 UTC  (13+ messages)
` [PATCH v11 bpf-next 02/17] bpf: add BPF token delegation mount options to BPF FS
` [PATCH v11 bpf-next 03/17] bpf: introduce BPF token object

[PATCH] apparmor: fix possible memory leak in unpack_trans_table
 2023-12-04 18:19 UTC 

[PATCH v2 0/3] clean up io_uring cmd header structure
 2023-12-03 15:22 UTC  (8+ messages)
` [PATCH v2 1/3] io_uring: split out cmd api into a separate header
` [PATCH v2 2/3] io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
` [PATCH v2 3/3] io_uring/cmd: inline io_uring_cmd_get_task

[PATCH v3 0/7] mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
 2023-12-03  2:57 UTC  (10+ messages)
` [PATCH v3 1/7] mm, doc: Add doc for MPOL_F_NUMA_BALANCING
` [PATCH v3 2/7] mm: mempolicy: Revise comment regarding mempolicy mode flags
` [PATCH v3 3/7] mm, security: Fix missed security_task_movememory()
` [PATCH v3 4/7] mm, security: Add lsm hook for memory policy adjustment
` [PATCH v3 5/7] security: selinux: Implement set_mempolicy hook
` [PATCH v3 6/7] selftests/bpf: Add selftests for set_mempolicy with a lsm prog
` [PATCH v3 7/7] NOT kernel/man2/mbind.2: Add mode flag MPOL_F_NUMA_BALANCING

[PATCH v15 bpf-next 0/6] bpf: File verification with LSM and fsverity
 2023-12-02  0:30 UTC  (2+ messages)

[PATCH v7 0/9] Landlock: IOCTL support
 2023-12-01 19:55 UTC  (12+ messages)
` [PATCH v7 1/9] landlock: Remove remaining "inline" modifiers in .c files
` [PATCH v7 2/9] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests
` [PATCH v7 3/9] landlock: Optimize the number of calls to get_access_mask slightly
` [PATCH v7 4/9] landlock: Add IOCTL access right
` [PATCH v7 5/9] selftests/landlock: Test IOCTL support
` [PATCH v7 6/9] selftests/landlock: Test IOCTL with memfds
` [PATCH v7 7/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)
` [PATCH v7 8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL
` [PATCH v7 9/9] landlock: Document IOCTL support

[PATCH v6 0/9] Landlock: IOCTL support
 2023-12-01 14:05 UTC  (9+ messages)
` [PATCH v6 1/9] landlock: Remove remaining "inline" modifiers in .c files
` [PATCH v6 4/9] landlock: Add IOCTL access right
` [PATCH v6 5/9] selftests/landlock: Test IOCTL support

[PATCH v7 19/23] ima: Move to LSM infrastructure
 2023-12-01  0:00 UTC  (6+ messages)
` [PATCH v7 20/23] ima: Move IMA-Appraisal "
` [PATCH v7 21/23] evm: Move "
` [PATCH v7 22/23] integrity: Remove 'integrity' LSM and move integrity functions to 'ima' LSM
` [PATCH v7 23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache

[PATCH] proc: Update inode upon changing task security attribute
 2023-11-30 18:00 UTC  (3+ messages)

[PATCH v2 0/2] Extend Landlock test to improve rule's coverage
 2023-11-30  9:36 UTC  (3+ messages)
` [PATCH v2 1/2] selftests/landlock: Add tests to check unknown rule's access rights
` [PATCH v2 2/2] selftests/landlock: Add tests to check unhandled "

[PATCH v5 0/7] Landlock: IOCTL support
 2023-11-30  9:28 UTC  (5+ messages)
` [PATCH v5 3/7] selftests/landlock: Test "


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).