Linux-Security-Module Archive mirror
 help / color / mirror / Atom feed
 messages from 2024-01-31 14:06:17 to 2024-02-12 05:12:04 UTC [more...]

[PATCH] KEYS: encrypted: Add check for strsep
 2024-02-12  5:11 UTC  (12+ messages)

[PATCH v9 0/8] Landlock: IOCTL support
 2024-02-10 11:49 UTC  (12+ messages)
` [PATCH v9 1/8] landlock: Add IOCTL access right
` [PATCH v9 2/8] selftests/landlock: Test IOCTL support
` [PATCH v9 3/8] selftests/landlock: Test IOCTL with memfds
` [PATCH v9 4/8] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)
` [PATCH v9 5/8] selftests/landlock: Test IOCTLs on named pipes
` [PATCH v9 6/8] selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets
` [PATCH v9 7/8] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL
` [PATCH v9 8/8] landlock: Document IOCTL support

[PATCH v3 00/13] security: digest_cache LSM
 2024-02-09 23:00 UTC  (15+ messages)
` [PATCH v3 01/13] lib: Add TLV parser
` [PATCH v3 02/13] security: Introduce the digest_cache LSM
` [PATCH v3 03/13] digest_cache: Add securityfs interface
` [PATCH v3 04/13] digest_cache: Add hash tables and operations
` [PATCH v3 05/13] digest_cache: Populate the digest cache from a digest list
` [PATCH v3 06/13] digest_cache: Parse tlv digest lists
` [PATCH v3 07/13] digest_cache: Parse rpm "
` [PATCH v3 08/13] digest_cache: Add management of verification data
` [PATCH v3 09/13] digest_cache: Add support for directories
` [PATCH v3 10/13] digest cache: Prefetch digest lists if requested
` [PATCH v3 11/13] digest_cache: Reset digest cache on file/directory change
` [PATCH v3 12/13] selftests/digest_cache: Add selftests for digest_cache LSM
` [PATCH v3 13/13] docs: Add documentation of the "

[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions
 2024-02-09 17:33 UTC  (3+ messages)

[PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure
 2024-02-09 12:02 UTC  (42+ messages)
` [PATCH v9 10/25] security: Introduce inode_post_setattr hook
` [PATCH v9 11/25] security: Introduce inode_post_removexattr hook
` [PATCH v9 12/25] security: Introduce file_post_open hook
` [PATCH v9 13/25] security: Introduce file_release hook
` [PATCH v9 14/25] security: Introduce path_post_mknod hook
` [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook
` [PATCH v9 16/25] security: Introduce inode_post_set_acl hook
` [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook
` [PATCH v9 20/25] ima: Move to LSM infrastructure
` [PATCH v9 21/25] ima: Move IMA-Appraisal "
` [PATCH v9 22/25] evm: Move "
` [PATCH v9 0/25] security: Move IMA and EVM to the "

Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks
 2024-02-08 14:28 UTC  (4+ messages)

[PATCH v9 25/25] integrity: Remove LSM
 2024-02-08  3:18 UTC  (2+ messages)

[PATCH v9 23/25] evm: Make it independent from 'integrity' LSM
 2024-02-08  3:18 UTC  (2+ messages)

[PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA
 2024-02-08  3:18 UTC  (2+ messages)

[PATCH v9 18/25] security: Introduce key_post_create_or_update hook
 2024-02-08  3:18 UTC  (2+ messages)

[PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 8/25] "

[PATCH v9 09/25] security: Align inode_setattr hook definition with EVM
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 9/25] "

[PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 7/25] "

[PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 6/25] "

[PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 5/25] "

[PATCH v9 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 4/25] "

[PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 3/25] "

[PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 2/25] "

[PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure
 2024-02-08  3:18 UTC  (2+ messages)
` [PATCH v9 1/25] "

[PATCH v2 0/3] fs/exec: remove current->in_execve flag
 2024-02-08  0:57 UTC  (17+ messages)
` [PATCH v2 1/3] LSM: add security_execve_abort() hook
` [PATCH v2 2/3] tomoyo: replace current->in_execve flag with "
` [PATCH v2 3/3] fs/exec: remove current->in_execve flag

smack: Possible NULL pointer deref in cred_free hook
 2024-02-07 18:53 UTC  (4+ messages)

[PATCH v3 0/3] fs/exec: remove current->in_execve flag
 2024-02-07 16:01 UTC  (8+ messages)
` [PATCH v3 1/3] LSM: add security_execve_abort() hook
` [PATCH v3 2/3] tomoyo: replace current->in_execve flag with "
` [PATCH v3 3/3] fs/exec: remove current->in_execve flag

[PATCH v9 0/4] Reduce overhead of LSMs with static calls
 2024-02-07 12:49 UTC  (5+ messages)
` [PATCH v9 1/4] kernel: Add helper macros for loop unrolling
` [PATCH v9 2/4] security: Count the LSMs enabled at compile time
` [PATCH v9 3/4] security: Replace indirect LSM hook calls with static calls
` [PATCH v9 4/4] bpf: Only enable BPF LSM hooks when an LSM program is attached

[PATCH v2 1/1] netlabel: cleanup struct netlbl_lsm_catmap
 2024-02-07 12:40 UTC  (3+ messages)

[PATCH v2 0/9] evm: Support signatures on stacked filesystem
 2024-02-07  5:04 UTC  (20+ messages)
` [PATCH v2 1/9] ima: Rename backing_inode to real_inode
` [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs
` [PATCH v2 3/9] evm: Implement per signature type decision in security_inode_copy_up_xattr
` [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file
` [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash
` [PATCH v2 6/9] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
` [PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED
` [PATCH v2 8/9] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs
` [PATCH v2 9/9] ima: Record i_version of real_inode for change detection

ANN: moving lsm/dev to v6.8-rc3
 2024-02-07  0:13 UTC 

[RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider
 2024-02-06 21:53 UTC  (4+ messages)
` [PATCH RFC "

[PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook
 2024-02-06  1:29 UTC 

[RFC PATCH v12 08/20] ipe: add userspace interface
 2024-02-05 23:21 UTC  (5+ messages)
` [PATCH RFC v12 8/20] "

[RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider
 2024-02-05 22:39 UTC  (3+ messages)
` [PATCH RFC v12 6/20] "

[RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack
 2024-02-05 21:18 UTC  (3+ messages)
` [PATCH RFC v12 5/20] "

[PATCH 02/13] Add TSEM specific documentation
 2024-02-05 16:09 UTC  (4+ messages)
` [PATCH 2/13] "

[PATCH v5 0/6] DCP as trusted keys backend
 2024-02-05  8:39 UTC  (2+ messages)

[ANNOUNCE] CFP: Linux Security Summit Europe 2024
 2024-02-05  7:45 UTC 

[RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider
 2024-02-03 22:25 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v12 10/20] ipe: add permissive toggle
 2024-02-03 22:25 UTC  (2+ messages)
` [PATCH RFC "

[RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support
 2024-02-03 22:25 UTC  (2+ messages)
` [PATCH RFC v12 9/20] "

[RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE)
 2024-02-03  3:56 UTC  (4+ messages)
` [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag

[PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef
 2024-02-02 19:12 UTC  (3+ messages)

[PATCH 0/5] evm: Support signatures on stacked filesystem
 2024-02-02 16:30 UTC  (37+ messages)
` [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs
` [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file
` [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash
` [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509

[PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr()
 2024-02-02  2:50 UTC  (7+ messages)

[PATCH v39 00/42] LSM: General module stacking
 2024-02-02  0:24 UTC  (2+ messages)

[GIT PULL] lsm/lsm-pr-20240131
 2024-02-01 18:23 UTC  (2+ messages)

Starting to work on liblsm
 2024-02-01 18:23 UTC 

[PATCH bpf-next] bpf: minor clean-up to sleepable_lsm_hooks BTF set
 2024-02-01 17:50 UTC  (2+ messages)

[PATCH] apparmor: use kvfree_sensitive to free data->data
 2024-02-01 14:24 UTC 

[PATCH bpf-next] bpf: add security_file_mprotect() to sleepable_lsm_hooks BTF set
 2024-02-01 13:38 UTC  (2+ messages)

[PATCH v8 0/9] Landlock: IOCTL support
 2024-01-31 16:52 UTC  (7+ messages)
` [PATCH v8 4/9] landlock: Add IOCTL access right
          `  "


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).