Linux-Security-Module Archive mirror
 help / color / mirror / Atom feed
 messages from 2024-02-23 08:10:53 to 2024-03-04 23:04:12 UTC [more...]

[PATCH v4 00/12] selftests: kselftest_harness: support using xfail
 2024-03-04 23:04 UTC  (21+ messages)
` [PATCH v4 01/12] selftests/landlock: Redefine TEST_F() as TEST_F_FORK()
` [PATCH v4 02/12] selftests/harness: Merge TEST_F_FORK() into TEST_F()
` [PATCH v4 03/12] selftests: kselftest_harness: use KSFT_* exit codes
` [PATCH v4 04/12] selftests: kselftest_harness: generate test name once
` [PATCH v4 05/12] selftests: kselftest_harness: save full exit code in metadata
` [PATCH v4 06/12] selftests: kselftest_harness: use exit code to store skip
` [PATCH v4 07/12] selftests: kselftest: add ksft_test_result_code(), handling all exit codes
` [PATCH v4 08/12] selftests: kselftest_harness: print test name for SKIP
` [PATCH v4 09/12] selftests: kselftest_harness: separate diagnostic message with # in ksft_test_result_code()
` [PATCH v4 10/12] selftests: kselftest_harness: let PASS / FAIL provide diagnostic
` [PATCH v4 11/12] selftests: kselftest_harness: support using xfail
` [PATCH v4 12/12] selftests: ip_local_port_range: use XFAIL instead of SKIP

[PATCH v5 0/6] DCP as trusted keys backend
 2024-03-04 22:51 UTC  (16+ messages)
` [PATCH v5 1/6] crypto: mxs-dcp: Add support for hardware-bound keys
` [PATCH v5 2/6] KEYS: trusted: improve scalability of trust source config
` [PATCH v5 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys
` [PATCH v5 4/6] MAINTAINERS: add entry for DCP-based "

[PATCH v2] proc: allow restricting /proc/pid/mem writes
 2024-03-04 17:56 UTC  (11+ messages)

[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings
 2024-03-04 17:52 UTC 

[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
 2024-03-04 16:56 UTC  (37+ messages)
` [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
` [PATCH v2 10/25] xattr: use is_fscaps_xattr()
` [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
` [PATCH v2 14/25] evm: add support for fscaps security hooks
` [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps
` [PATCH v2 17/25] fs: add vfs_get_fscaps()
` [PATCH v2 18/25] fs: add vfs_set_fscaps()
` [PATCH v2 19/25] fs: add vfs_remove_fscaps()
` [PATCH v2 20/25] ovl: add fscaps handlers
` [PATCH v2 24/25] commoncap: use vfs fscaps interfaces

[PATCH][next] apparmor: remove useless static inline function is_deleted
 2024-03-04 16:36 UTC 

[syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry
 2024-03-02 22:01 UTC  (2+ messages)
` [syzbot] [lsm?] [integrity?] "

[RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE)
 2024-03-02 16:37 UTC  (30+ messages)
` [RFC PATCH v13 01/20] security: add ipe lsm
` [RFC PATCH v13 02/20] ipe: add policy parser
` [RFC PATCH v13 03/20] ipe: add evaluation loop
` [RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read
` [RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs()
` [RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider
` [RFC PATCH v13 07/20] security: add new securityfs delete function
` [RFC PATCH v13 08/20] ipe: add userspace interface
` [RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support
` [RFC PATCH v13 10/20] ipe: add permissive toggle
` [RFC PATCH v13 11/20] block|security: add LSM blob to block_device
` [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag
` [RFC PATCH v13 13/20] dm: add finalize hook to target_type
` [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook
` [RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider
` [RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook
` [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider
` [RFC PATCH v13 18/20] scripts: add boot policy generation program
` [RFC PATCH v13 19/20] ipe: kunit test for parser
` [RFC PATCH v13 20/20] documentation: add ipe documentation

[RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions
 2024-03-02 10:23 UTC  (4+ messages)

[PATCH v1 0/8] Run KUnit tests late and handle faults
 2024-03-01 20:42 UTC  (26+ messages)
` [PATCH v1 1/8] kunit: Run tests when the kernel is fully setup
` [PATCH v1 2/8] kunit: Handle thread creation error
` [PATCH v1 3/8] kunit: Fix kthread reference
` [PATCH v1 4/8] kunit: Fix timeout message
` [PATCH v1 5/8] kunit: Handle test faults
` [PATCH v1 6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests
` [PATCH v1 7/8] kunit: Print last test location on fault
` [PATCH v1 8/8] kunit: Add tests for faults

[PATCH v2 0/7] Handle faults in KUnit tests
 2024-03-01 19:40 UTC  (8+ messages)
` [PATCH v2 1/7] kunit: Handle thread creation error
` [PATCH v2 2/7] kunit: Fix kthread reference
` [PATCH v2 3/7] kunit: Fix timeout message
` [PATCH v2 4/7] kunit: Handle test faults
` [PATCH v2 5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests
` [PATCH v2 6/7] kunit: Print last test location on fault
` [PATCH v2 7/7] kunit: Add tests for fault

[Linux Kernel Bug] KASAN: slab-out-of-bounds Write in tomoyo_write_control
 2024-03-01 19:14 UTC  (3+ messages)
` [PATCH for 6.8] tomoyo: fix UAF write bug in tomoyo_write_control()

[PATCH v9 0/8] Landlock: IOCTL support
 2024-03-01 18:35 UTC  (10+ messages)
` [PATCH v9 1/8] landlock: Add IOCTL access right
    ` [RFC PATCH] fs: Add vfs_masks_device_ioctl*() helpers

[GIT PULL] Landlock fixes for v6.8-rc7
 2024-02-29 20:33 UTC  (2+ messages)

[PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk
 2024-02-29  3:50 UTC  (4+ messages)

[PATCH v3 00/13] security: digest_cache LSM
 2024-02-28 17:46 UTC  (2+ messages)

[PATCH 1/2] SELinux: Fix lsm_get_self_attr()
 2024-02-28 12:53 UTC  (15+ messages)
` [PATCH 2/2] AppArmor: "

[GIT PULL] lsm/lsm-pr-20240227
 2024-02-28  1:02 UTC  (2+ messages)

[PATCH v2 1/2] landlock: Extend documentation for kernel support
 2024-02-27 16:32 UTC  (3+ messages)
` [PATCH v2 2/2] landlock: Warn once if a Landlock action is requested while disabled

[syzbot] [lsm?] [reiserfs?] general protection fault in fsnotify_perm
 2024-02-27 16:05 UTC  (2+ messages)

[PATCH] proc: allow restricting /proc/pid/mem writes
 2024-02-27  0:53 UTC  (8+ messages)

[PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail
 2024-02-26 20:21 UTC  (11+ messages)
  ` [PATCH 0/2] Merge TEST_F_FORK() into TEST_F()
    ` [PATCH 1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK()
    ` [PATCH 2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F()

[PATCH] landlock: Warn once if a Landlock action is requested while disabled
 2024-02-26 17:16 UTC  (5+ messages)

[PATCH v3 00/10] evm: Support signatures on stacked filesystem
 2024-02-23 17:25 UTC  (11+ messages)
` [PATCH v3 01/10] ima: Rename backing_inode to real_inode
` [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs
` [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr
` [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash
` [PATCH v3 05/10] ima: Move file-change detection variables into new structure
` [PATCH v3 06/10] evm: Store and detect metadata inode attributes changes
` [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change
` [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
` [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED
` [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).