containers.lists.linux.dev archive mirror
 help / color / mirror / Atom feed
 messages from 2022-03-25 12:11:01 to 2022-09-21 09:39:23 UTC [more...]

[PATCH v1] sysctl: Allow change system v ipc sysctls inside ipc namespace
 2022-09-21  9:38 UTC  (15+ messages)
    ` [PATCH v1 1/3] "
          ` [PATCH v2 0/3] Allow to change ipc/mq "
            ` [PATCH v2 1/3] sysctl: Allow change system v ipc "
            ` [PATCH v2 2/3] sysctl: Allow to change limits for posix messages queues
            ` [PATCH v2 3/3] docs: Add information about ipc sysctls limitations
    ` [PATCH v1 2/3] sysctl: Allow to change limits for posix messages queues
    ` [PATCH v1 3/3] docs: Add information about ipc sysctls limitations

[PATCH v14 00/26] ima: Namespace IMA with audit support in IMA-ns
 2022-09-20 20:08 UTC  (32+ messages)
` [PATCH v14 01/26] securityfs: rework dentry creation
` [PATCH v14 02/26] securityfs: Extend securityfs with namespacing support
` [PATCH v14 03/26] ima: Define ima_namespace struct and start moving variables into it
` [PATCH v14 04/26] ima: Move arch_policy_entry into ima_namespace
` [PATCH v14 05/26] ima: Move ima_htable "
` [PATCH v14 06/26] ima: Move measurement list related variables "
` [PATCH v14 07/26] ima: Move some IMA policy and filesystem "
` [PATCH v14 08/26] ima: Move IMA securityfs files into ima_namespace or onto stack
` [PATCH v14 09/26] ima: Move ima_lsm_policy_notifier into ima_namespace
` [PATCH v14 10/26] ima: Switch to lazy lsm policy updates for better performance
` [PATCH v14 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable()
` [PATCH v14 12/26] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now
` [PATCH v14 13/26] userns: Add pointer to ima_namespace to user_namespace
` [PATCH v14 14/26] ima: Implement hierarchical processing of file accesses
` [PATCH v14 15/26] ima: Implement ima_free_policy_rules() for freeing of an ima_namespace
` [PATCH v14 16/26] ima: Add functions for creating and "
` [PATCH v14 17/26] integrity/ima: Define ns_status for storing namespaced iint data
` [PATCH v14 18/26] integrity: Add optional callback function to integrity_inode_free()
` [PATCH v14 19/26] ima: Namespace audit status flags
` [PATCH v14 20/26] ima: Remove unused iints from the integrity_iint_cache
` [PATCH v14 21/26] ima: Setup securityfs for IMA namespace
` [PATCH v14 22/26] ima: Introduce securityfs file to activate an "
` [PATCH v14 23/26] ima: Show owning user namespace's uid and gid when displaying policy
` [PATCH v14 24/26] ima: Limit number of policy rules in non-init_ima_ns
` [PATCH v14 25/26] ima: Restrict informational audit messages to init_ima_ns
` [PATCH v14 26/26] ima: Enable IMA namespaces

[PATCH v2 3/4] seccomp: Support atomic "addfd + send reply"
 2022-07-19  2:11 UTC 

[RFC PATCH 0/2] Keyagents: another call_usermodehelper approach for namespaces
 2022-07-12 16:47 UTC  (2+ messages)

[PATCH v13 00/26] ima: Namespace IMA with audit support in IMA-ns
 2022-07-07 14:48 UTC  (27+ messages)
` [PATCH v13 01/26] securityfs: rework dentry creation
` [PATCH v13 02/26] securityfs: Extend securityfs with namespacing support
` [PATCH v13 03/26] ima: Define ima_namespace struct and start moving variables into it
` [PATCH v13 04/26] ima: Move arch_policy_entry into ima_namespace
` [PATCH v13 05/26] ima: Move ima_htable "
` [PATCH v13 06/26] ima: Move measurement list related variables "
` [PATCH v13 07/26] ima: Move some IMA policy and filesystem "
` [PATCH v13 08/26] ima: Move IMA securityfs files into ima_namespace or onto stack
` [PATCH v13 09/26] ima: Move ima_lsm_policy_notifier into ima_namespace
` [PATCH v13 10/26] ima: Switch to lazy lsm policy updates for better performance
` [PATCH v13 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable()
` [PATCH v13 12/26] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now
` [PATCH v13 13/26] userns: Add pointer to ima_namespace to user_namespace
` [PATCH v13 14/26] ima: Implement hierarchical processing of file accesses
` [PATCH v13 15/26] ima: Implement ima_free_policy_rules() for freeing of an ima_namespace
` [PATCH v13 16/26] ima: Add functions for creating and "
` [PATCH v13 17/26] integrity/ima: Define ns_status for storing namespaced iint data
` [PATCH v13 18/26] integrity: Add optional callback function to integrity_inode_free()
` [PATCH v13 19/26] ima: Namespace audit status flags
` [PATCH v13 20/26] ima: Remove unused iints from the integrity_iint_cache
` [PATCH v13 21/26] ima: Setup securityfs for IMA namespace
` [PATCH v13 22/26] ima: Introduce securityfs file to activate an "
` [PATCH v13 23/26] ima: Show owning user namespace's uid and gid when displaying policy
` [PATCH v13 24/26] ima: Limit number of policy rules in non-init_ima_ns
` [PATCH v13 25/26] ima: Restrict informational audit messages to init_ima_ns
` [PATCH v13 26/26] ima: Enable IMA namespaces

[PATCH v12 00/26] ima: Namespace IMA with audit support in IMA-ns
 2022-07-07 14:34 UTC  (76+ messages)
` [PATCH v12 01/26] securityfs: rework dentry creation
` [PATCH v12 02/26] securityfs: Extend securityfs with namespacing support
` [PATCH v12 03/26] ima: Define ima_namespace struct and start moving variables into it
` [PATCH v12 04/26] ima: Move arch_policy_entry into ima_namespace
` [PATCH v12 05/26] ima: Move ima_htable "
` [PATCH v12 06/26] ima: Move measurement list related variables "
` [PATCH v12 07/26] ima: Move some IMA policy and filesystem "
` [PATCH v12 08/26] ima: Move IMA securityfs files into ima_namespace or onto stack
` [PATCH v12 09/26] ima: Move ima_lsm_policy_notifier into ima_namespace
` [PATCH v12 10/26] ima: Switch to lazy lsm policy updates for better performance
` [PATCH v12 11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable()
` [PATCH v12 12/26] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now
` [PATCH v12 13/26] userns: Add pointer to ima_namespace to user_namespace
` [PATCH v12 14/26] ima: Implement hierarchical processing of file accesses
` [PATCH v12 15/26] ima: Implement ima_free_policy_rules() for freeing of an ima_namespace
` [PATCH v12 16/26] ima: Add functions for creating and "
` [PATCH v12 17/26] integrity/ima: Define ns_status for storing namespaced iint data
` [PATCH v12 18/26] integrity: Add optional callback function to integrity_inode_free()
` [PATCH v12 19/26] ima: Namespace audit status flags
` [PATCH v12 20/26] ima: Remove unused iints from the integrity_iint_cache
` [PATCH v12 21/26] ima: Setup securityfs for IMA namespace
` [PATCH v12 22/26] ima: Introduce securityfs file to activate an "
` [PATCH v12 23/26] ima: Show owning user namespace's uid and gid when displaying policy
` [PATCH v12 24/26] ima: Limit number of policy rules in non-init_ima_ns
` [PATCH v12 25/26] ima: Restrict informational audit messages to init_ima_ns
` [PATCH v12 26/26] ima: Enable IMA namespaces

[PATCH] ipc: Free mq_sysctls if ipc namespace creation failed
 2022-06-22 22:55 UTC  (2+ messages)

(no subject)
 2022-06-14  7:47 UTC 

[PATCH v4 0/2] ipc: Store mq and ipc sysctls in the ipc namespace
 2022-06-09 18:51 UTC  (34+ messages)
` [GIT PULL] ipc: Bind to the ipc namespace at open time
    ` [PATCH v1 0/4] ipc: Remove extra1 field abuse to pass ipc namespace
      ` [PATCH v1 1/4] "
      ` [PATCH v1 2/4] ipc: Use proper "
            ` [PATCH v2 1/4] ipc: Use the same namespace to modify and validate
            ` [PATCH v2 2/4] ipc: Remove extra1 field abuse to pass ipc namespace
            ` [PATCH v2 3/4] ipc: Check permissions for checkpoint_restart sysctls at open time
            ` [PATCH v2 4/4] ipc: Remove extra braces
      ` [PATCH v1 3/4] ipc: Check permissions for checkpoint_restart sysctls at open time
      ` [PATCH v1 4/4] ipc: Remove extra braces
        ` [RFC PATCH 0/4] API extension for handling sysctl
          ` [RFC PATCH 1/4] sysctl: "
          ` [RFC PATCH 2/4] sysctl: ipc: Do not use dynamic memory
          ` [RFC PATCH 3/4] sysctl: userns: "
          ` [RFC PATCH 4/4] sysctl: mqueue: "

[GIT PULL] ipc: per namespace ipc sysctl changes for v5.19
 2022-06-05 22:11 UTC  (4+ messages)

[PATCH v2 1/2] binfmt_misc: cleanup on filesystem umount
 2022-06-02 10:41 UTC  (7+ messages)
` [PATCH v2 2/2] binfmt_misc: enable sandboxed mounts

[PATCH v4 0/3] Handle seccomp notification preemption
 2022-05-03 21:22 UTC  (5+ messages)
` [PATCH v4 1/3] seccomp: Add wait_killable semantic to seccomp user notifier
` [PATCH v4 2/3] selftests/seccomp: Refactor get_proc_stat to split out file reading code
` [PATCH v4 3/3] selftests/seccomp: Add test for wait killable notifier


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).