kernel-hardening.lists.openwall.com archive mirror
 help / color / mirror / Atom feed
 messages from 2021-03-26 04:31:14 to 2021-05-21 18:05:12 UTC [more...]

[PATCH v7 0/7] Fork brute force attack mitigation
 2021-05-21 18:02 UTC  (6+ messages)
` [PATCH v7 1/7] security: Add LSM hook at the point where a task gets a fatal signal
` [PATCH v7 2/7] security/brute: Define a LSM and add sysctl attributes
` [PATCH v7 3/7] security/brute: Detect a brute force attack
` [PATCH v7 4/7] security/brute: Mitigate "

[PATCH v11 0/9] Count rlimits in each user namespace
 2021-05-12 13:14 UTC  (14+ messages)
` [PATCH v11 1/9] Increase size of ucounts to atomic_long_t
` [PATCH v11 2/9] Add a reference to ucounts for each cred
` [PATCH v11 3/9] Use atomic_t for ucounts reference counting
` [PATCH v11 4/9] Reimplement RLIMIT_NPROC on top of ucounts
    ` [PATCH] ucounts: Silence warning in dec_rlimit_ucounts
` [PATCH v11 5/9] Reimplement RLIMIT_MSGQUEUE on top of ucounts
` [PATCH v11 6/9] Reimplement RLIMIT_SIGPENDING "
` [PATCH v11 7/9] Reimplement RLIMIT_MEMLOCK "
` [PATCH v11 8/9] kselftests: Add test to check for rlimit changes in different user namespaces
` [PATCH v11 9/9] ucounts: Set ucount_max to the largest positive value the type can hold

[PATCH RFC 0/9] PKS write protected page tables
 2021-05-10 19:38 UTC  (32+ messages)
` [PATCH RFC 1/9] list: Support getting most recent element in list_lru
` [PATCH RFC 2/9] list: Support list head not in object for list_lru
` [PATCH RFC 3/9] x86/mm/cpa: Add grouped page allocations
` [PATCH RFC 4/9] mm: Explicitly zero page table lock ptr
` [PATCH RFC 5/9] x86, mm: Use cache of page tables
` [PATCH RFC 6/9] x86/mm/cpa: Add set_memory_pks()
` [PATCH RFC 7/9] x86/mm/cpa: Add perm callbacks to grouped pages
` [PATCH RFC 8/9] x86, mm: Protect page tables with PKS
` [PATCH RFC 9/9] x86, cpa: PKS protect direct map page tables

New mailing list for Landlock LSM user space discussions
 2021-05-07 16:15 UTC 

[PATCH v10 0/9] Count rlimits in each user namespace
 2021-05-07  7:14 UTC  (21+ messages)
` [PATCH v10 1/9] Increase size of ucounts to atomic_long_t
` [PATCH v10 2/9] Add a reference to ucounts for each cred
` [PATCH v10 3/9] Use atomic_t for ucounts reference counting
` [PATCH v10 4/9] Reimplement RLIMIT_NPROC on top of ucounts
` [PATCH v10 5/9] Reimplement RLIMIT_MSGQUEUE "
` [PATCH v10 6/9] Reimplement RLIMIT_SIGPENDING "
  ` 08ed4efad6: stress-ng.sigsegv.ops_per_sec -41.9% regression
` [PATCH v10 7/9] Reimplement RLIMIT_MEMLOCK on top of ucounts
` [PATCH v10 8/9] kselftests: Add test to check for rlimit changes in different user namespaces
` [PATCH v10 9/9] ucounts: Set ucount_max to the largest positive value the type can hold

[PATCH v34 00/13] Landlock LSM
 2021-04-23 15:22 UTC  (17+ messages)
` [PATCH v34 01/13] landlock: Add object management
` [PATCH v34 02/13] landlock: Add ruleset and domain management
` [PATCH v34 03/13] landlock: Set up the security framework and manage credentials
` [PATCH v34 04/13] landlock: Add ptrace restrictions
` [PATCH v34 05/13] LSM: Infrastructure management of the superblock
` [PATCH v34 06/13] fs,security: Add sb_delete hook
` [PATCH v34 07/13] landlock: Support filesystem access-control
` [PATCH v34 08/13] landlock: Add syscall implementations
` [PATCH v34 09/13] arch: Wire up Landlock syscalls
` [PATCH v34 10/13] selftests/landlock: Add user space tests
` [PATCH v34 11/13] samples/landlock: Add a sandbox manager example
` [PATCH v34 12/13] landlock: Add user and kernel documentation
` [PATCH v34 13/13] landlock: Enable user space to infer supported features

Notify special task kill using wait* functions
 2021-04-11  8:46 UTC  (8+ messages)

[PATCH v12 0/3] Add trusted_for(2) (was O_MAYEXEC)
 2021-04-09 17:15 UTC  (3+ messages)

[PATCH v33 00/12] Landlock LSM
 2021-04-09 16:04 UTC  (16+ messages)
` [PATCH v33 01/12] landlock: Add object management
` [PATCH v33 02/12] landlock: Add ruleset and domain management
` [PATCH v33 03/12] landlock: Set up the security framework and manage credentials
` [PATCH v33 04/12] landlock: Add ptrace restrictions
` [PATCH v33 05/12] LSM: Infrastructure management of the superblock
` [PATCH v33 06/12] fs,security: Add sb_delete hook
` [PATCH v33 07/12] landlock: Support filesystem access-control
` [PATCH v33 08/12] landlock: Add syscall implementations
` [PATCH v33 09/12] arch: Wire up Landlock syscalls
` [PATCH v33 10/12] selftests/landlock: Add user space tests
` [PATCH v33 11/12] samples/landlock: Add a sandbox manager example
` [PATCH v33 12/12] landlock: Add user and kernel documentation

[PATCH v10 0/6] Optionally randomize kernel stack offset each syscall
 2021-04-07 21:37 UTC  (9+ messages)
` [PATCH v10 1/6] jump_label: Provide CONFIG-driven build state defaults
` [PATCH v10 2/6] init_on_alloc: Optimize static branches
` [PATCH v10 3/6] stack: Optionally randomize kernel stack offset each syscall
` [PATCH v10 4/6] x86/entry: Enable random_kstack_offset support
` [PATCH v10 5/6] arm64: entry: "
` [PATCH v10 6/6] lkdtm: Add REPORT_STACK for checking stack offsets

[PATCH v9 0/8] Count rlimits in each user namespace
 2021-04-07 16:56 UTC  (10+ messages)
` [PATCH v9 3/8] Use atomic_t for ucounts reference counting
` [PATCH v9 4/8] Reimplement RLIMIT_NPROC on top of ucounts
` [PATCH v9 6/8] Reimplement RLIMIT_SIGPENDING "

[PATCH v8 0/6] Optionally randomize kernel stack offset each syscall
 2021-04-01 20:59 UTC  (2+ messages)

[PATCH v8 0/6] Optionally randomize kernel stack offset each syscall
 2021-04-01 22:42 UTC  (19+ messages)
` [PATCH v8 1/6] jump_label: Provide CONFIG-driven build state defaults
` [PATCH v8 2/6] init_on_alloc: Optimize static branches
` [PATCH v8 3/6] stack: Optionally randomize kernel stack offset each syscall
` [PATCH v8 4/6] x86/entry: Enable random_kstack_offset support
` [PATCH v8 5/6] arm64: entry: "
` [PATCH v8 6/6] lkdtm: Add REPORT_STACK for checking stack offsets
` [PATCH] Where we are for this patch?

[PATCH v32 00/12] Landlock LSM
 2021-04-01 20:52 UTC  (13+ messages)
` [PATCH v32 01/12] landlock: Add object management
` [PATCH v32 02/12] landlock: Add ruleset and domain management
` [PATCH v32 03/12] landlock: Set up the security framework and manage credentials
` [PATCH v32 04/12] landlock: Add ptrace restrictions
` [PATCH v32 05/12] LSM: Infrastructure management of the superblock
` [PATCH v32 06/12] fs,security: Add sb_delete hook
` [PATCH v32 07/12] landlock: Support filesystem access-control
` [PATCH v32 08/12] landlock: Add syscall implementations
` [PATCH v32 09/12] arch: Wire up Landlock syscalls
` [PATCH v32 10/12] selftests/landlock: Add user space tests
` [PATCH v32 11/12] samples/landlock: Add a sandbox manager example
` [PATCH v32 12/12] landlock: Add user and kernel documentation

[PATCH v31 00/12] Landlock LSM
 2021-04-01 17:12 UTC  (8+ messages)
` [PATCH v31 07/12] landlock: Support filesystem access-control
` [PATCH v31 10/12] selftests/landlock: Add user space tests

[PATCH v9 0/6] Optionally randomize kernel stack offset each syscall
 2021-04-01 13:33 UTC  (9+ messages)
` [PATCH v9 1/6] jump_label: Provide CONFIG-driven build state defaults
` [PATCH v9 2/6] init_on_alloc: Optimize static branches
` [PATCH v9 3/6] stack: Optionally randomize kernel stack offset each syscall
` [PATCH v9 4/6] x86/entry: Enable random_kstack_offset support
` [PATCH v9 5/6] arm64: entry: "
` [PATCH v9 6/6] lkdtm: Add REPORT_STACK for checking stack offsets

[PATCH v7 0/6] Optionally randomize kernel stack offset each syscall
 2021-04-01  8:34 UTC  (9+ messages)
` [PATCH v7 3/6] stack: "
` [PATCH v7 4/6] x86/entry: Enable random_kstack_offset support
` [PATCH v7 5/6] arm64: entry: "

[PATCH v5 0/1] Unprivileged chroot
 2021-03-31  6:33 UTC  (11+ messages)
` [PATCH v5 1/1] fs: Allow no_new_privs tasks to call chroot(2)

two potential randstruct improvements
 2021-03-30 21:18 UTC  (3+ messages)

[PATCH v5 1/1] fs: Allow no_new_privs tasks to call chroot(2)
 2021-03-27 18:56 UTC  (2+ messages)

[PATCH v6 0/8] Fork brute force attack mitigation
 2021-03-26 15:41 UTC  (4+ messages)
` [PATCH v6 7/8] Documentation: Add documentation for the Brute LSM


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).