messages from 2017-10-30 17:05:38 to 2017-11-09 17:34:03 UTC [more...]
[PATCH 00/30] security, efi: Add kernel lockdown
2017-11-09 17:34 UTC (28+ messages)
` [PATCH 01/30] Add the ability to lock down access to the running kernel image
` [PATCH 02/30] Add a SysRq option to lift kernel lockdown
` [PATCH 03/30] ima: require secure_boot rules in lockdown mode
` [PATCH 04/30] Enforce module signatures if the kernel is locked down
` [PATCH 05/30] Restrict /dev/{mem, kmem, port} when "
` [PATCH 06/30] kexec: Disable at runtime if "
` [PATCH 07/30] Copy secure_boot flag in boot params across kexec reboot
` [PATCH 08/30] kexec_file: Restrict at runtime if the kernel is locked down
` [PATCH 09/30] hibernate: Disable when "
` [PATCH 10/30] uswsusp: "
` [PATCH 11/30] PCI: Lock down BAR access "
` [PATCH 12/30] x86: Lock down IO port "
` [PATCH 13/30] x86/msr: Restrict MSR "
` [PATCH 14/30] asus-wmi: Restrict debugfs interface "
` [PATCH 15/30] ACPI: Limit access to custom_method "
` [PATCH 16/30] acpi: Ignore acpi_rsdp kernel param when the kernel has been "
` [PATCH 17/30] acpi: Disable ACPI table override if the kernel is "
` [PATCH 18/30] acpi: Disable APEI error injection "
` [PATCH 19/30] scsi: Lock down the eata driver
` [PATCH 20/30] Prohibit PCMCIA CIS storage when the kernel is locked down
` [PATCH 21/30] Lock down TIOCSSERIAL
` [PATCH 22/30] Lock down module params that specify hardware parameters (eg. ioport)
` [PATCH 23/30] x86/mmiotrace: Lock down the testmmiotrace module
` [PATCH 24/30] debugfs: Disallow use of debugfs files when the kernel is locked down
` [PATCH 25/30] Lock down /proc/kcore
` [PATCH 26/30] Lock down ftrace
` [PATCH 27/30] Lock down kprobes
[RFC][PATCH] Lock down kprobes
2017-11-09 17:30 UTC (2+ messages)
[PATCH v2 00/15] ima: digest list feature
2017-11-09 17:23 UTC (31+ messages)
` [PATCH v2 01/15] ima: generalize ima_read_policy()
` [PATCH v2 02/15] ima: generalize ima_write_policy()
` [PATCH v2 03/15] ima: generalize policy file operations
` [PATCH v2 04/15] ima: use ima_show_htable_value to show hash table data
` [PATCH v2 05/15] ima: add functions to manage digest lists
` [PATCH v2 06/15] ima: add parser of digest lists metadata
` [PATCH v2 07/15] ima: add parser of compact digest list
` [PATCH v2 08/15] ima: add parser of RPM package headers
` [PATCH v2 09/15] ima: introduce securityfs interfaces for digest lists
` [PATCH v2 10/15] ima: disable digest lookup if digest lists are not checked
` [PATCH v2 11/15] ima: add policy action digest_list
` [PATCH v2 12/15] ima: do not update security.ima if appraisal status is not INTEGRITY_PASS
` [PATCH v2 13/15] evm: add kernel command line option to select protected xattrs
` [PATCH v2 14/15] ima: add support for appraisal with digest lists
` [PATCH v2 15/15] ima: add Documentation/security/IMA-digest-lists.txt
[PATCH 03/27] Enforce module signatures if the kernel is locked down
2017-11-09 17:15 UTC (34+ messages)
` [PATCH 00/27] security, efi: Add kernel lockdown
` [PATCH 02/27] Add a SysRq option to lift "
` [PATCH 07/27] kexec_file: Disable at runtime if securelevel has been set
` [PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
` Firmware signing -- Re: [PATCH 00/27] security, efi: Add kernel lockdown
[RFC][PATCH] Lock down kprobes
2017-11-09 16:52 UTC (2+ messages)
[RFC][PATCH] Lock down kprobes
2017-11-09 16:43 UTC (4+ messages)
[RFC][PATCH] Lock down ftrace
2017-11-09 16:42 UTC
[PATCH v2] tpm: Move Linux RNG connection to hwrng
2017-11-09 16:29 UTC (8+ messages)
[PATCH RFC v3 0/7] proc: modernize proc to support multiple private instances
2017-11-09 16:14 UTC (8+ messages)
` [PATCH RFC v3 1/7] proc: add proc_fs_info struct to store proc information
` [PATCH RFC v3 2/7] proc: move /proc/{self|thread-self} dentries to proc_fs_info
` [PATCH RFC v3 3/7] proc: add helpers to set and get proc hidepid and gid mount options
` [PATCH RFC v3 4/7] proc: support mounting private procfs instances inside same pid namespace
` [PATCH RFC v3 5/7] proc: move hidepid definitions to proc files
` [PATCH RFC v3 6/7] proc: support new 'pids=all|ptraceable' mount option
` [PATCH RFC v3 7/7] proc: flush dcache entries from all procfs instances
[RFC PATCH] ima: require secure_boot rules in lockdown mode
2017-11-09 13:46 UTC (16+ messages)
[GIT PULL] linux-integrity patches for 4.15-security-next-testing
2017-11-09 3:08 UTC (5+ messages)
[PATCH] tpm: Update MAINTAINERS for Jason Gunthorpe
2017-11-08 22:24 UTC (6+ messages)
[apparmor_mmap_file] WARNING: bad unlock balance detected!
2017-11-08 15:54 UTC (3+ messages)
[PATCH v5 2/4] KEYS: Add ELF class-independent certificate insertion support
2017-11-08 13:30 UTC (3+ messages)
` [PATCH v5 0/4] Certificate insertion support for x86 bzImages
[PATCH v4 0/4] additional TPM performance improvements
2017-11-08 11:32 UTC (5+ messages)
` [PATCH v4 2/4] tpm: ignore burstcount to improve tpm_tis send() performance
[PATCH] KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
2017-11-07 22:33 UTC (2+ messages)
[PATCH] KEYS: fix NULL pointer dereference during ASN.1 parsing
2017-11-07 17:42 UTC (3+ messages)
[RFC PATCH 5/5] selinux: Add SCTP support
2017-11-07 0:09 UTC (4+ messages)
[RFC PATCH 4/5] netlabel: Add SCTP support
2017-11-06 23:15 UTC (2+ messages)
[RFC PATCH 1/5] security: Add support for SCTP security hooks
2017-11-06 22:35 UTC (4+ messages)
[PATCH 0/9] LSM: Stacking for major security modules - Based on 4.14-rc2
2017-11-06 17:15 UTC (14+ messages)
` [PATCH 3/9] LSM: Manage file security blobs
` [PATCH 8/9] LSM: Multiple security mount options
[PATCH] MAINTAINERS: update the IMA, EVM, trusted-keys, encrypted-keys entries
2017-11-05 15:22 UTC (2+ messages)
[PATCH 3,RESEND] tpm: use struct tpm_chip for tpm_chip_find_get()
2017-11-05 11:16 UTC
[PATCH v10 00/20] simplify crypto wait for async op
2017-11-03 14:25 UTC (2+ messages)
KASAN: use-after-free Read in do_raw_spin_lock
2017-11-03 9:04 UTC (3+ messages)
[RFC PATCH] xfrm: fix regression introduced by xdst pcpu cache
2017-11-02 22:37 UTC (11+ messages)
[GIT PULL] Keys fixes for v4.15
2017-11-02 10:21 UTC
[PATCH 1/3] KEYS: return full count in keyring_read() if buffer is too small
2017-11-02 0:50 UTC (4+ messages)
` [PATCH 2/3] KEYS: trusted: fix writing past end of buffer in trusted_read()
` [PATCH 3/3] KEYS: fix out-of-bounds read during ASN.1 parsing
[PULL] Smack: Changes for 4.15
2017-11-02 0:35 UTC (3+ messages)
[RFC PATCH 2/5] sctp: Add ip option support
2017-11-01 21:29 UTC (3+ messages)
[PATCH] KEYS: fix out-of-bounds read during ASN.1 parsing
2017-11-01 19:10 UTC
[RFC v0.1][PATCH] selinuxns: extend namespace support to security.selinux xattrs
2017-11-01 15:22 UTC (7+ messages)
[PATCH] KEYS: trusted: fix writing past end of buffer in trusted_read()
2017-11-01 6:55 UTC (2+ messages)
[PATCH v3] tpm: use struct tpm_chip for tpm_chip_find_get()
2017-10-31 20:03 UTC (2+ messages)
[PATCH v2] fscrypt: fix dereference of NULL user_key_payload
2017-10-31 17:47 UTC (4+ messages)
[RFC PATCH 0/5] Add SELinux SCTP protocol support
2017-10-31 17:26 UTC (2+ messages)
[PATCH v5 00/18] Appended signatures support for IMA appraisal
2017-10-31 13:31 UTC (3+ messages)
` [PATCH v5 17/18] ima: Implement support for module-style appended signatures
Proposal: rename tpm1_eventlog.c and tpm2_eventlog.c
2017-10-30 18:34 UTC (2+ messages)
[PATCH 07/27] kexec_file: Disable at runtime if securelevel has been set
2017-10-30 16:43 UTC (3+ messages)
[PATCH 18/27] bpf: Restrict kernel image access functions when the kernel is locked down
2017-10-19 23:31 UTC (2+ messages)
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).