linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2020-07-07 18:16:06 to 2020-07-14 19:42:25 UTC [more...]

[RFC][PATCH] net/bpfilter: Remove this broken and apparently unmantained
 2020-07-14 19:42 UTC  (35+ messages)
        ` [PATCH 00/14] Make the user mode driver code a better citizen
            ` [PATCH v2 00/15] "
              ` [PATCH v3 00/16] "
                ` [PATCH v3 10/16] exec: Remove do_execve_file
                ` [PATCH v3 13/16] exit: Factor thread_group_exited out of pidfd_poll
                ` [merged][PATCH v3 00/16] Make the user mode driver code a better citizen

[PATCH v6 0/7] Add support for O_MAYEXEC
 2020-07-14 18:40 UTC  (9+ messages)
` [PATCH v6 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES
` [PATCH v6 2/7] exec: Move S_ISREG() check earlier
` [PATCH v6 3/7] exec: Move path_noexec() "
` [PATCH v6 4/7] fs: Introduce O_MAYEXEC flag for openat2(2)
` [PATCH v6 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC
` [PATCH v6 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing
` [PATCH v6 7/7] ima: add policy support for the new file open MAY_OPENEXEC flag

[PATCH ghak84 v4] audit: purge audit_log_string from the intra-kernel audit API
 2020-07-14 17:43 UTC  (3+ messages)

[PATCH 0/7] Implementing kernel_execve
 2020-07-14 15:32 UTC  (9+ messages)
` [PATCH 1/7] exec: Remove unnecessary spaces from binfmts.h
` [PATCH 2/7] exec: Factor out alloc_bprm
` [PATCH 3/7] exec: Move initialization of bprm->filename into alloc_bprm
` [PATCH 4/7] exec: Move bprm_mm_init "
` [PATCH 5/7] exec: Factor bprm_execve out of do_execve_common
` [PATCH 6/7] exec: Factor bprm_stack_limits out of prepare_arg_pages
` [PATCH 7/7] exec: Implement kernel_execve

[PATCH v8 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability
 2020-07-14 15:27 UTC  (10+ messages)

[PATCH v9 0/2] tpm2: Make TPM2 logs accessible for non-UEFI firmware
 2020-07-14 12:09 UTC  (12+ messages)
` [PATCH v9 2/2] tpm: Add support for event log pointer found in TPM2 ACPI table

[V2 PATCH 0/3] Adding support for carrying IMA measurement logs
 2020-07-13 20:32 UTC  (7+ messages)
` [V2 PATCH 1/3] Refactoring powerpc code for carrying over IMA measurement logs, to move non architecture specific code to security/ima
` [V2 PATCH 2/3] dt-bindings: chosen: Document ima-kexec-buffer

[PATCH -next] IMA: Make ima_mok_init() static
 2020-07-13 14:26 UTC 

[PATCH] capabilities: Replace HTTP links with HTTPS ones
 2020-07-13 10:34 UTC 

[PATCH v5 0/8] crpyto: introduce OSCCA certificate and SM2 asymmetric algorithm
 2020-07-13  2:17 UTC  (11+ messages)
` [PATCH v5 1/8] crypto: sm3 - export crypto_sm3_final function
` [PATCH v5 2/8] lib/mpi: Extend the MPI library
` [PATCH v5 3/8] lib/mpi: Introduce ec implementation to "
` [PATCH v5 4/8] crypto: sm2 - introduce OSCCA SM2 asymmetric cipher algorithm
` [PATCH v5 5/8] crypto: testmgr - support test with different ciphertext per encryption
` [PATCH v5 6/8] X.509: support OSCCA certificate parse
` [PATCH v5 7/8] X.509: support OSCCA sm2-with-sm3 certificate verification
` [PATCH v5 8/8] integrity: Asymmetric digsig supports SM2-with-SM3 algorithm

[PATCH 0/4] Fix misused kernel_read_file() enums
 2020-07-10 22:58 UTC  (23+ messages)
` [PATCH 2/4] fs: Remove FIRMWARE_PREALLOC_BUFFER from "
` [PATCH 4/4] module: Add hook for security_kernel_post_read_file()

[PATCH v2] ima: Rename internal audit rule functions
 2020-07-10 20:37 UTC 

[PATCH] ima: Rename internal audit rule functions
 2020-07-10 19:42 UTC  (3+ messages)

[PATCH v19 00/12] Landlock LSM
 2020-07-10 12:57 UTC  (25+ messages)
` [PATCH v19 02/12] landlock: Add ruleset and domain management
` [PATCH v19 03/12] landlock: Set up the security framework and manage credentials
` [PATCH v19 04/12] landlock: Add ptrace restrictions
` [PATCH v19 05/12] LSM: Infrastructure management of the superblock
` [PATCH v19 07/12] landlock: Support filesystem access-control
` [PATCH v19 08/12] landlock: Add syscall implementation
` [PATCH v19 09/12] arch: Wire up landlock() syscall
` [PATCH v19 10/12] selftests/landlock: Add initial tests
` [PATCH v19 11/12] samples/landlock: Add a sandbox manager example
` [PATCH v19 12/12] landlock: Add user and kernel documentation

[PATCH bpf-next v4 0/4] Generalizing bpf_local_storage
 2020-07-10  6:59 UTC  (6+ messages)
` [PATCH bpf-next v4 1/4] bpf: Generalize bpf_sk_storage
` [PATCH bpf-next v4 2/4] bpf: Implement bpf_local_storage for inodes
` [PATCH bpf-next v4 3/4] bpf: Allow local storage to be used from LSM programs
` [PATCH bpf-next v4 4/4] bpf: Add selftests for local_storage

[PATCH v18 00/23] LSM: Module stacking for AppArmor
 2020-07-09 19:54 UTC  (29+ messages)
  ` [PATCH v18 01/23] LSM: Infrastructure management of the sock security
  ` [PATCH v18 02/23] LSM: Create and manage the lsmblob data structure
  ` [PATCH v18 03/23] LSM: Use lsmblob in security_audit_rule_match
  ` [PATCH v18 04/23] LSM: Use lsmblob in security_kernel_act_as
  ` [PATCH v18 05/23] net: Prepare UDS for security module stacking
  ` [PATCH v18 06/23] LSM: Use lsmblob in security_secctx_to_secid
  ` [PATCH v18 07/23] LSM: Use lsmblob in security_secid_to_secctx
  ` [PATCH v18 08/23] LSM: Use lsmblob in security_ipc_getsecid
  ` [PATCH v18 09/23] LSM: Use lsmblob in security_task_getsecid
  ` [PATCH v18 10/23] LSM: Use lsmblob in security_inode_getsecid
  ` [PATCH v18 11/23] LSM: Use lsmblob in security_cred_getsecid
  ` [PATCH v18 12/23] IMA: Change internal interfaces to use lsmblobs
  ` [PATCH v18 13/23] LSM: Specify which LSM to display
  ` [PATCH v18 14/23] LSM: Ensure the correct LSM context releaser
  ` [PATCH v18 15/23] LSM: Use lsmcontext in security_secid_to_secctx
  ` [PATCH v18 16/23] LSM: Use lsmcontext in security_inode_getsecctx
  ` [PATCH v18 17/23] LSM: security_secid_to_secctx in netlink netfilter
  ` [PATCH v18 18/23] NET: Store LSM netlabel data in a lsmblob
  ` [PATCH v18 19/23] LSM: Verify LSM display sanity in binder
  ` [PATCH v18 20/23] Audit: Add new record for multiple process LSM attributes
  ` [PATCH v18 21/23] Audit: Add a new record for multiple object "
  ` [PATCH v18 22/23] LSM: Add /proc attr entry for full LSM context
  ` [PATCH v18 23/23] AppArmor: Remove the exclusive flag

[PATCH bpf-next v3 0/4] Generalizing bpf_local_storage
 2020-07-09  9:44 UTC  (8+ messages)
` [PATCH bpf-next v3 1/4] bpf: Generalize bpf_sk_storage
` [PATCH bpf-next v3 2/4] bpf: Implement bpf_local_storage for inodes
` [PATCH bpf-next v3 3/4] bpf: Allow local storage to be used from LSM programs
` [PATCH bpf-next v3 4/4] bpf: Add selftests for local_storage

[PATCH v3 00/12] ima: Fix rule parsing bugs and extend KEXEC_CMDLINE rule support
 2020-07-09  6:19 UTC  (13+ messages)
` [PATCH v3 01/12] ima: Have the LSM free its audit rule
` [PATCH v3 02/12] ima: Free the entire rule when deleting a list of rules
` [PATCH v3 03/12] ima: Free the entire rule if it fails to parse
` [PATCH v3 04/12] ima: Fail rule parsing when buffer hook functions have an invalid action
` [PATCH v3 05/12] ima: Fail rule parsing when the KEXEC_CMDLINE hook is combined with an invalid cond
` [PATCH v3 06/12] ima: Fail rule parsing when the KEY_CHECK "
` [PATCH v3 07/12] ima: Fail rule parsing when appraise_flag=blacklist is unsupportable
` [PATCH v3 08/12] ima: Shallow copy the args_p member of ima_rule_entry.lsm elements
` [PATCH v3 09/12] ima: Use correct type for "
` [PATCH v3 10/12] ima: Move comprehensive rule validation checks out of the token parser
` [PATCH v3 11/12] ima: Use the common function to detect LSM conditionals in a rule
` [PATCH v3 12/12] ima: Support additional conditionals in the KEXEC_CMDLINE hook function

[PATCH AUTOSEL 5.7 03/30] ima: extend boot_aggregate with kernel measurements
 2020-07-09  1:27 UTC  (3+ messages)

[PATCH ghak84 v3] audit: purge audit_log_string from the intra-kernel audit API
 2020-07-09  0:08 UTC  (4+ messages)

[PATCH ghak96 v3] audit: issue CWD record to accompany LSM_AUDIT_DATA_* records
 2020-07-08 23:06 UTC  (2+ messages)

kernel panic: smack: Failed to initialize cipso DOI
 2020-07-08 20:25 UTC  (2+ messages)

KASAN: use-after-free Read in smk_write_relabel_self
 2020-07-08 20:15 UTC  (2+ messages)
` [PATCH] Smack: fix use-after-free in smk_write_relabel_self()

[PATCH AUTOSEL 5.4 03/16] ima: extend boot_aggregate with kernel measurements
 2020-07-08 15:41 UTC 

[PATCH v4 0/8] crpyto: introduce OSCCA certificate and SM2 asymmetric algorithm
 2020-07-08  8:28 UTC  (9+ messages)
` [PATCH v4 1/8] crypto: sm3 - export crypto_sm3_final function
` [PATCH v4 2/8] lib/mpi: Extend the MPI library
` [PATCH v4 3/8] lib/mpi: Introduce ec implementation to "
` [PATCH v4 4/8] crypto: sm2 - introduce OSCCA SM2 asymmetric cipher algorithm
` [PATCH v4 5/8] crypto: testmgr - support test with different ciphertext per encryption
` [PATCH v4 6/8] X.509: support OSCCA certificate parse
` [PATCH v4 7/8] X.509: support OSCCA sm2-with-sm3 certificate verification
` [PATCH v4 8/8] integrity: Asymmetric digsig supports SM2-with-SM3 algorithm

[PATCH v10 0/9] firmware: add request_partial_firmware_into_buf
 2020-07-08  4:51 UTC  (24+ messages)
` [PATCH v10 1/9] fs: move kernel_read_file* to its own include file
` [PATCH v10 2/9] fs: introduce kernel_pread_file* support
` [PATCH v10 3/9] firmware: add request_partial_firmware_into_buf
` [PATCH v10 4/9] test_firmware: add partial read support for request_firmware_into_buf
` [PATCH v10 9/9] ima: add FIRMWARE_PARTIAL_READ support
  ` [PATCH v10 7/9] misc: bcm-vk: add Broadcom VK driver

[security:secure_uffd_v5.9 1/3] fs/anon_inodes.c:92:10-17: WARNING: ERR_CAST can be used with inode
 2020-07-08  2:53 UTC  (2+ messages)
` [PATCH] fix err_cast.cocci warnings

[PATCH] Replace HTTP links with HTTPS ones: security
 2020-07-07 20:28 UTC  (2+ messages)

[PATCH v4 0/3] capabilities: Introduce CAP_CHECKPOINT_RESTORE
 2020-07-07 20:27 UTC  (8+ messages)
` [PATCH v4 3/3] prctl: Allow ptrace capable processes to change /proc/self/exe


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).