linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2020-07-17 22:28:34 to 2020-07-24 20:43:49 UTC [more...]

[PATCH v19 00/23] LSM: Module stacking for AppArmor
 2020-07-24 20:32 UTC  (11+ messages)
  ` [PATCH v19 01/23] LSM: Infrastructure management of the sock security
  ` [PATCH v19 02/23] LSM: Create and manage the lsmblob data structure
  ` [PATCH v19 03/23] LSM: Use lsmblob in security_audit_rule_match
  ` [PATCH v19 04/23] LSM: Use lsmblob in security_kernel_act_as
  ` [PATCH v19 05/23] net: Prepare UDS for security module stacking
  ` [PATCH v19 06/23] LSM: Use lsmblob in security_secctx_to_secid
  ` [PATCH v19 07/23] LSM: Use lsmblob in security_secid_to_secctx
  ` [PATCH v19 08/23] LSM: Use lsmblob in security_ipc_getsecid
  ` [PATCH v19 09/23] LSM: Use lsmblob in security_task_getsecid
  ` [PATCH v19 10/23] LSM: Use lsmblob in security_inode_getsecid

[PATCH 0/4] Mount notifications
 2020-07-24 20:25 UTC  (8+ messages)
` [PATCH 1/4] watch_queue: Make watch_sizeof() check record size
` [PATCH 2/4] watch_queue: Add security hooks to rule on setting mount watches
` [PATCH 3/4] watch_queue: Implement mount topology and attribute change notifications
` [PATCH 4/4] watch_queue: sample: Display mount tree "

[PATCH v7 0/7] Add support for O_MAYEXEC
 2020-07-24 19:06 UTC  (14+ messages)
` [PATCH v7 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES
` [PATCH v7 2/7] exec: Move S_ISREG() check earlier
` [PATCH v7 3/7] exec: Move path_noexec() "
` [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2)
` [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC
` [PATCH v7 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing
` [PATCH v7 7/7] ima: add policy support for the new file open MAY_OPENEXEC flag

[PATCH bpf-next v6 0/7] Generalizing bpf_local_storage
 2020-07-24 15:44 UTC  (10+ messages)
` [PATCH bpf-next v6 1/7] bpf: Renames to prepare for generalizing sk_storage
` [PATCH bpf-next v6 2/7] bpf: Generalize caching for sk_storage
` [PATCH bpf-next v6 3/7] bpf: Generalize bpf_sk_storage
` [PATCH bpf-next v6 4/7] bpf: Split bpf_local_storage to bpf_sk_storage
` [PATCH bpf-next v6 5/7] bpf: Implement bpf_local_storage for inodes
` [PATCH bpf-next v6 6/7] bpf: Allow local storage to be used from LSM programs
` [PATCH bpf-next v6 7/7] bpf: Add selftests for local_storage

[PATCH 00/17] VFS: Filesystem information [ver #20]
 2020-07-24 13:37 UTC  (18+ messages)
` [PATCH 01/17] fsinfo: Introduce a non-repeating system-unique superblock ID "
` [PATCH 02/17] fsinfo: Add fsinfo() syscall to query filesystem information "
` [PATCH 03/17] fsinfo: Provide a bitmap of the features a filesystem supports "
` [PATCH 04/17] fsinfo: Allow retrieval of superblock devname, options and stats "
` [PATCH 05/17] fsinfo: Allow fsinfo() to look up a mount object by ID "
` [PATCH 06/17] fsinfo: Add a uniquifier ID to struct mount "
` [PATCH 07/17] fsinfo: Allow mount information to be queried "
` [PATCH 08/17] fsinfo: Allow mount topology and propagation info to be retrieved "
` [PATCH 09/17] fsinfo: Provide notification overrun handling support "
` [PATCH 10/17] fsinfo: sample: Mount listing program "
` [PATCH 11/17] fsinfo: Add API documentation "
` [PATCH 12/17] fsinfo: Add support for AFS "
` [PATCH 13/17] fsinfo: Add support to ext4 "
` [PATCH 14/17] fsinfo: Add an attribute that lists all the visible mounts in a namespace "
` [PATCH 15/17] errseq: add a new errseq_scrape function "
` [PATCH 16/17] vfs: allow fsinfo to fetch the current state of s_wb_err "
` [PATCH 17/17] samples: add error state information to test-fsinfo.c "

[PATCH 13/17] watch_queue: Implement mount topology and attribute change notifications [ver #5]
 2020-07-24 11:36 UTC  (7+ messages)
` [PATCH 00/17] pipe: Keyrings, mount and superblock "

[PATCH] keys: asymmetric: fix error return code in software_key_query()
 2020-07-24  7:16 UTC  (6+ messages)

[PATCH] Manual pages: use "root user ID" rather than "rootid"
 2020-07-24  3:31 UTC  (2+ messages)

[PATCH v18 00/23] LSM: Module stacking for AppArmor
 2020-07-24  1:08 UTC  (4+ messages)
` [PATCH v18 22/23] LSM: Add /proc attr entry for full LSM context

KASAN: slab-out-of-bounds Read in vsscanf (2)
 2020-07-23 16:38 UTC  (4+ messages)
` [PATCH 1/2] Smack: fix another vsscanf out of bounds
` [PATCH 2/2] Smack: prevent underflow in smk_set_cipso()

[PATCH bpf-next v5 0/7] Generalizing bpf_local_storage
 2020-07-23 11:52 UTC  (11+ messages)
` [PATCH bpf-next v5 1/7] bpf: Renames to prepare for generalizing sk_storage
` [PATCH bpf-next v5 2/7] bpf: Generalize caching for sk_storage
` [PATCH bpf-next v5 3/7] bpf: Generalize bpf_sk_storage
` [PATCH bpf-next v5 4/7] bpf: Split bpf_local_storage to bpf_sk_storage
` [PATCH bpf-next v5 5/7] bpf: Implement bpf_local_storage for inodes
` [PATCH bpf-next v5 6/7] bpf: Allow local storage to be used from LSM programs
` [PATCH bpf-next v5 7/7] bpf: Add selftests for local_storage

[PATCH v2] KEYS: remove redundant memset
 2020-07-23  2:39 UTC  (5+ messages)

[PATCH] Manual pages: cap_from_text.3: Clarify a detail of cap_from_text() action list
 2020-07-22 21:00 UTC 

[PATCH v6 0/7] Add support for O_MAYEXEC
 2020-07-22 19:40 UTC  (7+ messages)
` [PATCH v6 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC

[PATCH v8 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability
 2020-07-22 11:30 UTC  (10+ messages)

[PATCH] KEYS: remove redundant memsets
 2020-07-22  8:01 UTC  (3+ messages)

[PATCH 00/13] Introduce partial kernel_read_file() support
 2020-07-21 21:50 UTC  (9+ messages)
` [PATCH 06/13] fs/kernel_read_file: Remove redundant size argument
` [PATCH 07/13] fs/kernel_read_file: Switch buffer size arg to size_t

[PATCH ghak84 v4] audit: purge audit_log_string from the intra-kernel audit API
 2020-07-21 21:16 UTC  (8+ messages)

[PATCH 2/2] LSM: SafeSetID: Add GID security policy handling
 2020-07-21 17:05 UTC  (4+ messages)

[PATCH 1/2] LSM: Signal to SafeSetID when in set*gid syscall
 2020-07-21  2:11 UTC  (2+ messages)

KASAN: use-after-free Read in smk_write_relabel_self
 2020-07-21  0:57 UTC  (4+ messages)
` [PATCH] Smack: fix use-after-free in smk_write_relabel_self()

[PATCH bpf-next v4 0/4] Generalizing bpf_local_storage
 2020-07-20 22:44 UTC  (5+ messages)
` [PATCH bpf-next v4 2/4] bpf: Implement bpf_local_storage for inodes

[PATCH v3 00/12] ima: Fix rule parsing bugs and extend KEXEC_CMDLINE rule support
 2020-07-20 21:38 UTC  (13+ messages)
` [PATCH v3 01/12] ima: Have the LSM free its audit rule
` [PATCH v3 06/12] ima: Fail rule parsing when the KEY_CHECK hook is combined with an invalid cond
` [PATCH v3 07/12] ima: Fail rule parsing when appraise_flag=blacklist is unsupportable

[PATCH 00/15] [libcap] Manual pages: various fixes
 2020-07-20 20:21 UTC  (18+ messages)
` [PATCH 01/15] Manual pages: various pages: Use "\-" for real minus signs
` [PATCH 02/15] Manual pages: cap_init.3: Formatting fix
` [PATCH 03/15] Manual pages: capsh.1: Various minor wording and formatting fixes
` [PATCH 04/15] Manual pages: cap_copy_ext.3: Typo fix
` [PATCH 05/15] Manual pages; cap_get_file.3: Fix some clumsily worded text
` [PATCH 06/15] Manual pages: getcap.8: Add missing word
` [PATCH 07/15] Manual pages: getcap.8: Fix a clumsily worded sentence
` [PATCH 08/15] Manual pages: getpcaps.8: Format options as a hanging list
` [PATCH 09/15] Manual pages: getpcaps.8: Remove a stray .br macro
` [PATCH 10/15] Manual pages: getpcaps.8: SEE ALSO: fix section number for capsh
` [PATCH 11/15] Manual pages: setcap.8: Typo fix
` [PATCH 12/15] Manual pages: cap_get_file.3: NOTES: note the effect of the Ambient set
` [PATCH 13/15] Manual pages: cap_get_proc.3: Update description of capsetp()
` [PATCH 14/15] Manual pages: cap_get_proc.3, capsh.1: Use "UID" and "GID" consistently
` [PATCH 15/15] Manual pages: capsh.1: Change .TP indent to the default

ANN: libseccomp v2.5.0 released
 2020-07-20 19:49 UTC 

[PATCH v3 0/5] LSM: Measure security module state
 2020-07-20 18:59 UTC  (21+ messages)
` [PATCH v3 1/5] IMA: Add LSM_STATE func to measure LSM data
` [PATCH v3 2/5] IMA: Define an IMA hook "
` [PATCH v3 3/5] LSM: Add security_measure_data in lsm_info struct
` [PATCH v3 4/5] LSM: Define SELinux function to measure security state
  ` [RFC PATCH] LSM: security_read_selinux_policy() can be static
` [PATCH v3 5/5] LSM: Define workqueue for measuring security module state

[RFC PATCH v4 00/12] Integrity Policy Enforcement LSM (IPE)
 2020-07-20 16:44 UTC  (17+ messages)
` [RFC PATCH v4 01/12] scripts: add ipe tooling to generate boot policy
` [RFC PATCH v4 02/12] security: add ipe lsm evaluation loop and audit system
` [RFC PATCH v4 03/12] security: add ipe lsm policy parser and policy loading
` [RFC PATCH v4 04/12] ipe: add property for trust of boot volume
` [RFC PATCH v4 05/12] fs: add security blob and hooks for block_device
` [RFC PATCH v4 06/12] dm-verity: move signature check after tree validation
` [RFC PATCH v4 07/12] dm-verity: add bdev_setsecurity hook for dm-verity signature
` [RFC PATCH v4 08/12] ipe: add property for signed dmverity volumes
` [RFC PATCH v4 09/12] dm-verity: add bdev_setsecurity hook for root-hash
` [RFC PATCH v4 10/12] ipe: add property for dmverity roothash
` [RFC PATCH v4 11/12] documentation: add ipe documentation
` [RFC PATCH v4 12/12] cleanup: uapi/linux/audit.h

[PATCH v6 0/7] capabilities: Introduce CAP_CHECKPOINT_RESTORE
 2020-07-20 12:58 UTC  (14+ messages)
` [PATCH v6 1/7] "
` [PATCH v6 2/7] pid: use checkpoint_restore_ns_capable() for set_tid
` [PATCH v6 3/7] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid
` [PATCH v6 4/7] proc: allow access in init userns for map_files with CAP_CHECKPOINT_RESTORE
` [PATCH v6 5/7] prctl: Allow local CAP_CHECKPOINT_RESTORE to change /proc/self/exe
` [PATCH v6 6/7] prctl: exe link permission error changed from -EINVAL to -EPERM
` [PATCH v6 7/7] selftests: add clone3() CAP_CHECKPOINT_RESTORE test

[PATCH bpf-next v4 1/4] bpf: Generalize bpf_sk_storage
 2020-07-20 11:18 UTC  (2+ messages)

[RFC PATCH 0/5] keys: Security changes, ACLs and Container keyring
 2020-07-19 18:10 UTC  (2+ messages)

[PATCH for v5.9] netfilter: xtables: Replace HTTP links with HTTPS ones
 2020-07-19 12:02 UTC 

[PATCH v5 0/6] capabilities: Introduce CAP_CHECKPOINT_RESTORE
 2020-07-18 17:47 UTC  (3+ messages)

[PATCH] LSM: drop duplicated words in header file comments
 2020-07-18  2:59 UTC  (2+ messages)

[PATCH] capabilities: Replace HTTP links with HTTPS ones
 2020-07-18  2:54 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).