linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2021-03-04 20:07:47 to 2021-03-13 18:54:59 UTC [more...]

[PATCH v7 0/5] Enable root to update the blacklist keyring
 2021-03-13 18:53 UTC  (7+ messages)
` [PATCH v7 1/5] tools/certs: Add print-cert-tbs-hash.sh
` [PATCH v7 2/5] certs: Check that builtin blacklist hashes are valid
` [PATCH v7 3/5] certs: Make blacklist_vet_description() more strict
` [PATCH v7 4/5] certs: Factor out the blacklist hash creation
` [PATCH v7 5/5] certs: Allow root user to append signed hashes to the blacklist keyring

[PATCH 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries
 2021-03-13 14:40 UTC  (8+ messages)
` [PATCH 4/4] integrity: Load mokx variables into the blacklist keyring

[PATCH v9 0/4] Introduce TEE based Trusted Keys support
 2021-03-13 10:44 UTC  (11+ messages)

[PATCH v6 00/40] idmapped mounts
 2021-03-13  0:05 UTC  (3+ messages)
` [PATCH v6 02/40] fs: add id translation helpers

[PATCH v3 1/3] [security] Add new hook to compare new mount to an existing mount
 2021-03-12 22:34 UTC  (8+ messages)
` [PATCH v4 "

[PATCH v5 0/8] Fork brute force attack mitigation
 2021-03-12 17:54 UTC  (18+ messages)
` [PATCH v5 5/8] security/brute: Mitigate a brute force attack
` [PATCH v5 7/8] Documentation: Add documentation for the Brute LSM

[PATCH v2 0/3] Fix bugs related to TPM2 event log
 2021-03-12 16:54 UTC  (12+ messages)
` [PATCH v2 1/3] tpm: efi: Use local variable for calculating final log size
` [PATCH v2 2/3] tpm: acpi: Check eventlog signature before using it
` [PATCH v2 3/3] tpm: vtpm_proxy: Avoid reading host log when using a virtual device

[PATCH v25 00/25] LSM: Module stacking for AppArmor
 2021-03-12 16:16 UTC  (32+ messages)
  ` [PATCH v25 01/25] LSM: Infrastructure management of the sock security
  ` [PATCH v25 02/25] LSM: Add the lsmblob data structure
  ` [PATCH v25 03/25] LSM: provide lsm name and id slot mappings
  ` [PATCH v25 04/25] IMA: avoid label collisions with stacked LSMs
  ` [PATCH v25 05/25] LSM: Use lsmblob in security_audit_rule_match
  ` [PATCH v25 06/25] LSM: Use lsmblob in security_kernel_act_as
  ` [PATCH v25 07/25] LSM: Use lsmblob in security_secctx_to_secid
  ` [PATCH v25 08/25] LSM: Use lsmblob in security_secid_to_secctx
  ` [PATCH v25 09/25] LSM: Use lsmblob in security_ipc_getsecid
  ` [PATCH v25 10/25] LSM: Use lsmblob in security_task_getsecid
  ` [PATCH v25 11/25] LSM: Use lsmblob in security_inode_getsecid
  ` [PATCH v25 12/25] LSM: Use lsmblob in security_cred_getsecid
    ` [RFC PATCH] LSM: audit_sig_lsm can be static
  ` [PATCH v25 13/25] IMA: Change internal interfaces to use lsmblobs
  ` [PATCH v25 14/25] LSM: Specify which LSM to display
  ` [PATCH v25 15/25] LSM: Ensure the correct LSM context releaser
  ` [PATCH v25 16/25] LSM: Use lsmcontext in security_secid_to_secctx
  ` [PATCH v25 17/25] LSM: Use lsmcontext in security_inode_getsecctx
  ` [PATCH v25 18/25] LSM: security_secid_to_secctx in netlink netfilter
  ` [PATCH v25 19/25] NET: Store LSM netlabel data in a lsmblob
  ` [PATCH v25 20/25] LSM: Verify LSM display sanity in binder
  ` [PATCH v25 21/25] audit: add support for non-syscall auxiliary records
  ` [PATCH v25 22/25] Audit: Add new record for multiple process LSM attributes
  ` [PATCH v25 23/25] Audit: Add a new record for multiple object "
  ` [PATCH v25 24/25] LSM: Add /proc attr entry for full LSM context
  ` [PATCH v25 25/25] AppArmor: Remove the exclusive flag

[PATCH] NFSv4.2: fix return value of _nfs4_get_security_label()
 2021-03-12 15:42 UTC  (3+ messages)

[GIT PULL] Add EFI_CERT_X509_GUID support for dbx/mokx entries
 2021-03-11 17:05 UTC 

[PATCH v3 0/1] Unprivileged chroot
 2021-03-11 10:52 UTC  (2+ messages)
` [PATCH v3 1/1] fs: Allow no_new_privs tasks to call chroot(2)

[PATCH v1 0/1] Unprivileged chroot
 2021-03-11 10:42 UTC  (8+ messages)
` [PATCH v1 1/1] fs: Allow no_new_privs tasks to call chroot(2)

[PATCH v2 0/1] Unprivileged chroot
 2021-03-11 10:37 UTC  (6+ messages)
` [PATCH v2 1/1] fs: Allow no_new_privs tasks to call chroot(2)

[RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants
 2021-03-11  4:32 UTC  (29+ messages)
` [RFC PATCH 1/4] lsm: separate security_task_getsecid() into subjective and objective variants
` [RFC PATCH 2/4] selinux: clarify task subjective and objective credentials
` [RFC PATCH 3/4] smack: differentiate between subjective and objective task credentials

[PATCH v3 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries
 2021-03-10 22:47 UTC  (8+ messages)
` [PATCH v3 1/4] certs: Add EFI_CERT_X509_GUID support for dbx entries
` [PATCH v3 2/4] certs: Move load_system_certificate_list to a common function
` [PATCH v3 3/4] certs: Add ability to preload revocation certs
` [PATCH v3 4/4] integrity: Load mokx variables into the blacklist keyring

[PATCH 0/3] Fix bugs related to TPM2 event log
 2021-03-10 19:51 UTC  (6+ messages)
` [PATCH 1/3] tpm: efi: Use local variable for calculating final log size
` [PATCH 2/3] tpm: acpi: Check eventlog signature before using it
` [PATCH 3/3] tpm: vtpm_proxy: Avoid reading host log when using a virtual device

[PATCH] LSM: SafeSetID: Fix code specification by scripts/checkpatch.pl
 2021-03-10  6:52 UTC 

[PATCH v5] ARM: Implement SLS mitigation
 2021-03-10  4:43 UTC  (9+ messages)
  ` [PATCH v6] "

[RFC PATCH 0/3] LSM Documentation - Render lsm_hooks.h for kernel_docs
 2021-03-09 14:39 UTC  (4+ messages)
` [RFC PATCH 1/3] Documentation/security: Update LSM security hook text
` [RFC PATCH 2/3] include/linux: Update LSM hook text part1
` [RFC PATCH 3/3] include/linux: Update LSM hook text part2

[PATCH] security/apparmor: fix misspellings using codespell tool
 2021-03-09  3:26 UTC 

[PATCH v3] selinux: measure state and policy capabilities
 2021-03-09  0:43 UTC  (10+ messages)

[PATCH v6 0/8] Fork brute force attack mitigation
 2021-03-07 11:30 UTC  (9+ messages)
` [PATCH v6 1/8] security: Add LSM hook at the point where a task gets a fatal signal
` [PATCH v6 2/8] security/brute: Define a LSM and manage statistical data
` [PATCH v6 3/8] securtiy/brute: Detect a brute force attack
` [PATCH v6 4/8] security/brute: Fine tuning the attack detection
` [PATCH v6 5/8] security/brute: Mitigate a brute force attack
` [PATCH v6 6/8] selftests/brute: Add tests for the Brute LSM
` [PATCH v6 7/8] Documentation: Add documentation "
` [PATCH v6 8/8] MAINTAINERS: Add a new entry "

[PATCH] security: tomoyo: fix error return code of tomoyo_update_domain()
 2021-03-06 13:37 UTC  (2+ messages)

[PATCH v3 1/1] mm/madvise: replace ptrace attach requirement for process_madvise
 2021-03-05 19:41 UTC  (11+ messages)

[PATCH v4 00/11] evm: Improve usability of portable signatures
 2021-03-05 17:30 UTC  (13+ messages)
` [PATCH v4 01/11] evm: Execute evm_inode_init_security() only when an HMAC key is loaded
` [PATCH v4 02/11] evm: Load EVM key in ima_load_x509() to avoid appraisal
` [PATCH v4 03/11] evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
` [PATCH v4 04/11] ima: Move ima_reset_appraise_flags() call to post hooks
` [PATCH v4 05/11] evm: Introduce evm_status_revalidate()
` [PATCH v4 06/11] evm: Ignore INTEGRITY_NOLABEL/INTEGRITY_NOXATTRS if conditions are safe
` [PATCH v4 07/11] evm: Allow xattr/attr operations for portable signatures
` [PATCH v4 08/11] evm: Allow setxattr() and setattr() for unmodified metadata
` [PATCH v4 09/11] ima: Allow imasig requirement to be satisfied by EVM portable signatures
` [PATCH v4 10/11] ima: Introduce template field evmsig and write to field sig as fallback
` [PATCH v4 11/11] ima: Don't remove security.ima if file must not be appraised

[PATCH v2] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr
 2021-03-05 16:42 UTC  (2+ messages)

[PATCH] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr
 2021-03-05  7:40 UTC  (5+ messages)

[PATCH v3] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)"
 2021-03-05  3:21 UTC 

[PATCH v2] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)"
 2021-03-05  2:46 UTC 

[PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page
 2021-03-05  2:21 UTC  (2+ messages)

[PATCH] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)"
 2021-03-04 23:50 UTC  (2+ messages)

[PATCH] cipso,calipso: resolve a number of problems with the DOI refcounts
 2021-03-04 23:30 UTC  (6+ messages)

Flipping firmware write-protection bits from within the kernel (was Re: [PATCH RFC platform-next 8/8] Documentation/ABI: Add new line card attributes for mlxreg-io sysfs interfaces)
 2021-03-04 20:06 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).