linux-security-module.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
 messages from 2022-12-01 10:44:38 to 2022-12-15 21:03:56 UTC [more...]

[PATCH v3 00/10] Add CA enforcement keyring restrictions
 2022-12-15 21:03 UTC  (19+ messages)
` [PATCH v3 01/10] KEYS: Create static version of public_key_verify_signature
` [PATCH v3 02/10] KEYS: Add missing function documentation
` [PATCH v3 03/10] KEYS: X.509: Parse Basic Constraints for CA
` [PATCH v3 04/10] KEYS: X.509: Parse Key Usage
` [PATCH v3 05/10] KEYS: Introduce a CA endorsed flag
` [PATCH v3 06/10] KEYS: Introduce keyring restriction that validates ca trust
` [PATCH v3 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed
` [PATCH v3 08/10] integrity: Use root of trust signature restriction
` [PATCH v3 09/10] KEYS: CA link restriction
` [PATCH v3 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca

[PATCH v2 0/1] selftests/landlock: Fix selftest ptrace_test run fail
 2022-12-15 20:42 UTC  (5+ messages)
` [PATCH v2 1/1] selftests/landlock: skip ptrace_test according to YAMA

[PATCH] LoadPin: Ignore the "contents" argument of the LSM hooks
 2022-12-15 20:16 UTC  (5+ messages)

[PATCH v7 0/6] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC
 2022-12-15 16:55 UTC  (20+ messages)
` [PATCH v7 1/6] mm/memfd: add F_SEAL_EXEC
` [PATCH v7 2/6] selftests/memfd: add tests for F_SEAL_EXEC
` [PATCH v7 3/6] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC
` [PATCH v7 4/6] mm/memfd: Add write seals when apply SEAL_EXEC to executable memfd
` [PATCH v7 5/6] selftests/memfd: add tests for MFD_NOEXEC_SEAL MFD_EXEC
` [PATCH v7 6/6] mm/memfd: security hook for memfd_create

[PATCH] ima: add check for khdr->buffer_size
 2022-12-15 15:20 UTC 

[PATCH v2] landlock: Explain file descriptor access rights
 2022-12-15 12:45 UTC  (3+ messages)

Słowa kluczowe do wypozycjonowania
 2022-12-15  9:00 UTC 

[PATCH 0/2] lsm: introduce and use security_mptcp_add_subflow()
 2022-12-15  2:59 UTC  (7+ messages)
` [PATCH 1/2] security, lsm: Introduce security_mptcp_add_subflow()
` [PATCH 2/2] selinux: Implement mptcp_add_subflow hook

[PATCH v8 0/5] mm/memfd: introduce MFD_NOEXEC_SEAL and MFD_EXEC
 2022-12-15  0:12 UTC  (6+ messages)
` [PATCH v8 1/5] mm/memfd: add F_SEAL_EXEC
` [PATCH v8 2/5] selftests/memfd: add tests for F_SEAL_EXEC
` [PATCH v8 3/5] mm/memfd: add MFD_NOEXEC_SEAL and MFD_EXEC
` [PATCH v8 4/5] mm/memfd: Add write seals when apply SEAL_EXEC to executable memfd
` [PATCH v8 5/5] selftests/memfd: add tests for MFD_NOEXEC_SEAL MFD_EXEC

[GIT PULL] apparmor changes for v6.2
 2022-12-14 22:45 UTC  (4+ messages)

[PATCH 1/2] lsm: Fix description of fs_context_parse_param
 2022-12-14  2:43 UTC  (9+ messages)
` [PATCH 2/2] doc: Fix fs_context_parse_param description in mount_api.rst

[GIT PULL] SELinux patches for v6.2
 2022-12-13 19:25 UTC  (4+ messages)

[GIT PULL] Landlock updates for v6.2
 2022-12-13 18:13 UTC  (2+ messages)

[GIT PULL] LSM patches for v6.2
 2022-12-13 18:13 UTC  (3+ messages)

[PATCH v5 0/6] evm: Prepare for moving to the LSM infrastructure
 2022-12-13  8:05 UTC  (6+ messages)
` [PATCH v5 2/6] ocfs2: Switch to security_inode_init_security()

[PATCH 0/1][RFC] SELINUX: Remove obsolete deferred inode security
 2022-12-13  3:39 UTC  (2+ messages)
` [PATCH 1/1] [RFC] SELINUX: Remove obsolete deferred inode security init list

[PATCH v2 00/10] Add CA enforcement keyring restrictions
 2022-12-13  2:41 UTC  (17+ messages)
` [PATCH v2 01/10] KEYS: Create static version of public_key_verify_signature
` [PATCH v2 02/10] KEYS: Add missing function documentation
` [PATCH v2 03/10] KEYS: X.509: Parse Basic Constraints for CA
` [PATCH v2 04/10] KEYS: X.509: Parse Key Usage
` [PATCH v2 05/10] KEYS: Introduce a CA endorsed flag
` [PATCH v2 06/10] KEYS: Introduce keyring restriction that validates ca trust
` [PATCH v2 07/10] KEYS: X.509: Flag Intermediate CA certs as endorsed
` [PATCH v2 08/10] integrity: Use root of trust signature restriction
` [PATCH v2 09/10] KEYS: CA link restriction
` [PATCH v2 10/10] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca

[PATCH mptcp-net] mptcp: fix LSM labeling for passive msk
 2022-12-12 23:28 UTC  (7+ messages)

[PATCH 0/4] LoadPin: Allow filesystem switch when not enforcing
 2022-12-12 21:32 UTC  (6+ messages)
` [PATCH 1/4] LoadPin: Refactor read-only check into a helper
` [PATCH 2/4] LoadPin: Refactor sysctl initialization
` [PATCH 3/4] LoadPin: Move pin reporting cleanly out of locking
` [PATCH 4/4] LoadPin: Allow filesystem switch when not enforcing

Closing the BPF map permission loophole
 2022-12-12 18:19 UTC  (6+ messages)

[RFC][PATCH v2 0/7] bpf-lsm: Check return values of security modules
 2022-12-12 18:10 UTC  (12+ messages)
` [RFC][PATCH v2 1/7] bpf: Remove superfluous btf_id_set_contains() declaration
` [RFC][PATCH v2 2/7] bpf: Mark ALU32 operations in bpf_reg_state structure
` [RFC][PATCH v2 3/7] lsm: Redefine LSM_HOOK() macro to add return value flags as argument
` [RFC][PATCH v2 4/7] bpf-lsm: Enforce return value limitations on security modules
` [RFC][PATCH v2 5/7] selftests/bpf: Check if return values of LSM programs are allowed
` [RFC][PATCH v2 6/7] selftests/bpf: Prevent positive ret values in test_lsm and verify_pkcs7_sig
` [RFC][PATCH v2 7/7] selftests/bpf: Change return value in test_libbpf_get_fd_by_id_opts.c

[GIT PULL] tpmdd updates for tpmdd-next-v6.2-rc1
 2022-12-12 17:33 UTC  (2+ messages)

[PATCH v3 0/3] certs: Prevent spurious errors on repeated blacklisting
 2022-12-12 12:29 UTC  (6+ messages)
` [PATCH v3 1/3] certs: log hash value on blacklist error

[PATCH v2] KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
 2022-12-12  9:15 UTC  (4+ messages)

[PATCH 0/4] powerpc/pseries: expose firmware security variables via filesystem
 2022-12-12  6:11 UTC  (11+ messages)
` [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

[PATCH] [RFC] SELINUX: Remove obsolete deferred inode security init list
 2022-12-09 21:06 UTC  (4+ messages)

[PATCH v1] landlock: Explain file descriptor access rights
 2022-12-09 17:02 UTC  (3+ messages)

[PATCH] KEYS: asymmetric: Make a copy of sig and digest in vmalloced stack
 2022-12-09 14:27 UTC  (4+ messages)

Broken SELinux/LSM labeling with MPTCP and accept(2)
 2022-12-08 22:45 UTC  (10+ messages)

[PATCH v2 0/2] lsm: Improve LSM hooks documentation
 2022-12-08 22:18 UTC  (11+ messages)
` [PATCH v2 1/2] lsm: Clarify documentation of vm_enough_memory hook
` [PATCH v2 2/2] lsm: Add/fix return values in lsm_hooks.h and fix formatting

[PATCH v6 6/6] mm/memfd: security hook for memfd_create
 2022-12-08 16:46 UTC 

[syzbot] linux-next build error (14)
 2022-12-08  8:48 UTC 

[PATCH v2 0/2] ima/evm: Ensure digest to verify is in linear mapping area
 2022-12-08  8:32 UTC  (12+ messages)
` [PATCH v2 1/2] evm: Alloc evm_digest in evm_verify_hmac() if CONFIG_VMAP_STACK=y
` [PATCH v2 2/2] ima: Alloc ima_max_digest_data in xattr_verify() "

[PATCH v5 00/11] Encrypted Hibernation
 2022-12-07 23:54 UTC  (11+ messages)
` [PATCH v5 04/11] security: keys: trusted: Include TPM2 creation data

[PATCH] public_key: Add a comment to public_key_signature struct definition
 2022-12-07 10:54 UTC 

[PATCH v8 00/12] Network support for Landlock
 2022-12-05 13:18 UTC  (34+ messages)
` [PATCH v8 01/12] landlock: Make ruleset's access masks more generic
` [PATCH v8 04/12] landlock: Move unmask_layers() and init_layer_masks()
` [PATCH v8 07/12] landlock: Add network rules support
` [PATCH v8 08/12] landlock: Implement TCP network hooks
` [PATCH v8 11/12] samples/landlock: Add network demo
` [PATCH v8 12/12] landlock: Document Landlock's network support

[PATCH v8 02/12] landlock: Refactor landlock_find_rule/insert_rule
 2022-12-02  2:51 UTC  (9+ messages)
` [PATCH] landlock: Allow filesystem layout changes for domains without such rule type

[PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
 2022-12-01 10:41 UTC  (2+ messages)
` [PATCH v7 6/6] evm: Support multiple LSMs providing an xattr


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).