lockdown security module · Maintained

Maintainers

• M Nicolas Bouchinet <nicolas.bouchinet@oss.cyber.gouv.fr>
• M Xiu Jianfeng <xiujianfeng@huawei.com>

Paths

• F security/lockdown/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-api (capped at 30), ordered by date desc.

• STALE866d REVIEWED: 5 (4M) [PATCH v15 01/11] LSM: Identify modules by more than name
  2023-09-12 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1049d REVIEWED: 5 (4M) [PATCH v14 01/11] LSM: Identify modules by more than name
  2023-08-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1066d REVIEWED: 4 (3M) [PATCH v13 01/11] LSM: Identify modules by more than name
  2023-08-02 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1092d REVIEWED: 3 (2M) [PATCH v12 01/11] LSM: Identify modules by more than name
  2023-06-29 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1126d REVIEWED: 3 (2M) [PATCH v11 01/11] LSM: Identify modules by more than name
  2023-06-16 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1137d REVIEWED: 1 (0M) [PATCH v10 01/11] LSM: Identify modules by more than name
  2023-04-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1185d REVIEWED: 1 (0M) [PATCH v10 01/11] LSM: Identify modules by more than name
  2023-04-28 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1186d [PATCH v9 01/11] LSM: Identify modules by more than name
  2023-04-21 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1194d [PATCH v8 01/11] LSM: Identify modules by more than name
  2023-04-11 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1200d [PATCH v7 01/11] LSM: Identify modules by more than name
  2023-03-15 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1207d [PATCH v6 01/11] LSM: Identify modules by more than name
  2023-02-22 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1258d [PATCH v5 1/8] LSM: Identify modules by more than name
  2023-01-09 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1301d [PATCH v4 1/8] LSM: Identify modules by more than name
  2022-12-29 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1331d [PATCH v3 1/9] LSM: Identify modules by more than name
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1341d [PATCH v1 1/8] LSM: Identify modules by more than name
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1341d [PATCH v1 2/8] LSM: Add an LSM identifier for external use
  2022-11-23 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1354d [PATCH v1 2/8] LSM: Add an LSM identifier for external use
  2022-10-25 · Casey Schaufler <casey@schaufler-ca.com>
• STALE1354d [PATCH v1 1/8] LSM: Identify modules by more than name
  2022-10-25 · Casey Schaufler <casey@schaufler-ca.com>
• STALE2511d [PATCH 1/2] security: constify some arrays in lockdown LSM
  2019-09-10 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 03/29] security: Add a static lockdown policy LSM
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 14/29] ACPI: Limit access to custom_method when the kernel is locked down
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 18 (17M) [PATCH V40 20/29] x86/mmiotrace: Lock down the testmmiotrace module
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 23/29] bpf: Restrict bpf when kernel lockdown is in confidentiality mode
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 17 (17M) [PATCH V40 27/29] tracefs: Restrict tracefs when the kernel is locked down
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 29/29] lockdown: Print current->comm in restriction messages
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d [PATCH V40 26/29] debugfs: Restrict debugfs when the kernel is locked down
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 24/29] lockdown: Lock down perf when in confidentiality mode
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 10 (9M) [PATCH V40 22/29] lockdown: Lock down tracing and perf kprobes when in confidentiality mode
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 21/29] lockdown: Lock down /proc/kcore
  2019-08-20 · Matthew Garrett <hidden>
• STALE1663d REVIEWED: 1 (0M) [PATCH V40 19/29] lockdown: Lock down module params that specify hardware parameters (eg. ioport)
  2019-08-20 · Matthew Garrett <hidden>