linux-security-module archive · August 2017

526 messages across 84 threads, ordered by last activity .

• STALE3311d [PATCH RFC 00/11] LSM: Stacking for major security modules
  2017-08-31 22:43 · 20 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• STALE3304d [PATCH 0/3] Security: add lsm hooks for checking permissions on eBPF objects
  2017-08-31 22:38 · 6 replies this month · Chenbo Feng <hidden>
• STALE3310d [GIT PULL] SELinux patches for v4.14
  2017-08-31 19:37 · 0 replies this month · paul@paul-moore.com (Paul Moore)
• STALE3303d [PATCH RESEND v2 0/3] tpm2-cmd: Improve self test execution
  2017-08-31 17:19 · 3 replies this month · Alexander Steffen <hidden>
• STALE3303d [PATCH RESEND v3 0/2] tpm_tis_spi: Use DMA-safe memory
  2017-08-31 17:08 · 2 replies this month · Alexander Steffen <hidden>
• STALE3309d [PATCH RESEND 3/3] tpm-chip: Export TPM device to user space even when startup failed
  2017-08-31 16:26 · 13 replies this month · Jarkko Sakkinen <hidden>
• STALE3205d setcap/getcap limitations
  2017-08-31 15:56 · 2 replies this month · Richard Guy Briggs <hidden>
• STALE3306d [PATCH V3 00/10] capabilities: do not audit log BPRM_FCAPS on set*id
  2017-08-31 14:49 · 52 replies this month · Richard Guy Briggs <hidden>
• STALE3306d [PATCH v7 00/19] simplify crypto wait for async op
  2017-08-31 12:32 · 20 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3313d [PATCH] RFC: Add Apparmor policy matching to IMA
  2017-08-29 19:50 · 2 replies this month · Matthew Garrett <hidden>
• STALE3313d [PATCH] lsm_audit: use get_task_comm
  2017-08-29 11:34 · 3 replies this month · Geliang Tang <hidden>
• STALE3314d [PATCH] selinux: constify nf_hook_ops
  2017-08-28 21:34 · 1 reply this month · Arvind Yadav <hidden>
• STALE3314d [PATCH v6 0/6] define new fs integrity_read method
  2017-08-28 18:30 · 30 replies this month · Mimi Zohar <hidden>
• STALE3309d Re: [PATCH net-next v7 01/10] selftest: Enhance kselftest_harness.h with a step mechanism
  2017-08-28 18:01 · 1 reply this month · Alexei Starovoitov <hidden>
• STALE3314d [PATCH RESEND 1/3] tpm-chip: Move idr_replace calls to appropriate places
  2017-08-28 17:18 · 1 reply this month · Jarkko Sakkinen <hidden>
• STALE3309d Re: [PATCH net-next v7 05/10] landlock: Add LSM hooks related to filesystem
  2017-08-28 05:26 · 0 replies this month · Alexei Starovoitov <hidden>
• STALE3309d [PATCH net-next v7 00/10] Landlock LSM: Toward unprivileged sandboxing
  2017-08-28 04:10 · 18 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE3309d Re: [kernel-hardening] Re: [PATCH net-next v7 02/10] bpf: Add eBPF program subtype and is_valid_subtype() verifier
  2017-08-28 03:49 · 0 replies this month · James Morris <jmorris@namei.org>
• STALE3316d [PATCH RESEND] tpm: migrate pubek_show to struct tpm_buf
  2017-08-26 11:19 · 2 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies [PATCH] smack: constify nf_hook_ops
  2017-08-26 10:49 · 0 replies this month · Arvind Yadav <hidden>
• STALE3309d Re: [PATCH net-next v7 05/10] landlock: Add LSM hooks related to filesystem
  2017-08-26 01:16 · 0 replies this month · Alexei Starovoitov <hidden>
• DORMANTno replies Re: Permissions for eBPF objects
  2017-08-25 20:04 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE3317d Re: [PATCH] tpm/tpm_crb: Access locality for non-ACPI and non-SMC start method
  2017-08-25 17:35 · 3 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies Re: [PATCH v6 04/19] crypto: marvell/cesa: remove redundant backlog checks on EBUSY
  2017-08-24 13:27 · 0 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3286d [PATCH] apparmor: fix spelling mistake: "resoure" -> "resource"
  2017-08-24 08:31 · 0 replies this month · Colin King <hidden>
• STALE3309d Re: [PATCH net-next v7 02/10] bpf: Add eBPF program subtype and is_valid_subtype() verifier
  2017-08-24 01:22 · 0 replies this month · Alexei Starovoitov <hidden>
• DORMANTno replies No Smack patches for 4.14
  2017-08-24 00:10 · 0 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• STALE3320d [GIT PULL] IMA patches for 4.14
  2017-08-22 23:21 · 1 reply this month · Mimi Zohar <hidden>
• STALE3286d [PATCH] apparmor: fix off-by-one comparison on MAXMAPPED_SIG
  2017-08-22 21:58 · 0 replies this month · Colin King <hidden>
• STALE3320d [PATCH v4 0/5] define new fs integrity_read method
  2017-08-22 09:59 · 16 replies this month · Mimi Zohar <hidden>
• STALE3318d [PATCH v6 00/19] simplify crypto wait for async op
  2017-08-21 14:15 · 19 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3321d [PATCH v5 00/19] simplify crypto wait for async op
  2017-08-21 12:49 · 26 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3296d [PATCH 0/3] Fix y2038 issues for security/keys subsystem
  2017-08-21 12:12 · 14 replies this month · Baolin Wang <hidden>
• STALE3321d [GIT PULL] tpmdd updates for Linux 4.14
  2017-08-21 02:33 · 1 reply this month · Jarkko Sakkinen <hidden>
• DORMANTno replies tpmdd ML
  2017-08-19 15:53 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE3323d [PATCH v2] msleep() delays - replace with usleep_range() in TPM 1.2/2.0 generic drivers
  2017-08-19 12:16 · 2 replies this month · Hamza Attak <hidden>
• DORMANTno replies [security:next 6/15] security/apparmor/mount.c:227: warning: 'perms.prompt' is used uninitialized in this function
  2017-08-19 09:40 · 0 replies this month · kbuild test robot <hidden>
• STALE3324d [GIT PULL] apparmor updates for next
  2017-08-19 00:43 · 3 replies this month · John Johansen <john.johansen@canonical.com>
• DORMANTno replies evm_inode_init_security and module stacking
  2017-08-19 00:14 · 0 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• STALE3324d [RFC] memory allocations in genalloc
  2017-08-18 14:48 · 2 replies this month · Igor Stoppa <hidden>
• STALE3324d [RFC][PATCH 00/27] VFS: Introduce filesystem context [ver #5]
  2017-08-18 03:09 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE3325d [PATCH 1/2] selinux: update my email address
  2017-08-17 19:36 · 3 replies this month · Stephen Smalley <hidden>
• STALE3325d [PATCH v4 0/7] Appended signatures support for IMA appraisal
  2017-08-17 15:43 · 9 replies this month · Thiago Jung Bauermann <hidden>
• STALE3214d [PATCH 00/12] ima: measure digest lists instead of individual files
  2017-08-17 09:16 · 13 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE3205d [RFC PATCH 0/4] ima: filesystems not mounted with i_version
  2017-08-17 02:39 · 7 replies this month · Mimi Zohar <hidden>
• DORMANTno replies [integrity:next-log-iversion 10/11] drivers/net/irda/donauboe.c:192:1: note: in expansion of macro 'MODULE_DEVICE_TABLE'
  2017-08-17 00:00 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies Re: Aw: Re: [tpmdd-devel] [PATCH] tpm: improve tpm_tis send() performance by ignoring burstcount
  2017-08-16 19:51 · 0 replies this month · Ken Goldman <hidden>
• DORMANTno replies [integrity:next-log-iversion 10/11] fs//attr.c:35:1: error: expected '=', ',', ';', 'asm' or '__attribute__' before '{' token
  2017-08-16 19:48 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies [integrity:next-log-iversion 10/11] include/linux/hrtimer.h:476:1: error: 'latent_entropy' attribute only applies to functions and variables
  2017-08-16 18:47 · 0 replies this month · kbuild test robot <hidden>
• STALE3326d [integrity:next-log-iversion 9/11] include/linux/ima.h:70:20: warning: 'ima_sb_post_new_mount' used but never defined
  2017-08-16 18:38 · 1 reply this month · kbuild test robot <hidden>
• DORMANTno replies [integrity:next-log-iversion 10/11] arch/x86/include/asm/linkage.h:10:35: error: expected declaration specifiers before '__attribute__'
  2017-08-16 18:12 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies [integrity:next-log-iversion 8/11] fs/namespace.c:2472:3: error: implicit declaration of function 'security_sb_post_new_mount'
  2017-08-16 18:11 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies [integrity:next-log-iversion 9/11] include/linux/ima.h:72:1: error: expected identifier or '(' before '{' token
  2017-08-16 16:20 · 0 replies this month · kbuild test robot <hidden>
• STALE3326d REVIEWED: 1 (0M) [PATCH] tpm: improve tpm_tis send() performance by ignoring burstcount
  2017-08-16 10:24 · 23 replies this month · Nayna Jain <hidden>
• STALE3237d [PATCH] KEYS: remove CONFIG_KEYS_COMPAT
  2017-08-16 02:52 · 1 reply this month · Eric Biggers <hidden>
• STALE3326d [GIT PULL] seccomp updates for next
  2017-08-16 02:33 · 1 reply this month · Kees Cook <hidden>
• STALE3328d [PATCH v4 0/4] seccomp: Implement SECCOMP_RET_KILL_PROCESS action
  2017-08-14 21:10 · 6 replies this month · Kees Cook <hidden>
• STALE3328d [PATCH 0/4] SELinux: Fine-tuning for some function implementations
  2017-08-14 21:00 · 9 replies this month · SF Markus Elfring <hidden>
• DORMANTno replies [PATCH] selftests/seccomp: Add simple seccomp overhead benchmark
  2017-08-14 20:53 · 0 replies this month · Kees Cook <hidden>
• DORMANTno replies [PATCH] selftests/seccomp: Add tests for basic ptrace actions
  2017-08-14 20:52 · 0 replies this month · Kees Cook <hidden>
• DORMANTno replies [PATCH] ima: Delete an error message for a failed memory allocation in ima_add_digest_entry()
  2017-08-13 17:36 · 0 replies this month · SF Markus Elfring <hidden>
• DORMANTno replies Re: [PATCH v3 2/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-11 18:32 · 0 replies this month · Kees Cook <hidden>
• DORMANTno replies [integrity:next-integrity-read 3/7] fs/efivarfs/file.c:100:9: error: implicit declaration of function 'simple_read_iter_from_buffer'
  2017-08-11 17:29 · 0 replies this month · kbuild test robot <hidden>
• STALE3331d [PATCH v5 0/4] define new fs integrity_read method
  2017-08-11 17:15 · 10 replies this month · Mimi Zohar <hidden>
• STALE3117d [RFC PATCH 0/5] ima: namespacing IMA audit messages
  2017-08-11 15:01 · 4 replies this month · Mehmet Kayaalp <hidden>
• STALE3332d [PATCH] MAINTAINERS: update the NetLabel and Labeled Networking information
  2017-08-10 23:25 · 4 replies this month · Paul Moore <hidden>
• STALE3332d [RFC] Tagging of vmalloc pages for supporting the pmalloc allocator
  2017-08-10 07:14 · 20 replies this month · Igor Stoppa <hidden>
• STALE3331d Re: [PATCH v3 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-09 20:54 · 0 replies this month · Kees Cook <hidden>
• STALE3331d Re: [PATCH v3 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-09 20:49 · 0 replies this month · Tycho Andersen <hidden>
• STALE3331d [PATCH v3 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-09 20:22 · 5 replies this month · Kees Cook <hidden>
• STALE3333d Re: [Linux-ima-devel] [RFC PATCH 1/5] ima: extend clone() with IMA
  2017-08-09 15:31 · 1 reply this month · Magalhaes, Guilherme (Brazil R&D-CL) <hidden>
• STALE3333d [PATCH v4 00/19] simplify crypto wait for async op
  2017-08-09 05:18 · 21 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3333d Re: [PATCH v4 06/19] crypto: move algif to generic async completion
  2017-08-08 13:45 · 0 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3334d [PATCH v2 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-08 02:00 · 4 replies this month · Kees Cook <hidden>
• DORMANTno replies Re: [PATCH 2/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-08 01:54 · 0 replies this month · Kees Cook <hidden>
• STALE3334d Re: [PATCH 1/4] seccomp: Provide matching filter for introspection
  2017-08-08 01:46 · 0 replies this month · Kees Cook <hidden>
• STALE3334d Re: [PATCH 4/4] selftests/seccomp: Test thread vs process killing
  2017-08-08 01:37 · 0 replies this month · Kees Cook <hidden>
• STALE3339d [PATCH v3 0/7] Appended signatures support for IMA appraisal
  2017-08-03 21:01 · 5 replies this month · Thiago Jung Bauermann <hidden>
• STALE3334d [PATCH 0/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS
  2017-08-03 03:20 · 4 replies this month · Kees Cook <hidden>
• STALE3340d [PATCH 0/2] Clean up TPM 1.2 EK sysfs code
  2017-08-02 14:23 · 1 reply this month · Jarkko Sakkinen <hidden>
• STALE3341d [PATCH v4 00/15] exec: Use sane stack rlimit under secureexec
  2017-08-01 21:04 · 20 replies this month · Kees Cook <hidden>
• STALE3341d [PATCH v5 00/15] exec: Use sane stack rlimit under secureexec
  2017-08-01 19:16 · 15 replies this month · Kees Cook <hidden>
• STALE3341d [PATCH v3 00/15] exec: Use sane stack rlimit under secureexec
  2017-08-01 13:12 · 1 reply this month · Kees Cook <hidden>
• STALE3342d [PATCH] apparmor: Fix logical error in verify_header()
  2017-08-01 00:22 · 1 reply this month · Christos Gkekas <hidden>