linux-security-module archive · October 2017

644 messages · showing the 100 most-recently-active threads .

• STALE3251d [RFC PATCH] xfrm: fix regression introduced by xdst pcpu cache
  2017-10-31 23:08 · 3 replies this month · Stephen Smalley <hidden>
• STALE3218d [PATCH 0/9] LSM: Stacking for major security modules - Based on 4.14-rc2
  2017-10-31 21:57 · 16 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• STALE3162d [PATCH v2] tpm: Move Linux RNG connection to hwrng
  2017-10-31 20:05 · 0 replies this month · Jason Gunthorpe <jgg@ziepe.ca>
• STALE3173d [PATCH v3] tpm: use struct tpm_chip for tpm_chip_find_get()
  2017-10-31 20:03 · 6 replies this month · Jarkko Sakkinen <hidden>
• STALE3253d REVIEWED: 1 (0M) [PATCH v2] fscrypt: fix dereference of NULL user_key_payload
  2017-10-31 17:51 · 3 replies this month · Eric Biggers <hidden>
• STALE3253d [RFC PATCH 0/5] Add SELinux SCTP protocol support
  2017-10-31 17:26 · 1 reply this month · Richard Haines <hidden>
• STALE3232d [RFC PATCH 5/5] selinux: Add SCTP support
  2017-10-31 17:16 · 3 replies this month · Richard Haines <hidden>
• STALE3252d [RFC PATCH 2/5] sctp: Add ip option support
  2017-10-31 17:06 · 1 reply this month · Richard Haines <hidden>
• STALE3247d [RFC PATCH 1/5] security: Add support for SCTP security hooks
  2017-10-31 16:42 · 2 replies this month · Richard Haines <hidden>
• STALE3253d Re: [RFC PATCH] xfrm: fix regression introduced by xdst pcpu cache
  2017-10-31 14:15 · 2 replies this month · Stephen Smalley <hidden>
• STALE3239d [RFC v0.1][PATCH] selinuxns: extend namespace support to security.selinux xattrs
  2017-10-31 14:04 · 5 replies this month · James Morris <hidden>
• STALE3253d [PATCH v5 00/18] Appended signatures support for IMA appraisal
  2017-10-31 13:31 · 26 replies this month · Thiago Jung Bauermann <hidden>
• STALE3244d [RFC PATCH] ima: require secure_boot rules in lockdown mode
  2017-10-31 03:25 · 5 replies this month · Mimi Zohar <hidden>
• STALE3254d Proposal: rename tpm1_eventlog.c and tpm2_eventlog.c
  2017-10-30 18:35 · 5 replies this month · Jarkko Sakkinen <hidden>
• STALE3215d [PATCH 00/27] security, efi: Add kernel lockdown
  2017-10-30 17:52 · 89 replies this month · David Howells <dhowells@redhat.com>
• STALE3205d REVIEWED: 5 (5M) [PATCH V3 1/2] security: Add a cred_getsecid hook
  2017-10-30 17:13 · 8 replies this month · Matthew Garrett <hidden>
• DORMANTno replies [RFC PATCH] xfrm: fix regression introduced by xdst pcpu cache
  2017-10-27 15:28 · 0 replies this month · Stephen Smalley <hidden>
• STALE3253d [PATCH] KEYS: trusted: fix writing past end of buffer in trusted_read()
  2017-10-27 07:56 · 2 replies this month · Eric Biggers <hidden>
• STALE3258d [PATCH] MAINTAINERS: remove David Safford as maintainer for encrypted+trusted keys
  2017-10-27 07:47 · 1 reply this month · Eric Biggers <hidden>
• STALE3258d [GIT PULL] Kernel lockdown for secure boot
  2017-10-26 19:21 · 2 replies this month · David Howells <dhowells@redhat.com>
• STALE3258d Fixing CVE-2017-15361
  2017-10-26 19:07 · 18 replies this month · Jarkko Sakkinen <hidden>
• STALE3258d [PATCH] tpm: remove chip_num parameter from in-kernel API
  2017-10-26 16:23 · 25 replies this month · Jarkko Sakkinen <hidden>
• STALE3259d [PATCH v2] tpm: use struct tpm_chip for tpm_chip_find_get()
  2017-10-26 10:54 · 7 replies this month · Jarkko Sakkinen <hidden>
• STALE3259d [PATCH] Audit: remove unused audit_log_secctx function
  2017-10-25 21:19 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE3259d REVIEWED: 1 (0M) [PATCH] tpm: Move Linux RNG connection to hwrng
  2017-10-25 20:04 · 9 replies this month · Jason Gunthorpe <hidden>
• STALE3259d Re: [PATCH v3 2/2] ima: check signature enforcement against cmdline param instead of CONFIG
  2017-10-25 17:18 · 0 replies this month · Mimi Zohar <hidden>
• STALE3259d [PATCH v3 0/2] ima: change how MODULE_SIG_FORCE is checked on modules checking policy
  2017-10-24 22:55 · 3 replies this month · Bruno E. O. Meneguele <hidden>
• STALE3260d [RFC PATCH 3/5] sctp: Add LSM hooks
  2017-10-24 20:27 · 5 replies this month · Richard Haines <hidden>
• STALE3225d [PATCH v4 0/4] additional TPM performance improvements
  2017-10-24 13:46 · 17 replies this month · Nayna Jain <hidden>
• STALE3261d [PATCH v2 0/2] ima: change how MODULE_SIG_FORCE is checked on modules checking policy
  2017-10-24 10:41 · 3 replies this month · Bruno E. O. Meneguele <hidden>
• STALE3261d Re: [RFC][PATCH 1/2] ima: preserve the integrity of appraised files
  2017-10-24 10:07 · 3 replies this month · Mimi Zohar <hidden>
• STALE3261d [PATCH net-next v7 0/5] bpf: security: New file mode and LSM hooks for eBPF object permission control
  2017-10-23 23:28 · 12 replies this month · Chenbo Feng <hidden>
• STALE3261d [PATCH 1/2] security: Add a cred_getsecid hook
  2017-10-23 23:20 · 8 replies this month · Matthew Garrett <hidden>
• STALE3261d Can we delete audit_log_secctx()?
  2017-10-23 23:14 · 2 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• STALE3262d [RFC PATCH 1/2] security, capabilities: Add CAP_SYS_MOUNT
  2017-10-23 12:57 · 5 replies this month · Nicolas Belouin <hidden>
• STALE3261d [PATCH 0/2] ima: change how MODULE_SIG_FORCE is checked on modules checking policy
  2017-10-23 12:57 · 4 replies this month · Bruno E. O. Meneguele <hidden>
• DORMANTno replies [PATCH] tpm: remove a misleading error message from tpm_get_timeouts()
  2017-10-23 11:32 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE3263d [RFC PATCH 1/2] security, capabilities: create CAP_TRUSTED
  2017-10-21 19:12 · 5 replies this month · Nicolas Belouin <hidden>
• STALE2944d Re: [PATCH 0/8] CaitSith LSM module
  2017-10-21 17:18 · 2 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE3264d REVIEWED: 1 (1M) [PATCH] [v2] tomoyo: fix timestamping for y2038
  2017-10-21 02:22 · 1 reply this month · Arnd Bergmann <arnd@arndb.de>
• STALE3265d [GIT PULL] vfs i_version fix for Linus
  2017-10-20 09:34 · 2 replies this month · Mimi Zohar <hidden>
• DORMANTno replies [PATCH] ima: fix hash algorithm initialization
  2017-10-20 08:01 · 0 replies this month · Boshi Wang <hidden>
• STALE3265d [PATCH GHAK16 V5 00/10] capabilities: do not audit log BPRM_FCAPS on set*id
  2017-10-20 05:15 · 14 replies this month · Richard Guy Briggs <hidden>
• STALE3265d [PATCH 1/2] security: Add a cred_getsecid hook
  2017-10-19 23:32 · 2 replies this month · Matthew Garrett <hidden>
• STALE3266d [PATCH] tomoyo: fix timestamping for y2038
  2017-10-19 12:29 · 2 replies this month · Arnd Bergmann <arnd@arndb.de>
• STALE3266d [PATCH net-next v6 0/5] bpf: security: New file mode and LSM hooks for eBPF object permission control
  2017-10-19 11:00 · 13 replies this month · Chenbo Feng <hidden>
• DORMANTno replies [GIT PULL] Security subystem fixes for v4.14-rc5
  2017-10-19 02:24 · 0 replies this month · James Morris <hidden>
• STALE3266d [GIT PULL] tpmdd updates for Linux 4.15
  2017-10-19 01:14 · 1 reply this month · Jarkko Sakkinen <hidden>
• DORMANTno replies [GIT PULL] tpmdd updates for Linux 4.15
  2017-10-18 15:48 · 0 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies [GIT PULL] KEYS: Fixes
  2017-10-18 08:23 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE3238d Draft manpage explaining kernel lockdown
  2017-10-18 08:21 · 8 replies this month · David Howells <dhowells@redhat.com>
• STALE3250d [PATCH v10 00/20] simplify crypto wait for async op
  2017-10-18 07:06 · 20 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3267d [PATCH v9 00/20] simplify crypto wait for async op
  2017-10-18 05:44 · 26 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3267d [GIT PULL] KEYS: Fixes
  2017-10-17 23:23 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE3267d [RFC][PATCH 00/15] KEYS: Fixes
  2017-10-17 17:52 · 7 replies this month · David Howells <dhowells@redhat.com>
• STALE3240d [RFC PATCH 4/5] netlabel: Add SCTP support
  2017-10-17 13:58 · 0 replies this month · Richard Haines <hidden>
• STALE3268d [PATCH][V2] selinux: remove extraneous initialization of slots_used and max_chain_len
  2017-10-16 22:42 · 1 reply this month · Colin King <hidden>
• STALE3268d [PATCH] selinux: remove redundant assignment to len
  2017-10-16 22:37 · 1 reply this month · Colin King <hidden>
• STALE3268d [PATCH] selinux: remove redundant assignment to str
  2017-10-16 22:35 · 1 reply this month · Colin King <hidden>
• STALE3269d [PATCH] keys, trusted: fix missing support for TPM 2.0 in trusted_update()
  2017-10-16 11:47 · 1 reply this month · Boshi Wang <hidden>
• STALE3270d [PATCH] selinux: remove extraneous initialization of slots_used and max_chain_len
  2017-10-14 15:22 · 2 replies this month · Colin King <hidden>
• DORMANTno replies [PATCH] apparmor: remove unused redundant variable stop
  2017-10-14 12:14 · 0 replies this month · Colin King <hidden>
• STALE2859d [PATCH] selinux: Fix bool initialization/comparison
  2017-10-13 22:40 · 3 replies this month · Thomas Meyer <hidden>
• STALE3272d [RFC][PATCH 00/15] KEYS: Fixes
  2017-10-12 20:18 · 15 replies this month · David Howells <dhowells@redhat.com>
• STALE3272d [PATCH net-next v3 0/5] bpf: security: New file mode and LSM hooks for eBPF object permission control
  2017-10-12 18:28 · 9 replies this month · Chenbo Feng <hidden>
• STALE3272d [PATCH v3 0/7] KEYS: instantiation and atomicity fixes
  2017-10-12 15:27 · 3 replies this month · Eric Biggers <hidden>
• STALE3272d [PATCH v3 0/4] additional TPM performance improvements
  2017-10-12 13:14 · 12 replies this month · Nayna Jain <hidden>
• STALE3273d [PATCH 0/4] net-next: security: New file mode and LSM hooks for eBPF object permission control
  2017-10-12 00:31 · 16 replies this month · Chenbo Feng <hidden>
• STALE3273d [PATCH][capabilities-next] commoncap: move assignment of fs_ns to avoid null pointer dereference
  2017-10-11 23:30 · 2 replies this month · Colin King <hidden>
• STALE3273d Re: [PATCH net-next v2 4/5] selinux: bpf: Add selinux check for eBPF syscall operations
  2017-10-11 13:00 · 2 replies this month · Stephen Smalley <hidden>
• STALE3274d [PATCH] vfs: fix mounting a filesystem with i_version
  2017-10-11 12:30 · 4 replies this month · Mimi Zohar <hidden>
• STALE3274d [PATCH v8 00/20] simplify crypto wait for async op
  2017-10-11 06:29 · 3 replies this month · Gilad Ben-Yossef <gilad@benyossef.com>
• STALE3274d [PATCH net-next v2 0/5] bpf: security: New file mode and LSM hooks for eBPF object permission control
  2017-10-10 21:30 · 14 replies this month · Chenbo Feng <hidden>
• STALE3273d [PATCH RFC tip/core/rcu 15/15] keyring: Remove now-redundant smp_read_barrier_depends()
  2017-10-10 00:25 · 0 replies this month · Paul E. McKenney <hidden>
• STALE3240d [PATCH] KEYS: remove CONFIG_KEYS_COMPAT
  2017-10-09 20:25 · 1 reply this month · Eric Biggers <hidden>
• STALE3275d REVIEWED: 1 (0M) [PATCH v2 1/3] ecryptfs: fix dereference of NULL user_key_payload
  2017-10-09 19:52 · 2 replies this month · Eric Biggers <hidden>
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v2] lib/digsig: fix dereference of NULL user_key_payload
  2017-10-09 19:45 · 0 replies this month · Eric Biggers <hidden>
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v2] FS-Cache: fix dereference of NULL user_key_payload
  2017-10-09 19:41 · 0 replies this month · Eric Biggers <hidden>
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v2] KEYS: encrypted: fix dereference of NULL user_key_payload
  2017-10-09 19:39 · 0 replies this month · Eric Biggers <hidden>
• STALE3275d [PATCH] selinux: check CAP_SETFCAP for a particular inode & mapped user
  2017-10-09 18:21 · 3 replies this month · Lubomir Rintel <lkundrak@v3.sk>
• STALE2859d [PATCH] apparmor: Fix bool initialization/comparison
  2017-10-07 17:19 · 1 reply this month · Thomas Meyer <hidden>
• STALE2859d [PATCH] ima: Fix bool initialization/comparison
  2017-10-07 14:26 · 0 replies this month · Thomas Meyer <hidden>
• DORMANTno replies Digest list extension for IMA
  2017-10-07 10:56 · 0 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE3255d Re: [PATCH 02/14] VFS: Add LSM hooks for filesystem context [ver #6]
  2017-10-06 20:37 · 0 replies this month · Randy Dunlap <rdunlap@infradead.org>
• DORMANTno replies [PATCH v2] Smack: More sanity in the use of Netlabel
  2017-10-06 00:47 · 0 replies this month · casey@schaufler-ca.com (Casey Schaufler)
• DORMANTno replies Re: [PATCH 0/8] KEYS: keyctl operations for asymmetric keys [ver #2]
  2017-10-05 23:00 · 0 replies this month · George Wilson <hidden>
• STALE3279d [PATCH] security/keys: BIG_KEY requires CONFIG_CRYPTO
  2017-10-05 15:39 · 1 reply this month · Arnd Bergmann <arnd@arndb.de>
• STALE3280d [BUG] security_release_secctx seems broken
  2017-10-04 22:11 · 3 replies this month · Konstantin Khlebnikov <hidden>
• STALE3280d [PATCH 1/2] selinux: fix build warning by removing the unused sid variable
  2017-10-04 20:34 · 5 replies this month · Corentin Labbe <clabbe.montjoie@gmail.com>
• STALE3280d [RFC][PATCH] security: Make the selinux setxattr and removexattr hooks behave
  2017-10-04 14:53 · 11 replies this month · Eric W. Biederman <hidden>
• STALE3280d [PATCH 1/4] KEYS: Replace uid/gid/perm permissions checking with an ACL
  2017-10-04 13:09 · 3 replies this month · David Howells <dhowells@redhat.com>
• STALE3281d [PATCH 0/3] tpm: retrieve digest size of unknown algorithms from TPM
  2017-10-04 11:22 · 4 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• DORMANTno replies [GIT PULL] lsm: fix smack_inode_removexattr and xattr_getsecurity memleak
  2017-10-04 07:04 · 0 replies this month · James Morris <jmorris@namei.org>
• STALE3282d [PATCH 0/7] Fix dereferencing payload of revoked keys
  2017-10-03 11:05 · 7 replies this month · Eric Biggers <hidden>
• STALE3282d Modular BIG_KEYS (was: Re: [PATCH v4] security/keys: rewrite all of big_key crypto)
  2017-10-03 09:04 · 3 replies this month · Geert Uytterhoeven <geert@linux-m68k.org>
• STALE3282d [RFC][PATCH] KEYS: Replace uid/gid/perm permissions checking with ACL
  2017-10-02 23:35 · 2 replies this month · David Howells <dhowells@redhat.com>
• STALE3283d Re: [RFC PATCH 3/3] fs: detect that the i_rwsem has already been taken exclusively
  2017-10-02 12:43 · 8 replies this month · Mimi Zohar <hidden>
• STALE3283d Re: [RFC PATCH 3/3] fs: detect that the i_rwsem has already been taken exclusively
  2017-10-02 12:25 · 1 reply this month · Eric W. Biederman <hidden>
• STALE3283d Re: [RFC PATCH 3/3] fs: detect that the i_rwsem has already been taken exclusively
  2017-10-01 23:54 · 2 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Project Funding Program
  2017-10-01 17:35 · 0 replies this month · Daria Yoong Shang <hidden>