linux-security-module archive · March 2019

423 messages across 91 threads, ordered by last activity .

• STALE2731d [GIT PULL] security: yama fix for v5.1
  2019-03-30 17:30 · 3 replies this month · James Morris <jmorris@namei.org>
• STALE2732d [PATCH 1/2] efi: add a function for transferring status to string
  2019-03-30 05:42 · 7 replies this month · Lee, Chun-Yi <hidden>
• STALE2732d REVIEWED: 1 (1M) [PATCH] LSM: Revive CONFIG_DEFAULT_SECURITY_* for "make oldconfig"
  2019-03-29 23:51 · 1 reply this month · Kees Cook <hidden>
• STALE2720d [PATCH v5 1/2] LSM: SafeSetID: gate setgid transitions
  2019-03-29 19:44 · 5 replies this month · mortonm@chromium.org
• STALE2732d LoadPin old-api-denied
  2019-03-29 19:39 · 2 replies this month · Martin Townsend <hidden>
• STALE2722d [GIT PULL] tpmdd fixes for Linux v5.1
  2019-03-29 18:41 · 1 reply this month · Jarkko Sakkinen <hidden>
• STALE2732d Re: Linux 5.1-rc2
  2019-03-29 18:08 · 12 replies this month · Randy Dunlap <rdunlap@infradead.org>
• STALE2727d Re: Should mprotect(..., PROT_EXEC) be checked by IMA?
  2019-03-29 12:50 · 3 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2733d [PATCH] tpm: turn on TPM on suspend for TPM 1.x
  2019-03-29 09:41 · 2 replies this month · Jarkko Sakkinen <hidden>
• STALE2733d [PULL REQUEST] Lockdown patches for 5.2
  2019-03-28 20:08 · 49 replies this month · Matthew Garrett <hidden>
• STALE2733d REVIEWED: 1 (0M) [PATCH v3] KEYS: trusted: allow trusted.ko to initialize w/o a TPM
  2019-03-28 12:28 · 2 replies this month · Jarkko Sakkinen <hidden>
• STALE2726d [PATCH AUTOSEL 5.0 010/262] apparmor: fix double free when unpack of secmark rules fails
  2019-03-28 10:08 · 1 reply this month · Sasha Levin <sashal@kernel.org>
• STALE2703d [RFC PATCH 40/68] vfs: Convert smackfs to use the new mount API
  2019-03-27 23:45 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2703d [RFC PATCH 39/68] vfs: Convert selinuxfs to use the new mount API
  2019-03-27 23:45 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2703d [RFC PATCH 38/68] vfs: Convert securityfs to use the new mount API
  2019-03-27 23:45 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2703d [RFC PATCH 37/68] vfs: Convert apparmorfs to use the new mount API
  2019-03-27 23:45 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2734d [PATCH ghak109 V2] audit: link integrity evm_write_xattrs record to syscall event
  2019-03-27 22:14 · 4 replies this month · Richard Guy Briggs <hidden>
• STALE2645d [PATCH V31 00/25] Add support for kernel lockdown
  2019-03-27 18:32 · 46 replies this month · Matthew Garrett <hidden>
• STALE2720d [PATCH] keys: safe concurrent user->{session,uid}_keyring access
  2019-03-27 15:55 · 0 replies this month · Jann Horn <jannh@google.com>
• STALE2720d [PATCH] security: don't use RCU accessors for cred->session_keyring
  2019-03-27 15:39 · 0 replies this month · Jann Horn <jannh@google.com>
• STALE2720d [PATCH] Yama: mark local symbols as static
  2019-03-27 12:43 · 1 reply this month · Jann Horn <jannh@google.com>
• STALE2720d [PATCH] Yama: mark function as static
  2019-03-27 07:50 · 0 replies this month · Mukesh Ojha <hidden>
• STALE2735d [PATCH v2 00/11] LSM documentation update
  2019-03-27 02:22 · 4 replies this month · Denis Efremov <hidden>
• STALE2721d [PATCH v19 17/27] x86/sgx: Add provisioning
  2019-03-27 00:14 · 14 replies this month · Jarkko Sakkinen <hidden>
• STALE2735d Linux security subsystem tree sync to v5.1-rc2
  2019-03-26 23:55 · 1 reply this month · James Morris <jmorris@namei.org>
• STALE2735d [PATCH ghak109 V1] audit: link integrity evm_write_xattrs record to syscall event
  2019-03-26 17:56 · 9 replies this month · Richard Guy Briggs <hidden>
• DORMANTno replies REVIEWED: 1 (0M) [PATCH v2] KEYS: trusted: allow trusted.ko to initialize w/o a TPM
  2019-03-26 12:09 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2736d [PATCH] KEYS: trusted: allow trusted.ko to initialize w/o a TPM
  2019-03-26 11:52 · 3 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies [PATCH 1/1] RFC: security: add SECURE_KEEP_FSUID to preserve fsuid/fsgid across execve
  2019-03-26 00:10 · 0 replies this month · Igor Lubashev <hidden>
• DORMANTno replies [PATCH 0/1] RFC: security: add SECURE_KEEP_FSUID to preserve fsuid/fsgid across execve
  2019-03-25 23:49 · 0 replies this month · Igor Lubashev <hidden>
• STALE2736d [PATCH] tomoyo: Add a kernel config option for fuzzing testing.
  2019-03-25 21:10 · 16 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE2736d Repost: Missing security_mmap_file() in remap_file_pages syscall
  2019-03-25 20:02 · 2 replies this month · TongZhang <hidden>
• STALE2736d [PATCH] KEYS: trusted: defer execution of TPM-specific code until key instantiate
  2019-03-25 14:56 · 2 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2736d [PATCH] LSM: lsm_hooks.h - fix missing colon in docstring
  2019-03-25 14:08 · 1 reply this month · Ondrej Mosnacek <hidden>
• STALE2737d Re: INFO: task hung in process_measurement
  2019-03-25 11:57 · 1 reply this month · syzbot <hidden>
• DORMANTno replies [PATCH 1/2] efi: add a function for transferring status to string
  2019-03-23 08:37 · 0 replies this month · Lee, Chun-Yi <hidden>
• STALE2739d [PATCH 1/2] efi: add a function for transferring status to string
  2019-03-23 02:57 · 3 replies this month · Lee, Chun-Yi <hidden>
• STALE2739d Re: mount.nfs: Protocol error after upgrade to linux/master
  2019-03-23 02:44 · 9 replies this month · Kees Cook <hidden>
• DORMANTno replies Re: [PATCH 11/43] convert do_remount_sb() to fs_context
  2019-03-22 14:00 · 0 replies this month · Andreas Schwab <hidden>
• DORMANTno replies Re: [PATCH 11/43] convert do_remount_sb() to fs_context
  2019-03-22 13:28 · 0 replies this month · Andreas Schwab <hidden>
• STALE2739d Re: [PATCH 11/43] convert do_remount_sb() to fs_context
  2019-03-22 13:17 · 1 reply this month · Andreas Schwab <hidden>
• STALE2740d [PATCH v7 0/7] Allow initializing the kernfs node's secctx based on its parent
  2019-03-21 21:22 · 8 replies this month · Ondrej Mosnacek <hidden>
• STALE2740d [GIT PULL] SELinux fixes for v5.1 (#2)
  2019-03-21 19:05 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2714d crypto: Kernel memory overwrite attempt detected to spans multiple pages
  2019-03-21 17:51 · 4 replies this month · Geert Uytterhoeven <geert@linux-m68k.org>
• STALE2712d [PATCH v2 0/2] RFC: introduce CONFIG_INIT_ALL_MEMORY
  2019-03-21 17:48 · 4 replies this month · Alexander Potapenko <glider@google.com>
• DORMANTno replies Re: what happened to SECURITY_DAC?
  2019-03-21 16:36 · 0 replies this month · Kees Cook <hidden>
• STALE2740d [PATCH v10, RESEND 0/6] tpm: retrieve digest size of unknown algorithms from TPM
  2019-03-21 13:25 · 3 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2727d [PATCH v19,RESEND 17/27] x86/sgx: Add provisioning
  2019-03-20 16:24 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2742d [PULL REQUEST] Lock down patches
  2019-03-19 22:15 · 8 replies this month · Matthew Garrett <hidden>
• STALE2742d [PATCH] device_cgroup: fix RCU imbalance in error case
  2019-03-19 17:47 · 2 replies this month · Jann Horn <jannh@google.com>
• STALE2705d [PULL REQUEST] Kernel lockdown patches for 5.2
  2019-03-18 18:56 · 40 replies this month · Matthew Garrett <hidden>
• STALE2474d [PATCH RESEND] KEYS: remove CONFIG_KEYS_COMPAT
  2019-03-18 17:28 · 1 reply this month · Eric Biggers <ebiggers@kernel.org>
• STALE2720d [PATCH] security: inode: fix a missing check for securityfs_create_file
  2019-03-15 22:35 · 3 replies this month · Kangjie Lu <hidden>
• STALE2694d Add support for TCG2 log format on UEFI systems
  2019-03-15 11:47 · 3 replies this month · Matthew Garrett <hidden>
• STALE2721d [PATCH 1/1] Smack: Create smack_rule cache to optimize memory usage
  2019-03-14 17:07 · 1 reply this month · Vishal Goel <hidden>
• STALE2740d [PATCH 35/38] vfs: Convert securityfs to fs_context
  2019-03-14 16:14 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2740d [PATCH 37/38] vfs: Convert smackfs to fs_context
  2019-03-14 16:14 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2740d [PATCH 36/38] vfs: Convert selinuxfs to fs_context
  2019-03-14 16:13 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2740d [PATCH 34/38] vfs: Convert apparmorfs to fs_context
  2019-03-14 16:13 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2748d [PATCH v3 RFC] Smack: Inform peer that IPv6 traffic has been blocked
  2019-03-13 22:55 · 1 reply this month · Piotr Sawicki <hidden>
• STALE2742d [PATCH AUTOSEL 4.14 07/33] keys: Fix dependency loop between construction record and auth key
  2019-03-13 19:25 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2748d [PATCH AUTOSEL 4.19 11/48] keys: Fix dependency loop between construction record and auth key
  2019-03-13 19:13 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2742d [PATCH AUTOSEL 4.20 13/60] keys: Fix dependency loop between construction record and auth key
  2019-03-13 19:10 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2748d [GIT PULL] SELinux fixes for v5.1 (#1)
  2019-03-13 18:40 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2748d [GIT PULL] apparmor updates for v5.1
  2019-03-13 18:40 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• STALE2750d [PATCH 1/1] smack: removal of global rule list
  2019-03-11 21:05 · 1 reply this month · Vishal Goel <hidden>
• STALE2750d Re: [PATCH 3/3] x86/ima: retry detecting secure boot mode
  2019-03-11 19:20 · 8 replies this month · Matthew Garrett <hidden>
• STALE2750d [GIT PULL] security: tpm subsystem updates for v5.1
  2019-03-11 15:55 · 1 reply this month · James Morris <jmorris@namei.org>
• STALE2750d kernel panic: MAC Initialization failed. (3)
  2019-03-11 13:46 · 2 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH] secuirty: integrity: ima: pedantic formatting
  2019-03-11 13:44 · 0 replies this month · "Enrico Weigelt, metux IT consult" <info@metux.net>
• DORMANTno replies Inquiry March-2019
  2019-03-09 12:34 · 0 replies this month · Daniel Murray <hidden>
• DORMANTno replies [GIT PULL] security: integrity subsystem updates for v5.1
  2019-03-08 22:44 · 0 replies this month · James Morris <jmorris@namei.org>
• STALE2753d [PATCH 0/3] selftest/ima: add kexec_file_load test
  2019-03-08 13:46 · 2 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2753d [PATCH 0/1] RFC: introduce CONFIG_INIT_ALL_MEMORY
  2019-03-08 13:29 · 6 replies this month · Alexander Potapenko <glider@google.com>
• STALE2754d [PATCH v2] x86/ima: require signed kernel modules
  2019-03-07 22:46 · 5 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2754d [PATCH 0/3] selftest/ima: fail kexec_load syscall
  2019-03-07 22:29 · 1 reply this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2754d [GIT PULL] SELinux patches for v5.1
  2019-03-07 20:55 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2754d [GIT PULL] security subsystem changes for v5.1
  2019-03-07 20:55 · 1 reply this month · James Morris <jmorris@namei.org>
• STALE2732d [PATCH v2 00/20] Merge text_poke fixes and executable lockdowns
  2019-03-07 20:25 · 8 replies this month · Rick Edgecombe <rick.p.edgecombe@intel.com>
• STALE2437d [RFC PATCH 0/2] Create CAAM HW key in linux keyring and use in dmcrypt
  2019-03-07 13:18 · 6 replies this month · Franck LENORMAND <hidden>
• STALE2721d [PATCH 1/1] Smack :- In this patch, global rule list has been removed. Now all smack rules will be read using "smack_known_list". This list contains all the smack labels and internally each smack label structure maintains the list of smack rules corresponding to that smack label. So there is no need to maintain extra list.
  2019-03-07 11:20 · 0 replies this month · Vishal Goel <hidden>
• DORMANTno replies [PATCH] security: keys: Kconfig: pedantic cleanup
  2019-03-06 18:57 · 0 replies this month · "Enrico Weigelt, metux IT consult" <info@metux.net>
• DORMANTno replies REVIEWED: 5 (5M) [PATCH] vfs: Move kernel_read_file() to fs/read_write.c
  2019-03-05 23:19 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2756d [PATCH 2/2] LSM: SafeSetID: gate setgid transitions
  2019-03-05 15:47 · 4 replies this month · mortonm@chromium.org
• STALE2757d [PATCH] keys: fix missing __user in KEYCTL_PKEY_QUERY
  2019-03-05 07:41 · 3 replies this month · Ben Dooks <hidden>
• STALE2757d Re: overlayfs access checks on underlying layers
  2019-03-04 19:21 · 1 reply this month · Stephen Smalley <hidden>
• STALE2757d Re: overlayfs access checks on underlying layers
  2019-03-04 17:56 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2757d [PATCH] vfs: Move kernel_read_file() to fs/read_write.c
  2019-03-04 16:49 · 3 replies this month · David Howells <dhowells@redhat.com>
• STALE2759d [PATCH 00/43] VFS: Introduce filesystem context
  2019-03-03 02:53 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2760d [PATCH] LSM: Update list of SECURITYFS users in Kconfig
  2019-03-01 17:54 · 1 reply this month · Petr Vorel <pvorel@suse.cz>
• STALE2760d [PATCH 00/97] LSM: Complete module stacking
  2019-03-01 17:07 · 8 replies this month · Casey Schaufler <casey@schaufler-ca.com>