linux-security-module archive · July 2019

612 messages across 88 threads, ordered by last activity .

• STALE2603d [PATCH V37 00/29] security: Add support for locking down the kernel
  2019-07-31 22:19 · 29 replies this month · Matthew Garrett <hidden>
• STALE2609d [GIT PULL] SafeSetID MAINTAINERS file update for v5.3
  2019-07-31 21:30 · 0 replies this month · Micah Morton <mortonm@chromium.org>
• STALE2615d [PATCH] tomoyo: common: Fix potential Spectre v1 vulnerability
  2019-07-31 19:19 · 0 replies this month · Gustavo A. R. Silva <hidden>
• STALE2577d [PATCH bpf-next v10 00/10] Landlock LSM: Toward unprivileged sandboxing
  2019-07-31 19:11 · 15 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2590d Re: [PATCH v2 bpf-next 1/4] bpf: unprivileged BPF access via /dev/bpf
  2019-07-31 19:09 · 2 replies this month · Andy Lutomirski <luto@kernel.org>
• STALE2604d [PATCH] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-07-31 17:26 · 1 reply this month · Aaron Goidel <hidden>
• STALE2608d [RFC v2 0/6] Introduce TEE based Trusted Keys support
  2019-07-31 14:23 · 12 replies this month · Sumit Garg <hidden>
• STALE2617d [PATCH V36 00/29] security: Add kernel lockdown functionality
  2019-07-31 01:48 · 38 replies this month · Matthew Garrett <hidden>
• STALE2589d [PATCH 0/2] keys: ACLs
  2019-07-31 01:16 · 5 replies this month · David Howells <dhowells@redhat.com>
• DORMANTno replies Re: [PATCH v12 0/5] overlayfs override_creds=off
  2019-07-30 21:37 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2618d [PATCH v5 00/27] LSM: Module stacking for AppArmor
  2019-07-29 21:40 · 34 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2618d [RFC 0/7] Introduce TEE based Trusted Keys support
  2019-07-29 13:14 · 9 replies this month · Sumit Garg <hidden>
• STALE2621d [GIT PULL] SELinux fixes for v5.3 (#1)
  2019-07-27 03:05 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH] AppArmor: Remove semicolon
  2019-07-26 13:32 · 0 replies this month · Vasyl Gomonovych <hidden>
• STALE2576d [PATCH 0/5] security: integrity: Makefile cleanups
  2019-07-26 07:05 · 7 replies this month · Masahiro Yamada <hidden>
• DORMANTno replies [PATCH] test_meminit: use GFP_ATOMIC in RCU critical section
  2019-07-25 12:17 · 0 replies this month · Alexander Potapenko <glider@google.com>
• STALE2623d [RFC PATCH] security,capability: pass object information to security_capable
  2019-07-24 20:13 · 18 replies this month · Nicholas Franck <hidden>
• DORMANTno replies KASAN: use-after-free Read in keyring_compare_object
  2019-07-24 15:46 · 0 replies this month · syzbot <hidden>
• STALE1522d [PATCH v4 0/3] initramfs: add support for xattrs in the initial ram disk
  2019-07-24 15:35 · 6 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2624d Reminder: 2 open syzbot bugs in "security/tomoyo" subsystem
  2019-07-24 05:00 · 4 replies this month · Eric Biggers <ebiggers@kernel.org>
• DORMANTno replies Reminder: 1 open syzbot bug in "security/integrity" subsystem
  2019-07-24 02:49 · 0 replies this month · Eric Biggers <ebiggers@kernel.org>
• DORMANTno replies Reminder: 1 open syzbot bug in "security/smack" subsystem
  2019-07-24 02:48 · 0 replies this month · Eric Biggers <ebiggers@kernel.org>
• STALE2624d Re: [PATCH 02/10] vfs: syscall: Add move_mount(2) to move mounts around
  2019-07-23 23:30 · 5 replies this month · Eric W. Biederman <hidden>
• STALE2588d [PATCH v12 00/11] Appended signatures support for IMA appraisal
  2019-07-23 22:39 · 8 replies this month · Thiago Jung Bauermann <hidden>
• STALE2624d Re: Preferred subj= with multiple LSMs
  2019-07-23 21:47 · 34 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies [RFC PATCH v3] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-07-23 19:37 · 0 replies this month · Aaron Goidel <hidden>
• STALE2624d [RFC PATCH v2] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-07-23 18:49 · 4 replies this month · Aaron Goidel <hidden>
• STALE2586d Re: [PATCH 02/10] vfs: syscall: Add move_mount(2) to move mounts around
  2019-07-23 13:45 · 4 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH] security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()
  2019-07-23 10:00 · 0 replies this month · Jia-Ju Bai <hidden>
• STALE2625d Re: [PATCH] selinux: check sidtab limit before adding a new entry
  2019-07-23 06:48 · 2 replies this month · Kees Cook <hidden>
• STALE2625d LANDED: 1 (0M) [PATCH] [RESEND v2] structleak: disable STRUCTLEAK_BYREF in combination with KASAN_STACK
  2019-07-22 17:23 · 5 replies this month · Arnd Bergmann <arnd@arndb.de>
• STALE2628d [PATCH v5 00/23] LSM: Module stacking for AppArmor
  2019-07-19 23:38 · 31 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2611d [RFC/RFT v2 0/2] KEYS: trusted: Add generic trusted keys framework
  2019-07-18 11:26 · 2 replies this month · Sumit Garg <hidden>
• STALE2630d [RFC PATCH v7 0/1] Add dm verity root hash pkcs7 sig validation.
  2019-07-18 01:04 · 2 replies this month · Jaskaran Khurana <hidden>
• STALE2630d [GIT PULL] SafeSetID LSM changes for 5.3
  2019-07-17 19:40 · 4 replies this month · Micah Morton <mortonm@chromium.org>
• STALE2630d Re: [RFC PATCH v6 0/1] Add dm verity root hash pkcs7 sig validation.
  2019-07-17 13:08 · 3 replies this month · Jaskaran Singh Khurana <hidden>
• STALE2630d KASAN: use-after-free Write in check_noncircular
  2019-07-17 08:58 · 0 replies this month · syzbot <hidden>
• STALE2631d [PATCH V35 00/29] Kernel lockdown functionality
  2019-07-16 23:22 · 37 replies this month · Matthew Garrett <hidden>
• DORMANTno replies REVIEWED: 1 (0M) [RFC] acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down
  2019-07-16 22:15 · 0 replies this month · Matthew Garrett <hidden>
• DORMANTno replies Re: Preferred subj= with multiple LSMs
  2019-07-16 17:16 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2609d Re: [RFC PATCH v3 04/12] x86/sgx: Require userspace to define enclave pages' protection bits
  2019-07-15 22:29 · 0 replies this month · Andy Lutomirski <luto@kernel.org>
• STALE2632d [RFC PATCH v4 00/12] security: x86/sgx: SGX vs. LSM
  2019-07-15 22:24 · 95 replies this month · Sean Christopherson <hidden>
• STALE2632d Preferred subj= with multiple LSMs
  2019-07-15 19:05 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2632d [PATCH] LSM: Update MAINTAINERS file for SafeSetID LSM.
  2019-07-15 16:52 · 3 replies this month · Micah Morton <mortonm@chromium.org>
• STALE2611d [PATCH] KEYS: trusted: allow module init if TPM is inactive or deactivated
  2019-07-15 16:44 · 6 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2632d possible deadlock in process_measurement
  2019-07-15 16:35 · 5 replies this month · syzbot <hidden>
• STALE2632d REVIEWED: 4 (3M) [PATCH AUTOSEL 5.1 102/219] integrity: Fix __integrity_init_keyring() section mismatch
  2019-07-15 14:09 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2624d REVIEWED: 4 (3M) [PATCH AUTOSEL 5.2 116/249] integrity: Fix __integrity_init_keyring() section mismatch
  2019-07-15 13:53 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2600d [PATCH v21 17/28] x86/sgx: Add provisioning
  2019-07-13 17:11 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2548d [PATCH v5 00/12] S.A.R.A. a new stacked LSM
  2019-07-13 00:15 · 32 replies this month · Salvatore Mesoraca <hidden>
• STALE2635d [PATCH 0/6] Mount and superblock notifications [ver #5]
  2019-07-12 20:13 · 4 replies this month · David Howells <dhowells@redhat.com>
• STALE2636d Some LSM and SGX remarks before parting of for two weeks
  2019-07-12 05:14 · 2 replies this month · Jarkko Sakkinen <hidden>
• STALE2636d [RFC/RFT] KEYS: trusted: Add generic trusted keys framework
  2019-07-12 05:13 · 2 replies this month · Sumit Garg <hidden>
• STALE2636d [RFC PATCH] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-07-12 03:29 · 11 replies this month · Aaron Goidel <hidden>
• STALE2631d [PATCH 11/12] Documentation/x86: repointer docs to Documentation/arch/
  2019-07-12 02:21 · 0 replies this month · Alex Shi <hidden>
• STALE2637d [PATCH V34 00/29] Lockdown as an LSM
  2019-07-11 04:12 · 2 replies this month · Matthew Garrett <hidden>
• STALE2595d [GIT PULL] Keys: Set 4 - Key ACLs for 5.3
  2019-07-11 03:08 · 6 replies this month · David Howells <dhowells@redhat.com>
• STALE2638d [GIT PULL] LSM: capabilities updates for v5.3
  2019-07-09 19:55 · 1 reply this month · James Morris <jmorris@namei.org>
• DORMANTno replies Reminder: 2 open syzbot bugs in "security/integrity" subsystem
  2019-07-09 19:15 · 0 replies this month · Eric Biggers <ebiggers@kernel.org>
• DORMANTno replies REVIEWED: 6 (6M) Re: [PATCH v1 01/22] docs: Documentation/*.txt: rename all ReST files to *.rst
  2019-07-09 17:02 · 0 replies this month · Rob Herring <robh@kernel.org>
• STALE2638d Re: RFC: BUG: overlayfs getxattr recursion leaves a poison sid.
  2019-07-09 16:41 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2639d [GIT PULL] integrity subsystem updates for v5.3
  2019-07-09 03:50 · 1 reply this month · Mimi Zohar <zohar@linux.ibm.com>
• DORMANTno replies Re: keyrings pull requests for the next merge window
  2019-07-09 03:25 · 0 replies this month · Linus Torvalds <torvalds@linux-foundation.org>
• STALE2639d [GIT PULL] tpmdd updates for Linux v5.3
  2019-07-09 03:15 · 1 reply this month · Jarkko Sakkinen <hidden>
• STALE2639d [GIT PULL] Keys: Set 1 - Miscellany for 5.3
  2019-07-09 03:15 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2639d [GIT PULL] Keys: Set 2 - request_key() improvements for 5.3
  2019-07-09 03:15 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2639d [GIT PULL] SELinux patches for v5.3
  2019-07-09 03:15 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2639d [GIT PULL] Keys: Set 3 - Keyrings namespacing for 5.3
  2019-07-09 03:15 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2639d [PATCH 0/9] Keyrings, Block and USB notifications [ver #5]
  2019-07-08 19:23 · 12 replies this month · David Howells <dhowells@redhat.com>
• STALE2639d [PATCH 00/10] VFS: Provide new mount UAPI
  2019-07-08 13:18 · 2 replies this month · David Howells <dhowells@redhat.com>
• STALE2641d [PATCH] security/commoncap: Use xattr security prefix len
  2019-07-07 03:03 · 1 reply this month · Carmeli Tamir <hidden>
• STALE2553d KASAN: use-after-free Read in tomoyo_realpath_from_path
  2019-07-07 02:50 · 3 replies this month · syzbot <hidden>
• STALE2642d [PATCH] Revert "tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()"
  2019-07-05 15:21 · 8 replies this month · Michal Suchanek <hidden>
• STALE2642d [PATCH v10 0/3] add init_on_alloc/init_on_free boot options
  2019-07-05 11:42 · 4 replies this month · Alexander Potapenko <glider@google.com>
• DORMANTno replies [PATCH] smack: fix some kernel-doc notations
  2019-07-05 02:35 · 0 replies this month · luanshi <hidden>
• DORMANTno replies [PATCH v2] Revert "tpm: pass an array of tpm_extend_digest structures to tpm_pcr_extend()"
  2019-07-04 10:01 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2644d [PATCH -next] integrity: Remove set but not used variable 'acl'
  2019-07-04 01:23 · 2 replies this month · YueHaibing <hidden>
• STALE2644d [PATCH] ima: Replace two seq_printf() calls by seq_puts() in ima_show_template_data_ascii()
  2019-07-03 11:15 · 3 replies this month · Markus Elfring <hidden>
• STALE2645d [RFC PATCH 0/1] security: add SECURE_KEEP_FSUID to preserve fsuid/fsgid across execve
  2019-07-03 00:59 · 1 reply this month · Igor Lubashev <hidden>
• DORMANTno replies [PATCH] ima: Replace two seq_printf() calls by seq_puts() in ima_show_template_data_ascii()
  2019-07-02 19:01 · 0 replies this month · Markus Elfring <hidden>
• DORMANTno replies [PATCH] ima: Replace two seq_printf() calls by seq_puts() in ima_show_template_data_ascii()
  2019-07-02 19:00 · 0 replies this month · Markus Elfring <hidden>
• DORMANTno replies [PATCH] ima: Replace two seq_printf() calls by seq_puts() in ima_show_template_data_ascii()
  2019-07-02 19:00 · 0 replies this month · Markus Elfring <hidden>
• DORMANTno replies [PATCH] apparmor: Replace two seq_printf() calls by seq_puts() in aa_label_seq_xprint()
  2019-07-02 18:33 · 0 replies this month · Markus Elfring <hidden>
• DORMANTno replies Reminder: 2 open syzbot bugs in "security/tomoyo" subsystem
  2019-07-02 05:14 · 0 replies this month · Eric Biggers <ebiggers@kernel.org>
• DORMANTno replies Reminder: 1 open syzbot bug in "security/smack" subsystem
  2019-07-02 05:11 · 0 replies this month · Eric Biggers <ebiggers@kernel.org>
• STALE2646d Fwd: [PATCH v4 15/23] LSM: Specify which LSM to display
  2019-07-02 01:20 · 2 replies this month · Stephen Smalley <hidden>
• DORMANTno replies [RFC PATCH v6 0/1] Add dm verity root hash pkcs7 sig validation.
  2019-07-01 18:20 · 1 reply this month · Jaskaran Khurana <hidden>
• STALE2603d [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation.
  2019-07-01 17:33 · 2 replies this month · Jaskaran Khurana <hidden>