linux-security-module archive · August 2019

597 messages across 69 threads, ordered by last activity .

• STALE2581d [PATCH 1/2] staging: comedi: Restrict COMEDI_DEVCONFIG when the kernel is locked down
  2019-08-31 09:50 · 3 replies this month · Ben Hutchings <hidden>
• STALE2588d [PATCH 00/11] Keyrings, Block and USB notifications [ver #7]
  2019-08-30 22:19 · 19 replies this month · David Howells <dhowells@redhat.com>
• STALE2592d [PATCH 1/2] rtnetlink: gate MAC address with an LSM hook
  2019-08-30 21:46 · 10 replies this month · Jeff Vander Stoep <hidden>
• STALE2592d [RFC PATCH] audit, security: allow LSMs to selectively enable audit collection
  2019-08-30 21:36 · 3 replies this month · Aaron Goidel <hidden>
• DORMANTno replies general protection fault in smack_socket_sendmsg
  2019-08-30 19:40 · 0 replies this month · syzbot <hidden>
• STALE2590d [RFC/RFT v4 0/5] Add generic trusted keys framework/subsystem
  2019-08-30 17:24 · 24 replies this month · Sumit Garg <hidden>
• STALE2592d [PATCH] tpm_tis: Fix interrupt probing
  2019-08-30 17:00 · 8 replies this month · Stefan Berger <hidden>
• STALE1734d [PATCH V40 00/29] Add kernel lockdown functionality
  2019-08-30 16:33 · 42 replies this month · Matthew Garrett <hidden>
• DORMANTno replies [PATCH] keys: ensure that ->match_free() is called in request_key_and_link()
  2019-08-30 15:52 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2593d Re: [PATCH 02/10] vfs: syscall: Add move_mount(2) to move mounts around
  2019-08-30 10:11 · 4 replies this month · Eric W. Biederman <hidden>
• STALE2584d [PATCH] tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts
  2019-08-30 00:09 · 0 replies this month · Stefan Berger <hidden>
• STALE2568d [PATCH v8 00/28] LSM: Module stacking for AppArmor
  2019-08-29 23:31 · 28 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2593d [PATCH 00/11] Keyrings, Block and USB notifications [ver #6]
  2019-08-29 19:12 · 13 replies this month · David Howells <dhowells@redhat.com>
• DORMANTno replies [PATCH] overlayfs: filter of trusted xattr results in audit.
  2019-08-29 18:30 · 0 replies this month · Mark Salyzyn <hidden>
• STALE2557d Re: [PATCH bpf-next] bpf, capabilities: introduce CAP_BPF
  2019-08-29 17:49 · 30 replies this month · Andy Lutomirski <luto@kernel.org>
• DORMANTno replies [PATCH] ima: ima_api: Use struct_size() in kzalloc()
  2019-08-29 17:48 · 0 replies this month · Gustavo A. R. Silva <hidden>
• STALE2593d [PATCH] ima: use struct_size() in kzalloc()
  2019-08-29 17:17 · 5 replies this month · Gustavo A. R. Silva <hidden>
• STALE2594d [PATCH v5 0/4] Create and consolidate trusted keys subsystem
  2019-08-29 14:53 · 10 replies this month · Sumit Garg <hidden>
• STALE2594d [WIP][RFC][PATCH 0/3] Introduce Infoflow LSM
  2019-08-29 14:29 · 5 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2594d [PATCH][next] ima: ima_modsig: Fix use-after-free bug in ima_read_modsig
  2019-08-28 18:55 · 2 replies this month · Gustavo A. R. Silva <hidden>
• STALE2595d [PATCH v12 00/11] Appended signatures support for IMA appraisal
  2019-08-28 13:43 · 5 replies this month · Thiago Jung Bauermann <hidden>
• STALE2595d [PATCH 0/2] keys: ACLs
  2019-08-27 19:18 · 3 replies this month · David Howells <dhowells@redhat.com>
• STALE2596d Re: [PATCH v2 bpf-next 1/4] bpf: unprivileged BPF access via /dev/bpf
  2019-08-27 00:34 · 58 replies this month · Andy Lutomirski <luto@kernel.org>
• STALE2599d New skb extension for use by LSMs (skb "security blob")?
  2019-08-23 18:56 · 16 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2600d [PATCH 2/2] selinux: use netlink_receive hook
  2019-08-23 01:55 · 2 replies this month · Jeff Vander Stoep <hidden>
• STALE2600d Re: possible deadlock in ext4_evict_inode
  2019-08-22 16:44 · 2 replies this month · Dmitry Vyukov <dvyukov@google.com>
• STALE2559d KASAN: use-after-free Read in tomoyo_realpath_from_path
  2019-08-22 15:48 · 6 replies this month · syzbot <hidden>
• STALE2601d [GIT PULL] Keys: Set 4 - Key ACLs for 5.3
  2019-08-21 19:22 · 4 replies this month · David Howells <dhowells@redhat.com>
• STALE2603d [PATCH] keys: Fix description size
  2019-08-19 16:44 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2606d [RFC PATCH v3] security,capability: pass object information to security_capable
  2019-08-16 16:36 · 3 replies this month · Aaron Goidel <hidden>
• STALE2606d [RFC PATCH v2] security,capability: pass object information to security_capable
  2019-08-16 16:29 · 8 replies this month · Aaron Goidel <hidden>
• STALE2608d [PATCH 0/6] lockdown fixups
  2019-08-14 18:26 · 13 replies this month · Matthew Garrett <hidden>
• STALE2608d [PATCH V38 00/29] security: Add support for locking down the kernel
  2019-08-14 18:02 · 42 replies this month · Matthew Garrett <hidden>
• STALE2609d [PATCH V37 00/29] security: Add support for locking down the kernel
  2019-08-14 06:12 · 11 replies this month · Matthew Garrett <hidden>
• STALE2609d [RFC PATCH v5 0/1] Add dm verity root hash pkcs7 sig validation.
  2019-08-13 22:42 · 1 reply this month · Jaskaran Khurana <hidden>
• DORMANTno replies Re: [PATCH] Add flags option to get xattr method paired to __vfs_getxattr
  2019-08-13 14:44 · 0 replies this month · Mark Salyzyn <hidden>
• STALE2610d [RFC/RFT v3 0/3] KEYS: trusted: Add generic trusted keys framework
  2019-08-13 07:59 · 11 replies this month · Sumit Garg <hidden>
• STALE2610d REVIEWED: 10 (10M) [PATCH v3] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-08-12 22:04 · 1 reply this month · Aaron Goidel <hidden>
• STALE2610d [security:next-lockdown 3/29] security/lockdown/lockdown.c:157:1-3: WARNING: PTR_ERR_OR_ZERO can be used
  2019-08-12 18:01 · 2 replies this month · kbuild test robot <hidden>
• STALE2611d REVIEWED: 1 (1M) [PATCH v2] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-08-12 15:16 · 3 replies this month · Aaron Goidel <hidden>
• STALE2611d [PATCH] fanotify, inotify, dnotify, security: add security hook for fs notifications
  2019-08-12 14:46 · 15 replies this month · Aaron Goidel <hidden>
• STALE2610d WARNING in aa_sock_msg_perm
  2019-08-12 12:30 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH] tracefs: Fix potential null dereference in default_file_open()
  2019-08-12 00:28 · 0 replies this month · Ben Hutchings <hidden>
• DORMANTno replies [security:next-lockdown 8/29] arch/s390/kernel/kexec_elf.c:134:3: error: 'const struct kexec_file_ops' has no member named 'verify_sig'
  2019-08-10 08:28 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies [security:next-lockdown 2/29] htmldocs: include/linux/lsm_hooks.h:1812: warning: Function parameter or member 'locked_down' not described in 'security_list_options'
  2019-08-10 07:35 · 0 replies this month · kbuild test robot <hidden>
• DORMANTno replies [security:next-lockdown 1/29] init/main.c:572:2: error: implicit declaration of function 'early_security_init'; did you mean 'security_init'?
  2019-08-10 06:41 · 0 replies this month · kbuild test robot <hidden>
• STALE2613d REVIEWED: 1 (0M) [PATCH v3] KEYS: trusted: allow module init if TPM is inactive or deactivated
  2019-08-09 15:50 · 3 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2614d [RFC v2 0/6] Introduce TEE based Trusted Keys support
  2019-08-09 05:36 · 14 replies this month · Sumit Garg <hidden>
• STALE2614d [PATCH v7 00/28] LSM: Module stacking for AppArmor
  2019-08-09 00:56 · 36 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2613d KASAN: use-after-free Read in tomoyo_socket_sendmsg_permission
  2019-08-08 16:45 · 0 replies this month · syzbot <hidden>
• DORMANTno replies Re: [PATCH v13 2/5] Add flags option to get xattr method paired to __vfs_getxattr
  2019-08-08 15:30 · 0 replies this month · Mark Salyzyn <hidden>
• STALE2615d [PATCH] ima: Fix a use after free in ima_read_modsig()
  2019-08-08 11:55 · 3 replies this month · Dan Carpenter <hidden>
• STALE2615d [PATCH v7 00/16] LSM: Full module stacking
  2019-08-07 22:43 · 17 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2615d [GIT PULL] SafeSetID MAINTAINERS file update for v5.3
  2019-08-07 19:27 · 11 replies this month · Micah Morton <mortonm@chromium.org>
• STALE2615d Re: [RFC PATCH v3 04/12] x86/sgx: Require userspace to define enclave pages' protection bits
  2019-08-07 18:51 · 5 replies this month · Andy Lutomirski <luto@kernel.org>
• STALE2593d REVIEWED: 1 (1M) [PATCH v3 37/41] security/tomoyo: convert put_page() to put_user_page*()
  2019-08-07 01:35 · 0 replies this month · <hidden>
• STALE2616d [RFC PATCH v1 0/5] Add support for O_MAYEXEC
  2019-08-06 16:42 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2583d [PATCH bpf-next v10 00/10] Landlock LSM: Toward unprivileged sandboxing
  2019-08-06 16:28 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2617d [PATCH] KEYS: trusted: allow module init if TPM is inactive or deactivated
  2019-08-05 22:11 · 17 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2617d [WIP 0/4] bpf: A bit of progress toward unprivileged use
  2019-08-05 21:29 · 4 replies this month · Andy Lutomirski <luto@kernel.org>
• STALE2617d [RFC/RFT v2 0/2] KEYS: trusted: Add generic trusted keys framework
  2019-08-05 21:00 · 5 replies this month · Sumit Garg <hidden>
• STALE2617d [PATCH] security/tomoyo: convert put_page() to put_user_page*()
  2019-08-05 17:48 · 2 replies this month · <hidden>
• STALE2618d [PATCH] ima: Allow to import the blacklisted cert signed by secondary CA cert
  2019-08-05 14:28 · 3 replies this month · Jia Zhang <hidden>
• STALE2619d [GIT PULL] SELinux fixes for v5.3 (#2)
  2019-08-03 17:45 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2620d [PATCH v2] KEYS: trusted: allow module init if TPM is inactive or deactivated
  2019-08-02 16:15 · 4 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• DORMANTno replies Thank-You - Demmler Machinery
  2019-08-02 15:27 · 0 replies this month · <hidden>
• STALE2621d Security labeling in NFS4 - who owns it?
  2019-08-01 22:47 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies [PATCH] tomoyo: Use error code from kern_path() rather than -ENOENT.
  2019-08-01 11:36 · 0 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE2622d [PATCH] tomoyo: common: Fix potential Spectre v1 vulnerability
  2019-08-01 11:03 · 1 reply this month · Gustavo A. R. Silva <hidden>