linux-security-module archive · February 2020

641 messages · showing the 100 most-recently-active threads .

• STALE2367d [RFC PATCH v14 00/10] Landlock LSM
  2020-02-29 17:23 · 20 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2397d [PATCH 4/3] pid: Improve the comment about waiting in zap_pid_ns_processes
  2020-02-29 02:59 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2398d Re: [PATCH 2/3] uml: Create a private mount of proc for mconsole
  2020-02-28 21:59 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH 3/3] proc: Remove the now unnecessary internal mount of proc
  2020-02-28 21:42 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2397d [PATCH 3/3] proc: Remove the now unnecessary internal mount of proc
  2020-02-28 20:39 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2398d [PATCH 2/3] uml: Create a private mount of proc for mconsole
  2020-02-28 20:31 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 1/3] uml: Don't consult current to find the proc_mnt in mconsole_proc
  2020-02-28 20:20 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 0/3] proc: Actually honor the mount options
  2020-02-28 20:19 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies protecting overlayfs's lower consistently.
  2020-02-28 18:31 · 0 replies this month · Alexander Ivanov <hidden>
• STALE2398d Please revert SELinux/keys patches from the keys linux-next branch
  2020-02-28 15:40 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2398d REVIEWED: 1 (0M) [RESEND PATCH v2] efi: Only print errors about failing to get certs if EFI vars are found
  2020-02-28 09:58 · 9 replies this month · Javier Martinez Canillas <javierm@redhat.com>
• STALE2395d [PATCH v3 00/25] user_namespace: introduce fsid mappings
  2020-02-27 19:33 · 49 replies this month · Christian Brauner <hidden>
• STALE2399d [PATCH bpf-next v4 0/8] MAC and Audit policy using eBPF (KRSI)
  2020-02-27 18:42 · 44 replies this month · KP Singh <hidden>
• STALE2367d Re: [RFC PATCH v14 01/10] landlock: Add object and rule management
  2020-02-27 17:01 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH] security: integrity: Replace zero-length array with flexible-array member
  2020-02-27 12:55 · 0 replies this month · Gustavo A. R. Silva <hidden>
• STALE2399d [PATCH] apparmor: Replace zero-length array with flexible-array member
  2020-02-27 12:51 · 1 reply this month · Gustavo A. R. Silva <hidden>
• STALE2400d suspicious RCU usage from smack code
  2020-02-26 20:06 · 1 reply this month · John Garry <hidden>
• STALE2400d [PATCH] module support: during lockdown, log name of unsigned module
  2020-02-26 17:58 · 1 reply this month · Martin Haass <hidden>
• DORMANTno replies Business Partnership
  2020-02-25 20:36 · 0 replies this month · Gray Brian Towner <hidden>
• STALE2401d BUG: unable to handle kernel NULL pointer dereference in cipso_v4_sock_setattr
  2020-02-25 15:12 · 6 replies this month · syzbot <hidden>
• STALE2370d [PATCH v7 00/12] Introduce CAP_PERFMON to secure system performance monitoring and observability
  2020-02-25 09:56 · 25 replies this month · Alexey Budankov <hidden>
• STALE2387d [PATCH v15 00/23] LSM: Module stacking for AppArmor
  2020-02-24 18:27 · 28 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies [PATCH v2 6/6] proc: Use a list of inodes to flush from proc
  2020-02-24 16:31 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH v2 5/6] proc: Clear the pieces of proc_inode that proc_evict_inode cares about
  2020-02-24 16:31 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH v2 4/6] proc: Use d_invalidate in proc_prune_siblings_dcache
  2020-02-24 16:30 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH v2 3/6] proc: In proc_prune_siblings_dcache cache an aquired super block
  2020-02-24 16:29 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH v2 2/6] proc: Generalize proc_sys_prune_dcache into proc_prune_siblings_dcache
  2020-02-24 16:29 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH v2 1/6] proc: Rename in proc_inode rename sysctl_inodes sibling_inodes
  2020-02-24 16:28 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies LANDED [PATCH v2 0/6] proc: Dentry flushing without proc_mnt
  2020-02-24 16:27 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2394d [PATCH v27 13/22] x86/sgx: Add provisioning
  2020-02-23 17:28 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2394d REVIEWED: 2 (0M) [PATCH v27 10/22] x86/sgx: Linux Enclave Driver
  2020-02-23 17:27 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2403d [PATCH net] ipv4: ensure rcu_read_lock() in cipso_v4_error()
  2020-02-23 05:47 · 2 replies this month · Matteo Croce <hidden>
• DORMANTno replies [PATCH] device_cgroup: Fix RCU list debugging warning
  2020-02-22 17:20 · 0 replies this month · Amol Grover <hidden>
• DORMANTno replies Re: [PATCH 7/7] proc: Ensure we see the exit of each process tid exactly once
  2020-02-22 15:48 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2240d Re: [PATCH v2 0/6] Harden userfaultfd
  2020-02-21 17:57 · 2 replies this month · Daniel Colascione <hidden>
• STALE2405d [PATCH -next] security: remove duplicated include from security.h
  2020-02-21 16:56 · 1 reply this month · YueHaibing <hidden>
• STALE2322d [PATCH] lockdown: Allow unprivileged users to see lockdown status
  2020-02-21 16:51 · 1 reply this month · Jeremy Cline <hidden>
• STALE2405d [PATCH 7/7] proc: Ensure we see the exit of each process tid exactly once
  2020-02-21 16:50 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2403d REVIEWED: 1 (0M) [PATCH v26 10/22] x86/sgx: Linux Enclave Driver
  2020-02-21 13:01 · 23 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies Re: [PATCH 4/7] proc: Use d_invalidate in proc_prune_siblings_dcache
  2020-02-20 23:41 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH 0/7] proc: Dentry flushing without proc_mnt
  2020-02-20 23:39 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2405d [PATCH 4/7] proc: Use d_invalidate in proc_prune_siblings_dcache
  2020-02-20 23:08 · 4 replies this month · Eric W. Biederman <hidden>
• STALE2405d [PATCH 0/7] proc: Dentry flushing without proc_mnt
  2020-02-20 23:08 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2406d [PATCH 3/7] proc: Mov rcu_read_(lock|unlock) in proc_prune_siblings_dcache
  2020-02-20 22:33 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 6/7] proc: Use a list of inodes to flush from proc
  2020-02-20 20:54 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 5/7] proc: Clear the pieces of proc_inode that proc_evict_inode cares about
  2020-02-20 20:53 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 2/7] proc: Generalize proc_sys_prune_dcache into proc_prune_siblings_dcache
  2020-02-20 20:50 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 1/7] proc: Rename in proc_inode rename sysctl_inodes sibling_inodes
  2020-02-20 20:49 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2386d [RFC PATCH] security,anon_inodes,kvm: enable security support for anon inodes
  2020-02-20 18:50 · 4 replies this month · Stephen Smalley <hidden>
• STALE2406d [PATCH v5 0/10] Introduce CAP_PERFMON to secure system performance monitoring and observability
  2020-02-20 13:05 · 13 replies this month · Alexey Budankov <hidden>
• STALE2406d [PATCH 9/9] integrity: check properly whether EFI GetVariable() is available
  2020-02-20 03:19 · 3 replies this month · Ard Biesheuvel <ardb@kernel.org>
• STALE2406d [RFC PATCH] security: <linux/lsm_hooks.h>: fix all kernel-doc warnings
  2020-02-20 00:11 · 5 replies this month · Randy Dunlap <rdunlap@infradead.org>
• DORMANTno replies Re: SELinux support in virtio-fs
  2020-02-19 17:50 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2407d [PATCH] netlabel_domainhash.c: Use built-in RCU list checking
  2020-02-18 22:50 · 2 replies this month · <hidden>
• STALE2407d [PATCH] net: netlabel: Use built-in RCU list checking
  2020-02-18 22:49 · 2 replies this month · <hidden>
• STALE2395d kernel BUG at lib/assoc_array.c:LINE!
  2020-02-18 21:12 · 1 reply this month · syzbot <hidden>
• STALE2408d [PATCH v2] ima: export the measurement list when needed
  2020-02-18 15:37 · 14 replies this month · Janne Karhunen <hidden>
• DORMANTno replies Re: [PATCH v2 1/2] crypto: fix mismatched hash algorithm name sm3-256 to sm3
  2020-02-18 14:24 · 0 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2408d [PATCH v2] IMA hash algorithm supports sm3
  2020-02-18 02:43 · 4 replies this month · Tianjia Zhang <hidden>
• STALE2408d Re: [PATCH v2 00/28] user_namespace: introduce fsid mappings
  2020-02-17 23:12 · 1 reply this month · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE2408d [PATCH v2 00/28] user_namespace: introduce fsid mappings
  2020-02-17 23:05 · 37 replies this month · Christian Brauner <hidden>
• DORMANTno replies Re: [PATCH v2 00/28] user_namespace: introduce fsid mappings
  2020-02-17 22:03 · 0 replies this month · Stéphane Graber <hidden>
• STALE2409d [PATCH] efi: Suppress spurious "Couldn't get size" error
  2020-02-17 16:10 · 2 replies this month · Takashi Iwai <hidden>
• STALE2410d Re: [PATCH v2 00/28] user_namespace: introduce fsid mappings
  2020-02-16 16:41 · 1 reply this month · Florian Weimer <hidden>
• DORMANTno replies [PATCH] MAINTAINERS: use tabs for SAFESETID
  2020-02-16 07:17 · 0 replies this month · Randy Dunlap <rdunlap@infradead.org>
• STALE2403d [PATCH v26 13/22] x86/sgx: Add provisioning
  2020-02-15 07:25 · 2 replies this month · Jarkko Sakkinen <hidden>
• STALE2240d [PATCH 0/3] SELinux support for anonymous inodes and UFFD
  2020-02-14 20:23 · 8 replies this month · Daniel Colascione <hidden>
• STALE2392d [PATCH AUTOSEL 5.5 201/542] IMA: Check IMA policy flag
  2020-02-14 18:11 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• DORMANTno replies Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-14 14:17 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-14 05:36 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-14 03:51 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2412d Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-13 22:48 · 4 replies this month · Eric W. Biederman <hidden>
• STALE2413d [RFC PATCH 0/2] ima: uncompressed module appraisal support
  2020-02-13 15:34 · 25 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2413d Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-13 00:56 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2240d Re: [PATCH v2 0/6] Harden userfaultfd
  2020-02-12 23:41 · 6 replies this month · Kees Cook <hidden>
• STALE2414d Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-12 21:08 · 6 replies this month · Eric W. Biederman <hidden>
• STALE2414d Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-12 19:47 · 3 replies this month · Eric W. Biederman <hidden>
• STALE2414d [PATCH bpf-next v3 00/10] MAC and Audit policy using eBPF (KRSI)
  2020-02-12 18:59 · 22 replies this month · KP Singh <hidden>
• STALE2414d [PATCH 00/24] user_namespace: introduce fsid mappings
  2020-02-12 18:54 · 28 replies this month · Christian Brauner <hidden>
• STALE2414d LANDED [PATCH v8 00/11] proc: modernize proc to support multiple private instances
  2020-02-12 16:03 · 23 replies this month · Alexey Gladkov <hidden>
• STALE2414d Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-12 14:49 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2414d [PATCH] IMA hash algorithm supports sm3
  2020-02-11 23:24 · 5 replies this month · Tianjia Zhang <hidden>
• STALE2415d [PATCH v14 00/23] LSM: Module stacking for AppArmor
  2020-02-11 19:12 · 20 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2395d [PATCH v3 0/8] ima: support stronger algorithms for attestation
  2020-02-11 10:09 · 7 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• DORMANTno replies RE: [PATCH 1/2] crypto: sm3 - add a new alias name sm3-256
  2020-02-11 07:57 · 0 replies this month · Van Leeuwen, Pascal <hidden>
• DORMANTno replies REVIEWED: 1 (0M) RE: [PATCH 1/2] crypto: rename sm3-256 to sm3 in hash_algo_name
  2020-02-11 07:47 · 0 replies this month · Van Leeuwen, Pascal <hidden>
• DORMANTno replies Re: [PATCH v8 07/11] proc: flush task dcache entries from all procfs instances
  2020-02-11 04:03 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2415d [GIT PULL] SELinux fixes for v5.6 (#1)
  2020-02-11 01:10 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE2415d [RFC PATCH 00/14] pipe: Keyrings, Block and USB notifications [ver #3]
  2020-02-11 00:56 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2416d RE: [PATCH 1/2] crypto: sm3 - add a new alias name sm3-256
  2020-02-10 18:36 · 3 replies this month · Van Leeuwen, Pascal <hidden>
• STALE2416d [PATCH] IMA hash algorithm supports sm3-256
  2020-02-10 16:39 · 5 replies this month · Tianjia Zhang <hidden>
• DORMANTno replies 回复：[PATCH 1/2] crypto: sm3 - add a new alias name sm3-256
  2020-02-10 12:07 · 0 replies this month · Tianjia Zhang <hidden>
• DORMANTno replies [PATCH v3 8/8] ima: Use ima_hash_algo for collision detection in the measurement list
  2020-02-10 10:06 · 0 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2378d [PATCH v3 7/8] ima: Calculate and extend PCR with digests in ima_template_entry
  2020-02-10 10:05 · 0 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• DORMANTno replies [PATCH v3 6/8] ima: Allocate and initialize tfm for each PCR bank
  2020-02-10 10:04 · 0 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2395d [PATCH v3 5/8] ima: Switch to dynamically allocated buffer for template digests
  2020-02-10 10:03 · 0 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2419d [PATCH v25 10/21] x86/sgx: Linux Enclave Driver
  2020-02-07 17:03 · 3 replies this month · Jarkko Sakkinen <hidden>
• STALE2418d [PATCH v6 00/10] Introduce CAP_PERFMON to secure system performance monitoring and observability
  2020-02-06 18:38 · 14 replies this month · Alexey Budankov <hidden>
• STALE2395d [PATCH v2 0/8] ima: support stronger algorithms for attestation
  2020-02-06 16:36 · 24 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2420d [GIT PULL] Smack patch for v5.6
  2020-02-06 08:20 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>