linux-security-module archive · May 2020

702 messages · showing the 100 most-recently-active threads .

• STALE2305d Re: [PATCH RFC] seccomp: Implement syscall isolation based on memory areas
  2020-05-31 18:01 · 5 replies this month · Gabriel Krisman Bertazi <hidden>
• STALE2290d new seccomp mode aims to improve performance
  2020-05-31 17:19 · 5 replies this month · zhujianwei (C) <hidden>
• STALE2300d clean up kernel_{read,write} & friends v2
  2020-05-30 23:16 · 40 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2301d Re: [PATCH RFC] seccomp: Implement syscall isolation based on memory areas
  2020-05-30 17:31 · 0 replies this month · Kees Cook <hidden>
• DORMANTno replies Re: [PATCH] checkpatch/coding-style: Allow 100 column lines
  2020-05-30 11:41 · 0 replies this month · Markus Elfring <hidden>
• STALE2307d Re: [PATCH 2/2] exec: Compute file based creds only once
  2020-05-30 05:18 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2307d Re: [PATCH 1/2] exec: Add a per bprm->file version of per_clear
  2020-05-30 05:15 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2307d [PATCH 2/2] exec: Compute file based creds only once
  2020-05-29 21:24 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2307d [PATCH 1/2] exec: Add a per bprm->file version of per_clear
  2020-05-29 21:06 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 0/2] exec: Remove the computation of bprm->cred
  2020-05-29 16:49 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2308d [PATCH v18 00/12] Landlock LSM
  2020-05-29 11:29 · 14 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2260d [RFC PATCH v3 00/12] Integrity Policy Enforcement LSM (IPE)
  2020-05-29 08:18 · 7 replies this month · <hidden>
• DORMANTno replies Re: [PATCH 09/11] exec: In bprm_fill_uid only set per_clear when honoring suid or sgid
  2020-05-28 19:25 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH 01/11] exec: Reduce bprm->per_clear to a single bit
  2020-05-28 19:24 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2303d [PATCH v3 0/6] Enable as many KUnit tests as possible
  2020-05-28 19:14 · 3 replies this month · Anders Roxell <hidden>
• STALE2308d [PATCH 02/11] exec: Introduce active_per_clear the per file version of per_clear
  2020-05-28 19:11 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2308d [PATCH 09/11] exec: In bprm_fill_uid only set per_clear when honoring suid or sgid
  2020-05-28 19:08 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2308d [PATCH v3 1/6] kunit: Kconfig: enable a KUNIT_ALL_TESTS fragment
  2020-05-28 19:05 · 1 reply this month · Anders Roxell <hidden>
• STALE2308d [PATCH 01/11] exec: Reduce bprm->per_clear to a single bit
  2020-05-28 19:04 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 11/11] exec: Remove the label after_setid from bprm_fill_uid
  2020-05-28 15:54 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 10/11] exec: In bprm_fill_uid set secureexec at same time as per_clear
  2020-05-28 15:54 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 08/11] exec: In bprm_fill_uid remove unnecessary no new privs check
  2020-05-28 15:53 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 07/11] exec: Set saved, fs, and effective ids together in bprm_fill_uid
  2020-05-28 15:52 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 06/11] exec: Don't set secureexec when the uid or gid changes are abandoned
  2020-05-28 15:52 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 05/11] exec: In bprm_fill_uid use CAP_SETGID to see if a gid change is safe
  2020-05-28 15:48 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 04/11] exec: Move uid/gid handling from creds_from_file into bprm_fill_uid
  2020-05-28 15:48 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 04/11] exec: Move uid/gid handling from creds_from_file into bprm_fill_uid
  2020-05-28 15:47 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 03/11] exec: Compute file based creds only once
  2020-05-28 15:46 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH 0/11] exec: cred calculation simplifications
  2020-05-28 15:42 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2309d [PATCH AUTOSEL 5.6 04/47] evm: Fix RCU list related warnings
  2020-05-28 12:10 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2305d [PATCH AUTOSEL 5.4 03/26] evm: Fix RCU list related warnings
  2020-05-28 12:05 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2309d [PATCH AUTOSEL 4.19 03/17] evm: Fix RCU list related warnings
  2020-05-28 12:03 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2298d Re: [PATCH] capabilities: Introduce CAP_RESTORE
  2020-05-28 09:49 · 4 replies this month · Eric W. Biederman <hidden>
• STALE2288d [PATCH bpf-next 0/4] Generalizing bpf_local_storage
  2020-05-27 22:09 · 11 replies this month · KP Singh <hidden>
• STALE2293d [PATCH] capabilities: Introduce CAP_RESTORE
  2020-05-27 16:46 · 14 replies this month · Adrian Reber <hidden>
• DORMANTno replies Re: [PATCH] capabilities: Introduce CAP_RESTORE
  2020-05-26 19:52 · 0 replies this month · Jann Horn <jannh@google.com>
• DORMANTno replies Re: [PATCH] capabilities: Introduce CAP_RESTORE
  2020-05-26 19:19 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2311d general protection fault in tomoyo_check_acl
  2020-05-26 12:58 · 1 reply this month · syzbot <hidden>
• STALE2247d [PATCH 0/3] fs: reduce export usage of kerne_read*() calls
  2020-05-24 02:54 · 13 replies this month · Luis Chamberlain <mcgrof@kernel.org>
• STALE2305d [RFC][PATCH 0/2] Add support for using reserved memory for ima buffer pass
  2020-05-23 04:09 · 9 replies this month · Prakhar Srivastava <hidden>
• STALE2314d Re: [PATCH v2 2/2] fs: avoid fdput() after failed fdget() in kernel_read_file_from_fd()
  2020-05-22 22:47 · 4 replies this month · Luis Chamberlain <mcgrof@kernel.org>
• STALE2305d REVIEWED: 7 (0M) [PATCH v30 10/20] x86/sgx: Linux Enclave Driver
  2020-05-22 19:39 · 4 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies Re: [PATCH v2 7/8] exec: Generic execfd support
  2020-05-22 13:39 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH] commoncap: Make cap_inode_killpriv ignore other LSM xattr
  2020-05-22 12:33 · 0 replies this month · Dmitry Mastykin <hidden>
• STALE2315d Re: [PATCH v2 7/8] exec: Generic execfd support
  2020-05-22 04:51 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2315d [GIT PULL] apparmor bug fixes for v5.7-rc6
  2020-05-21 23:50 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• DORMANTno replies [PATCH] security: integrity: Replace zero-length array with flexible-array member
  2020-05-21 23:06 · 0 replies this month · "Gustavo A. R. Silva" <gustavoars@kernel.org>
• STALE2315d Re: [PATCH v2 7/8] exec: Generic execfd support
  2020-05-21 22:50 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v2 0/8] exec: Control flow simplifications
  2020-05-21 11:57 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2284d LANDED [PATCH bpf] security: Fix hook iteration for secid_to_secctx
  2020-05-21 03:13 · 4 replies this month · KP Singh <hidden>
• STALE2316d Re: [PATCH v2 0/8] exec: Control flow simplifications
  2020-05-20 23:43 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2316d Re: [PATCH v2 3/8] exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds
  2020-05-20 20:53 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2316d clean up kernel_{read,write} & friends v2
  2020-05-20 15:59 · 17 replies this month · Christoph Hellwig <hch@lst.de>
• DORMANTno replies Re: [PATCH v2 0/8] exec: Control flow simplifications
  2020-05-20 13:06 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v2 3/8] exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds
  2020-05-20 12:44 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2317d Re: [PATCH 0/4] Relocate execve() sanity checks
  2020-05-19 22:58 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 7/8] exec: Generic execfd support
  2020-05-19 21:59 · 3 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 0/8] exec: Control flow simplifications
  2020-05-19 21:55 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 3/8] exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds
  2020-05-19 21:53 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 5/8] exec: Move the call of prepare_binprm into search_binary_handler
  2020-05-19 21:31 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 2/8] exec: Factor security_bprm_creds_for_exec out of security_bprm_set_creds
  2020-05-19 21:29 · 3 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 8/8] exec: Remove recursion from search_binary_handler
  2020-05-19 20:38 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v2 7/8] exec: Generic execfd support
  2020-05-19 20:24 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v2 6/8] exec/binfmt_script: Don't modify bprm->buf and then return -ENOEXEC
  2020-05-19 19:23 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2317d Re: [PATCH v2 4/8] exec: Allow load_misc_binary to call prepare_binfmt unconditionally
  2020-05-19 19:17 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2317d Re: [PATCH v2 3/8] exec: Convert security_bprm_set_creds into security_bprm_repopulate_creds
  2020-05-19 19:14 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 6/8] exec/binfmt_script: Don't modify bprm->buf and then return -ENOEXEC
  2020-05-19 19:08 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH v2 1/8] exec: Teach prepare_exec_creds how exec treats uids & gids
  2020-05-19 19:00 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 1/8] exec: Teach prepare_exec_creds how exec treats uids & gids
  2020-05-19 18:28 · 2 replies this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v2 4/8] exec: Allow load_misc_binary to call prepare_binfmt unconditionally
  2020-05-19 18:27 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v3 0/3] perf: make Perf tool aware of SELinux access control
  2020-05-19 18:10 · 8 replies this month · Alexey Budankov <hidden>
• STALE2317d Re: [PATCH 0/4] Relocate execve() sanity checks
  2020-05-19 17:56 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2317d Re: [PATCH 0/4] Relocate execve() sanity checks
  2020-05-19 16:26 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2317d [PATCH v17 00/23] LSM: Module stacking for AppArmor
  2020-05-19 15:49 · 30 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 14:53 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2317d Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 14:47 · 3 replies this month · Eric W. Biederman <hidden>
• STALE2318d Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 13:29 · 1 reply this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 12:13 · 0 replies this month · Andreas Schwab <hidden>
• STALE2318d Re: How about just O_EXEC? (was Re: [PATCH v5 3/6] fs: Enable to enforce noexec mounts or file exec through O_MAYEXEC)
  2020-05-19 10:13 · 3 replies this month · Florian Weimer <hidden>
• DORMANTno replies Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 08:37 · 0 replies this month · Andreas Schwab <hidden>
• STALE2318d Re: [PATCH 1/4] exec: Change uselib(2) IS_SREG() failure to EACCES
  2020-05-19 08:11 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2318d RE: [PATCH] security: fix the default value of secid_to_secctx hook
  2020-05-18 22:02 · 1 reply this month · Schaufler, Casey <hidden>
• STALE2318d Re: linux-next boot error: general protection fault in tomoyo_get_local_path
  2020-05-18 18:08 · 6 replies this month · Eric W. Biederman <hidden>
• STALE2301d [PATCH 0/4] Relocate execve() sanity checks
  2020-05-18 14:46 · 7 replies this month · Kees Cook <hidden>
• DORMANTno replies Re: [PATCH v2] proc: proc_pid_ns takes super_block as an argument
  2020-05-18 13:01 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2319d Re: [PATCH v2] proc: proc_pid_ns takes super_block as an argument
  2020-05-18 12:57 · 1 reply this month · Eric W. Biederman <hidden>
• STALE2319d WARNING: suspicious RCU usage with PROVE_RCU_LIST=y
  2020-05-18 09:39 · 3 replies this month · Amol Grover <hidden>
• DORMANTno replies Re: How about just O_EXEC? (was Re: [PATCH v5 3/6] fs: Enable to enforce noexec mounts or file exec through O_MAYEXEC)
  2020-05-18 07:27 · 0 replies this month · Florian Weimer <hidden>
• DORMANTno replies Re: [PATCH 09/14] fs: don't change the address limit for ->write_iter in __kernel_write
  2020-05-18 06:42 · 0 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2319d [PATCH v5 0/6] Add support for O_MAYEXEC
  2020-05-17 16:58 · 51 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2321d Problem with 9ba09998baa9 ("selinux: Implement the watch_key security hook") in linux-next
  2020-05-15 22:27 · 18 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2321d [PATCH -next] apparmor: Use true and false for bool variable
  2020-05-15 21:28 · 1 reply this month · Zou Wei <hidden>
• STALE2321d linux-next boot error: general protection fault in tomoyo_get_local_path
  2020-05-15 20:56 · 4 replies this month · syzbot <hidden>
• DORMANTno replies Re: linux-next boot error: general protection fault in tomoyo_get_local_path
  2020-05-15 20:40 · 0 replies this month · Eric W. Biederman <hidden>
• STALE2321d [PATCH v7 bpf-next 0/3] Introduce CAP_BPF
  2020-05-15 15:55 · 4 replies this month · Alexei Starovoitov <hidden>
• STALE2321d Re: How about just O_EXEC? (was Re: [PATCH v5 3/6] fs: Enable to enforce noexec mounts or file exec through O_MAYEXEC)
  2020-05-15 14:37 · 1 reply this month · Florian Weimer <hidden>
• STALE2305d [PATCH v30 11/20] x86/sgx: Add provisioning
  2020-05-15 00:46 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2304d [PATCH v4 0/4] Introduce TEE based Trusted Keys support
  2020-05-15 00:00 · 13 replies this month · Sumit Garg <hidden>
• STALE2318d REVIEWED: 1 (0M) Re: [PATCH] security: fix the default value of secid_to_secctx hook
  2020-05-14 19:41 · 0 replies this month · James Morris <jmorris@namei.org>
• STALE2322d [PATCH v17 00/10] Landlock LSM
  2020-05-14 19:37 · 20 replies this month · Mickaël Salaün <mic@digikod.net>