linux-security-module archive · September 2020

586 messages across 94 threads, ordered by last activity .

• STALE2170d [PATCH 0/3] Add LSM/SELinux support for GPRS Tunneling Protocol (GTP)
  2020-09-30 15:56 · 7 replies this month · Richard Haines <hidden>
• STALE2157d [RFC PATCH] lsm,selinux: pass the family information along with xfrm flow
  2020-09-30 13:44 · 4 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2186d Commit 13c164b1a186 - regression for LSMs/SELinux?
  2020-09-30 10:39 · 22 replies this month · Ondrej Mosnacek <hidden>
• STALE2183d [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam)
  2020-09-29 23:49 · 45 replies this month · Kees Cook <hidden>
• STALE2187d Mount options may be silently discarded
  2020-09-28 18:17 · 3 replies this month · Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
• STALE2188d Re: KASAN: stack-out-of-bounds Read in xfrm_selector_match (2)
  2020-09-28 05:07 · 3 replies this month · Herbert Xu <herbert@gondor.apana.org.au>
• STALE2183d Re: [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-27 18:25 · 2 replies this month · Florian Weimer <hidden>
• STALE2188d Re: [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-27 17:59 · 13 replies this month · Florian Weimer <hidden>
• STALE2152d let import_iovec deal with compat_iovecs as well v4
  2020-09-25 15:23 · 10 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2191d [PATCH v7 00/10] crpyto: introduce OSCCA certificate and SM2 asymmetric algorithm
  2020-09-25 14:01 · 14 replies this month · Tianjia Zhang <hidden>
• STALE2191d [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-25 10:18 · 21 replies this month · <hidden>
• STALE2150d [RFC PATCH 0/3] Add LSM/SELinux support for GPRS Tunneling Protocol (GTP)
  2020-09-24 20:40 · 1 reply this month · Richard Haines <hidden>
• STALE2184d [PATCH V2 0/3] integrity: Load certs from EFI MOK config table
  2020-09-24 19:09 · 16 replies this month · Lenny Szubowicz <hidden>
• STALE2191d [PATCH v10 0/3] Add trusted_for(2) (was O_MAYEXEC)
  2020-09-24 15:39 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2192d Re: [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-23 23:53 · 4 replies this month · Florian Weimer <hidden>
• STALE2192d let import_iovec deal with compat_iovecs as well v3
  2020-09-23 21:30 · 24 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2177d [PATCH v9 0/3] SELinux support for anonymous inodes and UFFD
  2020-09-23 19:33 · 3 replies this month · Lokesh Gidra <hidden>
• STALE2158d [PATCH v4 0/6] IMA: Infrastructure for measurement of critical kernel data
  2020-09-23 19:20 · 6 replies this month · Tushar Sugandhi <hidden>
• STALE2157d [PATCH ghak120 V5] audit: trigger accompanying records when no rules present
  2020-09-23 17:47 · 3 replies this month · Richard Guy Briggs <hidden>
• STALE2193d let import_iovec deal with compat_iovecs as well
  2020-09-23 13:23 · 66 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2194d [[PATCH V4]] audit: trigger accompanying records when no rules present
  2020-09-22 12:44 · 4 replies this month · Richard Guy Briggs <hidden>
• STALE2159d REVIEWED: 2 (0M) [PATCH v38 15/24] x86/sgx: Enable provisioning for remote attestation
  2020-09-22 08:30 · 5 replies this month · Jarkko Sakkinen <hidden>
• STALE2086d let import_iovec deal with compat_iovecs as well v2
  2020-09-21 16:28 · 24 replies this month · Christoph Hellwig <hch@lst.de>
• STALE2194d [PATCH AUTOSEL 5.4 01/15] device_cgroup: Fix RCU list debugging warning
  2020-09-21 14:41 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2172d [PATCH AUTOSEL 5.8 01/20] device_cgroup: Fix RCU list debugging warning
  2020-09-21 14:40 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2159d REVIEWED: 9 (0M) [PATCH v38 11/24] x86/sgx: Add SGX enclave driver
  2020-09-21 12:09 · 2 replies this month · Jarkko Sakkinen <hidden>
• STALE2197d [PATCH] ip.7: Document IP_PASSSEC for UDP sockets
  2020-09-19 08:23 · 2 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE2198d [PATCH v6 0/8] crpyto: introduce OSCCA certificate and SM2 asymmetric algorithm
  2020-09-18 13:34 · 18 replies this month · Tianjia Zhang <hidden>
• STALE2198d [PATCH v6 0/4] Introduce TEE based Trusted Keys support
  2020-09-18 07:03 · 7 replies this month · Sumit Garg <hidden>
• STALE2191d [PATCH AUTOSEL 5.4 005/330] selinux: allow labeling before policy is loaded
  2020-09-18 03:15 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2191d REVIEWED: 1 (0M) [PATCH AUTOSEL 5.4 121/330] selinux: sel_avc_get_stat_idx should increase position index
  2020-09-18 03:07 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2197d [PATCH AUTOSEL 4.19 001/206] selinux: allow labeling before policy is loaded
  2020-09-18 02:53 · 1 reply this month · Sasha Levin <sashal@kernel.org>
• STALE2187d REVIEWED: 1 (0M) [PATCH AUTOSEL 4.4 25/64] selinux: sel_avc_get_stat_idx should increase position index
  2020-09-18 02:17 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2186d REVIEWED: 1 (0M) [PATCH AUTOSEL 4.9 35/90] selinux: sel_avc_get_stat_idx should increase position index
  2020-09-18 02:15 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE2187d REVIEWED: 1 (0M) [PATCH AUTOSEL 4.14 044/127] selinux: sel_avc_get_stat_idx should increase position index
  2020-09-18 02:13 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• DORMANTno replies Re: LSM that blocks execution of the code from the anonymous pages
  2020-09-17 20:54 · 0 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2198d [PATCH v2 00/12] IMA/EVM fixes
  2020-09-17 17:49 · 23 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• DORMANTno replies Re: [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-17 16:04 · 0 replies this month · Florian Weimer <hidden>
• DORMANTno replies [PATCH -next] apparmor: Fix several kernel-doc warnings
  2020-09-17 12:43 · 0 replies this month · Huang Guobin <hidden>
• DORMANTno replies [PATCH -next] apparmor: Fix several kernel-doc warnings
  2020-09-17 12:32 · 0 replies this month · Huang Guobin <hidden>
• STALE2199d [PATCH] socket.7,ip.7: Document SO_PEERSEC for AF_INET sockets
  2020-09-17 07:30 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE2199d [PATCH v2] socket.7,unix.7: add initial description for SO_PEERSEC
  2020-09-17 07:27 · 3 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE2199d REVIEWED: 1 (0M) [PATCH v3] ima: Fix NULL pointer dereference in ima_file_hash
  2020-09-16 22:52 · 1 reply this month · KP Singh <hidden>
• DORMANTno replies [TEST]: Patches not making it to the lists
  2020-09-16 21:05 · 0 replies this month · KP Singh <hidden>
• STALE2199d REVIEWED: 1 (0M) [PATCH v2] ima: Fix NULL pointer dereference in ima_file_hash
  2020-09-16 20:57 · 3 replies this month · KP Singh <hidden>
• STALE2199d [PATCH] ima: Fix NULL pointer dereference in ima_file_hash
  2020-09-16 20:44 · 2 replies this month · KP Singh <hidden>
• STALE2199d Re: [PATCH v3] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-16 20:28 · 1 reply this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2199d [PATCH v20 00/12] Landlock LSM
  2020-09-16 19:02 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2199d [GIT PULL] security: device_cgroup RCU warning fix
  2020-09-16 19:01 · 1 reply this month · James Morris <jmorris@namei.org>
• STALE2199d [PATCH v2 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-16 18:33 · 4 replies this month · <hidden>
• STALE2064d [PATCH v4] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-16 18:10 · 1 reply this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2184d REVIEWED: 9 (0M) [PATCH v38 11/24] x86/sgx: Add SGX enclave driver
  2020-09-16 00:50 · 0 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies REVIEWED: 5 (5M) Re: [RFC PATCH v9 2/3] arch: Wire up introspect_access(2)
  2020-09-16 00:30 · 0 replies this month · Arnd Bergmann <arnd@arndb.de>
• STALE2201d [PATCH] ima: Use kmemdup rather than kmalloc+memcpy
  2020-09-15 14:30 · 1 reply this month · Alex Dewar <hidden>
• STALE2184d REVIEWED: 2 (0M) [PATCH v38 15/24] x86/sgx: Enable provisioning for remote attestation
  2020-09-15 11:58 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2201d [PATCH] security: keys: Use kvfree_sensitive in a few places
  2020-09-14 18:05 · 7 replies this month · Alex Dewar <hidden>
• DORMANTno replies Re: [PATCH v2] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-14 18:03 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2201d [RFC PATCH 00/30] ima: Introduce IMA namespace
  2020-09-14 17:44 · 5 replies this month · <hidden>
• STALE2161d Re: [RFC PATCH 00/30] ima: Introduce IMA namespace
  2020-09-14 17:39 · 1 reply this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2201d [RFC PATCH v9 0/3] Add introspect_access(2) (was O_MAYEXEC)
  2020-09-14 16:46 · 12 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies kernel BUG at lib/assoc_array.c:LINE! (2)
  2020-09-14 09:30 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH -next] dh key: convert to use be32_add_cpu()
  2020-09-14 03:55 · 0 replies this month · Liu Shixin <hidden>
• STALE2204d [RFC PATCH v8 0/3] Add support for AT_INTERPRETED (was O_MAYEXEC)
  2020-09-12 00:18 · 20 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2204d [PATCH] socket.7,unix.7: add initial description for SO_PEERSEC
  2020-09-11 19:34 · 3 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• DORMANTno replies [Spam]We are still waiting for your email...
  2020-09-11 18:24 · 0 replies this month · <hidden>
• DORMANTno replies [PATCH v3] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-11 18:23 · 0 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2204d [PATCH v3 0/6] IMA: Infrastructure for measurement of critical kernel data
  2020-09-11 17:39 · 5 replies this month · Tushar Sugandhi <hidden>
• DORMANTno replies REVIEWED: 2 (0M) [PATCH v37 15/24] x86/sgx: Enable provisioning for remote attestation
  2020-09-11 17:38 · 0 replies this month · Jarkko Sakkinen <hidden>
• DORMANTno replies REVIEWED: 9 (0M) [PATCH v37 11/24] x86/sgx: Add SGX enclave driver
  2020-09-11 12:49 · 0 replies this month · Jarkko Sakkinen <hidden>
• STALE2205d [PATCH v20 00/23] LSM: Module stacking for AppArmor
  2020-09-10 21:22 · 37 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies BUG: unable to handle kernel NULL pointer dereference in qlist_free_all (8)
  2020-09-10 06:26 · 0 replies this month · syzbot <hidden>
• STALE2206d [PATCH v2] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-10 04:32 · 2 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2206d [PATCH] selinux: Add helper functions to get and set checkreqprot
  2020-09-09 20:02 · 1 reply this month · Lakshmi Ramasubramanian <hidden>
• DORMANTno replies Re: [RFC PATCH 00/30] ima: Introduce IMA namespace
  2020-09-09 10:12 · 0 replies this month · Dr. Greg <hidden>
• STALE2207d [PATCH net-next] netlabel: Fix some kernel-doc warnings
  2020-09-09 03:05 · 2 replies this month · Wang Hai <hidden>
• STALE2207d [PATCH net-next] cipso: fix 'audit_secid' kernel-doc warning in cipso_ipv4.c
  2020-09-09 03:04 · 2 replies this month · Wang Hai <hidden>
• STALE2207d [PATCH] SELinux: Measure state and hash of policy using IMA
  2020-09-08 19:33 · 7 replies this month · Lakshmi Ramasubramanian <hidden>
• STALE2207d Re: [RFC PATCH v8 1/3] fs: Introduce AT_INTERPRETED flag for faccessat2(2)
  2020-09-08 18:36 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE1550d [RFC PATCH] sched: only issue an audit on privileged operation
  2020-09-08 11:35 · 2 replies this month · Christian Göttsche <hidden>
• STALE2209d [PATCH v8 0/3] SELinux support for anonymous inodes and UFFD
  2020-09-07 07:46 · 2 replies this month · Lokesh Gidra <hidden>
• DORMANTno replies [RFC PATCH 6/9] security/fbfam: Mitigate a fork brute force attack
  2020-09-06 15:49 · 0 replies this month · John Wood <hidden>
• DORMANTno replies [RFC PATCH 5/9] security/fbfam: Detect a fork brute force attack
  2020-09-06 15:39 · 0 replies this month · John Wood <hidden>
• DORMANTno replies [RFC PATCH 4/9] security/fbfam: Add a new sysctl to control the crashing rate threshold
  2020-09-06 15:38 · 0 replies this month · John Wood <hidden>
• DORMANTno replies [RFC PATCH 2/9] security/fbfam: Add the api to manage statistics
  2020-09-06 15:37 · 0 replies this month · John Wood <hidden>
• DORMANTno replies [RFC PATCH 3/9] security/fbfam: Use the api to manage statistics
  2020-09-06 15:37 · 0 replies this month · John Wood <hidden>
• DORMANTno replies [RFC PATCH 1/9] security/fbfam: Add a Kconfig to enable the fbfam feature
  2020-09-06 15:31 · 0 replies this month · John Wood <hidden>
• STALE2210d [RFC PATCH 0/9] Fork brute force attack mitigation (fbfam)
  2020-09-06 14:21 · 1 reply this month · John Wood <hidden>
• STALE2211d [PATCH 0/3] integrity: Load certs from EFI MOK config table
  2020-09-05 01:30 · 4 replies this month · Lenny Szubowicz <hidden>
• STALE2211d [RFC PATCH] certs: Add EFI_CERT_X509_GUID support for dbx entries
  2020-09-04 23:21 · 2 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• STALE2158d REVIEWED: 7 (0M) [PATCH v33 11/21] x86/sgx: Linux Enclave Driver
  2020-09-04 12:03 · 4 replies this month · Jarkko Sakkinen <hidden>
• STALE2214d [PATCH 01/11] evm: Execute evm_inode_init_security() only when the HMAC key is loaded
  2020-09-02 13:53 · 2 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE2214d [PATCH v2] block: grant IOPRIO_CLASS_RT to CAP_SYS_NICE
  2020-09-01 22:51 · 2 replies this month · Khazhismel Kumykov <hidden>
• STALE2214d [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor
  2020-09-01 15:42 · 1 reply this month · <hidden>
• STALE2215d [PATCH 07/11] evm: Set IMA_CHANGE_XATTR/ATTR bit if EVM_ALLOW_METADATA_WRITES is set
  2020-09-01 12:57 · 4 replies this month · Roberto Sassu <roberto.sassu@huawei.com>