linux-security-module archive · March 2021

593 messages across 88 threads, ordered by last activity .

• STALE2003d [PATCH v1 0/3] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
  2021-03-31 23:35 · 44 replies this month · Ahmad Fatoum <a.fatoum@pengutronix.de>
• STALE1997d [PATCH 18/18] keyctl_pkey: Add pkey parameter slen to pass in PSS salt length
  2021-03-31 23:14 · 1 reply this month · Varad Gautam <hidden>
• STALE2003d [PATCH v31 00/12] Landlock LSM
  2021-03-31 17:51 · 15 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2004d Commit f211ac154577ec9ccf07c15f18a6abf0d9bdb4ab breaks Smack TCP connections
  2021-03-31 15:41 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies Bidding invitation
  2021-03-31 07:31 · 0 replies this month · Albert Bourla <hidden>
• STALE2005d [PATCH v5 0/1] Unprivileged chroot
  2021-03-31 06:35 · 10 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1991d [syzbot] WARNING in unsafe_follow_pfn
  2021-03-31 04:32 · 2 replies this month · syzbot <hidden>
• STALE2002d [PATCH v3 0/3] ima: kernel build support for loading the kernel module signing key
  2021-03-31 02:56 · 4 replies this month · Nayna Jain <nayna@linux.ibm.com>
• STALE2005d [PATCH] ima: Fix function name error in comment.
  2021-03-31 01:27 · 2 replies this month · Jiele Zhao <hidden>
• STALE1823d [PATCH 00/11] treewide: address gcc-11 -Wstringop-overread warnings
  2021-03-30 14:45 · 29 replies this month · Arnd Bergmann <arnd@kernel.org>
• STALE1998d [PATCH] integrity/ima: Add declarations to init_once void arguments.
  2021-03-29 10:20 · 1 reply this month · Jiele Zhao <hidden>
• STALE2004d REVIEWED: 1 (0M) [PATCH v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs
  2021-03-29 09:05 · 4 replies this month · Ondrej Mosnacek <hidden>
• DORMANTno replies Re: add_key() syscall can lead to bypassing memcg limits
  2021-03-29 07:39 · 0 replies this month · Michal Hocko <mhocko@suse.com>
• STALE2008d Re: [PATCH v5 1/1] fs: Allow no_new_privs tasks to call chroot(2)
  2021-03-27 18:56 · 1 reply this month · Askar Safin <hidden>
• STALE2009d [PATCH] tomoyo: don't special case PF_IO_WORKER for PF_KTHREAD
  2021-03-26 16:06 · 2 replies this month · Jens Axboe <axboe@kernel.dk>
• STALE1956d [PATCH] Revert "Smack: Handle io_uring kernel thread privileges"
  2021-03-26 16:06 · 2 replies this month · Jens Axboe <axboe@kernel.dk>
• STALE2009d [PATCH v6 0/8] Fork brute force attack mitigation
  2021-03-26 15:43 · 30 replies this month · John Wood <hidden>
• STALE795d [PATCH v12 00/10] Add support for x509 certs with NIST P384/256/192 keys
  2021-03-26 09:31 · 12 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE2003d REVIEWED: 1 (0M) Re: [PATCH v31 10/12] selftests/landlock: Add user space tests
  2021-03-26 04:31 · 0 replies this month · Kees Cook <hidden>
• STALE2010d [GIT PULL] integrity subsystem fix for v5.12
  2021-03-25 23:50 · 1 reply this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2010d [PATCH] ima: Fix the error code for restoring the PCR value
  2021-03-25 15:11 · 3 replies this month · Li Huafei <hidden>
• STALE2010d [PATCH] ARM: Implement Clang's SLS mitigation
  2021-03-25 14:02 · 13 replies this month · Jian Cai <hidden>
• STALE1971d [PATCH v4 00/11] evm: Improve usability of portable signatures
  2021-03-25 12:40 · 17 replies this month · Roberto Sassu <roberto.sassu@huawei.com>
• STALE1617d [PATCH v7 0/5] Enable root to update the blacklist keyring
  2021-03-25 11:41 · 13 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2010d [PATCH v30 00/12] Landlock LSM
  2021-03-25 09:30 · 43 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2011d [RFC PATCH 1/2] ima: don't access a file's integrity status before an IMA policy is loaded
  2021-03-24 15:57 · 18 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2013d [PATCH] keys: Allow disabling read permissions for key possessor
  2021-03-23 02:03 · 2 replies this month · Andrey Ryabinin <hidden>
• STALE2013d [PATCH v2 0/3] Split security_task_getsecid() into subj and obj variants
  2021-03-22 19:30 · 8 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2013d [PATCH v3 1/3] [security] Add new hook to compare new mount to an existing mount
  2021-03-22 19:05 · 16 replies this month · Olga Kornievskaia <hidden>
• STALE2013d [GIT PULL] SELinux fixes for v5.12 (#1)
  2021-03-22 18:48 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE1670d [PATCH 1/2] ima: don't access a file's integrity status before an IMA policy is loaded
  2021-03-22 18:04 · 5 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• STALE2001d [PATCH] apparmor: avoid -Wempty-body warning
  2021-03-22 11:01 · 0 replies this month · Arnd Bergmann <arnd@kernel.org>
• STALE2015d [PATCH V2] device_cgroup: A typo fix
  2021-03-21 05:50 · 1 reply this month · Bhaskar Chowdhury <hidden>
• STALE2015d [PATCH] security: A typo fix
  2021-03-21 05:48 · 1 reply this month · Bhaskar Chowdhury <hidden>
• DORMANTno replies [PATCH] security: A typo fix
  2021-03-21 03:50 · 0 replies this month · Bhaskar Chowdhury <hidden>
• DORMANTno replies [PATCH] cap: Trivial spelling fixes throughout the file
  2021-03-21 03:35 · 0 replies this month · Bhaskar Chowdhury <hidden>
• STALE2015d NULL deref in integrity_inode_get
  2021-03-20 11:15 · 6 replies this month · Dmitry Vyukov <dvyukov@google.com>
• STALE2010d Re: [PATCH v30 10/12] selftests/landlock: Add user space tests
  2021-03-19 21:58 · 3 replies this month · Kees Cook <hidden>
• STALE2016d [PATCH] selinux: vsock: Set SID for socket returned by accept()
  2021-03-19 12:58 · 2 replies this month · David Brazdil <hidden>
• DORMANTno replies Re: Weird bug in NFS/SELinux
  2021-03-19 09:31 · 0 replies this month · Ondrej Mosnacek <hidden>
• STALE2017d [security:landlock_lsm 8/12] kernel/sys_ni.c:270:1: warning: no previous prototype for function '__arm64_sys_landlock_create_ruleset'
  2021-03-19 08:29 · 1 reply this month · kernel test robot <hidden>
• DORMANTno replies [security:landlock_lsm 8/12] kernel/sys_ni.c:270:1: warning: no previous prototype for function '__x64_sys_landlock_create_ruleset'
  2021-03-19 06:26 · 0 replies this month · kernel test robot <hidden>
• STALE2017d [PATCH] xfs: use has_capability_noaudit() instead of capable() where appropriate
  2021-03-19 06:01 · 3 replies this month · Ondrej Mosnacek <hidden>
• STALE2017d Re: deadlock bug related to bpf,audit subsystems
  2021-03-18 18:20 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH] security: fix misspellings using codespell tool
  2021-03-18 12:01 · 0 replies this month · <hidden>
• STALE1963d [PATCH] security/smack: fix misspellings using codespell tool
  2021-03-18 11:11 · 0 replies this month · <hidden>
• DORMANTno replies [PATCH] security/smack/: fix misspellings using codespell tool
  2021-03-18 11:05 · 0 replies this month · <hidden>
• STALE2018d [PATCH] KEYS: trusted: tee: fix build error due to missing include
  2021-03-18 07:07 · 2 replies this month · Ahmad Fatoum <a.fatoum@pengutronix.de>
• STALE2018d [RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants
  2021-03-17 22:57 · 20 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2019d [PATCH v4 0/1] Unprivileged chroot
  2021-03-16 20:07 · 8 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2018d [PATCH] perf/core: fix unconditional security_locked_down() call
  2021-03-16 15:15 · 3 replies this month · Ondrej Mosnacek <hidden>
• STALE2020d [PATCH v3 0/1] Unprivileged chroot
  2021-03-16 08:17 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2020d [PATCH] LSM: SafeSetID: Fix code specification by scripts/checkpatch.pl
  2021-03-15 16:52 · 1 reply this month · Yanwei Gao <hidden>
• STALE1969d [PATCH 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries
  2021-03-13 20:28 · 8 replies this month · David Howells <dhowells@redhat.com>
• STALE1983d [PATCH v9 0/4] Introduce TEE based Trusted Keys support
  2021-03-13 10:45 · 16 replies this month · Sumit Garg <hidden>
• STALE2021d [PATCH v6 00/40] idmapped mounts
  2021-03-13 00:06 · 8 replies this month · Christian Brauner <hidden>
• STALE2023d Re: [PATCH v5 7/8] Documentation: Add documentation for the Brute LSM
  2021-03-12 17:56 · 12 replies this month · Andi Kleen <hidden>
• STALE2023d [PATCH v2 0/3] Fix bugs related to TPM2 event log
  2021-03-12 16:56 · 11 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE2023d [PATCH v25 00/25] LSM: Module stacking for AppArmor
  2021-03-12 16:28 · 31 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE2023d [PATCH v5 0/8] Fork brute force attack mitigation
  2021-03-12 16:20 · 2 replies this month · John Wood <hidden>
• STALE2023d [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label()
  2021-03-12 15:44 · 2 replies this month · Ondrej Mosnacek <hidden>
• DORMANTno replies [GIT PULL] Add EFI_CERT_X509_GUID support for dbx/mokx entries
  2021-03-11 17:05 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE2024d [PATCH v1 0/1] Unprivileged chroot
  2021-03-11 10:43 · 5 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE2024d Re: [PATCH v2 1/1] fs: Allow no_new_privs tasks to call chroot(2)
  2021-03-11 10:38 · 3 replies this month · Eric W. Biederman <hidden>
• STALE2025d [PATCH v3 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries
  2021-03-10 22:48 · 7 replies this month · David Howells <dhowells@redhat.com>
• STALE2025d [PATCH 0/3] Fix bugs related to TPM2 event log
  2021-03-10 19:52 · 5 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• DORMANTno replies [PATCH v2 0/1] Unprivileged chroot
  2021-03-10 18:19 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE2025d Re: [PATCH v1 1/1] fs: Allow no_new_privs tasks to call chroot(2)
  2021-03-10 18:14 · 1 reply this month · Eric W. Biederman <hidden>
• STALE1989d [RFC PATCH 0/3] LSM Documentation - Render lsm_hooks.h for kernel_docs
  2021-03-09 15:07 · 3 replies this month · Richard Haines <hidden>
• DORMANTno replies [PATCH] security/apparmor: fix misspellings using codespell tool
  2021-03-09 03:27 · 0 replies this month · <hidden>
• STALE2027d [PATCH v3] selinux: measure state and policy capabilities
  2021-03-09 00:44 · 9 replies this month · Lakshmi Ramasubramanian <hidden>
• STALE2029d [PATCH] security: tomoyo: fix error return code of tomoyo_update_domain()
  2021-03-06 13:39 · 1 reply this month · Jia-Ju Bai <hidden>
• STALE2030d REVIEWED: 5 (4M) [PATCH v3 1/1] mm/madvise: replace ptrace attach requirement for process_madvise
  2021-03-05 19:41 · 11 replies this month · Suren Baghdasaryan <surenb@google.com>
• STALE2030d [PATCH v2] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr
  2021-03-05 16:43 · 1 reply this month · Sergey Nazarov <hidden>
• STALE2031d [PATCH] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr
  2021-03-05 07:45 · 4 replies this month · Seergey Nazarov <hidden>
• DORMANTno replies [PATCH v3] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)".
  2021-03-05 03:25 · 0 replies this month · Jiele zhao <hidden>
• DORMANTno replies [PATCH v2] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)".
  2021-03-05 02:46 · 0 replies this month · Jiele zhao <hidden>
• STALE2031d [PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page
  2021-03-05 02:21 · 1 reply this month · Preeti Nagar <hidden>
• STALE2031d [PATCH] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)".
  2021-03-04 23:50 · 1 reply this month · zhaojiele <hidden>
• STALE2031d [PATCH] cipso,calipso: resolve a number of problems with the DOI refcounts
  2021-03-04 23:30 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• STALE2031d Flipping firmware write-protection bits from within the kernel (was Re: [PATCH RFC platform-next 8/8] Documentation/ABI: Add new line card attributes for mlxreg-io sysfs interfaces)
  2021-03-04 20:07 · 1 reply this month · Hans de Goede <hidden>
• STALE2032d KASAN: use-after-free Write in cipso_v4_doi_putdef
  2021-03-04 00:11 · 2 replies this month · syzbot <hidden>
• STALE2032d Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise
  2021-03-03 20:59 · 4 replies this month · Jann Horn <jannh@google.com>
• STALE2032d KASAN: use-after-free Read in cipso_v4_genopt
  2021-03-03 11:02 · 6 replies this month · syzbot <hidden>
• STALE2023d Re: [security/brute] cfe92ab6a3: WARNING:inconsistent_lock_state
  2021-03-02 21:36 · 0 replies this month · John Wood <hidden>
• STALE2033d [PATCH v2 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries
  2021-03-02 18:08 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE2034d Re: [PATCH] ima: Replacing deprecated strlcpy with strscpy ~~~~~~~~~ Replace
  2021-03-02 08:40 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE2034d [PATCH v3 00/11] evm: Improve usability of portable signatures
  2021-03-01 18:10 · 1 reply this month · Roberto Sassu <roberto.sassu@huawei.com>