March 2021

593 messages across 88 threads.

Last	Thread	Replies
Wednesday 31 March
23:35	[PATCH v1 0/3] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys Ahmad Fatoum SUPERSEDED	44
23:14	[PATCH 18/18] keyctl_pkey: Add pkey parameter slen to pass in PSS salt length Varad Gautam SUPERSEDED	1
17:51	[PATCH v31 00/12] Landlock LSM Mickaël Salaün SUPERSEDED	15
15:41	Commit f211ac154577ec9ccf07c15f18a6abf0d9bdb4ab breaks Smack TCP connections Casey Schaufler	2
07:31	Bidding invitation Albert Bourla	none
06:35	[PATCH v5 0/1] Unprivileged chroot Mickaël Salaün REVIEWED	10
04:32	[syzbot] WARNING in unsafe_follow_pfn syzbot	2
02:56	[PATCH v3 0/3] ima: kernel build support for loading the kernel module signing key Nayna Jain SUPERSEDED	4
01:27	[PATCH] ima: Fix function name error in comment. Jiele Zhao	2
Tuesday 30 March
14:45	[PATCH 00/11] treewide: address gcc-11 -Wstringop-overread warnings Arnd Bergmann PENDING · 4 of 11 landed	29
Monday 29 March
10:20	[PATCH] integrity/ima: Add declarations to init_once void arguments. Jiele Zhao	1
09:05	[PATCH v2] vfs: fix fsconfig(2) LSM mount option handling for btrfs Ondrej Mosnacek REVIEWED · 1 review, 0 by maintainers	4
07:39	Re: add_key() syscall can lead to bypassing memcg limits Michal Hocko	none
Saturday 27 March
18:56	Re: [PATCH v5 1/1] fs: Allow no_new_privs tasks to call chroot(2) Askar Safin	1
Friday 26 March
16:06	[PATCH] tomoyo: don't special case PF_IO_WORKER for PF_KTHREAD Jens Axboe	2
16:06	[PATCH] Revert "Smack: Handle io_uring kernel thread privileges" Jens Axboe	2
15:43	[PATCH v6 0/8] Fork brute force attack mitigation John Wood SUPERSEDED	30
09:31	[PATCH v12 00/10] Add support for x509 certs with NIST P384/256/192 keys Stefan Berger PENDING · 8 of 10 reviewed	12
04:31	Re: [PATCH v31 10/12] selftests/landlock: Add user space tests Kees Cook REVIEWED · 1 review, 1 by a maintainer	none
Thursday 25 March
23:50	[GIT PULL] integrity subsystem fix for v5.12 Mimi Zohar	1
15:11	[PATCH] ima: Fix the error code for restoring the PCR value Li Huafei	3
14:02	[PATCH] ARM: Implement Clang's SLS mitigation Jian Cai	13
12:40	[PATCH v4 00/11] evm: Improve usability of portable signatures Roberto Sassu SUPERSEDED	17
11:41	[PATCH v7 0/5] Enable root to update the blacklist keyring Mickaël Salaün SUPERSEDED	13
09:30	[PATCH v30 00/12] Landlock LSM Mickaël Salaün SUPERSEDED	43
Wednesday 24 March
15:57	[RFC PATCH 1/2] ima: don't access a file's integrity status before an IMA policy is loaded Mimi Zohar	18
Tuesday 23 March
02:03	[PATCH] keys: Allow disabling read permissions for key possessor Andrey Ryabinin	2
Monday 22 March
19:30	[PATCH v2 0/3] Split security_task_getsecid() into subj and obj variants Paul Moore PENDING · 1 of 3 reviewed	8
19:05	[PATCH v3 1/3] [security] Add new hook to compare new mount to an existing mount Olga Kornievskaia	16
18:48	[GIT PULL] SELinux fixes for v5.12 (#1) Paul Moore	1
18:04	[PATCH 1/2] ima: don't access a file's integrity status before an IMA policy is loaded Mimi Zohar	5
11:01	[PATCH] apparmor: avoid -Wempty-body warning Arnd Bergmann	none
Sunday 21 March
05:50	[PATCH V2] device_cgroup: A typo fix Bhaskar Chowdhury	1
05:48	[PATCH] security: A typo fix Bhaskar Chowdhury	1
03:50	[PATCH] security: A typo fix Bhaskar Chowdhury	none
03:35	[PATCH] cap: Trivial spelling fixes throughout the file Bhaskar Chowdhury	none
Saturday 20 March
11:15	NULL deref in integrity_inode_get Dmitry Vyukov	6
Friday 19 March
21:58	Re: [PATCH v30 10/12] selftests/landlock: Add user space tests Kees Cook	3
12:58	[PATCH] selinux: vsock: Set SID for socket returned by accept() David Brazdil	2
09:31	Re: Weird bug in NFS/SELinux Ondrej Mosnacek	none
08:29	[security:landlock_lsm 8/12] kernel/sys_ni.c:270:1: warning: no previous prototype for function '__arm64_sys_landlock_create_ruleset' kernel test robot	1
06:26	[security:landlock_lsm 8/12] kernel/sys_ni.c:270:1: warning: no previous prototype for function '__x64_sys_landlock_create_ruleset' kernel test robot	none
06:01	[PATCH] xfs: use has_capability_noaudit() instead of capable() where appropriate Ondrej Mosnacek	3
Thursday 18 March
18:20	Re: deadlock bug related to bpf,audit subsystems Paul Moore	1
12:01	[PATCH] security: fix misspellings using codespell tool unknown sender	none
11:11	[PATCH] security/smack: fix misspellings using codespell tool unknown sender	none
11:05	[PATCH] security/smack/: fix misspellings using codespell tool unknown sender	none
07:07	[PATCH] KEYS: trusted: tee: fix build error due to missing include Ahmad Fatoum	2
Wednesday 17 March
22:57	[RFC PATCH 0/4] Split security_task_getsecid() into subj and obj variants Paul Moore SUPERSEDED	20
Tuesday 16 March
20:07	[PATCH v4 0/1] Unprivileged chroot Mickaël Salaün SUPERSEDED	8
15:15	[PATCH] perf/core: fix unconditional security_locked_down() call Ondrej Mosnacek LANDED	3
08:17	[PATCH v3 0/1] Unprivileged chroot Mickaël Salaün SUPERSEDED	3
Monday 15 March
16:52	[PATCH] LSM: SafeSetID: Fix code specification by scripts/checkpatch.pl Yanwei Gao	1
Saturday 13 March
20:28	[PATCH 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries David Howells SUPERSEDED · 4 of 4 landed	8
10:45	[PATCH v9 0/4] Introduce TEE based Trusted Keys support Sumit Garg PENDING · 2 of 4 reviewed	16
00:06	[PATCH v6 00/40] idmapped mounts Christian Brauner PENDING · 39 of 40 landed	8
Friday 12 March
17:56	Re: [PATCH v5 7/8] Documentation: Add documentation for the Brute LSM Andi Kleen	12
16:56	[PATCH v2 0/3] Fix bugs related to TPM2 event log Stefan Berger	11
16:28	[PATCH v25 00/25] LSM: Module stacking for AppArmor Casey Schaufler SUPERSEDED	31
16:20	[PATCH v5 0/8] Fork brute force attack mitigation John Wood SUPERSEDED	2
15:44	[PATCH] NFSv4.2: fix return value of _nfs4_get_security_label() Ondrej Mosnacek	2
Thursday 11 March
17:05	[GIT PULL] Add EFI_CERT_X509_GUID support for dbx/mokx entries David Howells	none
10:43	[PATCH v1 0/1] Unprivileged chroot Mickaël Salaün SUPERSEDED	5
10:38	Re: [PATCH v2 1/1] fs: Allow no_new_privs tasks to call chroot(2) Eric W. Biederman	3
Wednesday 10 March
22:48	[PATCH v3 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries David Howells REVIEWED	7
19:52	[PATCH 0/3] Fix bugs related to TPM2 event log Stefan Berger SUPERSEDED	5
18:19	[PATCH v2 0/1] Unprivileged chroot Mickaël Salaün SUPERSEDED	1
18:14	Re: [PATCH v1 1/1] fs: Allow no_new_privs tasks to call chroot(2) Eric W. Biederman	1
Tuesday 9 March
15:07	[RFC PATCH 0/3] LSM Documentation - Render lsm_hooks.h for kernel_docs Richard Haines	3
03:27	[PATCH] security/apparmor: fix misspellings using codespell tool unknown sender	none
00:44	[PATCH v3] selinux: measure state and policy capabilities Lakshmi Ramasubramanian	9
Saturday 6 March
13:39	[PATCH] security: tomoyo: fix error return code of tomoyo_update_domain() Jia-Ju Bai	1
Friday 5 March
19:41	[PATCH v3 1/1] mm/madvise: replace ptrace attach requirement for process_madvise Suren Baghdasaryan LANDED · 3 reviews, 3 by maintainers	11
16:43	[PATCH v2] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr Sergey Nazarov	1
07:45	[PATCH] CIPSO: Fix unaligned memory access in cipso_v4_gentag_hdr Seergey Nazarov	4
03:25	[PATCH v3] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)". Jiele zhao	none
02:46	[PATCH v2] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)". Jiele zhao	none
02:21	[PATCH] RTIC: selinux: ARM64: Move selinux_state to a separate page Preeti Nagar	1
Thursday 4 March
23:50	[PATCH] security/loadpin: Replace "kernel_read_file_str[j]" with function "kernel_read_file_id_str(j)". zhaojiele	1
23:30	[PATCH] cipso,calipso: resolve a number of problems with the DOI refcounts Paul Moore	5
20:07	Flipping firmware write-protection bits from within the kernel (was Re: [PATCH RFC platform-next 8/8] Documentation/ABI: Add new line card attributes for mlxreg-io sysfs interfaces) Hans de Goede	1
00:11	KASAN: use-after-free Write in cipso_v4_doi_putdef syzbot	2
Wednesday 3 March
20:59	Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise Jann Horn	4
11:02	KASAN: use-after-free Read in cipso_v4_genopt syzbot	6
Tuesday 2 March
21:36	Re: [security/brute] cfe92ab6a3: WARNING:inconsistent_lock_state John Wood	none
18:08	[PATCH v2 0/4] keys: Add EFI_CERT_X509_GUID support for dbx/mokx entries David Howells SUPERSEDED	1
08:40	Re: [PATCH] ima: Replacing deprecated strlcpy with strscpy ~~~~~~~~~ Replace Jarkko Sakkinen	1
Monday 1 March
18:10	[PATCH v3 00/11] evm: Improve usability of portable signatures Roberto Sassu SUPERSEDED	1

`h`	back out one level
`j`	next message in thread / next series-diff position
`k`	previous message in thread / previous series-diff position
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help