linux-security-module archive · September 2022

773 messages across 79 threads, ordered by last activity .

• STALE1478d Re: Closing the BPF map permission loophole
  2022-09-30 20:44 · 9 replies this month · Roberto Sassu <hidden>
• STALE1481d SUPERSEDED [PATCH v7 0/7] landlock: truncate support
  2022-09-30 18:32 · 8 replies this month · Günther Noack <hidden>
• STALE1481d REVIEWED: 1 (0M) [PATCHv2 RESEND] efi: Correct Macmini DMI match in uefi cert quirk
  2022-09-30 18:25 · 1 reply this month · Orlando Chamberlain <hidden>
• STALE1481d SUPERSEDED [PATCH v6 0/5] landlock: truncate support
  2022-09-30 15:56 · 38 replies this month · Günther Noack <hidden>
• STALE1475d SUPERSEDED [PATCH v4 00/30] acl: add vfs posix acl api
  2022-09-30 14:12 · 51 replies this month · Christian Brauner <brauner@kernel.org>
• STALE1481d Re: [mic:next 4/9] fs/open.c:191: undefined reference to `security_file_truncate'
  2022-09-30 13:23 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE1482d SUPERSEDED [PATCH v3 00/29] acl: add vfs posix acl api
  2022-09-30 08:36 · 50 replies this month · Christian Brauner <brauner@kernel.org>
• STALE1327d [PATCH v38 00/39] LSM: Module stacking for AppArmor
  2022-09-30 04:41 · 41 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1482d LANDED [PATCH v1] ksmbd: Fix user namespace mapping
  2022-09-29 13:09 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1321d [PATCH 0/1] Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT
  2022-09-28 16:49 · 9 replies this month · <hidden>
• STALE1476d [PATCH] KEYS: encrypted: fix key instantiation with user-provided data
  2022-09-28 16:33 · 11 replies this month · Nikolaus Voss <hidden>
• STALE1477d [PATCH v2 0/2] powerpc/pseries: restrict error injection and DT changes when locked down
  2022-09-28 16:24 · 7 replies this month · Nathan Lynch <hidden>
• STALE1483d SUPERSEDED [PATCH v2 00/30] acl: add vfs posix acl api
  2022-09-28 15:27 · 54 replies this month · Christian Brauner <brauner@kernel.org>
• STALE1437d [PATCH v5 0/2] ima: Handle -ESTALE returned by ima_filter_rule_match()
  2022-09-28 14:12 · 7 replies this month · GUO Zihua <hidden>
• STALE1484d [GIT PULL] linux-tpmdd updates for v6.0-rc1
  2022-09-28 02:32 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE1450d LSM stacking in next for 6.1?
  2022-09-27 22:37 · 45 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1484d [PATCH v1 0/3] Improve Landlock help
  2022-09-27 16:58 · 16 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1484d SUPERSEDED [PATCH v3 00/11] Encrypted Hibernation
  2022-09-27 16:58 · 4 replies this month · Evan Green <hidden>
• STALE1484d REVIEWED: 1 (1M) [PATCH v5] selftests/landlock: Skip overlayfs tests not supported
  2022-09-27 16:49 · 2 replies this month · <hidden>
• STALE1485d [PATCH 5.15 0/6] arm64: kexec_file: use more system keyrings to verify kernel image signature + dependencies
  2022-09-27 07:49 · 13 replies this month · Michal Suchanek <hidden>
• STALE1479d [PATCH] apparmor: fix obsoleted comments for aa_getprocattr() and audit_resource()
  2022-09-26 14:24 · 0 replies this month · Gaosheng Cui <hidden>
• STALE1485d [PATCH] landlock: Remove unnecessary conditionals
  2022-09-26 11:41 · 1 reply this month · Jingyu Wang <hidden>
• DORMANTno replies Zwiększenie płynności finansowej
  2022-09-26 08:04 · 0 replies this month · Jakub Olejniczak <hidden>
• STALE1479d [PATCH] apparmor: remove useless static inline functions
  2022-09-26 02:28 · 0 replies this month · Gaosheng Cui <hidden>
• STALE1488d [PATCH] apparmor: make __aa_path_perm() static
  2022-09-24 09:21 · 1 reply this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1488d [PATCH] apparmor: Simply obtain the newest label on a cred
  2022-09-24 09:13 · 3 replies this month · Gaosheng Cui <hidden>
• STALE1488d SUPERSEDED [PATCH v2 00/10] Encrypted Hibernation
  2022-09-23 22:24 · 9 replies this month · Evan Green <hidden>
• STALE1488d [PATCH -next 0/4] Use DECLARE_FLEX_ARRAY() helper for ima
  2022-09-23 20:35 · 5 replies this month · Gaosheng Cui <hidden>
• STALE1488d SUPERSEDED [PATCH 0/2] powerpc/pseries: restrict error injection and DT changes when locked down
  2022-09-23 17:43 · 9 replies this month · Nathan Lynch <hidden>
• STALE1488d [GIT PULL] Landlock fix for v6.0 #2
  2022-09-23 16:26 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1488d SUPERSEDED [RFC PATCH 00/29] acl: add vfs posix acl api
  2022-09-23 15:23 · 14 replies this month · Christian Brauner <brauner@kernel.org>
• STALE1488d LANDED [PATCH v1] selftests/landlock: Fix out-of-tree builds
  2022-09-23 14:32 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH v2] apparmor: Simplify obtain the newest label on a cred
  2022-09-23 09:21 · 0 replies this month · Gaosheng Cui <hidden>
• DORMANTno replies Re: [PATCH 5.15 00/45] 5.15.70-rc1 review
  2022-09-22 10:01 · 0 replies this month · Naresh Kamboju <hidden>
• STALE1490d SUPERSEDED [PATCH v17 00/12] bpf: Add kfuncs for PKCS#7 signature verification
  2022-09-22 01:10 · 24 replies this month · Roberto Sassu <hidden>
• STALE1490d [PATCH v18 00/13] bpf: Add kfuncs for PKCS#7 signature verification
  2022-09-22 01:10 · 15 replies this month · Roberto Sassu <hidden>
• DORMANTno replies REVIEWED: 2 (1M) [PATCH 5.15 02/45] arm64: kexec_file: use more system keyrings to verify kernel image signature
  2022-09-21 15:54 · 0 replies this month · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• STALE1490d SUPERSEDED [PATCH v4 0/2] ima: Handle -ESTALE returned by ima_filter_rule_match()
  2022-09-21 12:36 · 5 replies this month · GUO Zihua <hidden>
• STALE1490d [RFC PATCH HBK: 0/8] HW BOUND KEY as TRUSTED KEY
  2022-09-21 11:07 · 32 replies this month · Pankaj Gupta <pankaj.gupta@nxp.com>
• DORMANTno replies SUPERSEDED [RESEND PATCH v2 0/2] watch_queue: Clean up some code
  2022-09-21 09:29 · 2 replies this month · Siddh Raman Pant <hidden>
• STALE1491d SUPERSEDED [PATCH v14 00/26] ima: Namespace IMA with audit support in IMA-ns
  2022-09-20 20:09 · 31 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE1492d [PATCH v2] KEYS: Remove orphan declarations from security/keys/internal.h
  2022-09-20 04:49 · 1 reply this month · Gaosheng Cui <hidden>
• STALE1492d [syzbot] KMSAN: uninit-value in tomoyo_path_chown
  2022-09-20 00:46 · 7 replies this month · syzbot <hidden>
• STALE1492d [PATCH RFC] LSM: lsm_self_attr system call to get security module attributes
  2022-09-19 23:54 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1494d [RFC PATCH] generic_entry: Add stackleak support
  2022-09-17 18:57 · 2 replies this month · guoren@kernel.org
• DORMANTno replies REVIEWED: 1 (0M) [PATCHv2 1/1] efi: Correct Macmini DMI match in uefi cert quirk
  2022-09-17 09:16 · 0 replies this month · Orlando Chamberlain <hidden>
• STALE1495d LANDED [PATCH bpf-next] bpf: use bpf_capable() instead of CAP_SYS_ADMIN for blinding decision
  2022-09-16 20:20 · 1 reply this month · Yauheni Kaliuta <hidden>
• STALE1495d [PATCH 0/3] LSM hooks for IORING_OP_URING_CMD
  2022-09-16 12:59 · 4 replies this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH RFC] LSM: Specify which LSM to display
  2022-09-14 18:14 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1497d [PATCH] lockdown: ratelimit denial messages
  2022-09-14 11:43 · 2 replies this month · Nathan Lynch <hidden>
• STALE1499d [PATCH] security/keys: remove request_key_conswq and keyring_search_instkey() declarations
  2022-09-13 01:53 · 2 replies this month · Gaosheng Cui <hidden>
• STALE1469d SUPERSEDED [PATCH v7 00/18] Network support for Landlock
  2022-09-12 17:23 · 39 replies this month · Konstantin Meskhidze <hidden>
• STALE1499d [PATCH -next] smack: cleanup obsolete mount option flags
  2022-09-12 17:00 · 1 reply this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1499d [PATCH linux-next] smack: lsm: remove the unneeded result variable
  2022-09-12 17:00 · 1 reply this month · <hidden>
• STALE1500d Re: Does NFS support Linux Capabilities
  2022-09-12 04:04 · 10 replies this month · Chuck Lever III <hidden>
• STALE1500d [v5.19.y PATCH 0/3] Backport the io_uring/LSM CMD passthrough controls
  2022-09-11 11:36 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• STALE1461d LANDED [PATCH v1] selftests: Use optional USERCFLAGS and USERLDFLAGS
  2022-09-09 10:49 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1503d [net-next v4 0/6] net: support QUIC crypto
  2022-09-09 01:40 · 7 replies this month · Adel Abouchaev <hidden>
• DORMANTno replies Re: Does NFS support Linux Capabilities
  2022-09-08 22:21 · 0 replies this month · Jeff Layton <jlayton@kernel.org>
• STALE1503d REVIEWED: 1 (1M) [PATCH v4] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing
  2022-09-08 20:31 · 4 replies this month · David Howells <dhowells@redhat.com>
• STALE1503d LANDED [PATCH] dm: verity-loadpin: Only trust verity targets with enforcement
  2022-09-08 16:32 · 5 replies this month · Matthias Kaehlcke <mka@chromium.org>
• STALE1503d Re: [PATCH 1/7] bpf: Add missing fd modes check for map iterators
  2022-09-08 15:17 · 3 replies this month · Roberto Sassu <hidden>
• STALE1503d [PATCH] security/keys: Remove inconsistent __user annotation
  2022-09-08 14:48 · 6 replies this month · Vincenzo Frascino <vincenzo.frascino@arm.com>
• STALE1504d LANDED [PATCH] LoadPin: Require file with verity root digests to have a header
  2022-09-07 23:21 · 1 reply this month · Matthias Kaehlcke <mka@chromium.org>
• STALE1504d SUPERSEDED [PATCH v16 00/12] bpf: Add kfuncs for PKCS#7 signature verification
  2022-09-07 16:05 · 46 replies this month · Roberto Sassu <hidden>
• STALE1505d REVIEWED: 2 (2M) [PATCH v5] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing
  2022-09-06 16:31 · 4 replies this month · David Howells <dhowells@redhat.com>
• STALE1506d [PATCH 1/1] keys/request_key_auth.c: Use strscpy instead of strlcpy
  2022-09-06 05:24 · 1 reply this month · Petr Vorel <pvorel@suse.cz>
• STALE1447d [PATCH 0/2] fs: fix capable() call in simple_xattr_list()
  2022-09-05 15:32 · 5 replies this month · Ondrej Mosnacek <hidden>
• DORMANTno replies [PATCH -next] security: Fix some kernel-doc comments
  2022-09-05 08:45 · 0 replies this month · Yang Li <hidden>
• STALE1508d SUPERSEDED [PATCH v5 0/4] landlock: truncate support
  2022-09-03 12:02 · 8 replies this month · Günther Noack <hidden>
• STALE1509d Re: [PATCH v5 0/4] Introduce security_create_user_ns()
  2022-09-03 03:58 · 1 reply this month · Eric W. Biederman <hidden>
• STALE1509d [GIT PULL] Landlock fix for v6.0
  2022-09-02 23:48 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies Wycena paneli fotowoltaicznych
  2022-09-02 08:14 · 0 replies this month · Norbert Karecki <hidden>
• STALE1510d SUPERSEDED [PATCH v14 00/12] bpf: Add kfuncs for PKCS#7 signature verification
  2022-09-02 03:27 · 1 reply this month · Roberto Sassu <hidden>
• STALE1510d [RFC PATCH 2/2] capability: use new capable_or functionality
  2022-09-02 01:35 · 2 replies this month · Christian Göttsche <hidden>
• STALE1265d [PATCH -next v2 0/6] landlock: add chmod and chown support
  2022-09-01 17:35 · 2 replies this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• DORMANTno replies Re: [RFC PATCH 1/2] fs/xattr: add *at family syscalls
  2022-09-01 16:46 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1510d SMACK LSM checks wrong object label during ingress network traffic
  2022-09-01 16:26 · 2 replies this month · Lontke, Michael <hidden>
• STALE1511d SUPERSEDED [PATCH v15 00/12] bpf: Add kfuncs for PKCS#7 signature verification
  2022-09-01 07:02 · 2 replies this month · Roberto Sassu <hidden>