linux-security-module archive · November 2022

547 messages across 76 threads, ordered by last activity .

• STALE1424d [RFC v2 0/1] RFC on how to include LSM hooks for io_uring commands
  2022-11-30 21:29 · 8 replies this month · Joel Granados <hidden>
• STALE1424d SUPERSEDED [PATCH v6 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
  2022-11-30 21:24 · 15 replies this month · Roberto Sassu <hidden>
• STALE1181d Re: [PATCH -next] selftests/landlock: Fix selftest ptrace_test run fail
  2022-11-30 19:48 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE1424d [PATCH] ima: Make a copy of sig and digest in asymmetric_verify()
  2022-11-30 16:25 · 8 replies this month · Roberto Sassu <hidden>
• STALE1424d [RFC][PATCH 0/4] security: Ensure LSMs return expected values
  2022-11-30 13:53 · 32 replies this month · Roberto Sassu <hidden>
• DORMANTno replies Wycena paneli fotowoltaicznych
  2022-11-30 08:51 · 0 replies this month · Norbert Karecki <hidden>
• STALE1425d [PATCH -next] selftests/landlock: Fix selftest ptrace_test run fail
  2022-11-30 03:40 · 5 replies this month · limin <hidden>
• STALE1416d [PATCH v2 0/2] lsm: Improve LSM hooks documentation
  2022-11-29 16:55 · 3 replies this month · Roberto Sassu <hidden>
• STALE1425d [PATCH v5] evm: Correct inode_init_security hooks behaviors
  2022-11-29 14:34 · 6 replies this month · Nicolas Bouchinet <hidden>
• STALE1425d [PATCH] ima: Fix hash dependency to correct algorithm
  2022-11-29 14:21 · 1 reply this month · Tianjia Zhang <hidden>
• STALE1411d [PATCH v5 0/6] evm: Prepare for moving to the LSM infrastructure
  2022-11-29 13:16 · 13 replies this month · Roberto Sassu <hidden>
• STALE1425d [PATCH mm-unstable v1 00/20] mm/gup: remove FOLL_FORCE usage from drivers (reliable R/O long-term pinning)
  2022-11-29 09:16 · 56 replies this month · David Hildenbrand <hidden>
• DORMANTno replies [syzbot] BUG: unable to handle kernel paging request in tomoyo_encode
  2022-11-28 22:39 · 0 replies this month · syzbot <hidden>
• STALE1383d SUPERSEDED [PATCH v8 00/12] Network support for Landlock
  2022-11-28 21:01 · 36 replies this month · Konstantin Meskhidze <hidden>
• STALE1426d SUPERSEDED [PATCH v3 0/9] LSM: Three basic syscalls
  2022-11-28 19:07 · 19 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  2022-11-28 18:31 · 0 replies this month · Eric W. Biederman <hidden>
• STALE1426d SUPERSEDED [RFC 0/1] RFC on how to include LSM hooks for io_uring commands
  2022-11-28 11:00 · 13 replies this month · Joel Granados <hidden>
• STALE1426d SUPERSEDED [RESEND PATCH v2 0/2] watch_queue: Clean up some code
  2022-11-28 10:38 · 3 replies this month · Siddh Raman Pant <hidden>
• STALE1412d SUPERSEDED [PATCH v3 0/3] certs: Prevent spurious errors on repeated blacklisting
  2022-11-28 01:59 · 6 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE1431d [PATCH v1 0/8] LSM: Two basic syscalls
  2022-11-23 20:11 · 9 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1412d [PATCH 0/4] powerpc/pseries: expose firmware security variables via filesystem
  2022-11-23 18:58 · 24 replies this month · Nayna Jain <nayna@linux.ibm.com>
• STALE1432d SUPERSEDED [PATCH v4 0/5] evm: Prepare for moving to the LSM infrastructure
  2022-11-22 22:47 · 33 replies this month · Roberto Sassu <hidden>
• STALE1432d sgid clearing rules?
  2022-11-22 14:20 · 3 replies this month · Miklos Szeredi <miklos@szeredi.hu>
• DORMANTno replies Silikonmischungen
  2022-11-22 09:41 · 0 replies this month · Zbynek Spacek <hidden>
• STALE1269d [PATCH -next v2 0/6] landlock: add chmod and chown support
  2022-11-21 13:49 · 4 replies this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1433d [PATCH v4] evm: Correct inode_init_security hooks behaviors
  2022-11-21 08:21 · 7 replies this month · Nicolas Bouchinet <hidden>
• STALE1435d REVIEWED: 4 (4M) [PATCH v5] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing
  2022-11-19 08:49 · 3 replies this month · David Howells <dhowells@redhat.com>
• STALE1436d [RFC PATCH] lsm,fs: fix vfs_getxattr_alloc() return type and caller error paths
  2022-11-18 22:21 · 7 replies this month · Paul Moore <paul@paul-moore.com>
• STALE1436d [PATCH v5 00/30] acl: add vfs posix acl api
  2022-11-18 12:33 · 3 replies this month · Christian Brauner <brauner@kernel.org>
• STALE1437d LANDED [PATCH bpf v2] selftests/bpf: fix memory leak of lsm_cgroup
  2022-11-17 07:30 · 2 replies this month · Wang Yufen <hidden>
• STALE1437d [PATCH] device_cgroup: Roll back to original exceptions after copy failure
  2022-11-17 07:28 · 5 replies this month · Wang Weiyang <hidden>
• STALE1438d [PATCH v2] LSM: Better reporting of actual LSMs at boot
  2022-11-16 23:04 · 4 replies this month · Kees Cook <hidden>
• STALE1438d [PATCH] ima: Fix misuse of dereference of pointer in template_desc_init_fields()
  2022-11-16 16:55 · 2 replies this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1438d [PATCH v2] integrity: Fix memory leakage in keyring allocation error path
  2022-11-16 16:55 · 1 reply this month · GUO Zihua <hidden>
• STALE1439d REVIEWED: 1 (0M) [PATCH] KEYS: trusted: tee: Make registered shm dependency explicit
  2022-11-16 00:39 · 3 replies this month · Sumit Garg <hidden>
• STALE1439d SUPERSEDED [PATCH v2 0/3] certs: Prevent spurious errors on repeated blacklisting
  2022-11-16 00:21 · 6 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE1439d Re: [PATCH] certs: Prevent spurious errors on repeated blacklisting
  2022-11-15 23:57 · 6 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1171d [PATCH v1 0/2] Add LSM access controls for io_uring_setup
  2022-11-15 05:39 · 6 replies this month · Gil Cukierman <hidden>
• STALE1440d [RFC PATCH] getting misc stats/attributes via xattr API
  2022-11-15 03:40 · 3 replies this month · Miklos Szeredi <miklos@szeredi.hu>
• STALE1440d [PATCH bpf] selftests/bpf: fix memory leak of lsm_cgroup
  2022-11-15 03:07 · 2 replies this month · Wang Yufen <hidden>
• STALE1440d [syzbot] BUG: unable to handle kernel NULL pointer dereference in smack_inode_permission
  2022-11-14 20:16 · 2 replies this month · syzbot <hidden>
• STALE1440d [PATCH] [RFC] SELINUX: Remove obsolete deferred inode security init list.
  2022-11-14 18:10 · 2 replies this month · Konstantin Meskhidze <hidden>
• STALE1417d [PATCH v5 00/11] Encrypted Hibernation
  2022-11-14 18:02 · 11 replies this month · Evan Green <hidden>
• STALE1441d [PATCH v5 0/2] ima: Handle -ESTALE returned by ima_filter_rule_match()
  2022-11-14 03:31 · 4 replies this month · GUO Zihua <hidden>
• STALE1443d [PATCH] net: fix memory leak in security_sk_alloc()
  2022-11-11 18:53 · 4 replies this month · Wang Yufen <hidden>
• STALE1444d [PATCH v1 0/8] LSM: Two basic syscalls
  2022-11-11 03:16 · 18 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE1444d SUPERSEDED [PATCH v8 00/17] Enroll kernel keys thru MOK
  2022-11-10 15:32 · 8 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• DORMANTno replies Słowa kluczowe do wypozycjonowania
  2022-11-10 09:02 · 0 replies this month · Adam Charachuta <hidden>
• STALE1444d [PATCH 01/10] security: Export security_hook_heads
  2022-11-10 04:45 · 25 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE1445d SUPERSEDED [PATCH v4 00/11] Encrypted Hibernation
  2022-11-10 00:30 · 8 replies this month · Evan Green <hidden>
• STALE1445d [GIT PULL] LSM fixes for v6.1 (#1)
  2022-11-09 20:23 · 4 replies this month · Paul Moore <paul@paul-moore.com>
• STALE1445d SUPERSEDED [PATCH 0/7] Add CA enforcement keyring restrictions
  2022-11-09 14:59 · 5 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• DORMANTno replies [PATCH] integrity: Free key restriction when keyring allocation fails
  2022-11-09 09:51 · 0 replies this month · GUO Zihua <hidden>
• STALE1446d [GIT PULL] LSM fixes for v6.1 (#2)
  2022-11-08 20:49 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE1447d LANDED [PATCH v3] samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER
  2022-11-07 20:52 · 1 reply this month · Günther Noack <hidden>
• STALE1447d [PATCH v3 0/1] Automatic LSM stack ordering
  2022-11-07 19:37 · 5 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1447d [RESEND][RFC][PATCH 1/3] lsm: Clarify documentation of vm_enough_memory hook
  2022-11-07 16:21 · 7 replies this month · Roberto Sassu <hidden>
• STALE1380d Re: Closing the BPF map permission loophole
  2022-11-07 12:12 · 2 replies this month · Roberto Sassu <hidden>
• DORMANTno replies [PATCH] integrity: iint: Remove unnecessary (void*) conversions
  2022-11-07 01:44 · 0 replies this month · Li zeming <hidden>
• STALE1448d [PATCH v2] fs: don't audit the capability check in simple_xattr_list()
  2022-11-06 22:50 · 4 replies this month · Ondrej Mosnacek <hidden>
• STALE1449d [PATCH] capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
  2022-11-05 05:33 · 5 replies this month · Gaosheng Cui <hidden>
• STALE1450d [PATCH] lsm: make security_socket_getpeersec_stream() sockptr_t safe
  2022-11-05 03:32 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE1450d [GIT PULL] SELinux fixes for v6.1 (#1)
  2022-11-05 03:04 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE1450d [GIT PULL] Landlock fix for v6.1 #2
  2022-11-04 22:52 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE1327d Re: [BUG] blacklist: Problem blacklisting hash (-13) during boot
  2022-11-04 20:13 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE1450d [PATCH] samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER
  2022-11-04 17:01 · 2 replies this month · Günther Noack <hidden>
• DORMANTno replies [PATCH v2] samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER
  2022-11-04 17:00 · 0 replies this month · Günther Noack <hidden>
• STALE1451d [PATCH 0/2] fs: fix capable() call in simple_xattr_list()
  2022-11-03 10:53 · 5 replies this month · Ondrej Mosnacek <hidden>
• STALE1451d [PATCH] ima: Fix memory leak in __ima_inode_hash()
  2022-11-03 07:50 · 2 replies this month · Roberto Sassu <hidden>
• DORMANTno replies [PATCH 6b/10] CaitSith: Add policy management functions.
  2022-11-02 17:30 · 0 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• DORMANTno replies [PATCH 6a/10] CaitSith: Add policy management functions.
  2022-11-02 17:29 · 0 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE1453d [PATCH] LSM: Better reporting of actual LSMs at boot
  2022-11-01 23:38 · 1 reply this month · Kees Cook <hidden>
• STALE1453d [PATCH 1/1] smack_lsm: remove unnecessary type casting
  2022-11-01 21:13 · 1 reply this month · XU pengfei <hidden>
• STALE1453d [PATCH] efi: Add iMac Pro 2017 to uefi skip cert quirk
  2022-11-01 21:07 · 3 replies this month · Aditya Garg <hidden>
• STALE1453d [PATCH] apparmor: Add __init annotation to aa_{setup/teardown}_dfa_engine()
  2022-11-01 12:36 · 1 reply this month · Xiu Jianfeng <xiujianfeng@huawei.com>
• STALE1453d [PATCH] apparmor: Fix memleak in alloc_ns()
  2022-11-01 12:35 · 1 reply this month · Xiu Jianfeng <xiujianfeng@huawei.com>