linux-security-module archive · February 2024

511 messages across 58 threads, ordered by last activity .

• STALE887d [PATCH v4 00/12] selftests: kselftest_harness: support using xfail
  2024-02-29 23:25 · 14 replies this month · Jakub Kicinski <kuba@kernel.org>
• STALE950d [GIT PULL] Landlock fixes for v6.8-rc7
  2024-02-29 20:33 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE948d [RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE)
  2024-02-29 19:59 · 25 replies this month · Fan Wu <hidden>
• STALE949d [PATCH v1 0/8] Run KUnit tests late and handle faults
  2024-02-29 18:28 · 16 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE951d LANDED [PATCH net-next] netlabel: remove impossible return value in netlbl_bitmap_walk
  2024-02-29 03:50 · 3 replies this month · Zhengchao Shao <hidden>
• STALE951d [PATCH v3 00/13] security: digest_cache LSM
  2024-02-28 17:47 · 16 replies this month · Roberto Sassu <hidden>
• STALE939d [PATCH v9 0/8] Landlock: IOCTL support
  2024-02-28 12:57 · 21 replies this month · "Günther Noack" <gnoack@google.com>
• STALE876d [PATCH 1/2] SELinux: Fix lsm_get_self_attr()
  2024-02-28 12:54 · 14 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE952d [GIT PULL] lsm/lsm-pr-20240227
  2024-02-28 01:02 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE931d LANDED [PATCH v2 1/2] landlock: Extend documentation for kernel support
  2024-02-27 16:32 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE952d [syzbot] [lsm?] [reiserfs?] general protection fault in fsnotify_perm
  2024-02-27 16:05 · 1 reply this month · syzbot <hidden>
• STALE944d [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
  2024-02-27 14:57 · 57 replies this month · "Seth Forshee (DigitalOcean)" <sforshee@kernel.org>
• STALE953d [PATCH] proc: allow restricting /proc/pid/mem writes
  2024-02-27 00:53 · 7 replies this month · Adrian Ratiu <hidden>
• STALE953d [PATCH net-next v3 00/11] selftests: kselftest_harness: support using xfail
  2024-02-26 20:21 · 27 replies this month · Jakub Kicinski <kuba@kernel.org>
• STALE953d [PATCH] landlock: Warn once if a Landlock action is requested while disabled
  2024-02-26 17:16 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE943d [PATCH v5 0/6] DCP as trusted keys backend
  2024-02-26 09:17 · 4 replies this month · David Gstir <david@sigma-star.at>
• STALE910d [PATCH v3 00/10] evm: Support signatures on stacked filesystem
  2024-02-23 17:25 · 10 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE957d [PATCH] security: use default hook return value in call_int_hook()
  2024-02-22 21:52 · 4 replies this month · Ondrej Mosnacek <hidden>
• STALE951d [RFC 0/5] PoC: convert AppArmor parser to SandBox Mode
  2024-02-22 18:03 · 8 replies this month · Petr Tesarik <hidden>
• DORMANTno replies [syzbot] [keyrings?] [lsm?] KASAN: slab-out-of-bounds Read in key_task_permission (2)
  2024-02-22 10:40 · 0 replies this month · syzbot <hidden>
• STALE771d TOCTOU-free exec(), chdir(), open() with O_PATH sandbox emulation support?
  2024-02-22 06:42 · 0 replies this month · Bagas Sanjaya <hidden>
• STALE958d [PATCH] LSM: Fix typos in security/security.c comment headers
  2024-02-22 00:03 · 1 reply this month · Pairman Guo <hidden>
• STALE958d Re: smack: Possible NULL pointer deref in cred_free hook.
  2024-02-21 17:40 · 12 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE959d REVIEWED: 1 (1M) [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook
  2024-02-21 10:52 · 1 reply this month · Eric Biggers <ebiggers@kernel.org>
• STALE959d [PATCH v2 0/9] evm: Support signatures on stacked filesystem
  2024-02-20 22:57 · 21 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE944d [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry
  2024-02-20 10:41 · 1 reply this month · syzbot <hidden>
• STALE960d [syzbot] [apparmor?] [ext4?] general protection fault in common_perm_cond
  2024-02-20 10:00 · 2 replies this month · syzbot <hidden>
• DORMANTno replies memory leak in smack since de93 e515 db30 ("Smack: Improve mount process memory use")
  2024-02-20 07:40 · 0 replies this month · Lukas Bulwahn <lukas.bulwahn@gmail.com>
• DORMANTno replies LANDED [PATCH] landlock: Fix asymmetric private inodes referring
  2024-02-19 19:22 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE961d [PATCH 00/13] Implement Trusted Security Event Modeling.
  2024-02-19 11:17 · 2 replies this month · Dr. Greg <hidden>
• STALE963d [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure
  2024-02-16 22:35 · 30 replies this month · Roberto Sassu <hidden>
• STALE951d Re: [RFC 0/8] PGP key parser using SandBox Mode
  2024-02-16 18:25 · 0 replies this month · Roberto Sassu <hidden>
• STALE963d [GIT PULL] lsm/lsm-pr-20240215
  2024-02-16 17:11 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE938d [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring
  2024-02-16 13:10 · 2 replies this month · Coiby Xu <hidden>
• STALE847d [PATCH v3 0/3] fs/exec: remove current->in_execve flag
  2024-02-15 23:47 · 10 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE964d [PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure
  2024-02-15 15:03 · 65 replies this month · Roberto Sassu <hidden>
• STALE964d [PATCH] security: fix integer overflow in lsm_set_self_attr() syscall
  2024-02-15 13:02 · 5 replies this month · Jann Horn <jannh@google.com>
• STALE964d Re: [PATCH v1 5/5] sbm: SandBox Mode documentation
  2024-02-15 08:53 · 0 replies this month · Roberto Sassu <hidden>
• STALE965d [GIT PULL] Landlock fixes for v6.8-rc5
  2024-02-15 00:12 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE939d [RFC][PATCH 0/8] ima: Integrate with digest_cache LSM
  2024-02-14 14:37 · 8 replies this month · Roberto Sassu <hidden>
• STALE968d [PATCH] KEYS: encrypted: Add check for strsep
  2024-02-12 05:12 · 3 replies this month · Chen Ni <hidden>
• STALE859d [RFC 0/9] Nginx refcount scalability issue with Apparmor enabled and potential solutions
  2024-02-09 17:33 · 2 replies this month · Neeraj Upadhyay <hidden>
• STALE971d Calls to vfs_setlease() from NFSD code cause unnecessary CAP_LEASE security checks
  2024-02-08 14:28 · 3 replies this month · Ondrej Mosnacek <hidden>
• STALE972d [PATCH v2 0/3] fs/exec: remove current->in_execve flag
  2024-02-08 00:57 · 16 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE884d [PATCH v9 0/4] Reduce overhead of LSMs with static calls
  2024-02-07 12:49 · 4 replies this month · KP Singh <kpsingh@kernel.org>
• STALE972d [PATCH v2 1/1] netlabel: cleanup struct netlbl_lsm_catmap
  2024-02-07 12:40 · 2 replies this month · George Guo <hidden>
• DORMANTno replies ANN: moving lsm/dev to v6.8-rc3
  2024-02-07 00:13 · 0 replies this month · Paul Moore <paul@paul-moore.com>
• STALE973d [RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE)
  2024-02-06 21:53 · 16 replies this month · Fan Wu <hidden>
• DORMANTno replies [ANNOUNCE] CFP: Linux Security Summit Europe 2024
  2024-02-05 07:46 · 0 replies this month · "Reshetova, Elena" <elena.reshetova@intel.com>
• STALE977d [PATCH 1/1] Modify macro NETLBL_CATMAP_MAPTYPE to define a type using typedef
  2024-02-02 19:12 · 2 replies this month · George Guo <hidden>
• STALE977d [PATCH 0/5] evm: Support signatures on stacked filesystem
  2024-02-02 16:30 · 15 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE978d [PATCH] security: fix no-op hook logic in security_inode_{set,remove}xattr()
  2024-02-02 02:50 · 3 replies this month · Ondrej Mosnacek <hidden>
• STALE834d [PATCH v39 00/42] LSM: General module stacking
  2024-02-02 00:24 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE978d [GIT PULL] lsm/lsm-pr-20240131
  2024-02-01 18:23 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies Starting to work on liblsm
  2024-02-01 18:23 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE978d LANDED [PATCH bpf-next] bpf: minor clean-up to sleepable_lsm_hooks BTF set
  2024-02-01 17:50 · 1 reply this month · Matt Bobrowski <hidden>
• STALE879d [PATCH] apparmor: use kvfree_sensitive to free data->data
  2024-02-01 14:25 · 0 replies this month · Fedor Pchelkin <hidden>
• STALE978d [PATCH bpf-next] bpf: add security_file_mprotect() to sleepable_lsm_hooks BTF set
  2024-02-01 13:38 · 1 reply this month · Matt Bobrowski <hidden>