linux-security-module archive · July 2024

575 messages · showing the 100 most-recently-active threads .

• STALE729d [PATCH AUTOSEL 4.19 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 5.4 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 5.10 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 5.15 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 6.1 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 6.6 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d [PATCH AUTOSEL 6.10 1/2] apparmor: fix possible NULL pointer dereference
  2024-07-31 23:56 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE729d static_key_enable_cpuslocked(): static key 'security_hook_active_locked_down_0+0x0/0x10' used before call to jump_label_init()
  2024-07-31 22:33 · 6 replies this month · Borislav Petkov <bp@alien8.de>
• STALE729d [PATCH] init/main.c: Do jump_label_init before early_security_init
  2024-07-31 21:34 · 0 replies this month · KP Singh <kpsingh@kernel.org>
• STALE728d [PATCH v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access()
  2024-07-31 21:33 · 11 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE729d [RFC PATCH v1 0/9] Support TCP listen access-control
  2024-07-31 18:30 · 12 replies this month · Mikhail Ivanov <hidden>
• STALE730d [PATCH v4] proc: add config & param to block forcing mem writes
  2024-07-31 14:39 · 5 replies this month · Adrian Ratiu <hidden>
• STALE730d [PATCH resend v4 00/11] Improve the copy of task comm
  2024-07-31 02:15 · 15 replies this month · Yafang Shao <hidden>
• STALE730d [PATCH v7 0/4] Landlock: Abstract Unix Socket Scoping Support
  2024-07-30 21:41 · 15 replies this month · Tahera Fahimi <hidden>
• STALE717d [PATCH] lsm: cleanup lsm_hooks.h
  2024-07-29 22:19 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE717d [PATCH] lsm: add the inode_free_security_rcu() LSM implementation hook
  2024-07-29 21:58 · 0 replies this month · Paul Moore <paul@paul-moore.com>
• STALE731d [PATCH v2 0/6] LSM: Infrastructure blob allocation
  2024-07-29 21:20 · 12 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE731d [PATCH v1 0/2] Refactor return value of two lsm hooks
  2024-07-29 21:19 · 5 replies this month · Xu Kuohai <xukuohai@huaweicloud.com>
• STALE731d [PATCH v14 0/3] Reduce overhead of LSMs with static calls
  2024-07-29 21:16 · 9 replies this month · KP Singh <kpsingh@kernel.org>
• STALE732d [GIT PULL] sysctl constification changes for v6.11-rc1
  2024-07-29 16:42 · 4 replies this month · Joel Granados <hidden>
• STALE732d [PATCH] keys: Add tracepoints for the keyrings facility
  2024-07-29 13:40 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE733d [PATCH RFC] security: tomoyo: Add default builtin-policy.h for default policy
  2024-07-28 13:18 · 1 reply this month · Marcos Paulo de Souza <hidden>
• STALE733d [GIT PULL] AppArmor updates for 6.11-rc1
  2024-07-27 20:33 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• STALE734d [PATCH v2 0/2] cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options
  2024-07-26 19:41 · 2 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE735d [PATCH v3] proc: add config & param to block forcing mem writes
  2024-07-26 16:15 · 2 replies this month · Adrian Ratiu <hidden>
• STALE736d [PATCH] security/tomoyo: Prevent message flooding if no Tomoyo loader is present
  2024-07-25 12:08 · 2 replies this month · Yafang Shao <hidden>
• STALE736d [RFC PATCH] lsm: add the inode_free_security_rcu() LSM implementation hook
  2024-07-25 10:52 · 24 replies this month · Paul Moore <paul@paul-moore.com>
• STALE736d REVIEWED: 22 (21M) [PATCH v5 16/21] mm/mmap: Use vms accounted pages in mmap_region()
  2024-07-24 20:23 · 1 reply this month · Liam R. Howlett <hidden>
• STALE737d [PATCH] proc: add config & param to block forcing mem writes
  2024-07-24 09:16 · 3 replies this month · Adrian Ratiu <hidden>
• STALE737d LANDED [PATCH bpf-next v2 0/9] Add BPF LSM return value range check, BPF part
  2024-07-24 01:17 · 17 replies this month · Xu Kuohai <xukuohai@huaweicloud.com>
• STALE738d [PATCH bpf-next v4 00/20] Add return value range check for BPF LSM
  2024-07-23 18:34 · 46 replies this month · Xu Kuohai <xukuohai@huaweicloud.com>
• STALE738d [RFC PATCH v1 0/3] Use socket's Landlock domain
  2024-07-23 16:50 · 5 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE721d [RFC PATCH v19 0/5] Script execution control (was O_MAYEXEC)
  2024-07-23 13:16 · 76 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE739d [PATCH v12 00/10] Add support for x509 certs with NIST P384/256/192 keys
  2024-07-22 13:24 · 3 replies this month · Stefan Berger <stefanb@linux.ibm.com>
• STALE739d [PATCH v1 1/2] Landlock: Add signal control
  2024-07-22 12:46 · 3 replies this month · Tahera Fahimi <hidden>
• STALE739d Re: [PATCH v2 1/4] net: Split a __sys_bind helper for io_uring
  2024-07-22 12:38 · 2 replies this month · Matus Jokay <hidden>
• DORMANTno replies 街の財産になる喫茶店事業 FCパートナー募集
  2024-07-22 07:42 · 0 replies this month · info@c-united-coffee.jp<info@c-united-coffee.jp>
• STALE740d [GIT PULL] Landlock fix for v6.11
  2024-07-20 19:35 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE742d [PATCH -next v1 0/9] Add BPF LSM return value range check, BPF part
  2024-07-19 08:41 · 11 replies this month · Xu Kuohai <xukuohai@huaweicloud.com>
• STALE727d [PATCH v2] tpm: Add new device/vendor ID 0x50666666
  2024-07-18 20:24 · 0 replies this month · Jett Rink <hidden>
• STALE743d [PATCH] proc: add config to block FOLL_FORCE in mem writes
  2024-07-18 15:58 · 7 replies this month · Adrian Ratiu <hidden>
• STALE743d Re: [RFC PATCH v19 0/5] Script execution control (was O_MAYEXEC)
  2024-07-18 13:17 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH] cred: separate the refcount from frequently read fields
  2024-07-17 19:30 · 0 replies this month · Mateusz Guzik <hidden>
• STALE744d [PATCH v2 1/2] KEYS: trusted: fix DCP blob payload length assignment
  2024-07-17 13:33 · 2 replies this month · David Gstir <david@sigma-star.at>
• STALE744d [PATCH 1/2] KEYS: trusted: fix DCP blob payload length assignment
  2024-07-17 11:27 · 7 replies this month · David Gstir <david@sigma-star.at>
• STALE744d [PATCH v3] tpm: Relocate buf->handles to appropriate place
  2024-07-17 11:23 · 7 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE676d [syzbot] [lsm?] WARNING in current_check_refer_path
  2024-07-17 03:22 · 4 replies this month · syzbot <hidden>
• STALE731d Re: [PATCH testsuite] tests/task_setscheduler: add cgroup v2 case for moving proc to root cgroup
  2024-07-17 02:19 · 0 replies this month · Gong Ruiqi <hidden>
• STALE744d [GIT PULL] lsm/lsm-pr-20240715
  2024-07-16 21:59 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE744d [GIT PULL] Smack patches for 6.11
  2024-07-16 21:59 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE744d [GIT PULL] selinux/selinux-pr-20240715
  2024-07-16 21:59 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH v2] tpm: Relocate buf->handles to appropriate place
  2024-07-16 17:28 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies [PATCH] tpm: Fix alignment of buf->handles
  2024-07-16 16:14 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies Landlock news #4
  2024-07-16 15:27 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE745d LANDED [PATCH] landlock: Various documentation improvements
  2024-07-16 14:37 · 1 reply this month · "Günther Noack" <gnoack@google.com>
• STALE745d LANDED [PATCH v2] landlock: Clarify documentation for struct landlock_ruleset_attr
  2024-07-16 14:37 · 1 reply this month · "Günther Noack" <gnoack@google.com>
• STALE745d Re: CVE-2024-40938: landlock: Fix d_parent walk
  2024-07-16 07:17 · 7 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE748d [syzbot] [io-uring] general protection fault in tomoyo_socket_bind_permission
  2024-07-13 08:21 · 0 replies this month · syzbot <hidden>
• STALE749d [PATCH v2 1/2] Unify error wording
  2024-07-12 17:53 · 3 replies this month · Petr Vorel <pvorel@suse.cz>
• STALE749d [PATCH 1/1] landlock: Mention -1 return code on failure
  2024-07-12 13:35 · 4 replies this month · Petr Vorel <pvorel@suse.cz>
• STALE750d [PATCH] apparmor: test: add MODULE_DESCRIPTION()
  2024-07-11 17:45 · 1 reply this month · Jeff Johnson <hidden>
• STALE750d [PATCH] landlock: Clarify documentation for struct landlock_ruleset_attr
  2024-07-11 16:50 · 3 replies this month · "Günther Noack" <gnoack@google.com>
• STALE714d [RFC] integrity: wait for completion of i2c initialization using late_initcall_sync()
  2024-07-11 14:07 · 4 replies this month · Romain Naour <hidden>
• STALE750d [syzbot] [lsm?] general protection fault in hook_inode_free_security
  2024-07-11 14:06 · 13 replies this month · syzbot <hidden>
• STALE727d REVIEWED: 3 (3M) [PATCH bpf-next v4 13/20] bpf, lsm: Add check for BPF LSM return value
  2024-07-11 11:33 · 7 replies this month · Xu Kuohai <xukuohai@huaweicloud.com>
• STALE744d REVIEWED: 22 (21M) [PATCH v4 16/21] mm/mmap: Use vms accounted pages in mmap_region()
  2024-07-10 19:23 · 0 replies this month · Liam R. Howlett <hidden>
• STALE751d [PATCH v6] landlock: Add abstract unix socket connect restriction
  2024-07-10 17:20 · 2 replies this month · Tahera Fahimi <hidden>
• STALE751d IMA Reports No TPM Device
  2024-07-10 11:12 · 1 reply this month · Thangavel, Karthik <hidden>
• STALE751d [PATCH] binfmt_elf: Fail execution of shared objects with ELIBEXEC (was: Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2))
  2024-07-10 10:05 · 1 reply this month · Florian Weimer <hidden>
• STALE751d [PATCH 0/6] LSM: Infrastructure blob allocation
  2024-07-10 00:01 · 27 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE751d Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
  2024-07-09 20:42 · 1 reply this month · Florian Weimer <hidden>
• STALE751d Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
  2024-07-09 20:42 · 4 replies this month · Florian Weimer <hidden>
• STALE751d [PATCH v13 0/5] Reduce overhead of LSMs with static calls
  2024-07-09 19:05 · 25 replies this month · KP Singh <kpsingh@kernel.org>
• STALE689d [PATCH] apparmor: domain: clean up duplicated parts of handle_onexec()
  2024-07-09 03:08 · 0 replies this month · Leesoo Ahn <hidden>
• STALE752d [PATCH v1] landlock: Abstract unix socket restriction tests
  2024-07-08 19:45 · 1 reply this month · Tahera Fahimi <hidden>
• DORMANTno replies Re: [PATCH] binfmt_elf: Fail execution of shared objects with ELIBEXEC
  2024-07-08 18:00 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH] binfmt_elf: Fail execution of shared objects with ELIBEXEC
  2024-07-08 18:00 · 0 replies this month · Florian Weimer <hidden>
• STALE753d [PATCH 0/2] Landlock: Add abstract unix socket connect reastriction
  2024-07-08 17:31 · 1 reply this month · Tahera Fahimi <hidden>
• STALE753d Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
  2024-07-08 17:05 · 2 replies this month · Florian Weimer <hidden>
• STALE753d Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
  2024-07-08 16:09 · 2 replies this month · Florian Weimer <hidden>
• STALE753d Re: [RFC PATCH v19 1/5] exec: Add a new AT_CHECK flag to execveat(2)
  2024-07-08 08:57 · 1 reply this month · Florian Weimer <hidden>
• STALE754d [PATCH] tpm: validate object type in tpm2_handle_mso()
  2024-07-07 10:14 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE755d [RFC PATCH] lsm: fixup the inode xattr capability handling
  2024-07-06 04:32 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE756d [PATCH] selinux,smack: remove the capability checks in the removexattr hooks
  2024-07-05 17:11 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• STALE756d [PATCH v2 0/3] Address !chip->auth
  2024-07-05 15:05 · 14 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE756d [PATCH v2] apparmor: try to avoid refing the label in apparmor_file_open
  2024-07-05 06:30 · 1 reply this month · Mateusz Guzik <hidden>
• STALE756d [PATCH v4 0/3] Address !chip->auth
  2024-07-04 18:53 · 3 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE757d [PATCH v2] dm verity: add support for signature verification with platform keyring
  2024-07-04 15:49 · 0 replies this month · <hidden>
• STALE757d [PATCH 0/3] Address !chip->auth
  2024-07-04 14:45 · 6 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE757d [syzbot] [lsm?] [keyrings?] KCSAN: data-race in __se_sys_keyctl / key_task_permission (3)
  2024-07-04 14:39 · 1 reply this month · syzbot <hidden>
• STALE757d Re: [PATCH] dm verity: add support for signature verification with platform keyring
  2024-07-04 09:12 · 0 replies this month · Luca Boccassi <hidden>
• STALE757d [PATCH v3 0/3] Address !chip->auth
  2024-07-04 08:57 · 3 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies [syzbot] [lsm?] KASAN: slab-use-after-free Read in smack_socket_sock_rcv_skb
  2024-07-04 07:49 · 0 replies this month · syzbot <hidden>
• STALE757d [PATCH] dm-verity: fix dm_is_verity_target() when dm-verity is builtin
  2024-07-03 20:26 · 1 reply this month · Eric Biggers <ebiggers@kernel.org>
• STALE758d [PATCH] tpm: Limit TCG_TPM2_HMAC to known good drivers
  2024-07-03 17:24 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE758d Re: [PATCH v13 2/5] security: Count the LSMs enabled at compile time
  2024-07-03 14:55 · 2 replies this month · Rasmus Villemoes <hidden>
• STALE759d [PATCH 0/2] Forbid illegitimate binding via listen(2)
  2024-07-02 12:43 · 4 replies this month · Ivanov Mikhail <hidden>
• STALE759d [PATCH v12 0/5] Reduce overhead of LSMs with static calls
  2024-07-01 23:41 · 1 reply this month · KP Singh <kpsingh@kernel.org>
• STALE759d [PATCH] tpm: Check non-nullity of chip->auth
  2024-07-01 19:21 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE760d [PATCH v3 0/2] KEYS: add missing MODULE_DESCRIPTION() macros
  2024-07-01 15:00 · 1 reply this month · Jeff Johnson <hidden>