linux-security-module archive · September 2024

543 messages across 82 threads, ordered by last activity .

• STALE738d [RFC PATCH] capabilities: remove cap_mmap_file()
  2024-09-30 21:08 · 6 replies this month · Paul Moore <paul@paul-moore.com>
• STALE740d [GIT PULL] lsm/lsm-pr-20240911
  2024-09-30 17:31 · 9 replies this month · Paul Moore <paul@paul-moore.com>
• STALE529d [RFC PATCH v3 00/19] Support socket access-control
  2024-09-29 19:18 · 48 replies this month · Mikhail Ivanov <hidden>
• STALE741d [PATCH v7 0/8] Improve the copy of task comm
  2024-09-29 09:48 · 6 replies this month · Yafang Shao <hidden>
• STALE722d [syzbot] [integrity?] [lsm?] possible deadlock in process_measurement (4)
  2024-09-28 18:08 · 2 replies this month · syzbot <hidden>
• DORMANTno replies [RFC PATCH v4] mm: move the check of READ_IMPLIES_EXEC out of do_mmap()
  2024-09-28 18:00 · 0 replies this month · Shu Han <hidden>
• STALE742d [syzbot] Monthly lsm report (Sep 2024)
  2024-09-28 17:40 · 11 replies this month · syzbot <hidden>
• DORMANTno replies REVIEWED: 8 (7M) [PATCH v5.15-v6.1] selinux,smack: don't bypass permissions check in inode_setsecctx hook
  2024-09-28 02:35 · 0 replies this month · Shivani Agarwal <hidden>
• DORMANTno replies REVIEWED: 8 (7M) [PATCH v5.10] selinux,smack: don't bypass permissions check in inode_setsecctx hook
  2024-09-28 02:34 · 0 replies this month · Shivani Agarwal <hidden>
• STALE742d [PATCH 0/7] keys: Add tracepoints
  2024-09-28 02:03 · 1 reply this month · David Howells <dhowells@redhat.com>
• STALE742d [PATCH] ipe: fallback to platform keyring also if key in trusted keyring is rejected
  2024-09-27 17:50 · 1 reply this month · <hidden>
• STALE738d LANDED [PATCH v10 0/8] File abstractions needed by Rust Binder
  2024-09-27 14:58 · 43 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE729d [PATCH] security/keys: fix slab-out-of-bounds in key_task_permission
  2024-09-27 08:20 · 13 replies this month · Chen Ridong <hidden>
• STALE736d Re: [PATCH v3 00/14] KEYS: Add support for PGP keys and signatures
  2024-09-27 01:36 · 11 replies this month · Roberto Sassu <hidden>
• STALE744d [PATCH 0/2 v3] remove PF_MEMALLOC_NORECLAIM
  2024-09-26 17:29 · 2 replies this month · Michal Hocko <mhocko@kernel.org>
• STALE734d [RFC PATCH v2 0/9] Support TCP listen access-control
  2024-09-26 13:52 · 4 replies this month · Mikhail Ivanov <hidden>
• STALE729d [PATCH AUTOSEL 6.6 048/139] proc: add config & param to block forcing mem writes
  2024-09-26 11:09 · 2 replies this month · Sasha Levin <sashal@kernel.org>
• STALE744d REVIEWED: 3 (2M) [PATCH v3 1/2] ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower version
  2024-09-25 21:22 · 2 replies this month · <hidden>
• STALE744d REVIEWED: 2 (2M) [PATCH v2 1/2] ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower version
  2024-09-25 20:56 · 3 replies this month · <hidden>
• STALE744d [PATCH 1/2] ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower version
  2024-09-25 20:43 · 6 replies this month · <hidden>
• STALE744d [RFC PATCH v2 00/12] Socket type control for Landlock
  2024-09-25 18:31 · 1 reply this month · Mikhail Ivanov <hidden>
• DORMANTno replies [PATCH RFC v3] mm: move the check of READ_IMPLIES_EXEC out of do_mmap()
  2024-09-25 14:53 · 0 replies this month · Shu Han <hidden>
• STALE745d [PATCH] tomoyo: fallback to realpath if symlink's pathname does not exist
  2024-09-25 13:57 · 2 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• DORMANTno replies [PATCH RFC v2] mm: move the check of READ_IMPLIES_EXEC out of do_mmap()
  2024-09-25 12:09 · 0 replies this month · Shu Han <hidden>
• STALE734d [PATCH AUTOSEL 6.10 054/197] proc: add config & param to block forcing mem writes
  2024-09-25 12:00 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• DORMANTno replies [PATCH RFC v2] mm: move security_mmap_file() back into do_mmap()
  2024-09-25 11:57 · 0 replies this month · Shu Han <hidden>
• STALE734d [PATCH AUTOSEL 6.11 064/244] proc: add config & param to block forcing mem writes
  2024-09-25 11:39 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE745d [PATCH] mm: move the check of READ_IMPLIES_EXEC out of do_mmap()
  2024-09-25 11:37 · 4 replies this month · Shu Han <hidden>
• STALE745d [PATCH] mm: move security_file_mmap() back into do_mmap()
  2024-09-25 09:49 · 3 replies this month · Shu Han <hidden>
• STALE724d [PATCH v5 0/5] Lazy flush for the auth session
  2024-09-25 07:53 · 28 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE745d [GIT PULL] lsm/lsm-pr-20240923
  2024-09-24 18:04 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE745d [GIT PULL] Landlock updates for v6.12
  2024-09-24 18:04 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE745d [GIT PULL] lsm/lsm-pr-20240920
  2024-09-24 18:04 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE730d [PATCH] evm: stop avoidably reading i_writecount in evm_file_release
  2024-09-24 11:56 · 2 replies this month · Mateusz Guzik <hidden>
• STALE715d [PATCH 1/1] netlabel: Add missing comment to struct field
  2024-09-24 10:43 · 2 replies this month · George Guo <hidden>
• STALE746d [PATCH] ipe: Add missing terminator to list of unit tests
  2024-09-23 19:53 · 3 replies this month · Guenter Roeck <linux@roeck-us.net>
• STALE719d [RFC PATCH v1 0/7] landlock: Add UDP access control support
  2024-09-23 15:24 · 12 replies this month · Matthieu Buffet <hidden>
• STALE747d [RFC PATCH v1 0/4] Implement performance impact measurement tool
  2024-09-23 15:05 · 2 replies this month · Mikhail Ivanov <hidden>
• STALE747d [syzbot] [lsm?] WARNING in current_check_refer_path
  2024-09-23 12:06 · 1 reply this month · syzbot <hidden>
• STALE747d [PATCH] ipe: Fix out-of-bound access of kunit_suite_num_test_cases()
  2024-09-23 11:49 · 1 reply this month · Jinjie Ruan <hidden>
• DORMANTno replies [linus:master] [lsm] 417c5643cd: stress-ng.full.ops_per_sec 2.1% improvement
  2024-09-23 05:06 · 0 replies this month · kernel test robot <hidden>
• STALE743d [syzbot] [keyrings?] [lsm?] [ext4?] possible deadlock in keyring_clear (2)
  2024-09-22 11:43 · 2 replies this month · syzbot <hidden>
• STALE699d [PATCH] apparmor: Remove deadcode
  2024-09-20 23:55 · 0 replies this month · <hidden>
• STALE750d [syzbot] [lsm?] KASAN: slab-use-after-free Read in smk_access
  2024-09-20 16:58 · 1 reply this month · syzbot <hidden>
• STALE750d [PATCH] ipe: allow secondary and platform keyrings to install/update policies
  2024-09-20 13:02 · 6 replies this month · <hidden>
• STALE750d [PATCH] selinux,smack: properly reference the LSM blob in security_watch_key()
  2024-09-19 20:40 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE750d [syzbot] [audit?] general protection fault in smack_log_callback
  2024-09-19 19:37 · 3 replies this month · syzbot <hidden>
• STALE751d [GIT PULL] Smack patches for 6.12
  2024-09-19 15:10 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE751d [PATCH v4 0/5] Lazy flush for the auth session
  2024-09-19 13:45 · 7 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE751d REVIEWED: 1 (1M) [PATCH] mm: call the security_mmap_file() LSM hook in remap_file_pages()
  2024-09-19 08:14 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE751d [PATCH 0/5] LSM: Replace secctx/len pairs with lsm_context
  2024-09-19 04:12 · 6 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE751d [PATCH v3 0/7] Lazy flush for the auth session
  2024-09-18 20:38 · 9 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE751d [RFC 0/6] Managed Percpu Refcount
  2024-09-18 05:44 · 7 replies this month · Neeraj Upadhyay <hidden>
• STALE753d [PATCH v2 0/2] get rid of cred_transfer
  2024-09-16 21:15 · 5 replies this month · Jann Horn <jannh@google.com>
• STALE754d [GIT PULL] selinux/selinux-pr-20240911
  2024-09-16 15:00 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE754d [PATCH v11 0/8] Landlock: Add abstract UNIX socket restriction
  2024-09-16 12:32 · 13 replies this month · Tahera Fahimi <hidden>
• STALE754d [PATCH v2 0/6] lazy flush for the auth session
  2024-09-16 11:07 · 6 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE754d [PATCH v5 00/14] integrity: Introduce the Integrity Digest Cache
  2024-09-16 10:36 · 22 replies this month · Roberto Sassu <hidden>
• STALE756d [PATCH v3 00/13] LSM: Move away from secids
  2024-09-14 15:05 · 20 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE757d [PATCH v4 0/6] landlock: Signal scoping support
  2024-09-13 15:07 · 12 replies this month · Tahera Fahimi <hidden>
• STALE671d [PATCH] smack: deduplicate access to string conversion
  2024-09-13 14:47 · 0 replies this month · Konstantin Andreev <hidden>
• STALE757d [PATCH v8 0/8] Improve the copy of task comm
  2024-09-13 02:23 · 6 replies this month · Yafang Shao <hidden>
• STALE759d WARNING in process_measurement
  2024-09-11 14:05 · 3 replies this month · Xingyu Li <hidden>
• STALE709d [PATCH v6] tpm: Add new device/vendor ID 0x50666666
  2024-09-11 13:21 · 1 reply this month · Jett Rink <hidden>
• STALE691d [PATCH v2 00/19] Migrate to sig_alg and templatize ecdsa
  2024-09-11 12:56 · 2 replies this month · Lukas Wunner <lukas@wunner.de>
• STALE710d Trusted keys: DCP: Unable to handle paging request
  2024-09-11 11:46 · 1 reply this month · Parthiban <hidden>
• STALE759d [PATCH v1] security/apparmor: remove duplicate unpacking in unpack_perm function
  2024-09-10 23:22 · 3 replies this month · Shen Lichuan <hidden>
• STALE759d [PATCH 0/2 v2] remove PF_MEMALLOC_NORECLAIM
  2024-09-10 19:38 · 26 replies this month · Michal Hocko <mhocko@kernel.org>
• DORMANTno replies [PATCH] apparmor: Remove unnecessary NULL check before kvfree()
  2024-09-10 17:49 · 0 replies this month · Thorsten Blum <hidden>
• STALE760d [PATCH] apparmor: domain: clean up duplicated parts of handle_onexec()
  2024-09-10 06:37 · 1 reply this month · Leesoo Ahn <hidden>
• STALE760d [PATCH -next] apparmor: Use IS_ERR_OR_NULL() helper function
  2024-09-10 06:22 · 1 reply this month · Hongbo Li <hidden>
• STALE760d [PATCH] LSM: allow loadable kernel module based LSM modules
  2024-09-09 20:18 · 7 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE760d [PATCH v3 1/2] fs: Fix file_set_fowner LSM hook inconsistencies
  2024-09-09 19:00 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE760d linux-next commit 0855feef5235 ("fsnotify: introduce pre-content permission event")
  2024-09-09 18:23 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE764d [PATCH 0/2] selinux: Do not include <linux/*.h> from host programs (+ extra clean-up)
  2024-09-06 17:34 · 6 replies this month · Masahiro Yamada <masahiroy@kernel.org>
• STALE764d [RFC][PATCH v3 00/10] ima: Integrate with Integrity Digest Cache
  2024-09-06 13:40 · 15 replies this month · Roberto Sassu <hidden>
• STALE764d [PATCH v2 -next 00/15] sysctl: move sysctls from vm_table into its own files
  2024-09-06 02:35 · 19 replies this month · Kaixiong Yu <hidden>
• STALE765d [PATCH v2 00/13] LSM: Move away from secids
  2024-09-04 20:48 · 11 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE686d [PATCH 0/2] get rid of PF_MEMALLOC_NORECLAIM
  2024-09-04 18:01 · 8 replies this month · Michal Hocko <mhocko@kernel.org>
• STALE767d [PATCH] smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
  2024-09-03 15:38 · 1 reply this month · Jiawei Ye <hidden>
• STALE768d [PATCH -next 00/15] sysctl: move sysctls from vm_table into its own files
  2024-09-02 11:17 · 4 replies this month · Kaixiong Yu <hidden>
• STALE699d [PATCH -next] apparmor: Remove unused parameter L1 in macro next_comb
  2024-09-02 07:30 · 0 replies this month · Jinjie Ruan <hidden>