linux-security-module archive · March 2025

691 messages · showing the 100 most-recently-active threads .

• STALE479d [RFC PATCH security-next 0/4] Introducing Hornet LSM
  2025-03-31 20:57 · 19 replies this month · Blaise Boscaccy <hidden>
• STALE482d [RFC PATCH v2] KEYS: Add a list for unreferenced keys
  2025-03-31 17:48 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE481d [syzbot] [lsm?] WARNING in free_ruleset
  2025-03-31 10:47 · 1 reply this month · syzbot <hidden>
• STALE483d [PATCH v2 0/8] Landlock signal scope fix and errata interface
  2025-03-31 10:38 · 13 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH v2] netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
  2025-03-30 10:34 · 0 replies this month · Debin Zhu <hidden>
• STALE484d [PATCH] [v2] crypto: lib/Kconfig: hide library options
  2025-03-30 09:07 · 9 replies this month · Arnd Bergmann <arnd@kernel.org>
• DORMANTno replies [RFC PATCH] keys: Add a list for unreferenced keys
  2025-03-29 18:32 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE485d [GIT PULL] Landlock update for v6.15-rc1
  2025-03-28 20:40 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE485d [GIT PULL] capabilities update for 6.15
  2025-03-28 20:40 · 1 reply this month · "Serge E. Hallyn" <serge@hallyn.com>
• STALE485d [GIT PULL] IPE update for 6.15
  2025-03-28 20:40 · 1 reply this month · Fan Wu <wufan@kernel.org>
• STALE480d [GIT PULL] selinux/selinux-pr-20250323
  2025-03-28 17:34 · 24 replies this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies Re: [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage
  2025-03-28 14:20 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE455d [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls
  2025-03-28 14:09 · 19 replies this month · Andrey Albershteyn <hidden>
• STALE486d [PATCH v7 00/28] Landlock audit support
  2025-03-28 10:40 · 32 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE486d [PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
  2025-03-27 16:29 · 1 reply this month · Frederick Lawler <hidden>
• STALE486d Re: [LTP] [PATCH 0/4] Landlock tests for ABI v6
  2025-03-27 13:19 · 0 replies this month · Petr Vorel <pvorel@suse.cz>
• STALE487d [PATCH v10 0/8] ima: kexec: measure events between kexec load and execute
  2025-03-26 23:44 · 33 replies this month · steven chen <hidden>
• STALE452d [PATCH v3 0/5] Audit: Records for multiple security contexts
  2025-03-26 14:57 · 7 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE487d Re: [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash
  2025-03-26 14:48 · 1 reply this month · Nicolai Stange <hidden>
• STALE487d [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage
  2025-03-26 14:39 · 1 reply this month · kernel test robot <hidden>
• DORMANTno replies Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
  2025-03-26 14:31 · 0 replies this month · Nicolai Stange <hidden>
• STALE487d Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
  2025-03-26 14:19 · 1 reply this month · Nicolai Stange <hidden>
• STALE487d Re: [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes
  2025-03-26 13:29 · 1 reply this month · Nicolai Stange <hidden>
• STALE487d Re: [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash
  2025-03-26 13:17 · 1 reply this month · Nicolai Stange <hidden>
• STALE488d [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
  2025-03-26 10:14 · 2 replies this month · Frederick Lawler <hidden>
• DORMANTno replies Re: [RFC PATCH v2 08/13] ima: track the set of PCRs ever extended
  2025-03-26 09:56 · 0 replies this month · Nicolai Stange <hidden>
• DORMANTno replies Re: [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend
  2025-03-26 09:46 · 0 replies this month · Nicolai Stange <hidden>
• DORMANTno replies Re: [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend
  2025-03-26 09:41 · 0 replies this month · Nicolai Stange <hidden>
• DORMANTno replies Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
  2025-03-26 08:45 · 0 replies this month · Nicolai Stange <hidden>
• DORMANTno replies Re: [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()
  2025-03-26 06:34 · 0 replies this month · Nicolai Stange <hidden>
• STALE488d [RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1
  2025-03-26 02:04 · 26 replies this month · Nicolai Stange <hidden>
• STALE162d [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests
  2025-03-26 00:06 · 48 replies this month · Tingmao Wang <hidden>
• STALE488d [GIT PULL] Smack patches for 6.15
  2025-03-25 23:16 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE488d [GIT PULL] lsm/lsm-pr-20250323
  2025-03-25 23:16 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE488d [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
  2025-03-25 17:21 · 4 replies this month · Frederick Lawler <hidden>
• STALE489d [RFC PATCH v3 00/13] Clavis LSM
  2025-03-24 17:45 · 36 replies this month · Eric Snowberg <eric.snowberg@oracle.com>
• DORMANTno replies Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
  2025-03-23 14:21 · 0 replies this month · Nicolai Stange <hidden>
• STALE491d [syzbot] [apparmor?] [ext4?] INFO: rcu detected stall in sys_getdents64
  2025-03-23 06:53 · 1 reply this month · syzbot <hidden>
• STALE383d [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"
  2025-03-22 21:25 · 5 replies this month · Lennart Poettering <hidden>
• STALE439d [PATCH 0/2] Allow individual features to be locked down
  2025-03-21 21:13 · 4 replies this month · Nikolay Borisov <hidden>
• STALE493d REVIEWED: 1 (0M) [PATCH v2] keys: Fix UAF in key_put()
  2025-03-20 18:48 · 8 replies this month · David Howells <dhowells@redhat.com>
• STALE493d Re: CVE-2025-21830: landlock: Handle weird files
  2025-03-20 16:00 · 24 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE493d [PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings
  2025-03-20 15:16 · 1 reply this month · Bo Liu <hidden>
• STALE494d [syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put
  2025-03-19 15:49 · 2 replies this month · syzbot <hidden>
• STALE452d [PATCH] RDMA/uverbs: Consider capability of the process that opens the file
  2025-03-18 22:57 · 7 replies this month · Parav Pandit <hidden>
• STALE495d [PATCH v5 0/1] ipe: add errno field to IPE policy load auditing
  2025-03-18 22:51 · 4 replies this month · Jasjiv Singh <hidden>
• STALE435d [PATCH] apparmor: make __begin_current_label_crit_section() indicate whether put is needed
  2025-03-18 22:06 · 0 replies this month · Mateusz Guzik <hidden>
• STALE495d Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
  2025-03-18 20:50 · 1 reply this month · Nicolai Stange <hidden>
• STALE495d Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
  2025-03-18 14:32 · 1 reply this month · Nicolai Stange <hidden>
• STALE495d REVIEWED: 1 (0M) [PATCH] keys: Fix UAF in key_put()
  2025-03-18 13:28 · 3 replies this month · David Howells <dhowells@redhat.com>
• DORMANTno replies Re: [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1
  2025-03-18 11:54 · 0 replies this month · Nicolai Stange <hidden>
• STALE495d [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1
  2025-03-18 11:19 · 10 replies this month · Nicolai Stange <hidden>
• STALE496d REVIEWED: 2 (2M) [PATCH v2 02/11] quota: reorder capability check last
  2025-03-18 03:42 · 18 replies this month · Christian Göttsche <hidden>
• STALE496d [PATCH v9 0/7] ima: kexec: measure events between kexec load and execute
  2025-03-17 18:26 · 24 replies this month · steven chen <hidden>
• STALE497d LANDED apparmor NULL pointer dereference on resume
  2025-03-17 08:57 · 19 replies this month · Malte Schröder <hidden>
• STALE397d [PATCH v2 0/2] smack: fix two bugs in setting task label
  2025-03-15 01:57 · 2 replies this month · Konstantin Andreev <hidden>
• STALE460d [PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685
  2025-03-14 17:45 · 1 reply this month · Chiang Brian <hidden>
• STALE499d [RFC PATCH v1] landlock: Allow signals between threads of the same process
  2025-03-14 15:42 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE500d [RFC PATCH 0/6] fs, lsm: mediate O_PATH fd creation in file_open hook
  2025-03-14 01:29 · 10 replies this month · Ryan Lee <hidden>
• STALE500d [PATCH v2 0/6] Audit: Records for multiple security contexts
  2025-03-13 12:29 · 17 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE501d [PATCH 0/2] smack: fix two bugs in setting task label
  2025-03-12 16:35 · 9 replies this month · Konstantin Andreev <hidden>
• STALE501d [bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
  2025-03-12 11:32 · 2 replies this month · Dan Carpenter <hidden>
• STALE502d [PATCH v4 0/1] ipe: add errno field to IPE policy load auditing
  2025-03-11 22:10 · 3 replies this month · Jasjiv Singh <hidden>
• STALE502d [PATCH] init/main.c: Initialize early LSMs after arch code
  2025-03-11 15:14 · 2 replies this month · KP Singh <kpsingh@kernel.org>
• STALE409d [RFC 0/2] landlock: Multithreaded policy enforcement
  2025-03-11 14:33 · 3 replies this month · Günther Noack <hidden>
• STALE502d [PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks
  2025-03-11 11:39 · 5 replies this month · Blaise Boscaccy <hidden>
• STALE502d [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace
  2025-03-11 11:32 · 7 replies this month · Parav Pandit <hidden>
• STALE503d [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds
  2025-03-10 21:52 · 4 replies this month · sergeh@kernel.org
• STALE503d LANDED [RFC PATCH] MAINTAINERS: add an explicit credentials entry
  2025-03-10 20:29 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• STALE503d [PATCH] lsm_audit: remove old email address
  2025-03-10 20:05 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE503d [PATCH v6 bpf-next 0/2] security: Propagate caller information in bpf hooks
  2025-03-10 18:20 · 8 replies this month · Blaise Boscaccy <hidden>
• STALE443d [PATCH] security/commoncap: don't assume "setid" if all ids are identical
  2025-03-09 15:28 · 2 replies this month · Max Kellermann <hidden>
• STALE505d [PATCH v6 00/26] Landlock audit support
  2025-03-09 09:41 · 27 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE505d [PATCH v5 00/24] Landlock audit support
  2025-03-08 18:40 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE505d [PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+
  2025-03-08 17:23 · 6 replies this month · Kees Cook <kees@kernel.org>
• STALE505d [PATCH v2] capability: Remove unused has_capability
  2025-03-08 12:29 · 2 replies this month · <hidden>
• STALE506d [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+
  2025-03-07 23:10 · 5 replies this month · Kees Cook <kees@kernel.org>
• STALE506d [PATCH v5 bpf-next 0/2] security: Propagate caller information in bpf hooks
  2025-03-07 22:45 · 3 replies this month · Blaise Boscaccy <hidden>
• STALE507d LANDED [PATCH v1] samples/check-exec: Fix script name
  2025-03-07 03:46 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies Re: The Business Loan/financing.1
  2025-03-06 23:05 · 0 replies this month · Barry <hidden>
• STALE507d [RFC] Type-Partitioned vmalloc (with sample *.ko code)
  2025-03-06 15:51 · 2 replies this month · Maxwell Bland <hidden>
• STALE508d [PATCH v2 0/6] module: Introduce hash-based integrity checking
  2025-03-06 08:10 · 1 reply this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE508d [RFC PATCH] ipe: add errno field to IPE policy load auditing
  2025-03-06 00:08 · 6 replies this month · Jasjiv Singh <hidden>
• STALE508d [PATCH v4 bpf-next 0/2] security: Propagate caller information in bpf hooks
  2025-03-05 20:12 · 14 replies this month · Blaise Boscaccy <hidden>
• STALE508d [PATCH v3 0/1] landlock: Clarify IPC scoping documentation
  2025-03-05 18:36 · 6 replies this month · "Günther Noack" <gnoack@google.com>
• STALE509d LANDED [PATCH] yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()
  2025-03-04 23:53 · 1 reply this month · Oleg Nesterov <oleg@redhat.com>
• STALE509d [PATCH] lsm: rust: mark SecurityCtx methods inline
  2025-03-04 23:16 · 9 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE509d REVIEWED: 10 (9M) [PATCH v2] cred: rust: mark Credential methods inline
  2025-03-04 22:07 · 1 reply this month · Alice Ryhl <aliceryhl@google.com>
• STALE509d [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx
  2025-03-04 20:44 · 2 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE509d REVIEWED: 6 (6M) [PATCH v2] lsm: rust: mark SecurityCtx methods inline
  2025-03-04 20:42 · 1 reply this month · Alice Ryhl <aliceryhl@google.com>
• STALE509d [PATCH v8 0/7] ima: kexec: measure events between kexec load and execute
  2025-03-04 16:15 · 1 reply this month · steven chen <hidden>
• DORMANTno replies REVIEWED: 1 (0M) Re: [PATCH v2] lsm: rust: mark SecurityCtx methods inline
  2025-03-04 12:49 · 0 replies this month · Fiona Behrens <hidden>
• DORMANTno replies REVIEWED: 1 (0M) Re: [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx
  2025-03-04 12:48 · 0 replies this month · Fiona Behrens <hidden>
• STALE510d [PATCH] cred: rust: mark Credential methods inline
  2025-03-04 09:31 · 2 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE510d [PATCH 0/1 v3] security: Propagate caller information in bpf hooks
  2025-03-03 23:50 · 2 replies this month · Blaise Boscaccy <hidden>
• DORMANTno replies REVIEWED: 6 (6M) Re: [PATCH] cred: rust: mark Credential methods inline
  2025-03-03 18:37 · 0 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• DORMANTno replies REVIEWED: 6 (6M) Re: [PATCH] lsm: rust: mark SecurityCtx methods inline
  2025-03-03 18:34 · 0 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• STALE510d [PATCH v2 0/1] landlock: Clarify IPC scoping documentation
  2025-03-03 18:30 · 4 replies this month · "Günther Noack" <gnoack@google.com>
• STALE510d [PATCH] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported
  2025-03-03 17:33 · 2 replies this month · Arulpandiyan Vadivel <hidden>
• STALE510d [PATCH v4 00/14] Implement Trusted Security Event Modeling.
  2025-03-03 16:24 · 2 replies this month · Greg Wettstein <hidden>