linux-security-module archive · March 2025
691 messages · showing the 100 most-recently-active threads .
-
SUPERSEDED [RFC PATCH security-next 0/4] Introducing Hornet LSM
2025-03-31 20:57 · 19 replies this month · Blaise Boscaccy <hidden> - [RFC PATCH v2] KEYS: Add a list for unreferenced keys
2025-03-31 17:48 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org> - [syzbot] [lsm?] WARNING in free_ruleset
2025-03-31 10:47 · 1 reply this month · syzbot <hidden> -
PENDING · 7 of 8 landed [PATCH v2 0/8] Landlock signal scope fix and errata interface
2025-03-31 10:38 · 13 replies this month · Mickaël Salaün <mic@digikod.net> - [PATCH v2] netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
2025-03-30 10:34 · 0 replies this month · Debin Zhu <hidden> - [PATCH] [v2] crypto: lib/Kconfig: hide library options
2025-03-30 09:07 · 9 replies this month · Arnd Bergmann <arnd@kernel.org> - [RFC PATCH] keys: Add a list for unreferenced keys
2025-03-29 18:32 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org> - [GIT PULL] Landlock update for v6.15-rc1
2025-03-28 20:40 · 1 reply this month · Mickaël Salaün <mic@digikod.net> - [GIT PULL] capabilities update for 6.15
2025-03-28 20:40 · 1 reply this month · Serge E. Hallyn <serge@hallyn.com> - [GIT PULL] IPE update for 6.15
2025-03-28 20:40 · 1 reply this month · Fan Wu <wufan@kernel.org> - [GIT PULL] selinux/selinux-pr-20250323
2025-03-28 17:34 · 24 replies this month · Paul Moore <paul@paul-moore.com> - Re: [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage
2025-03-28 14:20 · 0 replies this month · Mickaël Salaün <mic@digikod.net> -
PENDING · 1 of 3 reviewed [PATCH v4 0/3] fs: introduce getfsxattrat and setfsxattrat syscalls
2025-03-28 14:09 · 19 replies this month · Andrey Albershteyn <hidden> -
LANDED [PATCH v7 00/28] Landlock audit support
2025-03-28 10:40 · 32 replies this month · Mickaël Salaün <mic@digikod.net> - [PATCH v3] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
2025-03-27 16:29 · 1 reply this month · Frederick Lawler <hidden> - Re: [LTP] [PATCH 0/4] Landlock tests for ABI v6
2025-03-27 13:19 · 0 replies this month · Petr Vorel <pvorel@suse.cz> -
SUPERSEDED [PATCH v10 0/8] ima: kexec: measure events between kexec load and execute
2025-03-26 23:44 · 33 replies this month · steven chen <hidden> -
SUPERSEDED [PATCH v3 0/5] Audit: Records for multiple security contexts
2025-03-26 14:57 · 7 replies this month · Casey Schaufler <casey@schaufler-ca.com> - Re: [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash
2025-03-26 14:48 · 1 reply this month · Nicolai Stange <hidden> - [linux-next:master] [landlock] 9d65581539: WARNING:suspicious_RCU_usage
2025-03-26 14:39 · 1 reply this month · kernel test robot <hidden> - Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
2025-03-26 14:31 · 0 replies this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
2025-03-26 14:19 · 1 reply this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 01/13] ima: don't expose runtime_measurements for unsupported hashes
2025-03-26 13:29 · 1 reply this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 02/13] ima: always create runtime_measurements sysfs file for ima_hash
2025-03-26 13:17 · 1 reply this month · Nicolai Stange <hidden> - [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
2025-03-26 10:14 · 2 replies this month · Frederick Lawler <hidden> - Re: [RFC PATCH v2 08/13] ima: track the set of PCRs ever extended
2025-03-26 09:56 · 0 replies this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend
2025-03-26 09:46 · 0 replies this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 07/13] tpm: enable bank selection for PCR extend
2025-03-26 09:41 · 0 replies this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 03/13] ima: invalidate unsupported PCR banks
2025-03-26 08:45 · 0 replies this month · Nicolai Stange <hidden> - Re: [RFC PATCH v2 10/13] tpm: authenticate tpm2_pcr_read()
2025-03-26 06:34 · 0 replies this month · Nicolai Stange <hidden> - [RFC PATCH v2 00/13] ima: get rid of hard dependency on SHA-1
2025-03-26 02:04 · 26 replies this month · Nicolai Stange <hidden> - [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests
2025-03-26 00:06 · 48 replies this month · Tingmao Wang <hidden> - [GIT PULL] Smack patches for 6.15
2025-03-25 23:16 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com> - [GIT PULL] lsm/lsm-pr-20250323
2025-03-25 23:16 · 1 reply this month · Paul Moore <paul@paul-moore.com> - [PATCH] ima: process_measurement() needlessly takes inode_lock() on MAY_READ
2025-03-25 17:21 · 4 replies this month · Frederick Lawler <hidden> - [RFC PATCH v3 00/13] Clavis LSM
2025-03-24 17:45 · 36 replies this month · Eric Snowberg <eric.snowberg@oracle.com> - Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
2025-03-23 14:21 · 0 replies this month · Nicolai Stange <hidden> - [syzbot] [apparmor?] [ext4?] INFO: rcu detected stall in sys_getdents64
2025-03-23 06:53 · 1 reply this month · syzbot <hidden> - [PATCH] Revert "integrity: Do not load MOK and MOKx when secure boot be disabled"
2025-03-22 21:25 · 5 replies this month · Lennart Poettering <hidden> -
SUPERSEDED [PATCH 0/2] Allow individual features to be locked down
2025-03-21 21:13 · 4 replies this month · Nikolay Borisov <hidden> -
REVIEWED: 1 (0M) [PATCH v2] keys: Fix UAF in key_put()
2025-03-20 18:48 · 8 replies this month · David Howells <dhowells@redhat.com> - Re: CVE-2025-21830: landlock: Handle weird files
2025-03-20 16:00 · 24 replies this month · Mickaël Salaün <mic@digikod.net> - [PATCH] KEYS: trusted: dcp: Use kfree_sensitive() to fix Coccinelle warnings
2025-03-20 15:16 · 1 reply this month · Bo Liu <hidden> - [syzbot] [keyrings?] [lsm?] KASAN: slab-use-after-free Read in key_put
2025-03-19 15:49 · 2 replies this month · syzbot <hidden> - [PATCH] RDMA/uverbs: Consider capability of the process that opens the file
2025-03-18 22:57 · 7 replies this month · Parav Pandit <hidden> - [PATCH v5 0/1] ipe: add errno field to IPE policy load auditing
2025-03-18 22:51 · 4 replies this month · Jasjiv Singh <hidden> - [PATCH] apparmor: make __begin_current_label_crit_section() indicate whether put is needed
2025-03-18 22:06 · 0 replies this month · Mateusz Guzik <hidden> - Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
2025-03-18 20:50 · 1 reply this month · Nicolai Stange <hidden> - Re: [RFC PATCH v1 6/7] ima: invalidate unsupported PCR banks once at first use
2025-03-18 14:32 · 1 reply this month · Nicolai Stange <hidden> -
REVIEWED: 1 (0M) [PATCH] keys: Fix UAF in key_put()
2025-03-18 13:28 · 3 replies this month · David Howells <dhowells@redhat.com> - Re: [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1
2025-03-18 11:54 · 0 replies this month · Nicolai Stange <hidden> -
SUPERSEDED [RFC PATCH v1 0/7] ima: get rid of hard dependency on SHA-1
2025-03-18 11:19 · 10 replies this month · Nicolai Stange <hidden> -
REVIEWED: 1 (1M) [PATCH v2 02/11] quota: reorder capability check last
2025-03-18 03:42 · 18 replies this month · Christian Göttsche <hidden> -
SUPERSEDED [PATCH v9 0/7] ima: kexec: measure events between kexec load and execute
2025-03-17 18:26 · 24 replies this month · steven chen <hidden> -
LANDED apparmor NULL pointer dereference on resume
2025-03-17 08:57 · 19 replies this month · Malte Schröder <hidden> - [PATCH v2 0/2] smack: fix two bugs in setting task label
2025-03-15 01:57 · 2 replies this month · Konstantin Andreev <hidden> - [PATCH v5] hwmon: (pmbus/tps53679) Add support for TPS53685
2025-03-14 17:45 · 1 reply this month · Chiang Brian <hidden> - [RFC PATCH v1] landlock: Allow signals between threads of the same process
2025-03-14 15:42 · 1 reply this month · Mickaël Salaün <mic@digikod.net> - [RFC PATCH 0/6] fs, lsm: mediate O_PATH fd creation in file_open hook
2025-03-14 01:29 · 10 replies this month · Ryan Lee <hidden> -
SUPERSEDED [PATCH v2 0/6] Audit: Records for multiple security contexts
2025-03-13 12:29 · 17 replies this month · Casey Schaufler <casey@schaufler-ca.com> -
SUPERSEDED [PATCH 0/2] smack: fix two bugs in setting task label
2025-03-12 16:35 · 9 replies this month · Konstantin Andreev <hidden> - [bug report] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
2025-03-12 11:32 · 2 replies this month · Dan Carpenter <hidden> -
SUPERSEDED [PATCH v4 0/1] ipe: add errno field to IPE policy load auditing
2025-03-11 22:10 · 3 replies this month · Jasjiv Singh <hidden> - [PATCH] init/main.c: Initialize early LSMs after arch code
2025-03-11 15:14 · 2 replies this month · KP Singh <kpsingh@kernel.org> - [RFC 0/2] landlock: Multithreaded policy enforcement
2025-03-11 14:33 · 3 replies this month · Günther Noack <hidden> -
LANDED [PATCH v7 bpf-next 0/2] security: Propagate caller information in bpf hooks
2025-03-11 11:39 · 5 replies this month · Blaise Boscaccy <hidden> - [PATCH] RDMA/uverbs: Fix CAP_NET_RAW check for flow create in user namespace
2025-03-11 11:32 · 7 replies this month · Parav Pandit <hidden> - [PATCH] MAINTAINERS: add Serge Hallyn as maintainer for creds
2025-03-10 21:52 · 4 replies this month · sergeh@kernel.org -
LANDED [RFC PATCH] MAINTAINERS: add an explicit credentials entry
2025-03-10 20:29 · 5 replies this month · Paul Moore <paul@paul-moore.com> - [PATCH] lsm_audit: remove old email address
2025-03-10 20:05 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com> -
SUPERSEDED [PATCH v6 bpf-next 0/2] security: Propagate caller information in bpf hooks
2025-03-10 18:20 · 8 replies this month · Blaise Boscaccy <hidden> - [PATCH] security/commoncap: don't assume "setid" if all ids are identical
2025-03-09 15:28 · 2 replies this month · Max Kellermann <hidden> -
SUPERSEDED [PATCH v6 00/26] Landlock audit support
2025-03-09 09:41 · 27 replies this month · Mickaël Salaün <mic@digikod.net> -
SUPERSEDED [PATCH v5 00/24] Landlock audit support
2025-03-08 18:40 · 2 replies this month · Mickaël Salaün <mic@digikod.net> -
LANDED [PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+
2025-03-08 17:23 · 6 replies this month · Kees Cook <kees@kernel.org> - [PATCH v2] capability: Remove unused has_capability
2025-03-08 12:29 · 2 replies this month · <hidden> - [PATCH] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+
2025-03-07 23:10 · 5 replies this month · Kees Cook <kees@kernel.org> -
SUPERSEDED [PATCH v5 bpf-next 0/2] security: Propagate caller information in bpf hooks
2025-03-07 22:45 · 3 replies this month · Blaise Boscaccy <hidden> -
LANDED [PATCH v1] samples/check-exec: Fix script name
2025-03-07 03:46 · 1 reply this month · Mickaël Salaün <mic@digikod.net> - Re: The Business Loan/financing.1
2025-03-06 23:05 · 0 replies this month · Barry <hidden> - [RFC] Type-Partitioned vmalloc (with sample *.ko code)
2025-03-06 15:51 · 2 replies this month · Maxwell Bland <hidden> -
SUPERSEDED [PATCH v2 0/6] module: Introduce hash-based integrity checking
2025-03-06 08:10 · 1 reply this month · Thomas Weißschuh <linux@weissschuh.net> - [RFC PATCH] ipe: add errno field to IPE policy load auditing
2025-03-06 00:08 · 6 replies this month · Jasjiv Singh <hidden> -
SUPERSEDED [PATCH v4 bpf-next 0/2] security: Propagate caller information in bpf hooks
2025-03-05 20:12 · 14 replies this month · Blaise Boscaccy <hidden> - [PATCH v3 0/1] landlock: Clarify IPC scoping documentation
2025-03-05 18:36 · 6 replies this month · Günther Noack <gnoack@google.com> -
LANDED [PATCH] yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()
2025-03-04 23:53 · 1 reply this month · Oleg Nesterov <oleg@redhat.com> - [PATCH] lsm: rust: mark SecurityCtx methods inline
2025-03-04 23:16 · 9 replies this month · Alice Ryhl <aliceryhl@google.com> -
REVIEWED: 3 (2M) [PATCH v2] cred: rust: mark Credential methods inline
2025-03-04 22:07 · 1 reply this month · Alice Ryhl <aliceryhl@google.com> - [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx
2025-03-04 20:44 · 2 replies this month · Alice Ryhl <aliceryhl@google.com> -
REVIEWED: 1 (1M) [PATCH v2] lsm: rust: mark SecurityCtx methods inline
2025-03-04 20:42 · 1 reply this month · Alice Ryhl <aliceryhl@google.com> -
SUPERSEDED [PATCH v8 0/7] ima: kexec: measure events between kexec load and execute
2025-03-04 16:15 · 1 reply this month · steven chen <hidden> -
REVIEWED: 1 (0M) Re: [PATCH v2] lsm: rust: mark SecurityCtx methods inline
2025-03-04 12:49 · 0 replies this month · Fiona Behrens <hidden> -
REVIEWED: 1 (0M) Re: [PATCH] lsm: rust: reword "destroy" -> "release" in SecurityCtx
2025-03-04 12:48 · 0 replies this month · Fiona Behrens <hidden> - [PATCH] cred: rust: mark Credential methods inline
2025-03-04 09:31 · 2 replies this month · Alice Ryhl <aliceryhl@google.com> -
SUPERSEDED [PATCH 0/1 v3] security: Propagate caller information in bpf hooks
2025-03-03 23:50 · 2 replies this month · Blaise Boscaccy <hidden> -
REVIEWED: 1 (1M) Re: [PATCH] cred: rust: mark Credential methods inline
2025-03-03 18:37 · 0 replies this month · Andreas Hindborg <a.hindborg@kernel.org> -
REVIEWED: 1 (1M) Re: [PATCH] lsm: rust: mark SecurityCtx methods inline
2025-03-03 18:34 · 0 replies this month · Andreas Hindborg <a.hindborg@kernel.org> -
SUPERSEDED [PATCH v2 0/1] landlock: Clarify IPC scoping documentation
2025-03-03 18:30 · 4 replies this month · Günther Noack <gnoack@google.com> - [PATCH] loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported
2025-03-03 17:33 · 2 replies this month · Arulpandiyan Vadivel <hidden> - [PATCH v4 00/14] Implement Trusted Security Event Modeling.
2025-03-03 16:24 · 2 replies this month · Greg Wettstein <hidden>