linux-security-module archive · May 2025

665 messages across 98 threads, ordered by last activity .

• STALE495d [PATCH 1/3] security: add Lilium - Linux Integrity Lock-In User Module
  2025-05-31 22:42 · 1 reply this month · ℰ𝓃𝓏ℴ ℱ𝓊𝓀ℯ <hidden>
• DORMANTno replies [PATCH 0/3] security: add Lilium - Linux Integrity Lock-In User Module
  2025-05-31 17:56 · 0 replies this month · ℰ𝓃𝓏ℴ ℱ𝓊𝓀ℯ <hidden>
• STALE495d listxattr() should return ENOTSUP for sysfs / tmpfs entries, not 0
  2025-05-31 15:25 · 2 replies this month · Pádraig Brady <hidden>
• STALE315d [PATCH 0/2] apparmor unaligned memory fixes
  2025-05-31 15:08 · 2 replies this month · deller@kernel.org
• STALE492d [PATCH bpf-next 0/4] bpf path iterator
  2025-05-31 14:05 · 27 replies this month · Song Liu <song@kernel.org>
• STALE491d [PATCH 0/3] BPF signature verification
  2025-05-30 23:32 · 21 replies this month · Blaise Boscaccy <hidden>
• STALE496d [PATCH 0/3] randstruct: gcc-plugin: Remove bogus void member
  2025-05-30 22:31 · 7 replies this month · Kees Cook <kees@kernel.org>
• STALE444d [RFC PATCH 0/29] Rework the LSM initialization
  2025-05-30 22:04 · 25 replies this month · Paul Moore <paul@paul-moore.com>
• STALE484d [RFC 0/2] landlock: Multithreaded policy enforcement
  2025-05-30 17:02 · 7 replies this month · Günther Noack <hidden>
• STALE496d [RFC PATCH 0/9] Introducing the Loadpol LSM
  2025-05-30 14:59 · 21 replies this month · Simon THOBY <hidden>
• STALE494d [PATCH] fs/ceph: set superblock s_magic for IMA fsmagic matching: up to 60x speedup
  2025-05-29 18:02 · 1 reply this month · Dennis Marttinen <hidden>
• STALE497d [GIT PULL] IPE update for 6.16
  2025-05-29 16:40 · 1 reply this month · Fan Wu <wufan@kernel.org>
• STALE498d [GIT PULL] selinux/selinux-pr-20250527
  2025-05-28 15:40 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE498d [GIT PULL] lsm/lsm-pr-20250527
  2025-05-28 15:40 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE498d [GIT PULL] Smack patches for 6.16
  2025-05-28 15:40 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE498d LANDED [PATCH v1] selftests/landlock: Fix readlink check
  2025-05-28 14:48 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE484d REVIEWED: 5 (5M) [PATCH] KEYS: Invert FINAL_PUT bit
  2025-05-28 12:18 · 0 replies this month · David Howells <dhowells@redhat.com>
• STALE493d [PATCH v1 net] calipso: Don't call calipso functions for AF_INET sk.
  2025-05-28 07:10 · 2 replies this month · Kuniyuki Iwashima <hidden>
• STALE69d [PATCH v2] security,fs,nfs,net: update security_inode_listsecurity() interface
  2025-05-27 21:03 · 4 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE443d LANDED [PATCH] landlock/ruleset: Minor comments improvements
  2025-05-27 20:55 · 0 replies this month · Tingmao Wang <hidden>
• STALE499d [PATCH] ima: prevent concurrent list operations in ima_lsm_update_rules
  2025-05-27 19:03 · 1 reply this month · Zhao Yipeng <hidden>
• STALE499d [RFC PATCH v1 0/5] Landlock tracepoints
  2025-05-27 15:02 · 15 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE493d landlock: Use hashtable for merged domains
  2025-05-27 11:00 · 13 replies this month · Tingmao Wang <hidden>
• STALE456d [PATCH v2 00/14] stackleak: Support Clang stack depth tracking
  2025-05-27 03:30 · 23 replies this month · Kees Cook <kees@kernel.org>
• STALE501d [PATCH 0/3] selftests/landlock: UX improvements
  2025-05-25 14:23 · 5 replies this month · Tingmao Wang <hidden>
• STALE502d [PATCH 1/2] apparmor: shift ouid when mediating hard links in userns
  2025-05-24 23:25 · 3 replies this month · Gabriel Totev <hidden>
• STALE503d [RFC] LSM deprecation / removal policies
  2025-05-23 20:43 · 14 replies this month · Paul Moore <paul@paul-moore.com>
• STALE504d LANDED [PATCH v8 0/9] coredump: add coredump socket
  2025-05-23 01:00 · 18 replies this month · Christian Brauner <brauner@kernel.org>
• STALE504d [PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
  2025-05-22 22:26 · 22 replies this month · Andrey Albershteyn <hidden>
• STALE505d [PATCH v3 0/4] Introducing Hornet LSM
  2025-05-21 22:26 · 40 replies this month · Blaise Boscaccy <hidden>
• STALE285d [syzbot] [integrity?] [lsm?] INFO: task hung in process_measurement (3)
  2025-05-21 17:47 · 0 replies this month · syzbot <hidden>
• STALE479d Re: [PATCH v2] exec: Correct the permission check for unsafe exec
  2025-05-21 15:36 · 1 reply this month · Eric W. Biederman <hidden>
• STALE506d [PATCH RESEND v17 0/3] binder: report txn errors via generic netlink
  2025-05-21 04:13 · 2 replies this month · Li Li <hidden>
• STALE506d REVIEWED: 2 (2M) [PATCH v2] exec: Correct the permission check for unsafe exec
  2025-05-20 23:54 · 2 replies this month · Eric W. Biederman <hidden>
• STALE506d Re: [PATCH] exec: Correct the permission check for unsafe exec
  2025-05-20 22:43 · 5 replies this month · Eric W. Biederman <hidden>
• STALE506d Re: [PATCH] exec: Correct the permission check for unsafe exec
  2025-05-20 20:20 · 1 reply this month · Eric W. Biederman <hidden>
• STALE506d Re: linux-next: Tree for May 16 (security/landlock/ruleset.c)
  2025-05-20 16:47 · 11 replies this month · Randy Dunlap <rdunlap@infradead.org>
• STALE507d Landlock news #5
  2025-05-19 19:47 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [linux-next:master] [super] 1af3331764: stress-ng.unlink.unlink_calls_per_sec 23.3% regression
  2025-05-19 04:50 · 0 replies this month · kernel test robot <hidden>
• STALE509d [PATCH] apparmor: make __begin_current_label_crit_section() indicate whether put is needed
  2025-05-18 01:35 · 1 reply this month · Mateusz Guzik <hidden>
• STALE510d REVIEWED: 1 (0M) [PATCH v2] apparmor: fix some kernel-doc issues in header files
  2025-05-17 08:51 · 1 reply this month · Randy Dunlap <rdunlap@infradead.org>
• STALE510d [PATCH][next] apparmor: Fix incorrect profile->signal range check
  2025-05-17 08:44 · 2 replies this month · Colin Ian King <hidden>
• STALE510d [PATCH 0/3] lsm: introduce lsm_manage_policy() syscall
  2025-05-17 07:59 · 35 replies this month · Maxime Bélair <hidden>
• STALE465d [PATCH] apparmor: use SHA-256 library API instead of crypto_shash API
  2025-05-17 07:46 · 5 replies this month · Eric Biggers <ebiggers@kernel.org>
• STALE510d [PATCH] exec: Correct the permission check for unsafe exec
  2025-05-16 21:49 · 3 replies this month · Eric W. Biederman <hidden>
• STALE319d [PATCH v3 0/9] module: Introduce hash-based integrity checking
  2025-05-16 18:11 · 15 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE510d [PATCH v7 0/9] coredump: add coredump socket
  2025-05-16 14:26 · 42 replies this month · Christian Brauner <brauner@kernel.org>
• STALE511d REVIEWED: 2 (0M) [PATCH V2] ima: do not copy measurement list to kdump kernel
  2025-05-16 03:28 · 2 replies this month · steven chen <hidden>
• STALE485d [PATCH] Trivial fix comment
  2025-05-15 20:24 · 0 replies this month · Kalevi Kolttonen <hidden>
• DORMANTno replies [PATCH] Fix variable type to be 'bool' instead of incorrect 'int'
  2025-05-15 20:20 · 0 replies this month · Kalevi Kolttonen <hidden>
• STALE511d [GIT PULL] Landlock fix for v6.15-rc7
  2025-05-15 18:14 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE511d [syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry (3)
  2025-05-15 16:58 · 7 replies this month · syzbot <hidden>
• DORMANTno replies Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  2025-05-15 16:48 · 0 replies this month · Eric W. Biederman <hidden>
• STALE485d Re: [PATCH] Fix variable type to be 'bool' instead of incorrect 'int'.
  2025-05-15 14:22 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• DORMANTno replies [syzbot] [lsm?] [integrity?] possible deadlock in process_measurement (5)
  2025-05-15 13:17 · 0 replies this month · syzbot <hidden>
• STALE512d [PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
  2025-05-15 07:50 · 7 replies this month · Andrey Albershteyn <hidden>
• STALE483d [PATCH] ipe: use SHA-256 library API instead of crypto_shash API
  2025-05-14 19:40 · 1 reply this month · Eric Biggers <ebiggers@kernel.org>
• STALE512d Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  2025-05-14 15:42 · 2 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  2025-05-14 15:35 · 0 replies this month · Eric W. Biederman <hidden>
• DORMANTno replies [PATCH] apparmor: Remove obsolete config SECURITY_APPARMOR_DEBUG_MESSAGES
  2025-05-14 07:14 · 0 replies this month · Lukas Bulwahn <hidden>
• STALE513d [PATCH 0/2] fs/exec: Explicitly unshare fs_struct on exec
  2025-05-13 23:15 · 4 replies this month · Kees Cook <hidden>
• STALE513d [PATCH v3] securityfs: fix missing of d_delete() in securityfs_remove()
  2025-05-13 23:13 · 17 replies this month · <hidden>
• STALE513d [PATCH 0/2] Allow individual features to be locked down
  2025-05-13 23:07 · 4 replies this month · Nikolay Borisov <hidden>
• DORMANTno replies Re: [PATCH 1/2] fs/exec: Explicitly unshare fs_struct on exec
  2025-05-13 16:16 · 0 replies this month · Eric W. Biederman <hidden>
• STALE513d [PATCH] ima: Kdump kernel doesn't need IMA to do integrity measurement
  2025-05-13 15:31 · 5 replies this month · steven chen <hidden>
• STALE514d [PATCH v6 0/9] coredump: add coredump socket
  2025-05-13 12:08 · 16 replies this month · Christian Brauner <brauner@kernel.org>
• STALE514d [PATCH v5 0/7] fs: introduce file_getattr and file_setattr syscalls
  2025-05-13 08:24 · 6 replies this month · Andrey Albershteyn <hidden>
• STALE514d [PATCH v5 5/7] fs: make vfs_fileattr_[get|set] return -EOPNOSUPP
  2025-05-12 13:28 · 1 reply this month · Andrey Albershteyn <hidden>
• STALE515d [PATCH] KEYS: Reduce smp_mb() calls in key_put()
  2025-05-12 12:07 · 15 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE515d LANDED [PATCH v2] landlock: Improve bit operations in audit code
  2025-05-12 11:00 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE515d [PATCH v1] landlock: Use bitops macros in audit code
  2025-05-12 09:31 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [syzbot] [lsm?] [keyrings?] KCSAN: data-race in key_garbage_collector / key_set_expiry
  2025-05-12 06:34 · 0 replies this month · syzbot <hidden>
• STALE517d Re: [PATCH] security/commoncap: don't assume "setid" if all ids are identical
  2025-05-09 20:17 · 3 replies this month · Eric W. Biederman <hidden>
• STALE517d [PATCH] security/commoncap: don't assume "setid" if all ids are identical
  2025-05-09 17:50 · 10 replies this month · Max Kellermann <hidden>
• STALE513d [PATCH v5 0/9] coredump: add coredump socket
  2025-05-09 17:32 · 15 replies this month · Christian Brauner <brauner@kernel.org>
• STALE517d [PATCH v1 bpf-next 0/5] af_unix: Allow BPF LSM to scrub SCM_RIGHTS at sendmsg().
  2025-05-09 15:06 · 21 replies this month · Kuniyuki Iwashima <hidden>
• STALE518d [PATCH v2] securityfs: fix missing of d_delete() in securityfs_remove()
  2025-05-09 02:41 · 5 replies this month · <hidden>
• STALE513d [PATCH 0/8] stackleak: Support Clang stack depth tracking
  2025-05-08 12:25 · 14 replies this month · Kees Cook <kees@kernel.org>
• STALE519d [PATCH RFC v7 0/8] Add NUMA mempolicy support for KVM guest-memfd
  2025-05-08 06:37 · 1 reply this month · Shivank Garg <hidden>
• STALE519d Re: [PATCH RFC v3 08/10] net, pidfs, coredump: only allow coredumping tasks to connect to coredump socket
  2025-05-07 22:10 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE518d Re: [PATCH v4 09/11] pidfs, coredump: allow to verify coredump connection
  2025-05-07 18:34 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE521d Re: [PATCH v1 bpf-next 4/5] bpf: Add kfunc to scrub SCM_RIGHTS at security_unix_may_send().
  2025-05-06 08:56 · 2 replies this month · Kuniyuki Iwashima <hidden>
• STALE521d [PATCH v13 0/9] ima: kexec: measure events between kexec load and execute
  2025-05-06 05:49 · 2 replies this month · steven chen <hidden>
• STALE506d [PATCH AUTOSEL 5.4 59/79] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 23:23 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE521d [PATCH AUTOSEL 5.10 088/114] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 23:21 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE506d [PATCH AUTOSEL 5.15 116/153] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 23:17 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE521d [PATCH AUTOSEL 6.1 161/212] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 23:11 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE506d [PATCH AUTOSEL 6.6 206/294] smack: Revert "smackfs: Added check catlen"
  2025-05-05 23:03 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE506d [PATCH AUTOSEL 6.6 205/294] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 23:03 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE520d [PATCH AUTOSEL 6.12 333/486] smack: Revert "smackfs: Added check catlen"
  2025-05-05 22:51 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE520d [PATCH AUTOSEL 6.12 332/486] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 22:51 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE413d [PATCH AUTOSEL 6.14 422/642] smack: Revert "smackfs: Added check catlen"
  2025-05-05 22:31 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE413d [PATCH AUTOSEL 6.14 420/642] smack: recognize ipv4 CIPSO w/o categories
  2025-05-05 22:31 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• STALE519d Re: [PATCH RFC v3 00/10] coredump: add coredump socket
  2025-05-05 15:49 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies LANDED [PATCH v1] landlock: Remove KUnit test that triggers a warning
  2025-05-03 07:29 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE520d [PATCH RFC 0/4] stackleak: Support Clang stack depth tracking
  2025-05-02 19:01 · 4 replies this month · Kees Cook <kees@kernel.org>
• STALE524d [PATCH] apparmor: fix some kernel-doc issues in header files
  2025-05-02 16:08 · 1 reply this month · Randy Dunlap <rdunlap@infradead.org>
• STALE524d [PATCH] security/smack/smackfs: small kernel-doc fixes
  2025-05-02 16:00 · 1 reply this month · Randy Dunlap <rdunlap@infradead.org>