linux-security-module archive · October 2025

320 messages across 64 threads, ordered by last activity .

• STALE270d [PATCH 0/2] ipe: add script enforcement mechanism with AT_EXECVE_CHECK
  2025-10-31 23:50 · 7 replies this month · Yanzhu Huang <hidden>
• STALE259d [PATCH v2] device_cgroup: Refactor devcgroup_seq_show to use seq_put* helpers
  2025-10-31 23:38 · 1 reply this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE252d [PATCH] KEYS: Remove the ad-hoc compilation flag CAAM_DEBUG
  2025-10-31 20:41 · 1 reply this month · Ye Bin <hidden>
• STALE262d [PATCH] KEYS: encrypted: Return early on allocation failure and drop goto
  2025-10-31 20:32 · 1 reply this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE270d [PATCH] device_cgroup: Replace strcpy/sprintf in set_majmin
  2025-10-31 16:54 · 4 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE270d Re: [GIT PULL] Block fixes for 6.18-rc3
  2025-10-31 16:30 · 6 replies this month · Linus Torvalds <torvalds@linux-foundation.org>
• STALE252d [PATCH] ima: Fall back to default kernel module signature verification
  2025-10-31 08:00 · 18 replies this month · Coiby Xu <hidden>
• STALE265d [PATCH v4 00/14] Create and use APIs to centralise locking for directory ops.
  2025-10-30 23:41 · 23 replies this month · NeilBrown <hidden>
• STALE274d [RFC bpf-next] lsm: bpf: Remove lsm_prop_bpf
  2025-10-28 19:08 · 7 replies this month · Song Liu <song@kernel.org>
• STALE274d [PATCH] KEYS: fix compilation warnings in the dump_options() function
  2025-10-28 07:04 · 6 replies this month · Ye Bin <hidden>
• DORMANTno replies 歌・ダンス等のスクール事業 FC説明会
  2025-10-28 05:36 · 0 replies this month · 株式会社 K Village <hidden>
• DORMANTno replies [syzbot] [lsm?] [input?] [usb?] INFO: rcu detected stall in sys_symlink (6)
  2025-10-27 21:18 · 0 replies this month · syzbot <hidden>
• STALE275d [PATCH 2/2] keys: Remove unnecessary local variable from proc_keys_show
  2025-10-27 19:55 · 1 reply this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE222d [RFC PATCH v1 0/3] Fix TCP short AF_UNSPEC handling
  2025-10-27 18:08 · 3 replies this month · Matthieu Buffet <hidden>
• STALE222d [PATCH v17] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-10-27 12:07 · 2 replies this month · Bernd Edlinger <hidden>
• STALE259d LANDED [PATCH] selftests/landlock: Fix makefile header list
  2025-10-27 01:19 · 0 replies this month · Matthieu Buffet <hidden>
• STALE276d [PATCH v3 0/8] Implement LANDLOCK_ADD_RULE_QUIET
  2025-10-26 21:01 · 9 replies this month · Tingmao Wang <hidden>
• STALE276d [PATCH v2 0/6] Implement LANDLOCK_ADD_RULE_QUIET
  2025-10-26 20:50 · 17 replies this month · Tingmao Wang <hidden>
• STALE244d [PATCH v2 0/2] Landlock multithreaded enforcement
  2025-10-24 21:30 · 8 replies this month · "Günther Noack" <gnoack@google.com>
• STALE278d REVIEWED: 1 (1M) [PATCH v6 10/10] tpm-buf: Enable managed and stack allocations.
  2025-10-24 18:49 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE279d [PATCH bpf-next v2 0/3] BPF signature hash chains
  2025-10-23 17:53 · 30 replies this month · Blaise Boscaccy <hidden>
• STALE279d [PATCH] KEYS: encrypted: Use designated initializers for match_table_t structs
  2025-10-23 13:35 · 6 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE181d [PATCH v5 0/34] Rework the LSM initialization
  2025-10-22 23:34 · 35 replies this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH] apparmor: replace sprintf with snprintf in aa_new_learning_profile
  2025-10-22 09:38 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• DORMANTno replies Zwrot
  2025-10-22 08:11 · 0 replies this month · Eryk Wawrzyn <hidden>
• STALE280d LANDED [PATCH v2] x86/bpf: do not audit capability check in do_jit()
  2025-10-22 01:30 · 2 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE281d [PATCH] x86/bpf: use bpf_capable() instead of capable(CAP_SYS_ADMIN)
  2025-10-21 12:32 · 1 reply this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE282d [PATCH v2] nbd: override creds to kernel when calling sock_{send,recv}msg()
  2025-10-20 16:38 · 5 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE232d [PATCH kvm-next V11 0/7] Add NUMA mempolicy support for KVM guest-memfd
  2025-10-20 15:52 · 6 replies this month · Shivank Garg <hidden>
• STALE278d REVIEWED: 1 (0M) [PATCH v6 08/10] tpm-buf: unify TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOW
  2025-10-18 11:18 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE278d REVIEWED: 1 (0M) [PATCH v6 07/10] KEYS: trusted: Open code tpm2_buf_append()
  2025-10-18 11:18 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE278d REVIEWED: 1 (0M) [PATCH v6 06/10] tpm2-sessions: Unmask tpm_buf_append_hmac_session()
  2025-10-18 11:18 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE278d REVIEWED: 2 (2M) [PATCH v6 04/10] KEYS: trusted: Use tpm_ret_to_err() in trusted_tpm2
  2025-10-18 11:17 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE278d [PATCH v6 03/10] KEYS: trusted: Fix memory leak in tpm2_load()
  2025-10-18 11:17 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies [PATCH] apparmor: Replace deprecated strcpy in d_namespace_path
  2025-10-16 17:50 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• DORMANTno replies [PATCH] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
  2025-10-16 15:43 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE200d [PATCH 0/2] selftests: Centralize kselftest headers to avoid relative includes
  2025-10-16 10:44 · 1 reply this month · Bala-Vignesh-Reddy <hidden>
• DORMANTno replies [PATCH] KEYS: encrypted: Simplify determining 'format_len'
  2025-10-15 23:21 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE267d [RFC PATCH 00/15] LSM: No exclusive LSMs
  2025-10-15 15:01 · 14 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE287d REVIEWED: 19 (19M) [PATCH v3] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-15 11:06 · 2 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE287d [PATCH] keys: Remove redundant less-than-zero checks
  2025-10-15 11:03 · 2 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE267d [PATCH 0/2] LSM: Identify module using network facilities
  2025-10-13 22:21 · 11 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE289d [PATCH v3] memfd,selinux: call security_inode_init_security_anon
  2025-10-13 22:19 · 2 replies this month · Thiébaud Weksteen <hidden>
• STALE267d [PATCH v2 0/2] LSM: Multiple LSM mount options
  2025-10-13 20:55 · 2 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE279d REVIEWED: 7 (7M) [PATCH 6.17 004/563] pid: use ns_capable_noaudit() when determining net sysctl permissions
  2025-10-13 15:19 · 0 replies this month · Greg Kroah-Hartman <gregkh@linuxfoundation.org>
• COLD15d [PATCH v2 0/7] fs/9p: Reuse inode based on path (in addition to qid)
  2025-10-13 09:24 · 1 reply this month · Tingmao Wang <hidden>
• STALE289d [PATCH v2] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-13 07:22 · 3 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE290d [PATCH] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
  2025-10-12 15:18 · 1 reply this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE267d [PATCH v6 0/5] lsm: introduce lsm_config_self_policy() and lsm_config_system_policy() syscalls
  2025-10-11 12:08 · 12 replies this month · Maxime Bélair <hidden>
• STALE292d [PATCH v4 0/34] Rework the LSM initialization
  2025-10-10 19:21 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• STALE292d [PATCH] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-10 15:12 · 2 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE292d [PATCH v5 0/3] lsm: introduce lsm_config_self_policy() and lsm_config_system_policy() syscalls
  2025-10-10 14:59 · 3 replies this month · Maxime Bélair <hidden>
• STALE292d [PATCH] ipe: Drop a duplicated CONFIG_ prefix in the ifdeffery
  2025-10-10 03:30 · 1 reply this month · Borislav Petkov <bp@kernel.org>
• STALE292d [PATCH] nbd: override creds to kernel when calling sock_{send,recv}msg()
  2025-10-10 01:56 · 3 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE266d Re: [syzbot] [fs?] BUG: sleeping function called from invalid context in hook_sb_delete
  2025-10-09 20:56 · 0 replies this month · syzbot <hidden>
• DORMANTno replies The Matrix
  2025-10-09 16:43 · 0 replies this month · Albin Lidén <hidden>
• STALE210d [PATCH] security: smack: fix indentation in smack_access.c
  2025-10-09 11:21 · 0 replies this month · Taimoor Zaeem <hidden>
• DORMANTno replies [PATCH] ima: Attach CREDS_CHECK IMA hook to bprm_creds_from_file LSM hook
  2025-10-08 11:55 · 0 replies this month · Roberto Sassu <hidden>
• STALE220d [syzbot] [keyrings?] [lsm?] possible deadlock in keyring_clear (3)
  2025-10-07 17:08 · 0 replies this month · syzbot <hidden>
• STALE295d [PATCH bpf-next v7 0/5] Signed BPF programs
  2025-10-07 16:43 · 1 reply this month · KP Singh <kpsingh@kernel.org>
• DORMANTno replies [PATCH] selinux: implement LSM_ATTR_UNSHARE
  2025-10-03 19:14 · 0 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• DORMANTno replies [PATCH v2] lsm,uapi: introduce LSM_ATTR_UNSHARE
  2025-10-03 19:11 · 0 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE299d [PATCH] include/uapi/linux/lsm.h,Documentation/userspace-api/lsm.rst: introduce LSM_ATTR_UNSHARE
  2025-10-03 17:15 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE301d [PATCH v3 00/10] tpm: Decouple Trenchboot dependencies
  2025-10-01 12:53 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>