linux-security-module archive · November 2025

514 messages · showing the 100 most-recently-active threads .

• STALE273d LANDED [PATCH v6 00/15] Create and use APIs to centralise locking for directory ops.
  2025-11-30 22:06 · 27 replies this month · NeilBrown <hidden>
• DORMANTno replies [PATCH v2] tpm2-sessions: address out-of-range indexing
  2025-11-30 21:35 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies [PATCH] tpm2-sessions: address out-of-range indexing
  2025-11-30 21:18 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE315d [PATCH bpf-next 0/3] Introduce bpf_kern_path and bpf_path_put
  2025-11-30 06:46 · 11 replies this month · Song Liu <song@kernel.org>
• STALE312d [GIT PULL] KEYS: trusted: keys-trusted-next-rc1
  2025-11-29 21:09 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE312d [GIT PULL] Smack patches for 6.19
  2025-11-29 20:34 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE297d [PATCH v17] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-29 15:06 · 23 replies this month · Bernd Edlinger <hidden>
• STALE259d [PATCH] rust: security: use `pin_init::zeroed()` for LSM context initialization
  2025-11-29 13:57 · 0 replies this month · Atharv Dubey <hidden>
• STALE317d [PATCH] net: ipv6: fix spelling typos in comments
  2025-11-29 03:55 · 1 reply this month · Shi Hao <hidden>
• STALE314d [PATCH] tomoyo: Use local kmap in tomoyo_dump_page()
  2025-11-28 22:46 · 0 replies this month · Davidlohr Bueso <dave@stgolabs.net>
• STALE251d [PATCH v13 0/4] New trait OwnableRefCounted for ARef<->Owned conversion.
  2025-11-28 18:08 · 8 replies this month · Oliver Mangold <hidden>
• STALE317d SUPERSEDED [PATCH v4 0/4] Landlock: Disconnected directory handling
  2025-11-28 17:24 · 8 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE317d [PATCH v5 0/4] Landlock: Disconnected directory handling
  2025-11-28 17:22 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE309d SUPERSEDED [PATCH v3 0/5] Implement LANDLOCK_ADD_RULE_NO_INHERIT
  2025-11-28 15:54 · 8 replies this month · Justin Suess <hidden>
• STALE317d [PATCH v9 3/8] KEYS: trusted: Replace a redundant instance of tpm2_hash_map
  2025-11-28 15:14 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d [PATCH 0/2] apparmor unaligned memory fixes
  2025-11-28 09:54 · 28 replies this month · deller@kernel.org
• STALE317d REVIEWED: 1 (1M) [PATCH v9 8/8] tpm-buf: Enable managed and stack allocations.
  2025-11-28 02:54 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE317d REVIEWED: 1 (0M) [PATCH v9 6/8] tpm-buf: Merge TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOW
  2025-11-28 02:54 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE317d REVIEWED: 1 (0M) [PATCH v9 5/8] KEYS: trusted: Open code tpm2_buf_append()
  2025-11-28 02:54 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE317d [PATCH v9 4/8] KEYS: trusted: Fix a memory leak in tpm2_load_cmd
  2025-11-28 02:54 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE317d REVIEWED: 1 (0M) [PATCH v9 2/8] tpm2-sessions: Open code tpm_buf_append_hmac_session()
  2025-11-28 02:54 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• DORMANTno replies REVIEWED: 1 (1M) [PATCH v8 11/11] tpm-buf: Enable managed and stack allocations.
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d REVIEWED: 1 (0M) [PATCH v8 09/11] tpm-buf: unify TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOW
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d REVIEWED: 1 (0M) [PATCH v8 08/11] KEYS: trusted: Open code tpm2_buf_append()
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d REVIEWED: 1 (0M) [PATCH v8 07/11] tpm2-sessions: Unmask tpm_buf_append_hmac_session()
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d REVIEWED: 2 (2M) [PATCH v8 05/11] KEYS: trusted: Use tpm_ret_to_err() in trusted_tpm2
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d [PATCH v8 04/11] KEYS: trusted: Fix memory leak in tpm2_load()
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE318d [PATCH v8 03/11] KEYS: trusted: remove redundant instance of tpm2_hash_map
  2025-11-27 21:42 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d [PATCH v7 03/11] KEYS: trusted: remove redundant instance of tpm2_hash_map
  2025-11-27 19:03 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d REVIEWED: 1 (1M) [PATCH v7 11/11] tpm-buf: Enable managed and stack allocations.
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d REVIEWED: 1 (0M) [PATCH v7 09/11] tpm-buf: unify TPM_BUF_BOUNDARY_ERROR and TPM_BUF_OVERFLOW
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d REVIEWED: 1 (0M) [PATCH v7 08/11] KEYS: trusted: Open code tpm2_buf_append()
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d REVIEWED: 1 (0M) [PATCH v7 07/11] tpm2-sessions: Unmask tpm_buf_append_hmac_session()
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d REVIEWED: 2 (2M) [PATCH v7 05/11] KEYS: trusted: Use tpm_ret_to_err() in trusted_tpm2
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE313d [PATCH v7 04/11] KEYS: trusted: Fix memory leak in tpm2_load()
  2025-11-27 13:55 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE242d [PATCH v3 0/3] Landlock multithreaded enforcement
  2025-11-27 11:52 · 3 replies this month · "Günther Noack" <gnoack@google.com>
• STALE319d SUPERSEDED [PATCH v2 0/2] Landlock multithreaded enforcement
  2025-11-27 10:32 · 5 replies this month · "Günther Noack" <gnoack@google.com>
• STALE250d [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
  2025-11-27 10:19 · 2 replies this month · Thorsten Blum <hidden>
• STALE314d [RFC v1 0/1] Implement IMA Event Log Trimming
  2025-11-27 09:45 · 8 replies this month · Anirudh Venkataramanan <hidden>
• STALE319d [PATCH RESEND] apparmor: replace sprintf with snprintf in aa_new_learning_profile
  2025-11-27 01:34 · 1 reply this month · Thorsten Blum <hidden>
• STALE319d REVIEWED: 2 (2M) [PATCH RESEND] apparmor: Replace sprintf/strcpy with scnprintf/strscpy in aa_policy_init
  2025-11-27 01:33 · 1 reply this month · Thorsten Blum <hidden>
• STALE319d [PATCH v15 0/4] Reduce overhead of LSMs with static calls
  2025-11-26 19:44 · 3 replies this month · KP Singh <kpsingh@kernel.org>
• STALE319d SUPERSEDED [PATCH v3 0/4] Landlock: Disconnected directory handling
  2025-11-26 15:42 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE320d Re: [RFC][PATCH] exec: Move cred computation under exec_update_lock
  2025-11-25 16:19 · 1 reply this month · Eric W. Biederman <hidden>
• STALE275d [PATCH] security: Add KUnit tests for rootid_owns_currentns()
  2025-11-25 15:15 · 5 replies this month · Ryan Foster <hidden>
• STALE320d SUPERSEDED [PATCH v2 0/6] Implement LANDLOCK_ADD_RULE_NO_INHERIT
  2025-11-25 12:07 · 10 replies this month · Justin Suess <hidden>
• STALE320d [RFC][PATCH] exec: Move cred computation under exec_update_lock
  2025-11-25 11:55 · 2 replies this month · Eric W. Biederman <hidden>
• STALE321d [PATCH] lockdown: Only log restrictions once
  2025-11-25 10:21 · 6 replies this month · Daniel Tang <hidden>
• STALE321d SUPERSEDED [PATCH v5 00/10] Implement LANDLOCK_ADD_RULE_QUIET
  2025-11-25 00:57 · 13 replies this month · Tingmao Wang <hidden>
• STALE322d SUPERSEDED [PATCH v3 0/9] module: Introduce hash-based integrity checking
  2025-11-24 09:42 · 6 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE296d SUPERSEDED [PATCH v4 00/10] Implement LANDLOCK_ADD_RULE_QUIET
  2025-11-23 21:03 · 16 replies this month · Tingmao Wang <hidden>
• STALE323d [GIT PULL] selinux/selinux-pr-20251121
  2025-11-22 18:30 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE142d [RFC PATCH v4 00/19] Support socket access-control
  2025-11-22 17:20 · 27 replies this month · Mikhail Ivanov <hidden>
• STALE323d Re: [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-22 17:10 · 1 reply this month · Eric W. Biederman <hidden>
• STALE324d Re: [RFC][PATCH] exec: Move cred computation under exec_update_lock
  2025-11-21 23:07 · 1 reply this month · Eric W. Biederman <hidden>
• STALE324d [PATCH] KEYS: encrypted: Use pr_fmt()
  2025-11-21 20:10 · 3 replies this month · Thorsten Blum <hidden>
• STALE324d [PATCH -next] ima: Handle error code returned by ima_filter_rule_match()
  2025-11-21 15:38 · 2 replies this month · Zhao Yipeng <hidden>
• STALE324d Re: [RFC][PATCH] exec: Move cred computation under exec_update_lock
  2025-11-21 11:26 · 2 replies this month · Eric W. Biederman <hidden>
• STALE325d Re: [RFC][PATCH] exec: Move cred computation under exec_update_lock
  2025-11-21 03:00 · 1 reply this month · Eric W. Biederman <hidden>
• STALE325d [BUG] landlock: sleeping function called from invalid context in hook_sb_delete()
  2025-11-21 01:01 · 4 replies this month · 许佳凯 <hidden>
• STALE296d SUPERSEDED [PATCH v4 00/35] Compiler-Based Context- and Locking-Analysis
  2025-11-20 23:51 · 37 replies this month · Marco Elver <elver@google.com>
• STALE325d [PATCH v2] lsm: use unrcu_pointer() for current->cred in security_init()
  2025-11-20 21:27 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE325d [PATCH RFC 0/4] landlock: add LANDLOCK_SCOPE_MEMFD_EXEC execution
  2025-11-20 17:47 · 1 reply this month · Abhinav Saxena <hidden>
• DORMANTno replies Re: [PATCH v18] exec: Fix dead-lock in de_thread with ptrace_attach
  2025-11-20 16:07 · 0 replies this month · Eric W. Biederman <hidden>
• STALE325d [Patch V1] ima: avoid duplicate policy rules insertions
  2025-11-20 15:40 · 9 replies this month · Tahera Fahimi <hidden>
• STALE326d [PATCH] security: sctp: Format type and permission checks tables
  2025-11-20 01:39 · 5 replies this month · Bagas Sanjaya <hidden>
• STALE326d [PATCH] lsm: use unrcu_pointer() for current->cred in security_init()
  2025-11-19 15:36 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE326d [PATCH] ima: Fall back to default kernel module signature verification
  2025-11-19 15:29 · 21 replies this month · Coiby Xu <hidden>
• DORMANTno replies Wiadomość z księgowości
  2025-11-19 09:02 · 0 replies this month · Marek Poradecki <hidden>
• STALE327d [PATCH] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-19 02:51 · 3 replies this month · Thorsten Blum <hidden>
• STALE327d [PATCH] keys: Replace memcpy with strscpy in proc_keys_show
  2025-11-19 02:36 · 1 reply this month · Thorsten Blum <hidden>
• STALE327d [PATCH] KEYS: Remove the ad-hoc compilation flag CAAM_DEBUG
  2025-11-19 02:25 · 2 replies this month · Ye Bin <hidden>
• STALE327d [PATCH] Clarify the rootid_owns_currentns
  2025-11-19 00:29 · 6 replies this month · "Serge E. Hallyn" <serge@hallyn.com>
• STALE164d [PATCH v3 00/14] Remove redundant rcu_read_lock/unlock() in spin_lock
  2025-11-18 07:24 · 2 replies this month · pengdonglin <hidden>
• STALE331d [PATCH v3 00/35] Compiler-Based Capability- and Locking-Analysis
  2025-11-14 13:22 · 3 replies this month · Marco Elver <elver@google.com>
• STALE332d [PATCH v2] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-14 10:31 · 2 replies this month · Thorsten Blum <hidden>
• DORMANTno replies [PATCH] landlock: Document fexecve sadly reopening files
  2025-11-14 03:23 · 0 replies this month · Daniel Tang <hidden>
• STALE332d Re: [syzbot] [fs?] WARNING in nsproxy_ns_active_put
  2025-11-13 13:05 · 12 replies this month · syzbot <hidden>
• DORMANTno replies 地域に”初”出店で狙う、焼肉マーケット
  2025-11-13 01:09 · 0 replies this month · ときわ亭フランチャイズ事務局 <hidden>
• STALE333d SUPERSEDED [PATCH v5 00/14] Create and use APIs to centralise locking for directory ops.
  2025-11-12 23:51 · 32 replies this month · NeilBrown <hidden>
• STALE333d LANDED [PATCH] Documentation/landlock: Make docs in cred.h and domain.h visible.
  2025-11-12 17:04 · 1 reply this month · Tingmao Wang <hidden>
• STALE333d LANDED [PATCH] selftests/landlock: Fix makefile header list
  2025-11-12 17:03 · 1 reply this month · Matthieu Buffet <hidden>
• STALE334d LANDED [PATCH 1/2] fs: add iput_not_last()
  2025-11-12 09:48 · 6 replies this month · Mateusz Guzik <hidden>
• STALE334d [PATCH v1] fs: Move might_sleep() annotation to iput_final()
  2025-11-12 05:40 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies 少子化は追い風。次世代の教育ビジネス
  2025-11-12 02:21 · 0 replies this month · 教育フランチャイズセミナー事務局 <hidden>
• STALE334d [PATCH v2] device_cgroup: Refactor devcgroup_seq_show to use seq_put* helpers
  2025-11-12 00:47 · 1 reply this month · Thorsten Blum <hidden>
• STALE334d Module signing and post-quantum crypto public key algorithms
  2025-11-11 18:38 · 8 replies this month · David Howells <dhowells@redhat.com>
• STALE335d [linux-next:master] [ns] 3a18f80918: WARNING:at_include/linux/ns_common.h:#put_cred_rcu
  2025-11-11 09:36 · 1 reply this month · kernel test robot <hidden>
• DORMANTno replies Re: [PATCH] security: Add KUnit tests for rootid_owns_currentns()
  2025-11-11 00:12 · 0 replies this month · Paul Moore <paul@paul-moore.com>
• STALE336d [syzbot] [lsm?] WARNING in put_cred_rcu
  2025-11-10 10:09 · 2 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH] security: Add KUnit tests for rootid_owns_currentns()
  2025-11-10 01:17 · 0 replies this month · ryan foster <hidden>
• STALE336d [PATCH] security: provide an inlined static branch for security_inode_permission()
  2025-11-09 21:52 · 2 replies this month · Mateusz Guzik <hidden>
• STALE336d [syzbot] [fs?] WARNING in destroy_super_work
  2025-11-09 14:11 · 2 replies this month · syzbot <hidden>
• STALE337d [PATCH] KEYS: encrypted: Return early on allocation failure and drop goto
  2025-11-09 04:47 · 1 reply this month · Thorsten Blum <hidden>
• DORMANTno replies [syzbot] [lsm?] memory leak in prepare_creds (5)
  2025-11-07 07:29 · 0 replies this month · syzbot <hidden>
• STALE339d [PATCH RESEND] apparmor: Replace deprecated strcpy in d_namespace_path
  2025-11-06 14:54 · 1 reply this month · Thorsten Blum <hidden>
• STALE340d [PATCH v3 0/2] ipe: add script enforcement mechanism with AT_EXECVE_CHECK
  2025-11-05 23:39 · 3 replies this month · Yanzhu Huang <hidden>
• STALE340d SUPERSEDED [PATCH 0/3] Implement LANDLOCK_ADD_RULE_NO_INHERIT
  2025-11-05 18:00 · 3 replies this month · Justin Suess <hidden>
• STALE341d [PATCH v2 0/2] LSM: Multiple LSM mount options
  2025-11-04 17:56 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE341d [PATCH 0/2] LSM: Identify module using network facilities
  2025-11-04 17:11 · 4 replies this month · Casey Schaufler <casey@schaufler-ca.com>