linux-security-module archive · February 2026

717 messages across 97 threads, ordered by last activity .

• STALE149d [PATCH v3] landlock: Expand restrict flags example for ABI version 8
  2026-02-28 21:37 · 0 replies this month · Panagiotis "Ivory" Vasilopoulos <hidden>
• STALE149d [PATCH] keys: Remove return variable and length check to simplify user_read
  2026-02-28 09:44 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE134d [PATCH v2 00/10] Reintrodce Hornet LSM
  2026-02-28 05:34 · 12 replies this month · Blaise Boscaccy <hidden>
• STALE153d [PATCH 00/61] vfs: change inode->i_ino from unsigned long to u64
  2026-02-27 21:05 · 100 replies this month · Jeff Layton <jlayton@kernel.org>
• STALE153d [PATCH] cred: clarify usage of get_cred_rcu()
  2026-02-27 20:49 · 3 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE153d [PATCH v5] ima_fs: Avoid creating measurement lists for unsupported hash algos
  2026-02-27 18:46 · 6 replies this month · Dmitry Safonov via B4 Relay <devnull+dima.arista.com@kernel.org>
• STALE153d [PATCH 0/2] efi: Drop unnecessary check for CONFIG_MODULE_SIG/CONFIG_KEXEC_SIG
  2026-02-27 18:22 · 3 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• DORMANTno replies [PATCH v2] ima: Define and use a digest_size field in the ima_algo_desc structure
  2026-02-27 12:07 · 0 replies this month · Roberto Sassu <hidden>
• DORMANTno replies REVIEWED: 4 (4M) [PATCH v2] cred: delete task_euid()
  2026-02-27 10:33 · 0 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE154d [PATCH v6 0/6] Extend "trusted" keys to support a new trust source named the PowerVM Key Wrapping Module (PKWM)
  2026-02-27 08:29 · 10 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE154d [PATCH] xfrm: kill xfrm_dev_{state,policy}_flush_secctx_check()
  2026-02-27 01:14 · 13 replies this month · Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
• STALE155d [PATCH 0/2] fanotify: avid some premature LSM checks
  2026-02-26 14:19 · 9 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE155d [PATCH 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-02-26 10:24 · 2 replies this month · Coiby Xu <hidden>
• STALE155d [PATCH] ima: Add digest_size field to ima_algo_desc structure and use to show meas.
  2026-02-26 09:01 · 3 replies this month · Roberto Sassu <hidden>
• STALE149d [PATCH v3 0/2] landlock: Fix TSYNC deadlock and clean up error path
  2026-02-26 07:23 · 4 replies this month · Yihan Ding <hidden>
• DORMANTno replies [PATCH v3 0/2] landlock: Fix TSYNC deadlock and clean up error path
  2026-02-26 01:54 · 0 replies this month · Yihan Ding <hidden>
• DORMANTno replies [PATCH v3 0/2] landlock: Fix TSYNC deadlock and clean up error path
  2026-02-26 01:52 · 0 replies this month · Yihan Ding <hidden>
• STALE155d [PATCH v2 0/2] landlock: Fix TSYNC deadlock and clean up error path
  2026-02-26 01:44 · 6 replies this month · Yihan Ding <hidden>
• STALE119d LSM namespacing API
  2026-02-26 00:05 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE96d [RFC PATCH 0/3] LSM: Hook registration exculsivity
  2026-02-25 19:22 · 3 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE155d [PATCH v2] landlock: Expand restrict flags example for ABI version 8
  2026-02-25 18:54 · 1 reply this month · Panagiotis "Ivory" Vasilopoulos <hidden>
• STALE144d [PATCH v3 00/15] Further centralising of directory locking for name ops.
  2026-02-24 22:28 · 15 replies this month · NeilBrown <hidden>
• STALE156d [PATCH] lsm: move inode IS_PRIVATE checks to individual LSMs
  2026-02-24 19:12 · 5 replies this month · <hidden>
• STALE141d [PATCH v4 00/17] module: Introduce hash-based integrity checking
  2026-02-24 16:17 · 37 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE156d Re: [syzbot] [kernel?] INFO: task hung in restrict_one_thread_callback
  2026-02-24 14:43 · 10 replies this month · Ding Yihan <hidden>
• STALE151d [PATCH v16 00/10] rust: add `Ownable` trait and `Owned` type
  2026-02-24 11:20 · 10 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• STALE157d [RFC PATCH] fs/pidfs: Add permission check to pidfd_info()
  2026-02-24 11:18 · 5 replies this month · <hidden>
• STALE157d [PATCH v15 0/9] rust: add `Ownable` trait and `Owned` type
  2026-02-24 10:42 · 20 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• STALE157d [PATCH v2 00/15] Further centralising of directory locking for name ops.
  2026-02-24 09:20 · 29 replies this month · NeilBrown <hidden>
• DORMANTno replies [syzbot] [mm?] INFO: rcu detected stall in sys_rename (8)
  2026-02-24 08:50 · 0 replies this month · syzbot <hidden>
• STALE135d [PATCH v5 0/9] landlock: UNIX connect() control by pathname and scope
  2026-02-23 16:10 · 28 replies this month · Günther Noack <hidden>
• STALE154d Re: [syzbot] [kernel?] INFO: task hung in restrict_one_thread_callback
  2026-02-23 15:15 · 1 reply this month · Frederic Weisbecker <frederic@kernel.org>
• STALE157d [PATCH v4] ima_fs: Avoid creating measurement lists for unsupported hash algos
  2026-02-23 14:59 · 2 replies this month · Dmitry Safonov via B4 Relay <devnull+dima.arista.com@kernel.org>
• STALE158d [PATCH 00/13] Further centralising of directory locking for name ops.
  2026-02-23 00:58 · 41 replies this month · NeilBrown <hidden>
• STALE135d [PATCH] apparmor: Use sysfs_emit in param_get_{audit,mode}
  2026-02-22 21:41 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE135d [PATCH RESEND] apparmor: Replace memcpy + NUL termination with kmemdup_nul in do_setattr
  2026-02-22 20:59 · 1 reply this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE158d [PATCH] ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
  2026-02-22 20:44 · 2 replies this month · Ondrej Mosnacek <omosnace@redhat.com>
• STALE158d [RFC] Landlock: mutable domains (and supervisor notification uAPI options)
  2026-02-22 18:04 · 5 replies this month · Tingmao Wang <hidden>
• DORMANTno replies [PATCH] landlock: Expand restrict flags example for ABI version 8
  2026-02-21 22:05 · 0 replies this month · Panagiotis "Ivory" Vasilopoulos <hidden>
• STALE160d [GIT PULL] AppArmor updates for 7.0-rc1
  2026-02-21 01:20 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• STALE160d LANDED [PATCH] samples/landlock: Bump ABI version to 8
  2026-02-20 19:46 · 1 reply this month · Günther Noack <hidden>
• STALE130d [PATCH v2 0/2] move TPM-specific fields into trusted_tpm_options
  2026-02-20 18:34 · 2 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE130d [PATCH v9 00/11] Streamline TPM2 HMAC sessions
  2026-02-20 18:30 · 4 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE161d [PATCH] task: delete task_euid()
  2026-02-20 10:43 · 4 replies this month · Alice Ryhl <aliceryhl@google.com>
• COLD46d [PATCH v2 v2] evm: check return values of crypto_shash functions
  2026-02-20 09:06 · 4 replies this month · Daniel Hodges <hidden>
• STALE161d [PATCH 0/5] Make Rust Binder build as a module
  2026-02-20 00:00 · 42 replies this month · Alice Ryhl <aliceryhl@google.com>
• STALE143d REVIEWED: 2 (2M) Re: [PATCH] ima: check return value of crypto_shash_final() in boot aggregate
  2026-02-19 08:56 · 0 replies this month · Roberto Sassu <hidden>
• STALE162d [PATCH 0/2] landlock: Simplify path walk logic
  2026-02-18 20:19 · 2 replies this month · Justin Suess <hidden>
• STALE134d [PATCH RFC] security: add LSM blob and hooks for namespaces
  2026-02-18 11:38 · 7 replies this month · Christian Brauner <brauner@kernel.org>
• STALE163d LANDED [PATCH v2 1/2] landlock: Fully release unused TSYNC work entries
  2026-02-17 16:35 · 4 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE164d [PATCH 0/2] move TPM-specific fields into trusted_tpm_options
  2026-02-17 06:52 · 1 reply this month · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE164d [PATCH v1 1/2] landlock: Fully release unused TSYNC work entries
  2026-02-16 21:42 · 8 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE166d [PATCH v4 0/6] landlock: UNIX connect() control by pathname and scope
  2026-02-15 03:01 · 18 replies this month · Günther Noack <hidden>
• STALE166d [RFC PATCH 0/9] Landlock supervise: a mechanism for interactive permission requests
  2026-02-15 02:41 · 1 reply this month · Tingmao Wang <hidden>
• STALE166d [GIT PULL] capabilities update for v7.0
  2026-02-14 20:54 · 1 reply this month · "Serge E. Hallyn" <serge@hallyn.com>
• STALE167d [RFC PATCH v3 0/8] landlock: Add UDP access control support
  2026-02-14 10:34 · 2 replies this month · Matthieu Buffet <hidden>
• STALE146d [PATCH v3 2/3] evm: Don't enable fix mode when secure boot is enabled
  2026-02-13 01:29 · 0 replies this month · Coiby Xu <hidden>
• STALE146d [PATCH v3 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-02-13 01:29 · 0 replies this month · Coiby Xu <hidden>
• STALE168d [PATCH v2 1/3] integrity: Make arch_ima_get_secureboot integrity-wide
  2026-02-12 20:26 · 3 replies this month · Coiby Xu <hidden>
• STALE168d [PATCH v6 0/3] ima: Detect changes to files via kstat changes rather than i_version
  2026-02-12 20:01 · 5 replies this month · Frederick Lawler <hidden>
• STALE169d [GIT PULL] Landlock update for v7.0-rc1
  2026-02-12 00:04 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE169d [GIT PULL] Smack patches for 7.0
  2026-02-12 00:04 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• STALE169d [PATCH v3 0/3] Landlock multithreaded enforcement
  2026-02-11 14:55 · 3 replies this month · "Günther Noack" <gnoack@google.com>
• STALE170d [PATCH] selftests/landlock: Remove duplicate include of stdio.h
  2026-02-11 11:16 · 2 replies this month · Chen Ni <hidden>
• STALE170d LANDED [PATCH v1] mailmap: Add entry for Mickaël Salaün
  2026-02-11 09:45 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE170d [RFC][PATCH v2] ima: Add support for staging measurements for deletion and trimming
  2026-02-11 00:09 · 1 reply this month · Roberto Sassu <hidden>
• STALE170d [PATCH] man/man7/kernel_lockdown.7: remove Secure Boot untruth
  2026-02-10 22:06 · 9 replies this month · Alyssa Ross <hidden>
• STALE170d [PATCH v2 00/13] mm: add bitmap VMA flag helpers and convert all mmap_prepare to use them
  2026-02-10 17:46 · 24 replies this month · Lorenzo Stoakes <hidden>
• STALE134d [apparmor][PATCH] apparmor: fix incorrect success return value in unpack_tag_headers()
  2026-02-10 17:22 · 0 replies this month · Massimiliano Pellizzer <hidden>
• STALE147d [bug report] apparmor: add support loading per permission tagging
  2026-02-10 17:16 · 1 reply this month · Dan Carpenter <hidden>
• STALE115d [PATCH v3 0/3] landlock: Refactor layer masks
  2026-02-10 16:56 · 6 replies this month · Günther Noack <hidden>
• STALE171d [GIT PULL] lsm/lsm-pr-20260203
  2026-02-10 00:50 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE171d [GIT PULL] selinux/selinux-pr-20260203
  2026-02-10 00:50 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE171d [PATCH v2 0/6] Landlock: Implement scope control for pathname Unix sockets
  2026-02-09 20:20 · 20 replies this month · Tingmao Wang <hidden>
• STALE171d [PATCH] landlock: Add counted_by and fix comment in landlock_ruleset
  2026-02-09 17:28 · 2 replies this month · Tingmao Wang <hidden>
• STALE171d [PATCH v3 0/5] landlock: Pathname-based UNIX connect() control
  2026-02-09 17:09 · 3 replies this month · Günther Noack <hidden>
• STALE172d [PATCH net-next v2 0/4] net: uapi: Provide an UAPI definition of 'struct sockaddr'
  2026-02-09 13:34 · 5 replies this month · Thomas Weißschuh <hidden>
• STALE173d Re: [PATCH v2 0/6] Landlock: Implement scope control for pathname Unix sockets
  2026-02-08 13:50 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE174d [PATCH v5 0/3] ima: Detect changes to files via kstat changes rather than i_version
  2026-02-06 20:07 · 6 replies this month · Frederick Lawler <hidden>
• STALE174d [PATCH v2 0/3] landlock: Refactor layer masks
  2026-02-06 15:05 · 8 replies this month · Günther Noack <hidden>
• DORMANTno replies 黒字の幼児教室 投資オーナー募集
  2026-02-06 02:28 · 0 replies this month · 幼児教室／ BBSインターナショナル <hidden>
• STALE175d [PATCH v4 0/1] Trim N entries of IMA event logs
  2026-02-05 23:59 · 3 replies this month · steven chen <hidden>
• STALE175d [PATCH v3 0/1] Trim N entries of IMA event logs
  2026-02-05 23:53 · 1 reply this month · steven chen <hidden>
• STALE175d [PATCH v3 0/3] landlock: documentation improvements
  2026-02-05 19:23 · 3 replies this month · Samasth Norway Ananda <hidden>
• STALE174d [PATCH v14 0/9] rust: add `Ownable` trait and `Owned` type
  2026-02-05 13:33 · 20 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• STALE176d [PATCH v3 0/6] Landlock: Implement scope control for pathname Unix sockets
  2026-02-05 08:17 · 7 replies this month · Tingmao Wang <hidden>
• STALE176d [PATCH] apparmor: replace strcpy with strscpy
  2026-02-05 07:52 · 1 reply this month · Ryan Foster <hidden>
• STALE176d [PATCH] apparmor: add .kunitconfig
  2026-02-05 07:41 · 1 reply this month · Ryota Sakamoto <hidden>
• STALE135d [PATCH] apparmor: Remove redundant if check in sk_peer_get_label
  2026-02-04 22:07 · 0 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• DORMANTno replies [PATCH] AppArmor: Add missing SPDX id line to sig_names.h
  2026-02-04 21:58 · 0 replies this month · Tim Bird <hidden>
• STALE176d REVIEWED: 4 (4M) [PATCH v4] ima: Fallback to ctime check for FS without kstat.change_cookie
  2026-02-04 19:32 · 1 reply this month · Frederick Lawler <hidden>
• COLD46d Re: [PATCH] evm: check return values of crypto_shash functions
  2026-02-04 13:09 · 0 replies this month · Roberto Sassu <hidden>
• STALE177d [PATCH RESEND] apparmor: Replace deprecated strcpy with memcpy in gen_symlink_name
  2026-02-04 08:28 · 2 replies this month · Thorsten Blum <thorsten.blum@linux.dev>
• STALE168d [PATCH v2 2/3] evm: Don't enable fix mode when secure boot is enabled
  2026-02-03 04:14 · 0 replies this month · Coiby Xu <hidden>
• STALE178d [GIT PULL] lsm/lsm-pr-20260202
  2026-02-02 20:47 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE178d [PATCH] lsm: preserve /proc/sys/vm/mmap_min_addr when !CONFIG_SECURITY
  2026-02-02 16:19 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE179d [PATCH v13 0/4] New trait OwnableRefCounted for ARef<->Owned conversion.
  2026-02-02 13:05 · 8 replies this month · Oliver Mangold <hidden>