linux-security-module archive · May 2026

671 messages · showing the 100 most-recently-active threads .

• DORMANTno replies Re: [PATCH] KEYS: fix overflow in keyctl_pkey_params_get_2()
  2026-05-31 17:04 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE130d REVIEWED: 1 (0M) [PATCH v3 1/2] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid
  2026-05-31 10:41 · 1 reply this month · <hidden>
• STALE135d LANDED [PATCH] KEYS: fix overflow in keyctl_pkey_params_get_2()
  2026-05-31 03:25 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE135d Re: [PATCH] keys: Pin request_key_auth payload in instantiate paths
  2026-05-30 16:50 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE132d [PATCH 00/11] hornet: security, tooling and selftest fixes
  2026-05-30 01:11 · 18 replies this month · Blaise Boscaccy <hidden>
• STALE127d LANDED [PATCH] KEYS: Use acquire when reading state in keyring search
  2026-05-30 01:02 · 1 reply this month · Gui-Dong Han <hidden>
• STALE133d security_task_prctl: why -ENOSYS
  2026-05-29 23:03 · 4 replies this month · William Roberts <hidden>
• COLD45d [PATCH] keys: Pin request_key_auth payload in instantiate paths
  2026-05-29 22:53 · 1 reply this month · Shaomin Chen <hidden>
• STALE127d SUPERSEDED [PATCH v4 0/3] introduce IMA_INIT_LATE_SYNC option
  2026-05-29 22:46 · 6 replies this month · Yeoreum Yun <hidden>
• STALE136d LANDED: 1 (1M) [PATCH] tpm-buf: memory-safe allocations
  2026-05-29 22:37 · 6 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE115d LANDED [PATCH] selftests/landlock: explicitly disable audit
  2026-05-29 20:04 · 0 replies this month · Maximilian Heyne <hidden>
• STALE135d [syzbot] [lsm?] KASAN: slab-use-after-free Read in security_inode_follow_link
  2026-05-29 20:01 · 0 replies this month · syzbot <hidden>
• DORMANTno replies [PATCH v3 2/2] selftests/landlock: test SCOPE_SIGNAL on the SIGIO/fowner pgid path
  2026-05-29 19:09 · 0 replies this month · <hidden>
• STALE136d REVIEWED: 1 (0M) Re: [REPORT] landlock: SCOPE_SIGNAL bypass via F_SETOWN to invoker pgid -> SIGIO/SIGKILL to non-sandboxed targets
  2026-05-29 19:03 · 2 replies this month · <hidden>
• STALE136d [PATCH bpf v3 0/2] gen_loader fixes
  2026-05-29 15:01 · 8 replies this month · KP Singh <kpsingh@kernel.org>
• STALE133d [PATCH v5 00/13] ima: Introduce staging mechanism
  2026-05-29 14:59 · 26 replies this month · Roberto Sassu <hidden>
• STALE102d SUPERSEDED [PATCH v4 0/2] Delete task_euid()
  2026-05-29 12:17 · 3 replies this month · Alice Ryhl <aliceryhl@google.com>
• DORMANTno replies [BUG] apparmor: AA_BUG aa_policy_destroy on aa_alloc_profile error path
  2026-05-29 03:32 · 0 replies this month · Farhad Alemi <hidden>
• STALE137d [PATCH] landlock: fix LANDLOCK_SCOPE_SIGNAL bypass via F_SETOWN to invoker's pgid
  2026-05-29 03:25 · 1 reply this month · <hidden>
• STALE137d SUPERSEDED [PATCH v9 0/9] Implement LANDLOCK_ADD_RULE_QUIET
  2026-05-29 02:34 · 11 replies this month · Tingmao Wang <hidden>
• STALE137d SUPERSEDED [PATCH v8 00/10] Implement LANDLOCK_ADD_RULE_NO_INHERIT
  2026-05-29 02:24 · 11 replies this month · Justin Suess <hidden>
• STALE115d SUPERSEDED [PATCH v5 0/8] lsm: Replace security_sb_mount with granular mount hooks
  2026-05-28 18:27 · 8 replies this month · Song Liu <song@kernel.org>
• DORMANTno replies [PATCH 6.12.y] landlock: Fix TCP handling of short AF_UNSPEC addresses
  2026-05-28 12:14 · 0 replies this month · Maximilian Heyne <hidden>
• STALE133d [PATCH net v2] netlabel: validate unlabeled mask attribute length
  2026-05-28 01:59 · 0 replies this month · Chenguang Zhao <hidden>
• STALE117d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-05-28 01:19 · 7 replies this month · Aaron Tomlin <atomlin@atomlin.com>
• STALE138d [PATCH 0/3] security: replace __get_free_pages() call with kmalloc()
  2026-05-27 23:42 · 6 replies this month · "Mike Rapoport (Microsoft)" <rppt@kernel.org>
• STALE138d SUPERSEDED [PATCH v4 0/7] lsm: Replace security_sb_mount with granular mount hooks
  2026-05-27 21:09 · 11 replies this month · Song Liu <song@kernel.org>
• STALE80d SUPERSEDED [PATCH v2 0/9] Landlock: Namespace and capability control
  2026-05-27 18:36 · 9 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE138d LANDED [PATCH] firmware: arm_ffa: Treat missing FF-A feature on a platform as a probe miss
  2026-05-27 09:16 · 4 replies this month · Sudeep Holla <sudeep.holla@kernel.org>
• DORMANTno replies [syzbot] Monthly lsm report (May 2026)
  2026-05-27 04:32 · 0 replies this month · syzbot <hidden>
• STALE139d SUPERSEDED [PATCH v8 0/9] Implement LANDLOCK_ADD_RULE_QUIET
  2026-05-27 01:07 · 10 replies this month · Tingmao Wang <hidden>
• STALE139d [PATCH] tomoyo: Fix NULL pointer dereference in tomoyo_init_request_info() when domain is NULL
  2026-05-27 00:57 · 4 replies this month · Jiakai Xu <hidden>
• STALE139d [PATCH v2 2/2] security: smack: fix spelling mistake
  2026-05-26 22:13 · 1 reply this month · <hidden>
• STALE67d SUPERSEDED [PATCH v2 00/17] Landlock tracepoints
  2026-05-26 21:35 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE139d [PATCH bpf-next 00/13] Signed BPF + IPE Policies
  2026-05-26 16:23 · 26 replies this month · KP Singh <kpsingh@kernel.org>
• STALE133d [PATCH RESEND 0/1] yama: clean-up ptrace relations upon activating YAMA_SCOPE_NO_ATTACH
  2026-05-26 15:35 · 1 reply this month · Ethan Ferguson <hidden>
• STALE69d [PATCH v5 00/14] module: Introduce hash-based integrity checking
  2026-05-26 13:14 · 24 replies this month · Thomas Weißschuh <linux@weissschuh.net>
• STALE139d [net-next] netlabel: validate unlabeled mask attribute length
  2026-05-26 10:36 · 1 reply this month · Chenguang Zhao <hidden>
• STALE139d [PATCH 0/4] firmware: arm_ffa: Move core init to platform driver probe
  2026-05-26 09:41 · 16 replies this month · Sudeep Holla <sudeep.holla@kernel.org>
• COOLING8d [PATCH 00/11] Convert moduleparams to seq_buf
  2026-05-26 06:53 · 26 replies this month · Kees Cook <kees@kernel.org>
• STALE140d [bug report] keys: request_key_auth payload use-after-free in keyctl_instantiate_key_common()
  2026-05-26 02:51 · 2 replies this month · Shaomin Chen <hidden>
• DORMANTno replies [PATCH v2 1/2] security: apparmor: fix two spelling mistakes
  2026-05-26 01:39 · 0 replies this month · <hidden>
• DORMANTno replies [PATCH] apparmor: fix use-after-free in rawdata dedup loop
  2026-05-25 22:04 · 0 replies this month · Ruslan Valiyev <hidden>
• STALE124d SUPERSEDED [PATCH v4 0/7] landlock: Add UDP access control support
  2026-05-25 20:46 · 15 replies this month · Matthieu Buffet <hidden>
• STALE140d LANDED [net-next] netlabel: fix IPv6 unlabeled address add error handling
  2026-05-25 19:10 · 2 replies this month · Chenguang Zhao <hidden>
• STALE140d [PATCH] Fix various spelling mistakes
  2026-05-25 16:27 · 1 reply this month · <hidden>
• STALE141d [PATCH v8 0/3]
  2026-05-24 23:43 · 6 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• STALE141d [PATCH 0/2] smack: restrict smackfs/{direct,mapped} values to 0-255
  2026-05-24 22:38 · 2 replies this month · Konstantin Andreev <hidden>
• STALE128d [PATCH] apparmor: Constify 'nulldfa_src' and 'stacksplitdfa_src' arrays
  2026-05-24 11:34 · 0 replies this month · Len Bao <hidden>
• STALE133d [PATCH net v2 0/4] net: trust-after-modification fixes for IPv4 options + netlabel
  2026-05-24 04:15 · 2 replies this month · Qi Tang <hidden>
• STALE142d [RFC PATCH] ipe: support multiple BPF integrity verification LSMs
  2026-05-24 00:39 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE134d LANDED [PATCH] lsm,bpf: fix security_bpf_prog_load() error handling
  2026-05-23 17:44 · 5 replies this month · Paul Moore <paul@paul-moore.com>
• DORMANTno replies [PATCH] crypto: pkcs7: export verify_pkcs7_message_sig() as EXPORT_SYMBOL_GPL
  2026-05-23 15:58 · 0 replies this month · Paul Moore <paul@paul-moore.com>
• STALE143d SUPERSEDED [PATCH v2 0/2] gen_loader fixes
  2026-05-22 22:05 · 7 replies this month · KP Singh <kpsingh@kernel.org>
• STALE143d [RFC PATCH v4 00/19] Support socket access-control
  2026-05-22 15:42 · 2 replies this month · Mikhail Ivanov <hidden>
• STALE143d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-05-22 12:41 · 1 reply this month · Srish Srinivasan <ssrish@linux.ibm.com>
• DORMANTno replies [ANN] Linux Security Summit Europe 2026 CfP
  2026-05-22 05:56 · 0 replies this month · "Reshetova, Elena" <elena.reshetova@intel.com>
• DORMANTno replies [linux-next:master] BUILD REGRESSION 550604d6c9b9efc8d068aff94dc301694a7afdee
  2026-05-22 00:34 · 0 replies this month · kernel test robot <hidden>
• STALE144d SUPERSEDED [PATCH 0/6] landlock: Add scoped access bit for SysV message queues
  2026-05-21 16:07 · 6 replies this month · Justin Suess <hidden>
• DORMANTno replies [PATCH v2] apparmor: Fix inverted comparison in cache_hold_inc()
  2026-05-21 15:16 · 0 replies this month · Eduardo Vasconcelos <hidden>
• DORMANTno replies [PATCH] apparmor: Fix inverted comparison in cache_hold_inc()
  2026-05-21 06:58 · 0 replies this month · Eduardo Vasconcelos <hidden>
• STALE145d [QUESTION] move load_uefi_certs() and keyring initcall to earlier initcall
  2026-05-20 16:02 · 1 reply this month · Yeoreum Yun <hidden>
• STALE145d [GIT PULL] lsm/lsm-pr-20260519
  2026-05-20 15:24 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• STALE145d [PATCH] landlock: avoid memcpy static check warning
  2026-05-20 11:46 · 2 replies this month · Arnd Bergmann <arnd@kernel.org>
• STALE146d LANDED [PATCH v2] bpf: reject NULL data/sig in bpf_verify_pkcs7_signature
  2026-05-20 03:29 · 2 replies this month · KP Singh <kpsingh@kernel.org>
• STALE144d [PATCH] bpf, libbpf: reject non-exclusive metadata maps in the signed loader
  2026-05-19 22:50 · 1 reply this month · KP Singh <kpsingh@kernel.org>
• STALE146d [PATCH] bpf: reject NULL data/sig in bpf_verify_pkcs7_signature
  2026-05-19 22:44 · 3 replies this month · KP Singh <kpsingh@kernel.org>
• STALE106d Re: [RFC] TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ)
  2026-05-19 21:42 · 0 replies this month · Jann Horn <jannh@google.com>
• STALE146d Re: [PATCH] killswitch: add per-function short-circuit mitigation primitive
  2026-05-19 20:50 · 13 replies this month · Paul Moore <paul@paul-moore.com>
• STALE146d [PATCH RFC 0/5] memcg: dma-buf per-cgroup accounting via pid_fd
  2026-05-19 18:07 · 41 replies this month · Albert Esteve <hidden>
• STALE106d Re: [RFC] TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ)
  2026-05-19 16:47 · 0 replies this month · Jann Horn <jannh@google.com>
• STALE146d LANDED [PATCH] keys/trusted_keys: mark 'migratable' as __ro_after_init
  2026-05-19 08:16 · 1 reply this month · Len Bao <hidden>
• STALE125d [PATCH v2 00/16] Bump minimum version of LLVM for building the kernel to 17.0.1
  2026-05-18 21:05 · 5 replies this month · Nathan Chancellor <nathan@kernel.org>
• STALE147d Re: [linus:master] [selftests] 465b05bae5: kernel-selftests.landlock.audit_test.audit.tsync_override_log_subdomains_off.fail
  2026-05-18 10:01 · 4 replies this month · Thomas Weißschuh <hidden>
• STALE149d LANDED [PATCH v1 1/2] selftests/landlock: Filter dealloc records in audit_count_records()
  2026-05-16 19:21 · 3 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE96d LANDED [PATCH] landlock: Documentation wording cleanups
  2026-05-16 19:19 · 1 reply this month · Günther Noack <hidden>
• STALE149d [PATCH v2 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
  2026-05-16 13:36 · 8 replies this month · Aaron Tomlin <atomlin@atomlin.com>
• DORMANTno replies Re: [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()
  2026-05-15 19:07 · 0 replies this month · Miguel Ojeda <hidden>
• COLD45d LANDED [PATCH v1] landlock: Demonstrate best-effort allowed_access filtering
  2026-05-15 17:53 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• STALE150d LANDED [PATCH] Documentation: fix typo and formattting in security/credentials.rst
  2026-05-15 14:10 · 5 replies this month · Mayank Gite <hidden>
• DORMANTno replies [PATCH] apparmor: hold peer path references in aa_unix_file_perm()
  2026-05-15 05:01 · 0 replies this month · Zhang Cen <hidden>
• STALE151d [PATCH net 4/4] netlabel: validate CIPSO option against skb tail in netlbl_skbuff_getattr
  2026-05-15 02:42 · 2 replies this month · Qi Tang <hidden>
• STALE151d [PATCH net 3/4] netlabel: validate CALIPSO option against skb tail in netlbl_skbuff_getattr
  2026-05-15 02:42 · 4 replies this month · Qi Tang <hidden>
• STALE120d REVIEWED: 1 (1M) [PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()
  2026-05-14 20:48 · 1 reply this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• STALE151d SUPERSEDED [PATCH net 0/4] net: trust-after-modification fixes for IPv4 options + netlabel
  2026-05-14 17:06 · 1 reply this month · Qi Tang <hidden>
• STALE151d [PATCH] hornet: depend on CONFIG_SECURITY and CONFIG_BPF_SYSCALL
  2026-05-14 16:57 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE151d [PATCH] ipe: restore the kdoc comments for evaluate_property()
  2026-05-14 16:57 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• STALE151d [RFC PATCH v3 0/4] Fix IMA + TPM initialisation ordering issue
  2026-05-14 14:54 · 30 replies this month · Jonathan McDowell <hidden>
• STALE152d [linus:master] [landlock] 874c8f8382: kernel-selftests.landlock.audit_test.audit.thread.fail
  2026-05-13 18:37 · 1 reply this month · kernel test robot <hidden>
• STALE152d [PATCH v7 00/10] Reintroduce Hornet LSM
  2026-05-13 18:36 · 24 replies this month · Blaise Boscaccy <hidden>
• DORMANTno replies LANDED [PATCH v1] landlock: Account all audit data allocations to user space
  2026-05-13 18:03 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE124d SUPERSEDED [PATCH v2 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT
  2026-05-13 16:06 · 3 replies this month · "Günther Noack" <gnoack@google.com>
• STALE152d [PATCH] rust: cred: add safe abstractions for capable() and ns_capable()
  2026-05-13 15:40 · 4 replies this month · Arnav Sharma <hidden>
• STALE153d SUPERSEDED [PATCH 0/3] security, sched: Expand task_setscheduler LSM hook and related fixes
  2026-05-12 19:37 · 9 replies this month · Aaron Tomlin <atomlin@atomlin.com>
• STALE153d [BUG] lsm= with bpf before selinux breaks fscreate with EINVAL
  2026-05-12 19:18 · 6 replies this month · Vitaly Chikunov <hidden>
• STALE153d SUPERSEDED [PATCH v3 0/7] lsm: Replace security_sb_mount with granular mount hooks
  2026-05-12 18:07 · 16 replies this month · Song Liu <song@kernel.org>
• STALE153d Re: [PATCH v2 0/4] Firmware LSM hook
  2026-05-12 08:51 · 2 replies this month · Roberto Sassu <hidden>
• DORMANTno replies [PATCH 0/2] smack: fix incorrect task context in smack_msg_queue_msgrcv
  2026-05-11 00:26 · 2 replies this month · Konstantin Andreev <hidden>
• STALE155d SUPERSEDED [PATCH v2 1/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-05-10 21:22 · 10 replies this month · David Windsor <hidden>
• STALE156d [syzbot] Monthly lsm report (Apr 2026)
  2026-05-10 04:02 · 1 reply this month · syzbot <hidden>