linux-security-module archive · June 2026

540 messages · showing the 100 most-recently-active threads .

• COOLING7d [PATCH v3 stable/linux-6.12.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-30 22:23 · 4 replies this month · Cai Xinchen <hidden>
• COOLING6d [PATCH v4 bpf-next 0/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-30 19:20 · 5 replies this month · David Windsor <hidden>
• COOLING5d [PATCH] lsm: cleanup repeated lsm_blob_size_update() calls in lsm_prepare()
  2026-06-30 16:47 · 1 reply this month · Matt Bobrowski <mattbobrowski@google.com>
• COOLING8d [PATCH stable/linux-5.10.y 0/7] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-30 11:01 · 10 replies this month · Cai Xinchen <hidden>
• COOLING9d REVIEWED: 12 (12M) [PATCH v6] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
  2026-06-29 14:37 · 1 reply this month · Trevor Chan <hidden>
• COOLING6d [RFC PATCH 0/4] Introduce capable_noaudit
  2026-06-29 13:49 · 17 replies this month · cem@kernel.org
• COOLING9d REVIEWED: 12 (12M) [PATCH v7] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
  2026-06-29 04:39 · 1 reply this month · Trevor Chan <hidden>
• COOLING10d REVIEWED: 12 (12M) [PATCH v5] rust: aref: make `AlwaysRefCounted::inc_ref` an associated function
  2026-06-28 09:29 · 0 replies this month · Trevor Chan <hidden>
• COOLING10d [PATCH v2 stable/linux-6.6.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-28 03:33 · 4 replies this month · Cai Xinchen <hidden>
• COOLING10d [PATCH v2 stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-27 16:35 · 3 replies this month · Cai Xinchen <hidden>
• COOLING11d [syzbot] [tomoyo?] KMSAN: uninit-value in tomoyo_path_chown (3)
  2026-06-27 05:44 · 2 replies this month · syzbot <hidden>
• COOLING11d [PATCH] tomoyo: Enforce connect policy in TCP Fast Open
  2026-06-27 05:29 · 1 reply this month · Matthieu Buffet <hidden>
• COOLING11d [PATCH bpf-next v2 0/5] Verify BPF signed loader at load time
  2026-06-27 01:32 · 17 replies this month · Daniel Borkmann <daniel@iogearbox.net>
• COOLING6d IN LINUX-NEXT Landlock: LANDLOCK_ACCESS_NET_CONNECT_TCP bypass via TCP Fast Open
  2026-06-26 21:30 · 9 replies this month · Bryam Vargas <hidden>
• COOLING11d [PATCH v2 stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-26 17:55 · 3 replies this month · Cai Xinchen <hidden>
• WARM1d [PATCH v19 0/8] rust: add `Ownable` trait and `Owned` type
  2026-06-26 11:56 · 8 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• COOLING12d [PATCH v2 stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-26 07:08 · 3 replies this month · Cai Xinchen <hidden>
• DORMANTno replies [PATCH] selftests/landlock: Fix snprintf truncation checks in test files
  2026-06-26 07:00 · 0 replies this month · Wang Yan <hidden>
• COOLING5d [PATCH -next 0/2] Fix call security_backing_file_free second time
  2026-06-26 01:34 · 2 replies this month · Cai Xinchen <hidden>
• COOLING12d [PATCH bpf-next v3 0/2] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
  2026-06-25 20:48 · 17 replies this month · David Windsor <hidden>
• COOLING12d [PATCH v18 0/8] rust: add `Ownable` trait and `Owned` type
  2026-06-25 20:42 · 11 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• COOLING12d [PATCH] LSM: check if lsmprop_to_secctx call is supported by LSM
  2026-06-25 15:24 · 4 replies this month · Sebastian Bockholt <hidden>
• WARM1d [PATCH] Documentation: landlock: Document fs.resolve_unix audit blocker
  2026-06-25 12:31 · 1 reply this month · Doehyun Baek <hidden>
• HOTtoday [PATCH] landlock: Documentation wording cleanups
  2026-06-25 12:29 · 1 reply this month · Günther Noack <hidden>
• COOLING13d [stable/linux-6.12.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-25 11:35 · 3 replies this month · Cai Xinchen <hidden>
• COOLING13d [stable/linux-6.18.y 0/2] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-25 11:07 · 4 replies this month · Cai Xinchen <hidden>
• COOLING6d REVIEWED: 1 (0M) Re: [PATCH] selinux: check connect-related permissions on TCP Fast Open
  2026-06-25 01:50 · 0 replies this month · Bryam Vargas <hidden>
• COOLING13d [GIT PULL] AppArmor updates for 7.2-rc1
  2026-06-24 22:17 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• COOLING13d [PATCH v17 00/10] rust: add `Ownable` trait and `Owned` type
  2026-06-24 19:17 · 26 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• COOLING14d [PATCH] landlock: shrink tsync works[] on partial allocation failure
  2026-06-24 12:48 · 2 replies this month · Peng Hao <hidden>
• COLD15d [PATCH] apparmor: mv get_loaddata_common_ref() into CONFIG_SECURITY_APPARMOR_EXPORT_BINARY block
  2026-06-23 07:28 · 1 reply this month · <hidden>
• COLD15d [PATCH] tests: add a regression test for the TCP Fast Open connect-mediation bypass
  2026-06-23 07:20 · 1 reply this month · Bryam Vargas <hidden>
• COLD15d [PATCH] apparmor: mediate the implicit connect of TCP fast open sendmsg
  2026-06-23 07:15 · 1 reply this month · Bryam Vargas via B4 Relay <devnull+hexlabsecurity.proton.me@kernel.org>
• COLD15d AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM)
  2026-06-23 07:13 · 2 replies this month · Bryam Vargas <hidden>
• COLD15d IN LINUX-NEXT [PATCH 1/2] bpf: lsm: disable xfrm_decode_session hook attachment
  2026-06-23 03:11 · 2 replies this month · Bradley Morgan <hidden>
• DORMANTno replies Re: [PATCH] keys: trusted: dcp: Make dcp_trusted_key_ops const
  2026-06-22 15:24 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• COLD16d [stable/linux-6.6.y 0/3] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls
  2026-06-22 02:47 · 3 replies this month · Cai Xinchen <hidden>
• COLD17d [PATCH v9 0/9] Implement LANDLOCK_ADD_RULE_NO_INHERIT
  2026-06-21 03:52 · 9 replies this month · Justin Suess <hidden>
• DORMANTno replies [syzbot] Monthly tomoyo report (Jun 2026)
  2026-06-20 12:32 · 0 replies this month · syzbot <hidden>
• COLD18d [GIT PULL] Landlock update for v7.2-rc1
  2026-06-19 19:25 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• COLD19d [PATCH v5 0/8] lsm: Replace security_sb_mount with granular mount hooks
  2026-06-19 10:17 · 6 replies this month · Song Liu <song@kernel.org>
• COLD19d [PATCH] selftests/landlock: explicitly disable audit
  2026-06-19 09:09 · 3 replies this month · Maximilian Heyne <hidden>
• DORMANTno replies [PATCH] landlock: work around gcc-16 -Wuninitialized warning
  2026-06-19 08:21 · 0 replies this month · Arnd Bergmann <arnd@kernel.org>
• COLD19d [PATCH] KEYS: avoid filesystem reclaim while holding keyring->sem
  2026-06-18 22:33 · 1 reply this month · Mohammed EL Kadiri <hidden>
• COLD19d Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD
  2026-06-18 20:11 · 10 replies this month · Bryam Vargas <hidden>
• DORMANTno replies Re: [PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks
  2026-06-18 19:33 · 0 replies this month · Bryam Vargas <hidden>
• COLD21d [GIT PULL] selinux/selinux-pr-20260615
  2026-06-17 13:06 · 3 replies this month · Paul Moore <paul@paul-moore.com>
• COLD21d [GIT PULL] lsm/lsm-pr-20260615
  2026-06-17 11:59 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• COLD21d [PATCH v3] security: Expand task_setscheduler LSM hook to include CPU affinity mask
  2026-06-17 10:52 · 3 replies this month · Aaron Tomlin <atomlin@atomlin.com>
• COLD21d Sashiko reviews for the LSM mailing list
  2026-06-17 02:20 · 8 replies this month · Mickaël Salaün <mic@digikod.net>
• COOLING5d [PATCH] security: clarify task_prctl hook documentation
  2026-06-16 17:19 · 2 replies this month · Bill Roberts <hidden>
• COLD23d [PATCH 0/2] security/keys: replace BUG() in unreachable default cases
  2026-06-15 12:06 · 4 replies this month · Mohammed EL Kadiri <hidden>
• COLD23d [PATCH] keys: Pin request_key_auth payload in instantiate paths
  2026-06-15 11:53 · 7 replies this month · Shaomin Chen <hidden>
• COLD23d [PATCH] keys: allow request-key path to be configured via Kconfig
  2026-06-15 11:49 · 9 replies this month · Gary Guo <gary@kernel.org>
• COLD23d [PATCH v2 v2] evm: check return values of crypto_shash functions
  2026-06-15 07:43 · 1 reply this month · Daniel Hodges <hidden>
• COLD23d REVIEWED: 1 (1M) [PATCH] lsm: hold cred_guard_mutex for lsm_set_self_attr()
  2026-06-14 20:25 · 2 replies this month · Stephen Smalley <stephen.smalley.work@gmail.com>
• COLD24d [PATCH v5 0/6] landlock: Add UDP access control support
  2026-06-13 20:56 · 7 replies this month · Matthieu Buffet <hidden>
• COLD24d [PATCH] Add LoadPin support for eBPF program loading
  2026-06-13 18:59 · 5 replies this month · Alex Roberts <hidden>
• WARM2d [PATCH 09/10] docs/zh_CN: add LSM/ipe Chinese translation
  2026-06-13 15:08 · 2 replies this month · Yan Zhu <hidden>
• COLD25d [PATCH] apparmor: fix use-after-free in policy replacement path
  2026-06-13 09:42 · 1 reply this month · Junxiao Chang <hidden>
• COLD25d [PATCH 1/3] apparmor: Fix return in ns_mkdir_op
  2026-06-13 07:13 · 1 reply this month · Hongling Zeng <hidden>
• COLD25d [PATCH] apparmor/lsm: Fix aa_dfa_unpack's error handling in aa_setup_dfa_engine
  2026-06-13 04:43 · 1 reply this month · GONG Ruiqi <hidden>
• COLD25d [PATCH RESEND] apparmor: Fix string overrun due to missing termination
  2026-06-13 04:40 · 1 reply this month · Daniel J Blueman <hidden>
• COLD25d [PATCH bpf-next 0/5] Verify BPF signed loader at load time
  2026-06-12 20:56 · 9 replies this month · Daniel Borkmann <daniel@iogearbox.net>
• DORMANTno replies [PATCH v2] landlock: Set audit_net.sk for socket access checks
  2026-06-12 17:28 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation
  2026-06-12 16:08 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 08/10] docs/zh_CN: add LSM/SafeSetID Chinese translation
  2026-06-12 16:03 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 03/10] docs/zh_CN: add LSM/LoadPin Chinese translation
  2026-06-12 16:02 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 10/10] docs/zh_CN: add LSM/landlock Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 05/10] docs/zh_CN: add LSM/Smack Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 01/10] docs/zh_CN: add LSM/index Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 00/10] docs/zh_CN: add LSM admin-guide Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 06/10] docs/zh_CN: add LSM/tomoyo Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 07/10] docs/zh_CN: add LSM/Yama Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 04/10] docs/zh_CN: add LSM/SELinux Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• DORMANTno replies [PATCH 02/10] docs/zh_CN: add LSM/apparmor Chinese translation
  2026-06-12 15:59 · 0 replies this month · Yan Zhu <hidden>
• COLD26d [PATCH v3 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT
  2026-06-12 08:34 · 5 replies this month · "Günther Noack" <gnoack@google.com>
• COLD26d [PATCH v11 0/9] Implement LANDLOCK_ADD_RULE_QUIET
  2026-06-12 01:49 · 9 replies this month · Tingmao Wang <hidden>
• COLD26d [PATCH v10 0/9] Implement LANDLOCK_ADD_RULE_QUIET
  2026-06-12 01:13 · 19 replies this month · Tingmao Wang <hidden>
• COLD27d [PATCH v2] hardening: Default randstruct off with rust for better allmodconfig support
  2026-06-11 09:23 · 3 replies this month · Mark Brown <broonie@kernel.org>
• DORMANTno replies REVIEWED: 14 (14M) [PATCH v2] cred: prevent slab cache merging for cred_jar
  2026-06-11 07:02 · 0 replies this month · Mohammed EL Kadiri <hidden>
• COLD27d [PATCH v4 0/7] landlock: Add UDP access control support
  2026-06-11 00:27 · 9 replies this month · Matthieu Buffet <hidden>
• COLD27d [PATCH] cred: prevent slab cache merging for cred_jar
  2026-06-10 23:53 · 4 replies this month · Mohammed EL Kadiri <hidden>
• COLD27d [bug report] apparmor: add support loading per permission tagging
  2026-06-10 23:12 · 1 reply this month · Dan Carpenter <hidden>
• COLD27d [PATCH 00/11] Convert moduleparams to seq_buf
  2026-06-10 21:06 · 6 replies this month · Kees Cook <kees@kernel.org>
• COLD27d [PATCH] hardening: Default randstruct off with rust for better allmodconfig support
  2026-06-10 20:42 · 2 replies this month · Mark Brown <broonie@kernel.org>
• COLD28d IN LINUX-NEXT: 9 (9M) [PATCH v2] keys: prevent slab cache merging for key_jar
  2026-06-10 09:57 · 1 reply this month · Mohammed EL Kadiri <hidden>
• COLD28d [PATCH v2 0/3] landlock: Restrict renameat2 with RENAME_WHITEOUT
  2026-06-10 09:29 · 2 replies this month · "Günther Noack" <gnoack@google.com>
• COLD28d [PATCH v2 00/16] Bump minimum version of LLVM for building the kernel to 17.0.1
  2026-06-09 23:40 · 1 reply this month · Nathan Chancellor <nathan@kernel.org>
• COLD28d [PATCH v2] tpm: use a map for tpm2_calc_ordinal_duration()
  2026-06-09 15:44 · 2 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• COLD28d [PATCH] keys: prevent slab cache merging for key_jar
  2026-06-09 15:36 · 7 replies this month · Mohammed EL Kadiri <hidden>
• COOLING5d [PATCH v6 0/4] introduce IMA_INIT_LATE_SYNC option
  2026-06-09 11:13 · 10 replies this month · Yeoreum Yun <hidden>
• COLD29d [PATCH v7 00/12] ima: Exporting and deleting IMA measurement records from kernel memory
  2026-06-08 16:23 · 14 replies this month · Roberto Sassu <hidden>
• DORMANTno replies [PATCH] apparmor: check label build before no_new_privs test
  2026-06-08 06:36 · 0 replies this month · Ruoyu Wang <hidden>
• DORMANTno replies security_inode_follow_link: KASAN UAF localization report
  2026-06-08 05:31 · 0 replies this month · David Maximiliano Hermitte <hidden>
• COLD30d IN LINUX-NEXT [PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE)
  2026-06-08 04:47 · 1 reply this month · <hidden>
• COLD30d [PATCH v5 0/4] introduce IMA_INIT_LATE_SYNC option
  2026-06-08 04:01 · 12 replies this month · Yeoreum Yun <hidden>
• COLD30d [PATCH v4 0/3] introduce IMA_INIT_LATE_SYNC option
  2026-06-08 03:54 · 8 replies this month · Yeoreum Yun <hidden>
• COLD30d IN LINUX-NEXT [PATCH] KEYS: Use acquire when reading state in keyring search
  2026-06-08 03:49 · 2 replies this month · Gui-Dong Han <hidden>
• COLD31d [PATCH] apparmor: Constify 'nulldfa_src' and 'stacksplitdfa_src' arrays
  2026-06-06 17:19 · 1 reply this month · Len Bao <hidden>