linux-security-module archive · August 2026

516 messages · showing the 100 most-recently-active threads .

• COLD37d [PATCH 0/7] Change skb secmarks to x-array indexes
  2026-08-31 22:48 · 7 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD36d [PATCH bpf-next 0/7] Add new way to add BPF LSM hooks
  2026-08-31 22:42 · 19 replies this month · Anton Protopopov <hidden>
• COLD39d [PATCH v2 -next 0/2] security: Fix call security_backing_file_free second time
  2026-08-31 21:29 · 4 replies this month · Cai Xinchen <hidden>
• COLD39d [PATCH] lsm: update the BUILD_BUG_ON() in audit_log_lsm_data()
  2026-08-31 21:27 · 2 replies this month · Paul Moore <paul@paul-moore.com>
• COLD29d [PATCH v3 00/12] Landlock: Namespace and capability control
  2026-08-31 21:26 · 7 replies this month · Mickaël Salaün <mic@digikod.net>
• COLD39d [PATCH] cred: clarify that task_struct::cred is only for the current task
  2026-08-31 21:23 · 4 replies this month · Jann Horn <jannh@google.com>
• COOLING9d [PATCH] apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
  2026-08-31 20:25 · 2 replies this month · Maxime Bélair <hidden>
• COLD37d [PATCH v2 00/15] BPF interface for applying Landlock rulesets
  2026-08-31 17:41 · 17 replies this month · Justin Suess <hidden>
• COLD22d REVIEWED: 5 (5M) [PATCH AUTOSEL 6.18-5.10] netlabel: fix IPv6 unlabeled address add error handling
  2026-08-31 13:46 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• COLD22d REVIEWED: 1 (1M) [PATCH AUTOSEL 6.18-6.12] apparmor: propagate -ENOMEM correctly in unpack_table
  2026-08-31 13:38 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• COLD22d REVIEWED: 1 (0M) [PATCH AUTOSEL 6.18-5.15] integrity: Check for NULL returned by asymmetric_key_public_key
  2026-08-31 13:35 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• COLD22d [PATCH AUTOSEL 6.18-5.10] ima: return error early if file xattr cannot be changed
  2026-08-31 13:34 · 0 replies this month · Sasha Levin <sashal@kernel.org>
• COLD35d [PATCH v2 00/10] Extend PKWM to support user-created wrapping keys
  2026-08-31 11:18 · 10 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• DORMANTno replies Re: [PATCH 6/8] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management
  2026-08-31 11:15 · 0 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING14d [PATCH v2 0/3] pidfd: add task path ioctls
  2026-08-31 08:49 · 4 replies this month · Chen Linxuan <hidden>
• COOLING10d [PATCH 0/6] landlock: Support MPTCP bind and connect restrictions
  2026-08-31 04:09 · 7 replies this month · Günther Noack <hidden>
• COLD38d [PATCH] keys: set persistent keyring timeout before destination linking
  2026-08-30 18:20 · 0 replies this month · Karl Mehltretter <hidden>
• DORMANTno replies SafeSetID: GID transition policy lookup uses RUID as source, allowlist can be bypassed (setgid to any group including 0)
  2026-08-30 16:18 · 0 replies this month · Yan Yanhx <hidden>
• COLD41d Re: [syzbot] [audit?] BUG: unable to handle kernel paging request in integrity_audit_message
  2026-08-29 18:27 · 2 replies this month · syzbot <hidden>
• COLD41d [PATCH v4] security: Expand task_setscheduler LSM hook
  2026-08-29 15:55 · 2 replies this month · Aaron Tomlin <atomlin@atomlin.com>
• COLD38d REVIEWED: 1 (1M) [PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-08-29 13:09 · 0 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD35d [PATCH v2 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
  2026-08-28 21:10 · 14 replies this month · Jann Horn <jannh@google.com>
• DORMANTno replies [PATCH v1] selftests/landlock: Test abstract socket trace name limits
  2026-08-28 20:00 · 0 replies this month · Mickaël Salaün <mic@digikod.net>
• COLD42d LANDED [Bug] landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader
  2026-08-28 19:12 · 1 reply this month · poppet lovelace <hidden>
• COLD30d [BUG] general protection fault in security_path_post_mknod
  2026-08-28 18:48 · 1 reply this month · Farhad Alemi <hidden>
• COLD42d [PATCH bpf-next 00/13] BPF interface for applying Landlock rulesets
  2026-08-28 18:28 · 9 replies this month · Justin Suess <hidden>
• COLD42d [PATCH] keys: Pin request_key_auth payload in instantiate paths
  2026-08-28 16:23 · 1 reply this month · Shaomin Chen <hidden>
• COLD42d [PATCH v6 0/6] landlock: Restrict whiteout object creation
  2026-08-28 15:45 · 9 replies this month · "Günther Noack" <gnoack@google.com>
• COLD42d LANDED [PATCH v1] landlock: Demonstrate best-effort allowed_access filtering
  2026-08-28 15:43 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• COLD42d [PATCH v4 0/5] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
  2026-08-28 15:40 · 8 replies this month · Justin Suess <hidden>
• COLD42d [PATCH v11 0/9] Implement LANDLOCK_ADD_RULE_QUIET
  2026-08-28 15:38 · 1 reply this month · Tingmao Wang <hidden>
• COLD42d [PATCH v5 0/6] landlock: Add UDP access control support
  2026-08-28 15:36 · 1 reply this month · Matthieu Buffet <hidden>
• DORMANTno replies [PATCH] selftests/landlock: prevent mount propagation from test namespaces
  2026-08-28 12:13 · 0 replies this month · Peng Hao <hidden>
• COLD38d [PATCH] keys: reject descriptions that exceed the index length
  2026-08-28 10:13 · 4 replies this month · Daehyeon Ko <hidden>
• COLD29d REVIEWED: 5 (5M) [PATCH] rust: security: replace `core::mem::zeroed` with `pin_init::zeroed`
  2026-08-28 06:15 · 1 reply this month · Nils Lehnen <hidden>
• COLD42d [BUG] security/keys: out-of-bounds in tpm2_unseal_trusted()
  2026-08-28 05:17 · 1 reply this month · co <hidden>
• COLD30d [PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len
  2026-08-28 01:59 · 3 replies this month · Cen Zhang (Microsoft Security FORGE Labs) <hidden>
• COLD36d [PATCH] keys: Fix key_user use-after-free during ownership changes
  2026-08-27 22:06 · 1 reply this month · Chengfeng Ye <hidden>
• COLD43d Re: [PATCH] ima: select the SHA384 PCR bank for the boot aggregate
  2026-08-27 20:03 · 5 replies this month · Mimi Zohar <zohar@linux.ibm.com>
• COLD37d [PATCH] ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
  2026-08-27 17:43 · 0 replies this month · Bradley Morgan <hidden>
• COLD39d [PATCH 0/8] Extend PKWM to support user-created wrapping keys
  2026-08-27 06:25 · 8 replies this month · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD44d [PATCH] ima: select the SHA384 PCR bank for the boot aggregate
  2026-08-26 21:21 · 1 reply this month · Singh, Jashandeep <hidden>
• COLD44d [GIT PULL] AppArmor updates for v7.3
  2026-08-26 18:41 · 1 reply this month · John Johansen <john.johansen@canonical.com>
• COLD44d [PATCH 0/3] proc,security,selinux: let SELinux block FOLL_FORCE for /proc/self/mem
  2026-08-26 16:17 · 36 replies this month · Jann Horn <jannh@google.com>
• COLD44d [PATCH] selftests/landlock: Fix snprintf truncation checks in test files
  2026-08-26 10:44 · 2 replies this month · Wang Yan <hidden>
• HOTtoday [PATCH] ima: bound line scan in ima_read_policy() to fix OOB read
  2026-08-26 10:08 · 1 reply this month · Fabrice Derepas <hidden>
• COLD31d [PATCH v20 0/8] rust: add `Ownable` trait and `Owned` type
  2026-08-26 09:29 · 16 replies this month · Andreas Hindborg <a.hindborg@kernel.org>
• COLD44d [PATCH v2 0/2] ima: don't measure/appraise files on configfs
  2026-08-26 08:07 · 6 replies this month · Frederick Lawler <hidden>
• COLD27d [RFC PATCH] smack: preserve low-integrity labels on copy via whitelist
  2026-08-26 03:33 · 0 replies this month · Tang Peter <hidden>
• COLD33d [RFC PATCH 00/24] pidfd: add a minimal process spawn builder
  2026-08-25 21:27 · 4 replies this month · Li Chen <hidden>
• COLD45d IN LINUX-NEXT [PATCH] keys: translate request_key_auth pid for the reading procfs instance
  2026-08-25 14:10 · 1 reply this month · Maoyi Xie <hidden>
• COLD45d IN LINUX-NEXT [PATCH v2] keys: fix lost wakeup when reaping a dead key type
  2026-08-25 14:08 · 1 reply this month · Karl Mehltretter <hidden>
• DORMANTno replies Re: 回复: 回复: [RFC PATCH 0/3] smack: add file label preserve mechanism
  2026-08-24 18:07 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD37d [PATCH] ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX
  2026-08-24 16:22 · 0 replies this month · Julian Braha <julianbraha@gmail.com>
• COLD46d [PATCH v2 0/6] landlock: Add scoped access bit for SysV message queues
  2026-08-24 16:03 · 11 replies this month · Justin Suess <hidden>
• COLD46d [PATCH] ima: reject modsig if detached data cannot be supplied
  2026-08-24 16:01 · 1 reply this month · Jérémy Jean <hidden>
• COLD46d [PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig
  2026-08-24 15:54 · 2 replies this month · Julian Braha <julianbraha@gmail.com>
• COLD46d [RFC] IMA: periodic runtime re-measurement of process .text/GOT
  2026-08-24 14:23 · 5 replies this month · Nicolai Kuntze <hidden>
• COLD38d [PATCH 0/2] lsm: expose mount idmaps to inode hooks
  2026-08-24 13:28 · 2 replies this month · Daan De Meyer <hidden>
• DORMANTno replies [syzbot] [apparmor?] WARNING in aa_policy_destroy
  2026-08-24 06:07 · 0 replies this month · syzbot <hidden>
• COLD47d [PATCH] keys: Fix key_user use-after-free during ownership changes
  2026-08-23 17:09 · 1 reply this month · Chengfeng Ye <hidden>
• COLD48d [GIT PULL] capabilities update for v7.3
  2026-08-22 21:06 · 3 replies this month · "Serge E. Hallyn" <serge@hallyn.com>
• COLD32d LANDED [PATCH] landlock: Fix use-after-free of the source's parent directory
  2026-08-22 12:29 · 0 replies this month · Norbert Szetei <hidden>
• COLD49d [GIT PULL] Landlock update for v7.3-rc1
  2026-08-21 20:26 · 1 reply this month · Mickaël Salaün <mic@digikod.net>
• COLD49d [PATCH RESEND v3] hardening: Default randstruct off with rust for better allmodconfig support
  2026-08-21 19:48 · 3 replies this month · Mark Brown <broonie@kernel.org>
• COLD49d [PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
  2026-08-21 14:28 · 6 replies this month · Jan Sebastian Götte <hidden>
• COOLING11d [PATCH 0/6] landlock: Add POSIX message queue scoping
  2026-08-21 08:46 · 1 reply this month · Oxana Kharitonova <hidden>
• COLD49d [PATCH v4 0/5] Fix quota evasion on xfs and add capable_noaudit
  2026-08-21 07:36 · 16 replies this month · cem@kernel.org
• COLD50d [PATCH 0/3] lib/crypto: Provide a function for zeroizing hmac_sha1_ctx
  2026-08-21 00:03 · 6 replies this month · Thomas Huth <hidden>
• COLD50d [PATCH] keys: fix lost wakeup when reaping a dead key type
  2026-08-20 23:28 · 1 reply this month · Karl Mehltretter <hidden>
• COLD50d IN LINUX-NEXT keys: request_key_auth shows a global pid in /proc/keys across pid namespaces
  2026-08-20 21:57 · 4 replies this month · Maoyi Xie <hidden>
• DORMANTno replies Re: 回复: [RFC PATCH 0/3] smack: add file label preserve mechanism
  2026-08-20 20:11 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD50d [PATCH v4 00/19] Landlock tracepoints
  2026-08-20 10:45 · 24 replies this month · Mickaël Salaün <mic@digikod.net>
• DORMANTno replies [PATCH RFC 0/3] pidfd: add task path ioctls
  2026-08-20 05:45 · 3 replies this month · Chen Linxuan via B4 Relay <devnull+me.black-desk.cn@kernel.org>
• COLD51d [GIT PULL] lsm/lsm-pr-20260814
  2026-08-20 00:56 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• COLD51d [GIT PULL] Smack patches for 7.3
  2026-08-20 00:56 · 1 reply this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD51d [GIT PULL] selinux/selinux-pr-20260814
  2026-08-20 00:56 · 1 reply this month · Paul Moore <paul@paul-moore.com>
• COLD51d [PATCH 0/2] ima: don't measure/appraise files on configfs
  2026-08-19 18:40 · 5 replies this month · Frederick Lawler <hidden>
• COLD52d [PATCH bpf-next 0/2] lsm: give BPF programs a way to query locked_down state
  2026-08-18 20:41 · 16 replies this month · Justin Suess <hidden>
• COLD52d IN LINUX-NEXT [syzbot] [lsm?] [integrity?] possible deadlock in ima_file_truncate
  2026-08-18 19:39 · 5 replies this month · syzbot <hidden>
• DORMANTno replies Re: [RFC PATCH 0/3] smack: add file label preserve mechanism
  2026-08-18 16:21 · 0 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD52d [PATCH v2 00/13] CRASH_WIPE_SECRETS: Wipe secrets before kdump (was: CRASH_ZEROIZE)
  2026-08-18 09:03 · 24 replies this month · Jan Sebastian Götte <hidden>
• DORMANTno replies IT教育で、新規事業
  2026-08-18 02:15 · 0 replies this month · 石嶋紗季 <hidden>
• COLD53d [REGRESSION] Apparmor deadlock in 6.12.101 in complain mode
  2026-08-17 12:21 · 1 reply this month · Mattias Åsander <hidden>
• COLD57d [PATCH 0/7] Change skb secmarks to x-array indexes
  2026-08-13 20:59 · 7 replies this month · Casey Schaufler <casey@schaufler-ca.com>
• COLD58d [PATCH v4 0/5] landlock: Restrict whiteout object creation
  2026-08-12 20:18 · 1 reply this month · "Günther Noack" <gnoack@google.com>
• COLD58d [PATCH v5 0/5] landlock: Restrict whiteout object creation
  2026-08-12 19:48 · 1 reply this month · "Günther Noack" <gnoack@google.com>
• COLD58d [PATCH] cred: remove RCU initializer for init_task.cred
  2026-08-12 15:48 · 1 reply this month · Jann Horn <jannh@google.com>
• DORMANTno replies [PATCH] ima: reject a kexec buffer whose declared size exceeds the buffer
  2026-08-12 14:18 · 0 replies this month · Fabrice Derepas <hidden>
• COLD59d Re: [PATCH 4/4] security/keys: zeroize key payloads before kdump
  2026-08-11 14:59 · 1 reply this month · Jarkko Sakkinen <jarkko@kernel.org>
• COLD59d [PATCH v3 0/4] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
  2026-08-11 07:16 · 10 replies this month · Justin Suess <hidden>
• COLD60d [PATCH] apparmor: fix out-of-bounds write when null terminating a label vec
  2026-08-10 23:56 · 1 reply this month · Hyunwoo Kim <hidden>
• COLD59d Re: [PATCH 2/4] kexec: add CRASH_ZEROIZE to wipe secrets before kdump
  2026-08-10 15:30 · 0 replies this month · Jarkko Sakkinen <jarkko@kernel.org>
• COLD60d IN LINUX-NEXT [PATCH] KEYS: trusted: Fix TPM teardown ordering
  2026-08-10 15:26 · 1 reply this month · Chengfeng Ye <hidden>
• COLD60d [PATCH] apparmor: fix integer overflow in verify_tags() bounds check
  2026-08-10 07:26 · 2 replies this month · Fabrice Derepas <hidden>
• STALE64d [PATCH v5 0/2] Add Apple T2 NHI device links
  2026-08-07 01:31 · 1 reply this month · Atharva Tiwari <hidden>
• STALE64d [PATCH v2] apparmor: fix cred UAF caused by begin_current_label_crit_section()
  2026-08-07 01:11 · 1 reply this month · Jann Horn <jannh@google.com>
• STALE64d [PATCH] smack: fix cred UAF in smack_file_send_sigiotask()
  2026-08-06 19:46 · 1 reply this month · Jann Horn <jannh@google.com>
• STALE64d [PATCH v2 00/17] Landlock tracepoints
  2026-08-06 18:22 · 2 replies this month · Mickaël Salaün <mic@digikod.net>
• STALE64d [PATCH v3 00/20] Landlock tracepoints
  2026-08-06 17:41 · 2 replies this month · Mickaël Salaün <mic@digikod.net>