Toggle navigation
Patchwork
Security modules development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: State =
Action Required
| 12016 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Mainlined
Queued
Needs ACK
Handled Elsewhere
In Next
Search
Archived
No
Yes
Both
Delegate
------
Nobody
holtmann
holtmann
holtmann
agk
mchehab
mchehab
gregkh
gregkh
mtosatti
lethal
lethal
avi
cvaroqui
jbrassow
mikulas
dtor
bmarzins
tmlind
jmberg
jmberg
mcgrof
mcgrof
lenb
lenb
kyle
felipebalbi
varenet
helge
helge
khilman
khilman
khilman
khilman
jwoithe
mlin
Zhang Rui
Zhang Rui
iksaif
cjackiewicz
hmh
jbarnes
jbarnes
jbarnes
willy
snitzer
iwamatsu
dougsland
mjg59
rafael
rafael
rafael
ericvh@gmail.com
ykzhao
venkip
sandeen
pwsan
lucho@ionkov.net
rminnich
anholt
aystarik
roland
shefty
mason
glikely
krh
djbw
djbw
djbw
cmarinas
doyu
jrn
sage
tomba
mmarek
cjb
trondmy
jikos
bcousson
jic23
olof
olof
olof
nsekhar
weiny2
horms
horms
bwidawsk
bwidawsk
shemminger
eulfhan
josef
josef
josef
dianders
jpan9
hal
kdave
bleung
evalenti
jlbec
bhelgaas
vkoul
vkoul
szlin
davejiang
markgross
tagr
tiwai
vireshk
mmind
dledford
geert
geert
herbert
herbert
kvalo
kvalo
kvalo
bentiss
arend
rzwisler
stellarhopper
stellarhopper
jejb
matthias_bgg
dvhart
axboe
axboe
pcmoore
pcmoore
pcmoore
mkp
mkp
stefan_schmidt
leon
lucvoo
jsakkine
jsakkine
jsakkine
bamse
bamse
demarchi
krzk
groeck
groeck
sboyd
sboyd
mturquette
mturquette
0andriy
carlocaione
luca
dgc
kbingham
derosier
narmstrong
narmstrong
atull
tytso
tytso
djwong
bvanassche
omos
jpirko
jpirko
GustavoARSilva
pkshih
patersonc
brauner
shuahkh
shuahkh
shuahkh
palmer
palmer
jgg
Kishon
idosch
labbott
jsimmons
broonie
broonie
broonie
mricon
mricon
mricon
kees
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
arnd
linusw
perfinion
bbrezillon
bachradsusi
rostedt
rostedt
kholk
nbd
ebiggers
ebiggers
pavelm
sds
m0reeze
ganis
jwcart2
matttbe
andmur01
lorpie01
chanwoochoi
dlezcano
jhedberg
vudentz
robertfoss
bgix
tedd_an
tsbogend
wens
wcrobert
robher
kstewart
kwilczynski
hansg
bpf
netdev
dsa
ethtool
netdrv
martineau
abelloni
trix
pabeni
mani_sadhasivam
mlimonci
liusong6
mjp
tohojo
pmalani
prestwoj
prestwoj
dhowells
tzungbi
conchuod
paulmck
jes
mtkaczyk
colyli
cem
pateldipen1984
iweiny
iweiny
bjorn
mhiramat
JanKiszka
jaegeuk
mraynal
aring
konradybcio
ij
Hailan
jstitt007
denkenz
denkenz
mkorenbl
jjohnson
frank_li
geliang
mdraidci
mdraidci
peluse
Apply
«
1
2
...
4
5
6
…
120
121
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[v34,29/29] AppArmor: Remove the exclusive flag
LSM: Module stacking for AppArmor
2 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,28/29] LSM: Add /proc attr entry for full LSM context
LSM: Module stacking for AppArmor
- 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,27/29] Audit: Add record for multiple object contexts
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,26/29] Audit: Add record for multiple task security contexts
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,25/29] Audit: Allow multiple records in an audit_buffer
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,24/29] LSM: Add a function to report multiple LSMs
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,23/29] Audit: Create audit_stamp structure
LSM: Module stacking for AppArmor
1 - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,22/29] Audit: Keep multiple LSM data in audit_names
LSM: Module stacking for AppArmor
1 - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,21/29] LSM: Extend security_secid_to_secctx to include module selection
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,20/29] binder: Pass LSM identifier for confirmation
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,19/29] NET: Store LSM netlabel data in a lsmblob
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,18/29] LSM: security_secid_to_secctx in netlink netfilter
LSM: Module stacking for AppArmor
3 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,17/29] LSM: Use lsmcontext in security_inode_getsecctx
LSM: Module stacking for AppArmor
3 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,16/29] LSM: Use lsmcontext in security_secid_to_secctx
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,15/29] LSM: Ensure the correct LSM context releaser
LSM: Module stacking for AppArmor
3 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,14/29] LSM: Specify which LSM to display
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,13/29] LSM: Use lsmblob in security_cred_getsecid
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,12/29] LSM: Use lsmblob in security_inode_getsecid
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,11/29] LSM: Use lsmblob in security_current_getsecid
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,10/29] LSM: Use lsmblob in security_ipc_getsecid
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,09/29] LSM: Use lsmblob in security_secid_to_secctx
LSM: Module stacking for AppArmor
1 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,08/29] LSM: Use lsmblob in security_secctx_to_secid
LSM: Module stacking for AppArmor
1 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,07/29] LSM: Use lsmblob in security_kernel_act_as
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,06/29] LSM: Use lsmblob in security_audit_rule_match
LSM: Module stacking for AppArmor
1 - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,05/29] IMA: avoid label collisions with stacked LSMs
LSM: Module stacking for AppArmor
- - -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,04/29] LSM: provide lsm name and id slot mappings
LSM: Module stacking for AppArmor
1 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,03/29] LSM: Add the lsmblob data structure.
LSM: Module stacking for AppArmor
- 1 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,02/29] LSM: Infrastructure management of the sock security
LSM: Module stacking for AppArmor
2 2 -
-
-
-
2022-04-07
Casey Schaufler
New
[v34,01/29] integrity: disassociate ima_filter_rule from security_audit_rule
LSM: Module stacking for AppArmor
1 - -
-
-
-
2022-04-07
Casey Schaufler
New
security: don't treat structure as an array of struct hlist_head
security: don't treat structure as an array of struct hlist_head
- - -
-
-
-
2022-04-07
Bill Wendling
New
[v3,1/1] ima: remove the IMA_TEMPLATE Kconfig option
ima: fix boot command line issue
- - -
-
-
-
2022-04-07
Guozihua (Scott)
New
[v2,1/1] ima: remove the IMA_TEMPLATE Kconfig option
ima: fix boot command line issue
- - -
-
-
-
2022-04-06
Guozihua (Scott)
New
[v2] ima: remove the IMA_TEMPLATE Kconfig option
[v2] ima: remove the IMA_TEMPLATE Kconfig option
- - -
-
-
-
2022-04-06
Guozihua (Scott)
New
[v2] ima: remove the IMA_TEMPLATE Kconfig option
[v2] ima: remove the IMA_TEMPLATE Kconfig option
- - -
-
-
-
2022-04-06
Guozihua (Scott)
New
[7/7] integrity: Use root of trust signature restriction
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[6/7] KEYS: X.509: Flag Intermediate CA certs as built in
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[5/7] KEYS: Introduce sig restriction that validates root of trust
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[4/7] KEYS: Introduce a builtin root of trust key flag
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[3/7] KEYS: X.509: Parse Key Usage
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[2/7] KEYS: X.509: Parse Basic Constraints for CA
Add CA enforcement keyring restrictions
- - -
-
-
-
2022-04-06
Eric Snowberg
New
[1/7] KEYS: Create static version of public_key_verify_signature
Add CA enforcement keyring restrictions
- 1 -
-
-
-
2022-04-06
Eric Snowberg
New
[v2] keys: remove __user annotation from function prototype
[v2] keys: remove __user annotation from function prototype
- 1 -
-
-
-
2022-04-06
Randy Dunlap
New
[POC,USER,SPACE] Introduce LSM to protect pinned objects
[POC,USER,SPACE] Introduce LSM to protect pinned objects
- - -
-
-
-
2022-04-05
Roberto Sassu
New
[5.15,235/913] KEYS: trusted: Avoid calling null function trusted_key_exit
Untitled series #629080
- 1 -
-
-
-
2022-04-05
Greg KH
New
[5.15,137/913] landlock: Use square brackets around "landlock-ruleset"
Untitled series #629080
- - -
-
-
-
2022-04-05
Greg KH
New
[5.16,0248/1017] KEYS: trusted: Avoid calling null function trusted_key_exit
Untitled series #629048
- 1 -
-
-
-
2022-04-05
Greg KH
New
[5.16,0143/1017] landlock: Use square brackets around "landlock-ruleset"
Untitled series #629048
- - -
-
-
-
2022-04-05
Greg KH
New
[5.17,0255/1126] KEYS: trusted: Avoid calling null function trusted_key_exit
Untitled series #629004
- 1 -
-
-
-
2022-04-05
Greg KH
New
[5.17,0138/1126] landlock: Use square brackets around "landlock-ruleset"
Untitled series #629004
- - -
-
-
-
2022-04-05
Greg KH
New
[v9,4/4] docs: security: Add secrets/coco documentation
Allow guest access to EFI confidential computing secret area
- 1 -
-
-
-
2022-03-31
Dov Murik
New
[v9,3/4] efi: Register efi_secret platform device if EFI secret area is declared
Allow guest access to EFI confidential computing secret area
- 1 -
-
-
-
2022-03-31
Dov Murik
New
[v9,2/4] virt: Add efi_secret module to expose confidential computing secrets
Allow guest access to EFI confidential computing secret area
- 1 -
-
-
-
2022-03-31
Dov Murik
New
[v9,1/4] efi: Save location of EFI confidential computing area
Allow guest access to EFI confidential computing secret area
- 1 -
-
-
-
2022-03-31
Dov Murik
New
[5/5] smack: Remove redundant assignments
[1/5] apparmor: Remove redundant assignments
- - -
-
-
-
2022-03-31
Michal Orzel
New
[3/5] keys: Remove redundant assignments
[1/5] apparmor: Remove redundant assignments
1 - -
-
-
-
2022-03-31
Michal Orzel
New
[2/5] integrity: Remove redundant assignments
[1/5] apparmor: Remove redundant assignments
- - -
-
-
-
2022-03-31
Michal Orzel
New
[1/5] apparmor: Remove redundant assignments
[1/5] apparmor: Remove redundant assignments
- - -
-
-
-
2022-03-31
Michal Orzel
New
[v2,12/12] landlock: Add design choices documentation for filesystem access rights
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,11/12] landlock: Document good practices about filesystem policies
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,10/12] landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,09/12] samples/landlock: Add support for file reparenting
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,08/12] selftest/landlock: Add 11 new test suites dedicated to file reparenting
Landlock: file linking and renaming support
- - -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,07/12] landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,06/12] LSM: Remove double path_rename hook calls for RENAME_EXCHANGE
Landlock: file linking and renaming support
2 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,05/12] landlock: Move filesystem helpers and add a new one
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,04/12] landlock: Fix same-layer rule unions
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,03/12] landlock: Create find_rule() from unmask_layers()
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,02/12] landlock: Reduce the maximum number of layers to 16
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[v2,01/12] landlock: Define access_mask_t to enforce a consistent access mask size
Landlock: file linking and renaming support
- 1 -
-
-
-
2022-03-29
Mickaël Salaün
New
[18/18] bpf-preload/selftests: Preload a test eBPF program and check pinned objects
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[17/18] bpf-preload/selftests: Add test for automatic generation of preload methods
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[16/18] bpf-preload: Do kernel mount to ensure that pinned objects don't disappear
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[15/18] bpf-preload: Generate code of kernel module to preload
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[14/18] bpf-preload: Switch to new preload registration method
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[13/18] bpf-preload: Move pinned links and maps to a dedicated directory in bpffs
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[12/18] bpf-preload: Implement new registration method for preloading eBPF programs
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[11/18] bpf-preload: Store multiple bpf_preload_ops structures in a linked list
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[10/18] bpf-preload: Generate bpf_preload_ops
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[09/18] bpf-preload: Generate code to pin non-internal maps
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[08/18] bpf-preload: Generate load_skel()
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[07/18] bpf-preload: Generate preload()
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[06/18] bpf-preload: Generate free_objs_and_skel()
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[05/18] bpf-preload: Generate static variables
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[04/18] bpf-preload: Export and call bpf_obj_do_pin_kernel()
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[03/18] bpf-preload: Generalize object pinning from the kernel
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[02/18] bpf-preload: Move bpf_preload.h to include/linux
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[01/18] bpf: Export bpf_link_inc()
bpf: Secure and authenticated preloading of eBPF programs
- - -
-
-
-
2022-03-28
Roberto Sassu
New
[v2] KEYS: Improve error handling in the script
[v2] KEYS: Improve error handling in the script
- - -
-
-
-
2022-03-25
Denis Glazkov
New
[RFC] getvalues(2) prototype
[RFC] getvalues(2) prototype
- - -
-
-
-
2022-03-22
Miklos Szeredi
New
[GIT,PULL] SELinux patches for v5.18
[GIT,PULL] SELinux patches for v5.18
- - -
-
-
-
2022-03-21
Paul Moore
New
[GIT,PULL] Smack patches for v5.18
[GIT,PULL] Smack patches for v5.18
- - -
-
-
-
2022-03-21
Casey Schaufler
New
[GIT,PULL] Add trusted_for(2) (was O_MAYEXEC)
[GIT,PULL] Add trusted_for(2) (was O_MAYEXEC)
- - -
-
-
-
2022-03-21
Mickaël Salaün
New
[GIT,PULL] Landlock fixes for v5.18
[GIT,PULL] Landlock fixes for v5.18
- - -
-
-
-
2022-03-21
Mickaël Salaün
New
ima: remove template "ima" as the compiled default
ima: remove template "ima" as the compiled default
- - -
-
-
-
2022-03-21
Guozihua (Scott)
New
[net-next] netlabel: fix out-of-bounds memory accesses
[net-next] netlabel: fix out-of-bounds memory accesses
1 - -
-
-
-
2022-03-18
wangyufen
New
[-next] apparmor: Fix some kernel-doc comments
[-next] apparmor: Fix some kernel-doc comments
1 - -
-
-
-
2022-03-17
Yang Li
New
[v6,4/4] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
- 2 3
-
-
-
2022-03-16
Ahmad Fatoum
New
[v6,3/4] crypto: caam - add in-kernel interface for blob generator
KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
- 2 2
-
-
-
2022-03-16
Ahmad Fatoum
New
[v6,2/4] KEYS: trusted: allow use of kernel RNG for key material
KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
2 3 -
-
-
-
2022-03-16
Ahmad Fatoum
New
[v6,1/4] KEYS: trusted: allow use of TEE as backend without TCG_TPM support
KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
- 2 2
-
-
-
2022-03-16
Ahmad Fatoum
New
«
1
2
...
4
5
6
…
120
121
»