Show patches with: Submitter = Mickaël Salaün       |    Archived = No       |   388 patches
« 1 2 3 4 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v3,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v3,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v2,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v20,6/6] samples/check-exec: Add an enlighten "inc" interpreter and 28 tests Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Superseded
[v20,5/6] samples/check-exec: Add set-exec Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Superseded
[v20,4/6] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Superseded
[v20,3/6] selftests/exec: Add 32 tests for AT_CHECK and exec securebits Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Superseded
[v20,2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Superseded
[v20,1/6] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Superseded
[RFC,v1,7/7] tomoyo: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,6/7] smack: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,5/7] ipe: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,4/7] integrity: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,3/7] selinux: Fix inode numbers in error messages [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,2/7] audit: Fix inode numbers [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - 1 - --- 2024-10-10 Mickaël Salaün pcmoore Handled Elsewhere
[v1] landlock: Improve documentation of previous limitations [v1] landlock: Improve documentation of previous limitations - 1 - --- 2024-10-04 Mickaël Salaün Handled Elsewhere
[v1,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - 1 - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.12 [GIT,PULL] Landlock updates for v6.12 - - - --- 2024-09-23 Mickaël Salaün Handled Elsewhere
[v3,2/2] security: Update file_set_fowner documentation [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v2] fs,security: Fix file_set_fowner LSM hook inconsistencies [v2] fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Superseded
fs,security: Fix file_set_fowner LSM hook inconsistencies fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Changes Requested
[v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() [v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() - - - --- 2024-07-29 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.11 [GIT,PULL] Landlock fix for v6.11 - - - --- 2024-07-20 Mickaël Salaün Handled Elsewhere
[RFC,v1,3/3] landlock: Document network restrictions tied to sockets Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,2/3] selftests/landlock: Add test for socket's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,1/3] landlock: Use socket's domain instead of current's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v19,5/5] samples/should-exec: Add set-should-exec Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,4/5] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,3/5] selftests/exec: Add tests for AT_CHECK and related securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,1/5] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[GIT,PULL] Landlock fix for v6.10-rc2 [GIT,PULL] Landlock fix for v6.10-rc2 - - - --- 2024-05-31 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Add layout1.refer_mount_root Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.10 [GIT,PULL] Landlock updates for v6.10 - - - --- 2024-05-16 Mickaël Salaün Accepted
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
MAINTAINER: Add Günther Noack as Landlock reviewer MAINTAINER: Add Günther Noack as Landlock reviewer 1 - - --- 2024-04-25 Mickaël Salaün Handled Elsewhere
[v4,RESEND,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Improve AF_UNSPEC tests [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v4,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v3,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[RFC] fs: Add an use vfs_get_ioctl_handler() [RFC] fs: Add an use vfs_get_ioctl_handler() - - - --- 2024-03-15 Mickaël Salaün pcmoore RFC
[GIT,PULL] Landlock updates for v6.9 [GIT,PULL] Landlock updates for v6.9 - - - --- 2024-03-13 Mickaël Salaün pcmoore Handled Elsewhere
samples/landlock: Don't error out if a file path cannot be opened samples/landlock: Don't error out if a file path cannot be opened - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
landlock: Use f_cred in security_file_open() hook landlock: Use f_cred in security_file_open() hook - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[2/2] landlock: Rename "ptrace" files to "task" [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[1/2] landlock: Simplify current_check_access_socket() [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
selftests/harness: Fix TEST_F()'s vfork handling selftests/harness: Fix TEST_F()'s vfork handling - 1 2 --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v2,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fixes for v6.8-rc7 [GIT,PULL] Landlock fixes for v6.8-rc7 - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,8/8] kunit: Add tests for faults Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,7/8] kunit: Print last test location on fault Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,5/8] kunit: Handle test faults Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,4/8] kunit: Fix timeout message Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,3/8] kunit: Fix kthread reference Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,2/8] kunit: Handle thread creation error Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,1/8] kunit: Run tests when the kernel is fully setup Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v2,2/2] landlock: Warn once if a Landlock action is requested while disabled [v2,1/2] landlock: Extend documentation for kernel support - 2 - --- 2024-02-27 Mickaël Salaün Handled Elsewhere
[v2,1/2] landlock: Extend documentation for kernel support [v2,1/2] landlock: Extend documentation for kernel support - 2 - --- 2024-02-27 Mickaël Salaün Handled Elsewhere
[2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - 1 - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[2/2] AppArmor: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - 1 - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
[1/2] SELinux: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - - - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
« 1 2 3 4 »