Show patches with: Archived = No       |   4924 patches
« 1 2 ... 34 35 36 … 49 50 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v10,06/11] LSM: wireup Linux Security Module syscalls [v10,01/11] LSM: Identify modules by more than name 2 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,05/11] LSM: Create lsm_list_modules system call [v10,01/11] LSM: Identify modules by more than name - 2 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,04/11] LSM: syscalls for current process attributes [v10,01/11] LSM: Identify modules by more than name - 2 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,03/11] proc: Use lsmids instead of lsm names for attrs [v10,01/11] LSM: Identify modules by more than name - 2 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,02/11] LSM: Maintain a table of LSM attribute data [v10,01/11] LSM: Identify modules by more than name - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,01/11] LSM: Identify modules by more than name [v10,01/11] LSM: Identify modules by more than name - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,07/11] LSM: Helpers for attribute names and filling lsm_ctx LSM: Three basic syscalls - - - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[v10,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - 1 - --- 2023-04-28 Casey Schaufler pcmoore Superseded
[GIT,PULL] LSM fixes for v6.4 (#1) [GIT,PULL] LSM fixes for v6.4 (#1) - - - --- 2023-04-28 Paul Moore pcmoore Accepted
lsm: move hook comments docs to security/security.c lsm: move hook comments docs to security/security.c 1 - - --- 2023-04-28 Randy Dunlap pcmoore Accepted
[GIT,PULL] Smack patches for v6.4 [GIT,PULL] Smack patches for v6.4 - - - --- 2023-04-24 Casey Schaufler Handled Elsewhere
[GIT,PULL] Landlock updates for v6.4 [GIT,PULL] Landlock updates for v6.4 - - - --- 2023-04-24 Mickaël Salaün Handled Elsewhere
[v9,11/11] LSM: selftests for Linux Security Module syscalls LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,07/11] LSM: Helpers for attribute names and filling an lsm_ctx LSM: Three basic syscalls - - - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[v9,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - 1 - --- 2023-04-21 Casey Schaufler pcmoore Superseded
[GIT,PULL] SELinux patches for v6.4 [GIT,PULL] SELinux patches for v6.4 - - - --- 2023-04-20 Paul Moore pcmoore Handled Elsewhere
[V4,2/2] blktrace: allow access trace file in lockdown mode [V4,1/2] debugfs: provide a way for relay user bypass lockdown - - - --- 2023-04-20 Junxiao Bi pcmoore Handled Elsewhere
[V4,1/2] debugfs: provide a way for relay user bypass lockdown [V4,1/2] debugfs: provide a way for relay user bypass lockdown - - - --- 2023-04-20 Junxiao Bi pcmoore Handled Elsewhere
[LSM,v2,2/2] selinux: Implement mptcp_add_subflow hook security: SELinux/LSM label with MPTCP and accept 1 - - --- 2023-04-20 Matthieu Baerts pcmoore Handled Elsewhere
[LSM,v2,1/2] security, lsm: Introduce security_mptcp_add_subflow() security: SELinux/LSM label with MPTCP and accept 1 - - --- 2023-04-20 Matthieu Baerts pcmoore Handled Elsewhere
[RFC] Set SMK_INODE_CHANGED inside smack_dentry_create_files_as [RFC] Set SMK_INODE_CHANGED inside smack_dentry_create_files_as - - - --- 2023-04-19 Mengchi Cheng Handled Elsewhere
[LSM,2/2] selinux: Implement mptcp_add_subflow hook security: SELinux/LSM label with MPTCP and accept 1 - - --- 2023-04-19 Matthieu Baerts pcmoore Changes Requested
[LSM,1/2] security, lsm: Introduce security_mptcp_add_subflow() security: SELinux/LSM label with MPTCP and accept 1 - - --- 2023-04-19 Matthieu Baerts pcmoore Changes Requested
[V3] debugfs: allow access blktrace trace files in lockdown mode [V3] debugfs: allow access blktrace trace files in lockdown mode - - - --- 2023-04-18 Junxiao Bi pcmoore Changes Requested
[v4,3/6] mm/gup: remove vmas parameter from get_user_pages_remote() Untitled series #741031 1 2 - --- 2023-04-18 Lorenzo Stoakes Handled Elsewhere
IMA: use vfs_getattr_nosec to get the i_version IMA: use vfs_getattr_nosec to get the i_version - 1 - --- 2023-04-17 Jeff Layton Handled Elsewhere
[v3,3/7] mm/gup: remove vmas parameter from get_user_pages_remote() Untitled series #740110 1 1 - --- 2023-04-15 Lorenzo Stoakes Handled Elsewhere
[v2,3/7] mm/gup: remove vmas parameter from get_user_pages_remote() Untitled series #740064 - - - --- 2023-04-15 Lorenzo Stoakes Handled Elsewhere
[3/7] mm/gup: remove vmas parameter from get_user_pages_remote() Untitled series #740013 - - - --- 2023-04-14 Lorenzo Stoakes Handled Elsewhere
selftests/memfd: fix test_sysctl selftests/memfd: fix test_sysctl - - 1 --- 2023-04-14 Jeff Xu Handled Elsewhere
[V2] debugfs: allow access relay files in lockdown mode [V2] debugfs: allow access relay files in lockdown mode - - - --- 2023-04-12 Junxiao Bi pcmoore Handled Elsewhere
[bpf-next,8/8] selftests/bpf: enhance lsm_map_create test with BTF LSM control New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,7/8] bpf, lsm: implement bpf_btf_load_security LSM hook New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,6/8] bpf: drop unnecessary bpf_capable() check in BPF_MAP_FREEZE command New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,5/8] selftests/bpf: validate new bpf_map_create_security LSM hook New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,4/8] bpf, lsm: implement bpf_map_create_security LSM hook New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,3/8] bpf: centralize permissions checks for all BPF map types New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,2/8] bpf: inline map creation logic in map_create() function New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
[bpf-next,1/8] bpf: move unprivileged checks into map_create() and bpf_prog_load() New BPF map and BTF security LSM hooks - - - --- 2023-04-12 Andrii Nakryiko pcmoore Rejected
debugfs: allow access relay files in lockdown mode debugfs: allow access relay files in lockdown mode - - - --- 2023-04-12 Junxiao Bi pcmoore Superseded
Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook - - - --- 2023-04-11 Roberto Sassu RFC
[v8,11/11] LSM: selftests for Linux Security Module syscalls LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,07/11] LSM: Helpers for attribute names and filling an lsm_ctx LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
Semantics of blktrace with lockdown (integrity) enabled kernel. Semantics of blktrace with lockdown (integrity) enabled kernel. - - - --- 2023-04-06 Konrad Rzeszutek Wilk pcmoore Changes Requested
overlayfs: Trigger file re-evaluation by IMA / EVM after writes overlayfs: Trigger file re-evaluation by IMA / EVM after writes - - 1 --- 2023-04-05 Stefan Berger Handled Elsewhere
apparmor: fix missing error check for rhashtable_insert_fast apparmor: fix missing error check for rhashtable_insert_fast 1 - - --- 2023-04-04 Danila Chernetsov Handled Elsewhere
security, lsm: security_old_inode_init_security() Handle multi LSM registration security, lsm: security_old_inode_init_security() Handle multi LSM registration - - - --- 2023-04-01 Valentin Vidić pcmoore In Next
[v10,4/4] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - 1 - --- 2023-03-31 Roberto Sassu pcmoore Superseded
[v10,3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore Superseded
[v10,2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore Superseded
[v10,1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write() evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore Accepted
Smack: Improve mount process memory use Smack: Improve mount process memory use - - - --- 2023-03-29 Casey Schaufler Handled Elsewhere
[v9,4/4] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write() evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v10,13/13] landlock: Document Landlock's network support Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,12/13] samples/landlock: Add network demo Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,11/13] selftests/landlock: Add 10 new test suites dedicated to network Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,10/13] selftests/landlock: Share enforce_ruleset() Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,09/13] landlock: Add network rules and TCP hooks support Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,08/13] landlock: Refactor landlock_add_rule() syscall Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,07/13] landlock: Refactor layer helpers Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,06/13] landlock: Move and rename layer helpers Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,05/13] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,04/13] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,03/13] landlock: Remove unnecessary inlining Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,02/13] landlock: Allow filesystem layout changes for domains without such rule type Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,01/13] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v6,6/6] integrity: machine keyring CA configuration Add CA enforcement keyring restrictions 1 - - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,5/6] KEYS: CA link restriction Add CA enforcement keyring restrictions - 1 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,4/6] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,3/6] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,2/6] KEYS: Add missing function documentation Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,1/6] KEYS: Create static version of public_key_verify_signature Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
« 1 2 ... 34 35 36 … 49 50 »