Show patches with: Archived = No       |   4907 patches
« 1 2 ... 7 8 949 50 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[RFC] security: tomoyo: Add default builtin-policy.h for default policy [RFC] security: tomoyo: Add default builtin-policy.h for default policy - - - --- 2024-07-28 Marcos Paulo de Souza Handled Elsewhere
[RFC,v1,9/9] samples/landlock: Support LANDLOCK_ACCESS_NET_LISTEN Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,8/9] selftests/landlock: Test changing socket backlog with listen(2) Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,7/9] selftests/landlock: Test listen on ULP socket without clone method Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,6/9] selftests/landlock: Test listening without explicit bind restriction Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,5/9] selftests/landlock: Test listen on connected socket Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,4/9] selftests/landlock: Test listening restriction Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,3/9] selftests/landlock: Support LANDLOCK_ACCESS_NET_LISTEN_TCP Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,2/9] landlock: Support TCP listen access-control Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[RFC,v1,1/9] landlock: Refactor current_check_access_socket() access right check Support TCP listen access-control - - - --- 2024-07-28 Mikhail Ivanov Handled Elsewhere
[v3] proc: add config & param to block forcing mem writes [v3] proc: add config & param to block forcing mem writes - - - --- 2024-07-26 Adrian Ratiu Handled Elsewhere
[GIT,PULL] AppArmor updates for 6.11-rc1 [GIT,PULL] AppArmor updates for 6.11-rc1 - - - --- 2024-07-25 John Johansen Handled Elsewhere
security/tomoyo: Prevent message flooding if no Tomoyo loader is present security/tomoyo: Prevent message flooding if no Tomoyo loader is present - - - --- 2024-07-25 Yafang Shao Handled Elsewhere
[GIT,PULL] sysctl constification changes for v6.11-rc1 [GIT,PULL] sysctl constification changes for v6.11-rc1 - - - --- 2024-07-24 Joel Granados Handled Elsewhere
[v1,2/2] lsm: Refactor return value of LSM hook inode_copy_up_xattr Refactor return value of two lsm hooks - - - --- 2024-07-24 Xu Kuohai pcmoore Accepted
[v1,1/2] lsm: Refactor return value of LSM hook vm_enough_memory Refactor return value of two lsm hooks - - - --- 2024-07-24 Xu Kuohai pcmoore Accepted
proc: add config & param to block forcing mem writes proc: add config & param to block forcing mem writes - - - --- 2024-07-23 Adrian Ratiu Handled Elsewhere
keys: Add tracepoints for the keyrings facility keys: Add tracepoints for the keyrings facility - - - --- 2024-07-22 David Howells Handled Elsewhere
[GIT,PULL] Landlock fix for v6.11 [GIT,PULL] Landlock fix for v6.11 - - - --- 2024-07-20 Mickaël Salaün Handled Elsewhere
[RFC,v1,3/3] landlock: Document network restrictions tied to sockets Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,2/3] selftests/landlock: Add test for socket's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,1/3] landlock: Use socket's domain instead of current's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[bpf-next,v2,9/9] selftests/bpf: Add verifier tests for bpf lsm Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,8/9] selftests/bpf: Add test for lsm tail call Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,7/9] selftests/bpf: Add return value checks for failed tests Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,6/9] selftests/bpf: Avoid load failure for token_lsm.c Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,5/9] bpf, verifier: improve signed ranges inference for BPF_AND Add BPF LSM return value range check, BPF part 2 - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,4/9] bpf: Fix compare error in function retval_range_within Add BPF LSM return value range check, BPF part 1 - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,3/9] bpf: Prevent tail call between progs attached to different hooks Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,2/9] bpf, lsm: Add check for BPF LSM return value Add BPF LSM return value range check, BPF part 1 - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v2,1/9] bpf, lsm: Add disabled BPF LSM hook list Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Handled Elsewhere
[bpf-next,v1,9/9] selftests/bpf: Add verifier tests for bpf lsm Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,8/9] selftests/bpf: Add test for lsm tail call Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,7/9] selftests/bpf: Add return value checks for failed tests Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,6/9] selftests/bpf: Avoid load failure for token_lsm.c Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,5/9] bpf, verifier: improve signed ranges inference for BPF_AND Add BPF LSM return value range check, BPF part 1 - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,4/9] bpf: Fix compare error in function retval_range_within Add BPF LSM return value range check, BPF part 1 - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,3/9] bpf: Prevent tail call between progs attached to different hooks Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,2/9] bpf, lsm: Add check for BPF LSM return value Add BPF LSM return value range check, BPF part 1 - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[bpf-next,v1,1/9] bpf, lsm: Add disabled BPF LSM hook list Add BPF LSM return value range check, BPF part - - - --- 2024-07-19 Xu Kuohai pcmoore Superseded
[v2] tpm: Add new device/vendor ID 0x50666666 [v2] tpm: Add new device/vendor ID 0x50666666 - - - --- 2024-07-18 Jett Rink Handled Elsewhere
[v7,4/4] documentation/landlock: Adding scoping mechanism documentation Landlock: Abstract Unix Socket Scoping Support - - - --- 2024-07-18 Tahera Fahimi Handled Elsewhere
[v7,3/4] samples/landlock: Support abstract unix socket restriction Landlock: Abstract Unix Socket Scoping Support - - - --- 2024-07-18 Tahera Fahimi Handled Elsewhere
[v7,2/4] selftests/landlock: Abstract unix socket restriction tests Landlock: Abstract Unix Socket Scoping Support - - - --- 2024-07-18 Tahera Fahimi Handled Elsewhere
[v7,1/4] Landlock: Add abstract unix socket connect restriction Landlock: Abstract Unix Socket Scoping Support - - - --- 2024-07-18 Tahera Fahimi Handled Elsewhere
[v5,16/21] mm/mmap: Use vms accounted pages in mmap_region() Untitled series #872064 1 3 - --- 2024-07-17 Liam R. Howlett pcmoore Handled Elsewhere
[v2,2/2] KEYS: trusted: dcp: fix leak of blob encryption key [v2,1/2] KEYS: trusted: fix DCP blob payload length assignment - - - --- 2024-07-17 David Gstir Handled Elsewhere
[v2,1/2] KEYS: trusted: fix DCP blob payload length assignment [v2,1/2] KEYS: trusted: fix DCP blob payload length assignment - - - --- 2024-07-17 David Gstir Handled Elsewhere
proc: add config to block FOLL_FORCE in mem writes proc: add config to block FOLL_FORCE in mem writes - - - --- 2024-07-17 Adrian Ratiu Changes Requested
[v3] tpm: Relocate buf->handles to appropriate place [v3] tpm: Relocate buf->handles to appropriate place - - - --- 2024-07-16 Jarkko Sakkinen Handled Elsewhere
[v2] tpm: Relocate buf->handles to appropriate place [v2] tpm: Relocate buf->handles to appropriate place - - - --- 2024-07-16 Jarkko Sakkinen Handled Elsewhere
tpm: Fix alignment of buf->handles tpm: Fix alignment of buf->handles - - - --- 2024-07-16 Jarkko Sakkinen Handled Elsewhere
[GIT,PULL] Smack patches for 6.11 [GIT,PULL] Smack patches for 6.11 - - - --- 2024-07-15 Casey Schaufler Handled Elsewhere
[GIT,PULL] lsm/lsm-pr-20240715 [GIT,PULL] lsm/lsm-pr-20240715 - - - --- 2024-07-15 Paul Moore pcmoore Accepted
[GIT,PULL] selinux/selinux-pr-20240715 [GIT,PULL] selinux/selinux-pr-20240715 - - - --- 2024-07-15 Paul Moore pcmoore Accepted
landlock: Various documentation improvements landlock: Various documentation improvements - - - --- 2024-07-15 Günther Noack Handled Elsewhere
[v2,2/2] landlock: Mention -1 return code on failure [v2,1/2] Unify error wording - 1 - --- 2024-07-12 Petr Vorel Handled Elsewhere
[v2,1/2] Unify error wording [v2,1/2] Unify error wording - - - --- 2024-07-12 Petr Vorel Handled Elsewhere
[1/1] landlock: Mention -1 return code on failure [1/1] landlock: Mention -1 return code on failure - 1 - --- 2024-07-12 Petr Vorel Handled Elsewhere
[v2] landlock: Clarify documentation for struct landlock_ruleset_attr [v2] landlock: Clarify documentation for struct landlock_ruleset_attr - - - --- 2024-07-11 Günther Noack Handled Elsewhere
[bpf-next,v4,20/20] selftests/bpf: Add verifier tests for bpf lsm Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,19/20] selftests/bpf: Add test for lsm tail call Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,18/20] selftests/bpf: Add return value checks for failed tests Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,17/20] selftests/bpf: Avoid load failure for token_lsm.c Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,16/20] bpf: Add a special case for bitwise AND on range [-1, 0] Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,15/20] bpf: Fix compare error in function retval_range_within Add return value range check for BPF LSM 1 - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,14/20] bpf: Prevent tail call between progs attached to different hooks Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,13/20] bpf, lsm: Add check for BPF LSM return value Add return value range check for BPF LSM 1 - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,12/20] bpf, lsm: Enable BPF LSM prog to read/write return value parameters Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,11/20] bpf, lsm: Add disabled BPF LSM hook list Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,10/20] lsm: Refactor return value of LSM hook audit_rule_match Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,09/20] lsm: Refactor return value of LSM hook key_getsecurity Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,08/20] lsm: Refactor return value of LSM hook getprocattr Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,07/20] lsm: Refactor return value of LSM hook setprocattr Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,06/20] lsm: Refactor return value of LSM hook getselfattr Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,05/20] lsm: Refactor return value of LSM hook inode_copy_up_xattr Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,04/20] lsm: Refactor return value of LSM hook inode_listsecurity Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,03/20] lsm: Refactor return value of LSM hook inode_getsecurity Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,02/20] lsm: Refactor return value of LSM hook inode_need_killpriv Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[bpf-next,v4,01/20] lsm: Refactor return value of LSM hook vm_enough_memory Add return value range check for BPF LSM - - - --- 2024-07-11 Xu Kuohai pcmoore Changes Requested
[v2,6/6] LSM: Infrastructure management of the perf_event security blob LSM: Infrastructure blob allocation - 1 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v2,5/6] LSM: Infrastructure management of the infiniband blob LSM: Infrastructure blob allocation - 1 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v2,4/6] LSM: Infrastructure management of the dev_tun blob LSM: Infrastructure blob allocation - 1 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v2,3/6] LSM: Add helper for blob allocations LSM: Infrastructure blob allocation - 1 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v2,2/6] LSM: Infrastructure management of the key security blob LSM: Infrastructure blob allocation - 1 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v2,1/6] LSM: Infrastructure management of the sock security LSM: Infrastructure blob allocation 2 2 - --- 2024-07-10 Casey Schaufler pcmoore Accepted
[v4,16/21] mm/mmap: Use vms accounted pages in mmap_region() Untitled series #870217 - 3 - --- 2024-07-10 Liam R. Howlett pcmoore Handled Elsewhere
landlock: Clarify documentation for struct landlock_ruleset_attr landlock: Clarify documentation for struct landlock_ruleset_attr - 1 - --- 2024-07-10 Günther Noack Handled Elsewhere
[RFC] lsm: add the inode_free_security_rcu() LSM implementation hook [RFC] lsm: add the inode_free_security_rcu() LSM implementation hook - - - --- 2024-07-10 Paul Moore RFC
[v14,3/3] security: Replace indirect LSM hook calls with static calls Reduce overhead of LSMs with static calls 2 2 - --- 2024-07-10 KP Singh pcmoore Accepted
[v14,2/3] security: Count the LSMs enabled at compile time Reduce overhead of LSMs with static calls 2 2 - --- 2024-07-10 KP Singh pcmoore Accepted
[v14,1/3] kernel: Add helper macros for loop unrolling Reduce overhead of LSMs with static calls 2 2 - --- 2024-07-10 KP Singh pcmoore Accepted
apparmor: domain: clean up duplicated parts of handle_onexec() apparmor: domain: clean up duplicated parts of handle_onexec() 1 - - --- 2024-07-09 Leesoo Ahn Handled Elsewhere
[6/6] LSM: Infrastructure management of the perf_event security blob LSM: Infrastructure blob allocation - - - --- 2024-07-08 Casey Schaufler pcmoore Changes Requested
[5/6] LSM: Infrastructure management of the infiniband blob LSM: Infrastructure blob allocation - - - --- 2024-07-08 Casey Schaufler pcmoore Changes Requested
[4/6] LSM: Infrastructure management of the dev_tun blob LSM: Infrastructure blob allocation - - - --- 2024-07-08 Casey Schaufler pcmoore Changes Requested
[3/6] LSM: Add helper for blob allocations LSM: Infrastructure blob allocation - 1 - --- 2024-07-08 Casey Schaufler pcmoore Changes Requested
[2/6] LSM: Infrastructure management of the key security blob LSM: Infrastructure blob allocation - - - --- 2024-07-08 Casey Schaufler pcmoore Changes Requested
[1/6] LSM: Infrastructure management of the sock security LSM: Infrastructure blob allocation 2 2 - --- 2024-07-08 Casey Schaufler pcmoore Accepted
binfmt_elf: Fail execution of shared objects with ELIBEXEC (was: Re: [RFC PATCH v19 1/5] exec: Add … binfmt_elf: Fail execution of shared objects with ELIBEXEC (was: Re: [RFC PATCH v19 1/5] exec: Add … - - - --- 2024-07-08 Florian Weimer Handled Elsewhere
« 1 2 ... 7 8 949 50 »