Show patches with: Submitter = Mickaël Salaün       |    Archived = No       |   237 patches
« 1 2 3 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v3,23/23] selftests/landlock: Add audit tests for ptrace Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,22/23] selftests/landlock: Add tests for audit Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,21/23] selftests/landlock: Extend tests for landlock_restrict_self()'s flags Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,20/23] samples/landlock: Do not log denials from the sandboxer by default Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,19/23] landlock: Control log events with LANDLOCK_RESTRICT_SELF_LOGLESS Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,18/23] landlock: Log scoped denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,17/23] landlock: Log TCP bind and connect denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,16/23] landlock: Log truncate and ioctl denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,15/23] landlock: Log file-related denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,14/23] landlock: Optimize file path walks and prepare for audit support Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,13/23] selftests/landlock: Add test to check partial access in a mount tree Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,12/23] landlock: Align partial refer access checks with final ones Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,11/23] landlock: Log mount-related denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,10/23] landlock: Log domain properties and release Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,09/23] audit: Add a new audit_get_ctime() helper Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,08/23] landlock: Log ptrace denials Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,07/23] landlock: Move domain hierarchy management Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,06/23] landlock: Simplify initially denied access rights Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,05/23] landlock: Move access types Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,04/23] landlock: Add unique ID generator Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,03/23] landlock: Factor out check_access_path() Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,02/23] lsm: Add audit_log_lsm_data() helper Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v3,01/23] lsm: Only build lsm_audit.c if CONFIG_SECURITY and CONFIG_AUDIT are set Landlock audit support - - - --- 2024-11-22 Mickaël Salaün New
[v21,6/6] samples/check-exec: Add an enlighten "inc" interpreter and 28 tests Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,5/6] samples/check-exec: Add set-exec Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,4/6] selftests/landlock: Add tests for execveat + AT_EXECVE_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,3/6] selftests/exec: Add 32 tests for AT_EXECVE_CHECK and exec securebits Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits Script execution control (was O_MAYEXEC) - 1 - --- 2024-11-12 Mickaël Salaün New
[v21,1/6] exec: Add a new AT_EXECVE_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - 1 - --- 2024-11-12 Mickaël Salaün New
[GIT,PULL] Landlock fix for v6.12-rc7 #2 [GIT,PULL] Landlock fix for v6.12-rc7 #2 - - - --- 2024-11-10 Mickaël Salaün New
[GIT,PULL] Landlock fix for v6.12-rc7 [GIT,PULL] Landlock fix for v6.12-rc7 - - - --- 2024-11-09 Mickaël Salaün New
[v4,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[v4,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[v4,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[RFC,v2,14/14] landlock: Control log events with LANDLOCK_RESTRICT_SELF_LOGLESS Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,13/14] landlock: Log scoped denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,12/14] landlock: Log TCP bind and connect denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,11/14] landlock: Log truncate and ioctl denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,10/14] landlock: Log file-related denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,09/14] landlock: Log mount-related denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,08/14] landlock: Log domain properties and release Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,07/14] landlock: Log ptrace denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,06/14] landlock: Move domain hierarchy management Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,05/14] landlock: Move access types Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,04/14] landlock: Add unique ID generator Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,03/14] landlock: Factor out check_access_path() Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,02/14] lsm: Add audit_log_lsm_data() helper Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore Accepted
[RFC,v2,01/14] lsm: Only build lsm_audit.c if CONFIG_AUDIT is set Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore Accepted
[v3,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v3,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v3,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v2,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v20,6/6] samples/check-exec: Add an enlighten "inc" interpreter and 28 tests Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,5/6] samples/check-exec: Add set-exec Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,4/6] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,3/6] selftests/exec: Add 32 tests for AT_CHECK and exec securebits Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Under Review
[v20,1/6] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Under Review
[RFC,v1,7/7] tomoyo: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,6/7] smack: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,5/7] ipe: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,4/7] integrity: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,3/7] selinux: Fix inode numbers in error messages [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,2/7] audit: Fix inode numbers [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - 1 - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[v1] landlock: Improve documentation of previous limitations [v1] landlock: Improve documentation of previous limitations - 1 - --- 2024-10-04 Mickaël Salaün Handled Elsewhere
[v1,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - 1 - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.12 [GIT,PULL] Landlock updates for v6.12 - - - --- 2024-09-23 Mickaël Salaün Handled Elsewhere
[v3,2/2] security: Update file_set_fowner documentation [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v2] fs,security: Fix file_set_fowner LSM hook inconsistencies [v2] fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Superseded
fs,security: Fix file_set_fowner LSM hook inconsistencies fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Changes Requested
[v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() [v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() - - - --- 2024-07-29 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.11 [GIT,PULL] Landlock fix for v6.11 - - - --- 2024-07-20 Mickaël Salaün Handled Elsewhere
[RFC,v1,3/3] landlock: Document network restrictions tied to sockets Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,2/3] selftests/landlock: Add test for socket's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,1/3] landlock: Use socket's domain instead of current's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v19,5/5] samples/should-exec: Add set-should-exec Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,4/5] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,3/5] selftests/exec: Add tests for AT_CHECK and related securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,1/5] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[GIT,PULL] Landlock fix for v6.10-rc2 [GIT,PULL] Landlock fix for v6.10-rc2 - - - --- 2024-05-31 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Add layout1.refer_mount_root Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.10 [GIT,PULL] Landlock updates for v6.10 - - - --- 2024-05-16 Mickaël Salaün Accepted
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
MAINTAINER: Add Günther Noack as Landlock reviewer MAINTAINER: Add Günther Noack as Landlock reviewer 1 - - --- 2024-04-25 Mickaël Salaün Handled Elsewhere
[v4,RESEND,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
« 1 2 3 »