Show patches with: Archived = No       |   445 patches
« 1 2 3 4 … 4 5 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[GIT,PULL] audit/audit-pr-20240911 [GIT,PULL] audit/audit-pr-20240911 - - - --- 2024-09-13 Paul Moore New
[RFC,v3,12/37] kvx: Add ELF-related definitions Untitled series #872900 - - - --- 2024-07-22 Yann Sionneau Handled Elsewhere
[v3,11/11] drm: Replace strcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,10/11] net: Replace strcpy() with __get_task_comm() Improve the copy of task comm - - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,09/11] tracing: Replace strncpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,08/11] tsacct: Replace strncpy() with __get_task_comm() Improve the copy of task comm - - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,07/11] mm/kmemleak: Replace strncpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,05/11] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,04/11] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,03/11] security: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,02/11] auditsc: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[v3,01/11] fs/exec: Drop task_lock() inside __get_task_comm() Improve the copy of task comm - - - --- 2024-06-21 Yafang Shao Handled Elsewhere
[16/16] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr() fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[15/16] commoncap: use vfs fscaps interfaces for killpriv checks fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[14/16] commoncap: remove cap_inode_getsecurity() fs: use type-safe uid representation for filesystem capabilities 1 - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[13/16] fs: use vfs interfaces for capabilities xattrs fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[12/16] ovl: use vfs_{get,set}_fscaps() for copy-up fs: use type-safe uid representation for filesystem capabilities - 1 - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[11/16] ovl: add fscaps handlers fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[10/16] fs: add vfs_remove_fscaps() fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[09/16] fs: add vfs_set_fscaps() fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[08/16] fs: add vfs_get_fscaps() fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[07/16] fs: add inode operations to get/set/remove fscaps fs: use type-safe uid representation for filesystem capabilities - 1 - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[06/16] capability: provide a helper for converting vfs_caps to xattr for userspace fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[05/16] capability: provide helpers for converting between xattrs and vfs_caps fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[04/16] capability: use vfsuid_t for vfs_caps rootids fs: use type-safe uid representation for filesystem capabilities 1 - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[03/16] capability: rename cpu_vfs_cap_data to vfs_caps fs: use type-safe uid representation for filesystem capabilities 1 1 - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[02/16] mnt_idmapping: include cred.h fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[01/16] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee (DigitalOcean) Handled Elsewhere
[nf,3/3] netfilter: nf_tables: Audit log object reset once per table Review nf_tables audit logging 1 1 - --- 2023-09-23 Phil Sutter Handled Elsewhere
[nf,2/3] netfilter: nf_tables: Deduplicate nft_register_obj audit logs Review nf_tables audit logging 1 1 - --- 2023-09-23 Phil Sutter Handled Elsewhere
[nf,1/3] selftests: netfilter: Extend nft_audit.sh Review nf_tables audit logging - - - --- 2023-09-23 Phil Sutter Handled Elsewhere
[nf,v3,2/2] selftests: netfilter: Test nf_tables audit logging nf_tables: follow-up on audit fix, add selftest - - - --- 2023-09-13 Phil Sutter Handled Elsewhere
[nf,v3,1/2] netfilter: nf_tables: Fix entries val in rule reset audit log nf_tables: follow-up on audit fix, add selftest - 1 - --- 2023-09-13 Phil Sutter Handled Elsewhere
[nf,v2] netfilter: nf_tables: Fix entries val in rule reset audit log [nf,v2] netfilter: nf_tables: Fix entries val in rule reset audit log - - - --- 2023-09-08 Phil Sutter Superseded
[nf-next,RFC,2/2] selftests: netfilter: Test nf_tables audit logging nf_tables: follow-up on audit fix, propose kselftest - - - --- 2023-09-08 Phil Sutter Superseded
tests/io_uring: set a filter for the io_uring ops we want to catch tests/io_uring: set a filter for the io_uring ops we want to catch - - - --- 2023-03-17 Paul Moore Accepted
[v3,10/13] LSM: Create new security_cred_getlsmprop LSM hook Untitled series #889038 - - - --- 2024-09-10 Casey Schaufler pcmoore Handled Elsewhere
[v3,07/13] LSM: Use lsm_prop in security_current_getsecid Untitled series #889038 - - - --- 2024-09-10 Casey Schaufler pcmoore Handled Elsewhere
[v3,05/13] LSM: Use lsm_prop in security_ipc_getsecid Untitled series #889038 - - - --- 2024-09-10 Casey Schaufler pcmoore Handled Elsewhere
[-next] audit: Make use of str_enabled_disabled() helper [-next] audit: Make use of str_enabled_disabled() helper - - - --- 2024-08-31 Hongbo Li pcmoore Accepted
[v2,10/13] LSM: Create new security_cred_getlsmblob LSM hook Untitled series #884952 - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,07/13] LSM: Use lsmblob in security_current_getsecid Untitled series #884952 - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2,05/13] LSM: Use lsmblob in security_ipc_getsecid Untitled series #884952 - - - --- 2024-08-30 Casey Schaufler pcmoore Handled Elsewhere
[v2] audit: use task_tgid_nr() instead of task_pid_nr() [v2] audit: use task_tgid_nr() instead of task_pid_nr() - 1 - --- 2024-08-28 Ricardo Robaina pcmoore Accepted
[v8,8/8] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,7/8] net: Replace strcpy() with strscpy() Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,6/8] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,5/8] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,4/8] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,3/8] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,2/8] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 1 - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[v8,1/8] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-28 Yafang Shao pcmoore Handled Elsewhere
[10/13] LSM: Create new security_cred_getlsmblob LSM hook Untitled series #883066 2 2 - --- 2024-08-25 Casey Schaufler pcmoore Handled Elsewhere
[05/13] LSM: Use lsmblob in security_ipc_getsecid Untitled series #883066 2 2 - --- 2024-08-25 Casey Schaufler pcmoore Handled Elsewhere
[v7,8/8] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,7/8] net: Replace strcpy() with strscpy() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,6/8] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,5/8] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,4/8] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,3/8] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,2/8] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v7,1/8] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-17 Yafang Shao pcmoore Handled Elsewhere
[v6,9/9] drm: Replace strcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,8/9] net: Replace strcpy() with strscpy() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,7/9] tracing: Replace strncpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,6/9] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,5/9] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,4/9] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,3/9] security: Replace memcpy() with get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,2/9] auditsc: Replace memcpy() with strscpy() Improve the copy of task comm 1 - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v6,1/9] Get rid of __get_task_comm() Improve the copy of task comm - - - --- 2024-08-12 Yafang Shao pcmoore Handled Elsewhere
[v5,9/9] drm: Replace strcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,8/9] net: Replace strcpy() with __get_task_comm() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,7/9] tracing: Replace strncpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,6/9] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul} Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,5/9] mm/util: Fix possible race condition in kstrdup() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,4/9] bpftool: Ensure task comm is always NUL-terminated Improve the copy of task comm - 1 - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,3/9] security: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,2/9] auditsc: Replace memcpy() with __get_task_comm() Improve the copy of task comm 1 - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v5,1/9] fs/exec: Drop task_lock() inside __get_task_comm() Improve the copy of task comm - - - --- 2024-08-04 Yafang Shao pcmoore Handled Elsewhere
[v20,20/20] MAINTAINERS: ipe: add ipe maintainer information Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,19/20] Documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,18/20] ipe: kunit test for parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,17/20] scripts: add boot policy generation program Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,16/20] ipe: enable support for fs-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,15/20] fsverity: expose verified fsverity built-in signatures to LSMs Integrity Policy Enforcement LSM (IPE) 1 - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,14/20] security: add security_inode_setintegrity() hook Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,13/20] ipe: add support for dm-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,12/20] dm verity: expose root hash digest and signature data to LSMs Integrity Policy Enforcement LSM (IPE) - 1 - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,11/20] block|lsm: Add LSM blob and new LSM hooks for block devices Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,10/20] ipe: add permissive toggle Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,09/20] uapi|audit|ipe: add ipe auditing support Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,08/20] ipe: add userspace interface Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,07/20] security: add new securityfs delete function Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,06/20] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,05/20] initramfs|security: Add a security hook to do_populate_rootfs() Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,04/20] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,03/20] ipe: add evaluation loop Integrity Policy Enforcement LSM (IPE) - 1 - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
[v20,02/20] ipe: add policy parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-08-03 Fan Wu pcmoore Handled Elsewhere
« 1 2 3 4 … 4 5 »