Show patches with: State = Action Required       |   12147 patches
« 1 2 ... 15 16 17 … 121 122 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v3,09/13] diglim: Interfaces - digest_list_label integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,08/13] diglim: Interfaces - digest_lists_loaded integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,07/13] diglim: Interfaces - digest_list_add, digest_list_del integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,06/13] diglim: IMA info integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,05/13] diglim: Parser integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,04/13] diglim: Methods integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,03/13] diglim: Objects integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,02/13] diglim: Basic definitions integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,01/13] diglim: Overview integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
lsm_audit: avoid overloading the "key" audit field lsm_audit: avoid overloading the "key" audit field - 1 - --- 2021-09-14 Ondrej Mosnacek New
hardening: Default to INIT_STACK_ALL_ZERO if CC_HAS_AUTO_VAR_INIT_ZERO hardening: Default to INIT_STACK_ALL_ZERO if CC_HAS_AUTO_VAR_INIT_ZERO - 3 - --- 2021-09-14 Will Deacon New
[-next] apparmor: Remove unused inline function label_is_visible() [-next] apparmor: Remove unused inline function label_is_visible() - - - --- 2021-09-14 Yue Haibing New
[v3,8/8] Smack: Brutalist io_uring support with debug Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,7/8] selinux: add support for the io_uring access controls Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,6/8] lsm,io_uring: add LSM hooks to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,5/8] io_uring: convert io_uring to the secure anon inode interface Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,4/8] fs: add anon_inode_getfile_secure() similar to anon_inode_getfd_secure() Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-14 Paul Moore New
[v3,3/8] audit: add filtering for io_uring records Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,2/8] audit,io_uring,io-wq: add some basic audit support to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,1/8] audit: prepare audit_context for use in calling contexts beyond syscalls Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-14 Paul Moore New
[v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks [v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks 3 - - --- 2021-09-13 Ondrej Mosnacek New
[v6,1/1] NAX LSM: Add initial support NAX (No Anonymous Execution) LSM - - - --- 2021-09-11 Igor Zhbanov New
landlock: Drop "const" argument qualifier to avoid GCC 4.9 warnings landlock: Drop "const" argument qualifier to avoid GCC 4.9 warnings - - - --- 2021-09-10 Kees Cook New
integrity: support including firmware ".platform" keys at build time integrity: support including firmware ".platform" keys at build time - - - --- 2021-09-10 Nayna Jain New
smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block - - - --- 2021-09-10 Sebastian Andrzej Siewior New
Revert "Enable '-Werror' by default for all kernel builds" Revert "Enable '-Werror' by default for all kernel builds" 1 1 - --- 2021-09-07 Nick Desaulniers New
[v5,12/12] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,11/12] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,10/12] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,09/12] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,08/12] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,07/12] KEYS: Introduce link restriction to include builtin, secondary and machine keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,06/12] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,05/12] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,04/12] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,03/12] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,02/12] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,01/12] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 1 - --- 2021-09-07 Eric Snowberg New
net: remove the unnecessary check in cipso_v4_doi_free net: remove the unnecessary check in cipso_v4_doi_free 1 - - --- 2021-09-03 王贇 New
[4/1] xfstest: Add a new test to test xattr operations Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[3/1] xfstests: generic/062: Do not run on newer kernels Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[2/1] man-pages: xattr.7: Update text for user extended xattr behavior change Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[v3,1/1] xattr: Allow user.* xattr on symlink and special files Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
smackfs: Fix use-after-free in netlbl_catmap_walk() smackfs: Fix use-after-free in netlbl_catmap_walk() - - - --- 2021-09-01 Pawan Gupta New
Revert "net: fix NULL pointer reference in cipso_v4_doi_free" Revert "net: fix NULL pointer reference in cipso_v4_doi_free" - - - --- 2021-09-01 王贇 New
[GIT,PULL] Smack patches for v5.15 [GIT,PULL] Smack patches for v5.15 - - - --- 2021-08-31 Casey Schaufler New
apparmor: remove unused argument of aa_umount() apparmor: remove unused argument of aa_umount() 1 1 - --- 2021-08-31 Austin Kim New
[GIT,PULL] hardening updates for v5.15-rc1 [GIT,PULL] hardening updates for v5.15-rc1 - - - --- 2021-08-30 Kees Cook New
[GIT,PULL] SELinux patches for v5.15 [GIT,PULL] SELinux patches for v5.15 - - - --- 2021-08-30 Paul Moore New
[v2] net: fix NULL pointer reference in cipso_v4_doi_free [v2] net: fix NULL pointer reference in cipso_v4_doi_free - - - --- 2021-08-30 王贇 New
ima: fix deadlock when traversing "ima_default_rules". ima: fix deadlock when traversing "ima_default_rules". - 1 - --- 2021-08-27 Li Qiong New
[bpf-next,v2,5/5] tools: testing: Add selftest for file local storage map Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,4/5] tools: bpf: update bpftool for file_storage map Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,3/5] libbpf: Add bpf_probe_map_type support for file local storage Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,2/5] tools: sync bpf.h header Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,1/5] bpf: Implement file local storage Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
net: fix NULL pointer reference in cipso_v4_doi_free net: fix NULL pointer reference in cipso_v4_doi_free - - - --- 2021-08-26 王贇 New
ima: fix deadlock within "ima_match_policy" function. ima: fix deadlock within "ima_match_policy" function. - 1 - --- 2021-08-24 Li Qiong New
[bpf-next,RFC,v1,5/5] tools: testing: Add selftest for file local storage map Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,4/5] tools: bpf: update bpftool for file_storage map Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,3/5] libbpf: Add bpf_probe_map_type support for file local storage Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,2/5] tools: sync bpf.h header Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,1/5] bpf: Implement file local storage Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[v5,1/1] NAX LSM: Add initial support NAX (No Anonymous Execution) LSM - - - --- 2021-08-21 Igor Zhbanov New
[v4,1/1] NAX LSM: Add initial support NAX (No Anonymous Execution) LSM - - - --- 2021-08-20 Igor Zhbanov New
[v3,1/1] NAX LSM: Add initial support NAX (No Anonymous Execution) LSM - - - --- 2021-08-19 Igor Zhbanov New
ima: fix infinite loop within "ima_match_policy" function. ima: fix infinite loop within "ima_match_policy" function. - - - --- 2021-08-19 Li Qiong New
[v4,12/12] integrity: Only use mok keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,11/12] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,10/12] integrity: store reference to mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,09/12] KEYS: link secondary_trusted_keys to mok trusted keys Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,08/12] KEYS: integrity: change link restriction to trust the mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,07/12] KEYS: Introduce link restriction to include builtin, secondary and mok keys Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,06/12] KEYS: add a reference to mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,05/12] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,04/12] integrity: restrict INTEGRITY_KEYRING_MOK to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,03/12] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,02/12] integrity: Do not allow mok keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,01/12] integrity: Introduce a Linux keyring for the Machine Owner Key (MOK) Enroll kernel keys thru MOK - - - --- 2021-08-19 Eric Snowberg New
[v4,4/4] landlock_restrict_self.2: Document new syscall Add Landlock man pages - - - --- 2021-08-18 Mickaël Salaün New
[v4,3/4] landlock_add_rule.2: Document new syscall Add Landlock man pages - - - --- 2021-08-18 Mickaël Salaün New
[v4,2/4] landlock_create_ruleset.2: Document new syscall Add Landlock man pages - - - --- 2021-08-18 Mickaël Salaün New
[v4,1/4] landlock.7: Add a new page to introduce Landlock Add Landlock man pages - - - --- 2021-08-18 Mickaël Salaün New
[1/1] ima: check control characters in policy file path ima: check control characters in policy path - - - --- 2021-08-14 Tianxing Zhang New
[v3,14/14] integrity: change ima link restriction to include mok keys Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,13/14] integrity: store reference to mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,12/14] integrity: Do not allow mok keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,11/14] KEYS: link secondary_trusted_keys to mok trusted keys Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,10/14] KEYS: change link restriction for secondary to also trust mok Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,09/14] KEYS: Introduce link restriction to include builtin, secondary and mok keys Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,08/14] KEYS: add a reference to mok keyring Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,07/14] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,06/14] integrity: accessor function to get trust_moklist Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,05/14] integrity: restrict INTEGRITY_KEYRING_MOK to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,04/14] integrity: add add_to_mok_keyring Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,03/14] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,02/14] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[v3,01/14] integrity: Introduce a Linux keyring for the Machine Owner Key (MOK) Enroll kernel keys thru MOK - - - --- 2021-08-12 Eric Snowberg New
[RFC,v2,9/9] Smack: Brutalist io_uring support with debug Add LSM access controls and auditing to io_uring - - - --- 2021-08-11 Paul Moore New
[RFC,v2,8/9] selinux: add support for the io_uring access controls Add LSM access controls and auditing to io_uring - - - --- 2021-08-11 Paul Moore New
« 1 2 ... 15 16 17 … 121 122 »