Show patches with: none      |   15901 patches
« 1 2 ... 34 35 36 … 159 160 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[GIT,PULL] Landlock fix for v6.0 #2 [GIT,PULL] Landlock fix for v6.0 #2 - - - --- 2022-09-23 Mickaël Salaün Handled Elsewhere
[v2] apparmor: Simplify obtain the newest label on a cred [v2] apparmor: Simplify obtain the newest label on a cred - - - --- 2022-09-23 Gaosheng Cui Handled Elsewhere
[2/2] powerpc/rtas: block error injection when locked down powerpc/pseries: restrict error injection and DT changes when locked down - - - --- 2022-09-22 Nathan Lynch pcmoore Superseded
[1/2] powerpc/pseries: block untrusted device tree changes when locked down powerpc/pseries: restrict error injection and DT changes when locked down - - - --- 2022-09-22 Nathan Lynch pcmoore Superseded
[11/29] smack: implement set acl hook acl: add vfs posix acl api - - - --- 2022-09-22 Christian Brauner pcmoore Superseded
[09/29] security: add set acl hook acl: add vfs posix acl api - - - --- 2022-09-22 Christian Brauner pcmoore Superseded
apparmor: Simply obtain the newest label on a cred apparmor: Simply obtain the newest label on a cred 1 - - --- 2022-09-22 Gaosheng Cui Handled Elsewhere
[1/1] Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT - - 2 --- 2022-09-21 Jeff Xu Handled Elsewhere
[5.15,02/45] arm64: kexec_file: use more system keyrings to verify kernel image signature Untitled series #679094 2 - - --- 2022-09-21 gregkh@linuxfoundation.org Handled Elsewhere
[v5,2/2] ima: Handle -ESTALE returned by ima_filter_rule_match() ima: Handle -ESTALE returned by ima_filter_rule_match() - 1 - --- 2022-09-21 Guozihua (Scott) Handled Elsewhere
[v5,1/2] ima: Simplify ima_lsm_copy_rule ima: Handle -ESTALE returned by ima_filter_rule_match() - - - --- 2022-09-21 Guozihua (Scott) Handled Elsewhere
[RESEND,v2,2/2] kernel/watch_queue: NULL the dangling *pipe, and use it for clear check watch_queue: Clean up some code - - - --- 2022-09-21 Siddh Raman Pant Handled Elsewhere
[RESEND,v2,1/2] include/linux/watch_queue: Improve documentation watch_queue: Clean up some code - - - --- 2022-09-21 Siddh Raman Pant Handled Elsewhere
[v18,13/13] selftests/bpf: Add tests for dynamic pointers parameters in kfuncs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,12/13] selftests/bpf: Add test for bpf_verify_pkcs7_signature() kfunc bpf: Add kfuncs for PKCS#7 signature verification - - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,11/13] selftests/bpf: Add additional tests for bpf_lookup_*_key() bpf: Add kfuncs for PKCS#7 signature verification - - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,10/13] selftests/bpf: Add verifier tests for bpf_lookup_*_key() and bpf_key_put() bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,09/13] selftests/bpf: Compile kernel with everything as built-in bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,08/13] bpf: Add bpf_verify_pkcs7_signature() kfunc bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,07/13] bpf: Add bpf_lookup_*_key() and bpf_key_put() kfuncs bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,06/13] KEYS: Move KEY_LOOKUP_ to include/linux/key.h and define KEY_LOOKUP_ALL bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,05/13] bpf: Export bpf_dynptr_get_size() bpf: Add kfuncs for PKCS#7 signature verification 2 1 - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,04/13] btf: Allow dynamic pointer parameters in kfuncs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,03/13] bpf: Move dynptr type check to is_dynptr_type_expected() bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,02/13] btf: Export bpf_dynptr definition bpf: Add kfuncs for PKCS#7 signature verification 1 - 1 --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v18,01/13] bpf: Allow kfuncs to be used in LSM programs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-20 Roberto Sassu Handled Elsewhere
[v2,RFC] LSM: lsm_self_attr syscall for LSM self attributes [v2,RFC] LSM: lsm_self_attr syscall for LSM self attributes - - - --- 2022-09-19 Casey Schaufler pcmoore Superseded
[v18,02/13] btf: Export bpf_dynptr definition Untitled series #678236 1 - - --- 2022-09-19 Roberto Sassu Handled Elsewhere
[(urgent)] vfs: fix uninitialized uid/gid in chown_common() [(urgent)] vfs: fix uninitialized uid/gid in chown_common() - - - --- 2022-09-19 Tetsuo Handa Handled Elsewhere
[PATCHv2,1/1] efi: Correct Macmini DMI match in uefi cert quirk [PATCHv2,1/1] efi: Correct Macmini DMI match in uefi cert quirk - - 1 --- 2022-09-17 Orlando Chamberlain Handled Elsewhere
KEYS: encrypted: fix key instantiation with user-provided data KEYS: encrypted: fix key instantiation with user-provided data - - - --- 2022-09-16 Nikolaus Voss Handled Elsewhere
[v14,26/26] ima: Enable IMA namespaces ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,25/26] ima: Restrict informational audit messages to init_ima_ns ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,24/26] ima: Limit number of policy rules in non-init_ima_ns ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,23/26] ima: Show owning user namespace's uid and gid when displaying policy ima: Namespace IMA with audit support in IMA-ns - 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,22/26] ima: Introduce securityfs file to activate an IMA namespace ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,21/26] ima: Setup securityfs for IMA namespace ima: Namespace IMA with audit support in IMA-ns 2 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,20/26] ima: Remove unused iints from the integrity_iint_cache ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,19/26] ima: Namespace audit status flags ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,18/26] integrity: Add optional callback function to integrity_inode_free() ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,17/26] integrity/ima: Define ns_status for storing namespaced iint data ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,16/26] ima: Add functions for creating and freeing of an ima_namespace ima: Namespace IMA with audit support in IMA-ns 2 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,15/26] ima: Implement ima_free_policy_rules() for freeing of an ima_namespace ima: Namespace IMA with audit support in IMA-ns - 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,14/26] ima: Implement hierarchical processing of file accesses ima: Namespace IMA with audit support in IMA-ns - 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,13/26] userns: Add pointer to ima_namespace to user_namespace ima: Namespace IMA with audit support in IMA-ns 1 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,12/26] ima: Only accept AUDIT rules for non-init_ima_ns namespaces for now ima: Namespace IMA with audit support in IMA-ns 1 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,11/26] ima: Define mac_admin_ns_capable() as a wrapper for ns_capable() ima: Namespace IMA with audit support in IMA-ns - - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,10/26] ima: Switch to lazy lsm policy updates for better performance ima: Namespace IMA with audit support in IMA-ns 1 - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,09/26] ima: Move ima_lsm_policy_notifier into ima_namespace ima: Namespace IMA with audit support in IMA-ns 1 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,08/26] ima: Move IMA securityfs files into ima_namespace or onto stack ima: Namespace IMA with audit support in IMA-ns 2 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,07/26] ima: Move some IMA policy and filesystem related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns 2 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,06/26] ima: Move measurement list related variables into ima_namespace ima: Namespace IMA with audit support in IMA-ns - 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,05/26] ima: Move ima_htable into ima_namespace ima: Namespace IMA with audit support in IMA-ns 1 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,04/26] ima: Move arch_policy_entry into ima_namespace ima: Namespace IMA with audit support in IMA-ns 1 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,03/26] ima: Define ima_namespace struct and start moving variables into it ima: Namespace IMA with audit support in IMA-ns 1 1 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,02/26] securityfs: Extend securityfs with namespacing support ima: Namespace IMA with audit support in IMA-ns 1 - - --- 2022-09-15 Stefan Berger Handled Elsewhere
[v14,01/26] securityfs: rework dentry creation ima: Namespace IMA with audit support in IMA-ns - 2 - --- 2022-09-15 Stefan Berger Handled Elsewhere
[RFC] LSM: Specify which LSM to display [RFC] LSM: Specify which LSM to display - - - --- 2022-09-14 Casey Schaufler pcmoore Superseded
apparmor: make __aa_path_perm() static apparmor: make __aa_path_perm() static 1 - - --- 2022-09-14 xiujianfeng Handled Elsewhere
[v2] KEYS: Remove orphan declarations from security/keys/internal.h [v2] KEYS: Remove orphan declarations from security/keys/internal.h - 1 - --- 2022-09-13 Gaosheng Cui Handled Elsewhere
[linux-next] smack: lsm: remove the unneeded result variable [linux-next] smack: lsm: remove the unneeded result variable - - - --- 2022-09-12 CGEL Handled Elsewhere
[RFC] LSM: lsm_self_attr system call to get security module attributes [RFC] LSM: lsm_self_attr system call to get security module attributes - - - --- 2022-09-10 Casey Schaufler pcmoore Superseded
[v17,12/12] selftests/bpf: Add tests for dynamic pointers parameters in kfuncs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,11/12] selftests/bpf: Add test for bpf_verify_pkcs7_signature() kfunc bpf: Add kfuncs for PKCS#7 signature verification - - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,10/12] selftests/bpf: Add additional tests for bpf_lookup_*_key() bpf: Add kfuncs for PKCS#7 signature verification - - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,09/12] selftests/bpf: Add verifier tests for bpf_lookup_*_key() and bpf_key_put() bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,08/12] selftests/bpf: Compile kernel with everything as built-in bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,07/12] bpf: Add bpf_verify_pkcs7_signature() kfunc bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,06/12] bpf: Add bpf_lookup_*_key() and bpf_key_put() kfuncs bpf: Add kfuncs for PKCS#7 signature verification 2 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,05/12] KEYS: Move KEY_LOOKUP_ to include/linux/key.h and define KEY_LOOKUP_ALL bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,04/12] bpf: Export bpf_dynptr_get_size() bpf: Add kfuncs for PKCS#7 signature verification 2 1 - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,03/12] btf: Allow dynamic pointer parameters in kfuncs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,02/12] bpf: Move dynptr type check to is_dynptr_type_expected() bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v17,01/12] bpf: Allow kfuncs to be used in LSM programs bpf: Add kfuncs for PKCS#7 signature verification 1 - - --- 2022-09-09 Roberto Sassu Handled Elsewhere
[v1] selftests: Use optional USERCFLAGS and USERLDFLAGS [v1] selftests: Use optional USERCFLAGS and USERLDFLAGS - - - --- 2022-09-09 Mickaël Salaün Handled Elsewhere
[v1] selftests/landlock: Fix out-of-tree builds [v1] selftests/landlock: Fix out-of-tree builds - - - --- 2022-09-09 Mickaël Salaün Handled Elsewhere
security/keys: remove request_key_conswq and keyring_search_instkey() declarations security/keys: remove request_key_conswq and keyring_search_instkey() declarations - - - --- 2022-09-09 Gaosheng Cui Handled Elsewhere
[v4,2/2] ima: Handle -ESTALE returned by ima_filter_rule_match() ima: Handle -ESTALE returned by ima_filter_rule_match() - - - --- 2022-09-09 Guozihua (Scott) Handled Elsewhere
[v4,1/2] ima: Simplify ima_lsm_copy_rule ima: Handle -ESTALE returned by ima_filter_rule_match() - - - --- 2022-09-09 Guozihua (Scott) Handled Elsewhere
[net-next,v4,6/6] net: Add self tests for ULP operations, flow setup and crypto tests [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - - - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
[net-next,v4,5/6] net: Add flow counters and Tx processing error counter [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - - - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
[net-next,v4,4/6] net: Implement QUIC offload functions [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - - - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
[net-next,v4,3/6] net: Add UDP ULP operations, initialization and handling prototype functions. [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - - - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
[net-next,v4,2/6] net: Define QUIC specific constants, control and data plane structures [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - - - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
[net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. [net-next,v4,1/6] net: Documentation on QUIC kernel Tx crypto. - 1 - --- 2022-09-09 Adel Abouchaev Handled Elsewhere
lockdown: ratelimit denial messages lockdown: ratelimit denial messages - - - --- 2022-09-08 Nathan Lynch pcmoore Accepted
[v6,5/5] landlock: Document Landlock's file truncation support landlock: truncate support - - - --- 2022-09-08 Günther Noack Handled Elsewhere
[v6,4/5] samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE landlock: truncate support - - - --- 2022-09-08 Günther Noack Handled Elsewhere
[v6,3/5] selftests/landlock: Selftests for file truncation support landlock: truncate support - - - --- 2022-09-08 Günther Noack Handled Elsewhere
[v6,2/5] landlock: Support file truncation landlock: truncate support - - - --- 2022-09-08 Günther Noack Handled Elsewhere
[v6,1/5] security: create file_truncate hook from path_truncate hook landlock: truncate support 2 - - --- 2022-09-08 Günther Noack Handled Elsewhere
landlock: Remove unnecessary conditionals landlock: Remove unnecessary conditionals - - - --- 2022-09-08 Jingyu Wang Handled Elsewhere
[-next] smack: cleanup obsolete mount option flags [-next] smack: cleanup obsolete mount option flags - - - --- 2022-09-08 xiujianfeng Handled Elsewhere
dm: verity-loadpin: Only trust verity targets with enforcement dm: verity-loadpin: Only trust verity targets with enforcement - 1 - --- 2022-09-07 Matthias Kaehlcke Handled Elsewhere
[v17,12/12] selftests/bpf: Add tests for dynamic pointers parameters in kfuncs Untitled series #674913 1 - - --- 2022-09-07 Roberto Sassu Handled Elsewhere
security/keys: Remove inconsistent __user annotation security/keys: Remove inconsistent __user annotation 1 1 - --- 2022-09-07 Vincenzo Frascino pcmoore Handled Elsewhere
[RFC] generic_entry: Add stackleak support [RFC] generic_entry: Add stackleak support - - - --- 2022-09-07 Guo Ren Handled Elsewhere
LoadPin: Require file with verity root digests to have a header LoadPin: Require file with verity root digests to have a header - - - --- 2022-09-07 Matthias Kaehlcke Handled Elsewhere
[v5.19.y,3/3] Smack: Provide read control for io_uring_cmd Backport the io_uring/LSM CMD passthrough controls 1 - - --- 2022-09-06 Paul Moore pcmoore Handled Elsewhere
[v5.19.y,2/3] selinux: implement the security_uring_cmd() LSM hook Backport the io_uring/LSM CMD passthrough controls - - - --- 2022-09-06 Paul Moore pcmoore Handled Elsewhere
« 1 2 ... 34 35 36 … 159 160 »