Show patches with: none      |   16486 patches
« 1 2 ... 37 38 39 … 164 165 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v1,1/8] LSM: Identify modules by more than name LSM: Two basic syscalls - - - --- 2022-10-25 Casey Schaufler pcmoore Changes Requested
[v3] evm: Correct inode_init_security hooks behaviors [v3] evm: Correct inode_init_security hooks behaviors - - - --- 2022-10-25 Nicolas Bouchinet pcmoore Superseded
[v2] security: commoncap: fix potential memleak on error path from vfs_getxattr_alloc [v2] security: commoncap: fix potential memleak on error path from vfs_getxattr_alloc 1 - - --- 2022-10-25 Gaosheng Cui pcmoore Accepted
device_cgroup: Roll back to original exceptions after copy failure device_cgroup: Roll back to original exceptions after copy failure - 1 - --- 2022-10-25 Wang Weiyang pcmoore Accepted
security: commoncap: fix potential memleak on error path from vfs_getxattr_alloc security: commoncap: fix potential memleak on error path from vfs_getxattr_alloc - - - --- 2022-10-25 Gaosheng Cui Changes Requested
ima: fix a possible null pointer dereference ima: fix a possible null pointer dereference - - - --- 2022-10-25 Gaosheng Cui Handled Elsewhere
audit: Fix some kernel-doc warnings audit: Fix some kernel-doc warnings 1 - - --- 2022-10-25 Bo Liu pcmoore Changes Requested
[-next] apparmor: fix a memleak in free_ruleset() [-next] apparmor: fix a memleak in free_ruleset() 1 - - --- 2022-10-25 Gaosheng Cui Handled Elsewhere
[5.10,053/390] hardening: Clarify Kconfig text for auto-var-init Untitled series #688216 1 - - --- 2022-10-24 Greg Kroah-Hartman Handled Elsewhere
[3/8] caps: use type safe idmapping helpers Untitled series #688152 - - - --- 2022-10-24 Christian Brauner pcmoore Handled Elsewhere
[RFC] bpf: Check xattr name/value pair from bpf_lsm_inode_init_security() [RFC] bpf: Check xattr name/value pair from bpf_lsm_inode_init_security() - - - --- 2022-10-21 Roberto Sassu pcmoore Handled Elsewhere
[v8,12/12] landlock: Document Landlock's network support Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,11/12] samples/landlock: Add network demo Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,10/12] selftests/landlock: Add 10 new test suites dedicated to network Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,09/12] selftests/landlock: Share enforce_ruleset() Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,08/12] landlock: Implement TCP network hooks Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,07/12] landlock: Add network rules support Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,06/12] landlock: Refactor landlock_add_rule() syscall Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,05/12] landlock: Refactor unmask_layers() and init_layer_masks() Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,04/12] landlock: Move unmask_layers() and init_layer_masks() Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,03/12] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,02/12] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v8,01/12] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2022-10-21 Konstantin Meskhidze (A) Handled Elsewhere
[v2] evm: Correct inode_init_security hooks behaviors [v2] evm: Correct inode_init_security hooks behaviors - - - --- 2022-10-21 Nicolas Bouchinet Handled Elsewhere
apparmor: Fix memleak issue in unpack_profile() apparmor: Fix memleak issue in unpack_profile() 1 - - --- 2022-10-21 Xiu Jianfeng Handled Elsewhere
[v2] apparmor: Use pointer to struct aa_label for lbs_cred [v2] apparmor: Use pointer to struct aa_label for lbs_cred 1 - - --- 2022-10-21 Xiu Jianfeng Handled Elsewhere
[GIT,PULL] SELinux fixes for v6.1 (#1) [GIT,PULL] SELinux fixes for v6.1 (#1) - - - --- 2022-10-20 Paul Moore pcmoore Handled Elsewhere
evm: Correct inode_init_security hooks behaviors evm: Correct inode_init_security hooks behaviors - - - --- 2022-10-20 Nicolas Bouchinet pcmoore Superseded
apparmor: Use pointer to struct aa_label for lbs_cred apparmor: Use pointer to struct aa_label for lbs_cred - - - --- 2022-10-20 Xiu Jianfeng Handled Elsewhere
[v1] selftests/landlock: Build without static libraries [v1] selftests/landlock: Build without static libraries - - - --- 2022-10-19 Mickaël Salaün Handled Elsewhere
[v6] KEYS: encrypted: fix key instantiation with user-provided data [v6] KEYS: encrypted: fix key instantiation with user-provided data - 1 - --- 2022-10-19 Nikolaus Voss Handled Elsewhere
[v5] KEYS: encrypted: fix key instantiation with user-provided data [v5] KEYS: encrypted: fix key instantiation with user-provided data - 1 - --- 2022-10-19 Nikolaus Voss Handled Elsewhere
[v2] selinux: use GFP_ATOMIC in convert_context() [v2] selinux: use GFP_ATOMIC in convert_context() - 1 - --- 2022-10-19 Gong Ruiqi Handled Elsewhere
[v10,11/11] landlock: Document Landlock's file truncation support landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,10/11] samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,09/11] selftests/landlock: Test ftruncate on FDs created by memfd_create(2) landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,08/11] selftests/landlock: Test FD passing from restricted to unrestricted processes landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,07/11] selftests/landlock: Locally define __maybe_unused landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,06/11] selftests/landlock: Test open() and ftruncate() in multiple scenarios landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,05/11] selftests/landlock: Test file truncation support landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,04/11] landlock: Support file truncation landlock: truncate support 1 - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,03/11] landlock: Document init_layer_masks() helper landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,02/11] landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() landlock: truncate support - - - --- 2022-10-18 Günther Noack Handled Elsewhere
[v10,01/11] security: Create file_truncate hook from path_truncate hook landlock: truncate support 3 - - --- 2022-10-18 Günther Noack Handled Elsewhere
selinux: use GFP_ATOMIC in convert_context() selinux: use GFP_ATOMIC in convert_context() - - - --- 2022-10-18 Gong Ruiqi Handled Elsewhere
[v5,30/30] acl: remove a slew of now unused helpers acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,29/30] 9p: use stub posix acl handlers acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,28/30] cifs: use stub posix acl handlers acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,27/30] ovl: use stub posix acl handlers acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,26/30] ecryptfs: use stub posix acl handlers acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,25/30] evm: remove evm_xattr_acl_change() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,24/30] xattr: use posix acl api acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,23/30] ovl: use posix acl api acl: add vfs posix acl api 1 - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,22/30] ovl: implement set acl method acl: add vfs posix acl api 1 - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,21/30] ovl: implement get acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,20/30] ecryptfs: implement set acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,19/30] ecryptfs: implement get acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,18/30] ksmbd: use vfs_remove_acl() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,17/30] acl: add vfs_remove_acl() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,16/30] acl: add vfs_get_acl() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,15/30] acl: add vfs_set_acl() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,14/30] internal: add may_write_xattr() acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,13/30] evm: add post set acl hook acl: add vfs posix acl api - 1 - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,12/30] integrity: implement get and set acl hook acl: add vfs posix acl api 1 - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,11/30] smack: implement get, set and remove acl hook acl: add vfs posix acl api - 2 - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,10/30] selinux: implement get, set and remove acl hook acl: add vfs posix acl api 1 - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,09/30] security: add get, remove and set acl hook acl: add vfs posix acl api 1 - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,08/30] 9p: implement set acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,07/30] 9p: implement get acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,06/30] cifs: implement set acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,05/30] cifs: implement get acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,04/30] fs: add new get acl method acl: add vfs posix acl api - - - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,03/30] fs: rename current get acl method acl: add vfs posix acl api - 1 - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,02/30] fs: pass dentry to set acl method acl: add vfs posix acl api - 1 - --- 2022-10-18 Christian Brauner Handled Elsewhere
[v5,01/30] orangefs: rework posix acl handling when creating new filesystem objects acl: add vfs posix acl api - 1 - --- 2022-10-18 Christian Brauner Handled Elsewhere
integrity: iint: Optimize integrity_iintcache_init and integrity_inode_free function integrity: iint: Optimize integrity_iintcache_init and integrity_inode_free function - - - --- 2022-10-18 Li zeming Handled Elsewhere
LSM: Better reporting of actual LSMs at boot LSM: Better reporting of actual LSMs at boot - - - --- 2022-10-18 Kees Cook pcmoore Changes Requested
fs: edit a comment made in bad taste fs: edit a comment made in bad taste - - - --- 2022-10-17 Paul Moore Accepted
[-next] apparmor: Fix spelling of function name in comment block [-next] apparmor: Fix spelling of function name in comment block 1 - - --- 2022-10-14 Yang Li Handled Elsewhere
[9/9] integrity: Move integrity_inode_get() out of global header integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[8/9] integrity: Move trivial hooks into LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[7/9] ima: Move ima_file_check() into LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[6/9] fs: Introduce file_to_perms() helper integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[5/9] LSM: Introduce inode_post_setattr hook integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[4/9] ima: Move ima_file_free() into LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[3/9] ima: Move xattr hooks into LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[2/9] security: Move trivial IMA hooks into LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
[1/9] integrity: Prepare for having "ima" and "evm" available in "integrity" LSM integrity: Move hooks into LSM - - - --- 2022-10-13 Kees Cook pcmoore Superseded
MAINTAINERS: git://github -> https://github.com for cschaufler MAINTAINERS: git://github -> https://github.com for cschaufler - 2 - --- 2022-10-13 Palmer Dabbelt Handled Elsewhere
[v4] KEYS: encrypted: fix key instantiation with user-provided data [v4] KEYS: encrypted: fix key instantiation with user-provided data - 2 - --- 2022-10-13 Nikolaus Voss Handled Elsewhere
[v3] KEYS: encrypted: fix key instantiation with user-provided data [v3] KEYS: encrypted: fix key instantiation with user-provided data - - - --- 2022-10-13 Nikolaus Voss Handled Elsewhere
[v2] KEYS: encrypted: fix key instantiation with user-provided data [v2] KEYS: encrypted: fix key instantiation with user-provided data - - - --- 2022-10-12 Nikolaus Voss Handled Elsewhere
lsm: make security_socket_getpeersec_stream() sockptr_t safe lsm: make security_socket_getpeersec_stream() sockptr_t safe 2 - - --- 2022-10-10 Paul Moore pcmoore Accepted
[v9,11/11] landlock: Document Landlock's file truncation support landlock: truncate support - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,10/11] samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE landlock: truncate support - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,11/11] landlock: Document Landlock's file truncation support Untitled series #683915 - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,10/11] samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE Untitled series #683915 - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,09/11] selftests/landlock: Test ftruncate on FDs created by memfd_create(2) landlock: truncate support - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,08/11] selftests/landlock: Test FD passing from restricted to unrestricted processes landlock: truncate support - - - --- 2022-10-08 Günther Noack Handled Elsewhere
[v9,07/11] selftests/landlock: Locally define __maybe_unused landlock: truncate support - - - --- 2022-10-08 Günther Noack Handled Elsewhere
« 1 2 ... 37 38 39 … 164 165 »