Show patches with: State = Action Required       |   12037 patches
« 1 2 ... 4 5 6 … 120 121 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v34,02/29] LSM: Infrastructure management of the sock security [v34,01/29] integrity: disassociate ima_filter_rule from security_audit_rule 2 2 - --- 2022-04-15 Casey Schaufler New
[v34,01/29] integrity: disassociate ima_filter_rule from security_audit_rule [v34,01/29] integrity: disassociate ima_filter_rule from security_audit_rule 1 - - --- 2022-04-15 Casey Schaufler New
[v7,6/6] MAINTAINERS: add myself as CAAM trusted key maintainer KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - - - --- 2022-04-15 Ahmad Fatoum New
[v7,5/6] doc: trusted-encrypted: describe new CAAM trust source KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - - - --- 2022-04-15 Ahmad Fatoum New
[v7,4/6] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 3 3 --- 2022-04-15 Ahmad Fatoum New
[v7,3/6] crypto: caam - add in-kernel interface for blob generator KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 2 2 --- 2022-04-15 Ahmad Fatoum New
[v7,2/6] KEYS: trusted: allow use of kernel RNG for key material KEYS: trusted: Introduce support for NXP CAAM-based trusted keys 2 3 - --- 2022-04-15 Ahmad Fatoum New
[v7,1/6] KEYS: trusted: allow use of TEE as backend without TCG_TPM support KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 2 2 --- 2022-04-15 Ahmad Fatoum New
[v7] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v7] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - 1 - --- 2022-04-15 Aditya Garg New
[v6] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v6] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - - - --- 2022-04-15 Aditya Garg New
ima: simplify if-if to if-else ima: simplify if-if to if-else - - - --- 2022-04-14 Yihao Han New
[v6,3/4] arm64: kexec_file: use more system keyrings to verify kernel image signature Untitled series #632067 2 - - --- 2022-04-14 Coiby Xu New
[v6,2/4] kexec, KEYS: make the code in bzImage64_verify_sig generic Untitled series #632067 - 1 - --- 2022-04-14 Coiby Xu New
[v5] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v5] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - - - --- 2022-04-13 Aditya Garg New
[v10,4/4] docs: security: Add secrets/coco documentation Allow guest access to EFI confidential computing secret area - 1 - --- 2022-04-12 Dov Murik New
[v10,3/4] efi: Register efi_secret platform device if EFI secret area is declared Allow guest access to EFI confidential computing secret area - 1 - --- 2022-04-12 Dov Murik New
[v10,2/4] virt: Add efi_secret module to expose confidential computing secrets Allow guest access to EFI confidential computing secret area - 1 - --- 2022-04-12 Dov Murik New
[v10,1/4] efi: Save location of EFI confidential computing area Allow guest access to EFI confidential computing secret area - 1 - --- 2022-04-12 Dov Murik New
[v4,RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v4,RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - - - --- 2022-04-12 Aditya Garg New
[v4] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v4] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - - - --- 2022-04-12 Aditya Garg New
[v3,RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs [v3,RESEND] efi: Do not import certificates from UEFI Secure Boot for T2 Macs - - - --- 2022-04-10 Aditya Garg New
[v34,29/29] AppArmor: Remove the exclusive flag LSM: Module stacking for AppArmor 2 1 - --- 2022-04-07 Casey Schaufler New
[v34,28/29] LSM: Add /proc attr entry for full LSM context LSM: Module stacking for AppArmor - 1 - --- 2022-04-07 Casey Schaufler New
[v34,27/29] Audit: Add record for multiple object contexts LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,26/29] Audit: Add record for multiple task security contexts LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,25/29] Audit: Allow multiple records in an audit_buffer LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,24/29] LSM: Add a function to report multiple LSMs LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,23/29] Audit: Create audit_stamp structure LSM: Module stacking for AppArmor 1 - - --- 2022-04-07 Casey Schaufler New
[v34,22/29] Audit: Keep multiple LSM data in audit_names LSM: Module stacking for AppArmor 1 - - --- 2022-04-07 Casey Schaufler New
[v34,21/29] LSM: Extend security_secid_to_secctx to include module selection LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,20/29] binder: Pass LSM identifier for confirmation LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,19/29] NET: Store LSM netlabel data in a lsmblob LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,18/29] LSM: security_secid_to_secctx in netlink netfilter LSM: Module stacking for AppArmor 3 2 - --- 2022-04-07 Casey Schaufler New
[v34,17/29] LSM: Use lsmcontext in security_inode_getsecctx LSM: Module stacking for AppArmor 3 2 - --- 2022-04-07 Casey Schaufler New
[v34,16/29] LSM: Use lsmcontext in security_secid_to_secctx LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,15/29] LSM: Ensure the correct LSM context releaser LSM: Module stacking for AppArmor 3 2 - --- 2022-04-07 Casey Schaufler New
[v34,14/29] LSM: Specify which LSM to display LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,13/29] LSM: Use lsmblob in security_cred_getsecid LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,12/29] LSM: Use lsmblob in security_inode_getsecid LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,11/29] LSM: Use lsmblob in security_current_getsecid LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,10/29] LSM: Use lsmblob in security_ipc_getsecid LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,09/29] LSM: Use lsmblob in security_secid_to_secctx LSM: Module stacking for AppArmor 1 1 - --- 2022-04-07 Casey Schaufler New
[v34,08/29] LSM: Use lsmblob in security_secctx_to_secid LSM: Module stacking for AppArmor 1 1 - --- 2022-04-07 Casey Schaufler New
[v34,07/29] LSM: Use lsmblob in security_kernel_act_as LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,06/29] LSM: Use lsmblob in security_audit_rule_match LSM: Module stacking for AppArmor 1 - - --- 2022-04-07 Casey Schaufler New
[v34,05/29] IMA: avoid label collisions with stacked LSMs LSM: Module stacking for AppArmor - - - --- 2022-04-07 Casey Schaufler New
[v34,04/29] LSM: provide lsm name and id slot mappings LSM: Module stacking for AppArmor 1 1 - --- 2022-04-07 Casey Schaufler New
[v34,03/29] LSM: Add the lsmblob data structure. LSM: Module stacking for AppArmor - 1 - --- 2022-04-07 Casey Schaufler New
[v34,02/29] LSM: Infrastructure management of the sock security LSM: Module stacking for AppArmor 2 2 - --- 2022-04-07 Casey Schaufler New
[v34,01/29] integrity: disassociate ima_filter_rule from security_audit_rule LSM: Module stacking for AppArmor 1 - - --- 2022-04-07 Casey Schaufler New
security: don't treat structure as an array of struct hlist_head security: don't treat structure as an array of struct hlist_head - - - --- 2022-04-07 Bill Wendling New
[v3,1/1] ima: remove the IMA_TEMPLATE Kconfig option ima: fix boot command line issue - - - --- 2022-04-07 Guozihua (Scott) New
[v2,1/1] ima: remove the IMA_TEMPLATE Kconfig option ima: fix boot command line issue - - - --- 2022-04-06 Guozihua (Scott) New
[v2] ima: remove the IMA_TEMPLATE Kconfig option [v2] ima: remove the IMA_TEMPLATE Kconfig option - - - --- 2022-04-06 Guozihua (Scott) New
[v2] ima: remove the IMA_TEMPLATE Kconfig option [v2] ima: remove the IMA_TEMPLATE Kconfig option - - - --- 2022-04-06 Guozihua (Scott) New
[7/7] integrity: Use root of trust signature restriction Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[6/7] KEYS: X.509: Flag Intermediate CA certs as built in Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[5/7] KEYS: Introduce sig restriction that validates root of trust Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[4/7] KEYS: Introduce a builtin root of trust key flag Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[3/7] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[2/7] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - - - --- 2022-04-06 Eric Snowberg New
[1/7] KEYS: Create static version of public_key_verify_signature Add CA enforcement keyring restrictions - 1 - --- 2022-04-06 Eric Snowberg New
[v2] keys: remove __user annotation from function prototype [v2] keys: remove __user annotation from function prototype - 1 - --- 2022-04-06 Randy Dunlap New
[POC,USER,SPACE] Introduce LSM to protect pinned objects [POC,USER,SPACE] Introduce LSM to protect pinned objects - - - --- 2022-04-05 Roberto Sassu New
[5.15,235/913] KEYS: trusted: Avoid calling null function trusted_key_exit Untitled series #629080 - 1 - --- 2022-04-05 Greg KH New
[5.15,137/913] landlock: Use square brackets around "landlock-ruleset" Untitled series #629080 - - - --- 2022-04-05 Greg KH New
[5.16,0248/1017] KEYS: trusted: Avoid calling null function trusted_key_exit Untitled series #629048 - 1 - --- 2022-04-05 Greg KH New
[5.16,0143/1017] landlock: Use square brackets around "landlock-ruleset" Untitled series #629048 - - - --- 2022-04-05 Greg KH New
[5.17,0255/1126] KEYS: trusted: Avoid calling null function trusted_key_exit Untitled series #629004 - 1 - --- 2022-04-05 Greg KH New
[5.17,0138/1126] landlock: Use square brackets around "landlock-ruleset" Untitled series #629004 - - - --- 2022-04-05 Greg KH New
[v9,4/4] docs: security: Add secrets/coco documentation Allow guest access to EFI confidential computing secret area - 1 - --- 2022-03-31 Dov Murik New
[v9,3/4] efi: Register efi_secret platform device if EFI secret area is declared Allow guest access to EFI confidential computing secret area - 1 - --- 2022-03-31 Dov Murik New
[v9,2/4] virt: Add efi_secret module to expose confidential computing secrets Allow guest access to EFI confidential computing secret area - 1 - --- 2022-03-31 Dov Murik New
[v9,1/4] efi: Save location of EFI confidential computing area Allow guest access to EFI confidential computing secret area - 1 - --- 2022-03-31 Dov Murik New
[5/5] smack: Remove redundant assignments [1/5] apparmor: Remove redundant assignments - - - --- 2022-03-31 Michal Orzel New
[3/5] keys: Remove redundant assignments [1/5] apparmor: Remove redundant assignments 1 - - --- 2022-03-31 Michal Orzel New
[2/5] integrity: Remove redundant assignments [1/5] apparmor: Remove redundant assignments - - - --- 2022-03-31 Michal Orzel New
[1/5] apparmor: Remove redundant assignments [1/5] apparmor: Remove redundant assignments - - - --- 2022-03-31 Michal Orzel New
[v2,12/12] landlock: Add design choices documentation for filesystem access rights Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,11/12] landlock: Document good practices about filesystem policies Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,10/12] landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,09/12] samples/landlock: Add support for file reparenting Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,08/12] selftest/landlock: Add 11 new test suites dedicated to file reparenting Landlock: file linking and renaming support - - - --- 2022-03-29 Mickaël Salaün New
[v2,07/12] landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,06/12] LSM: Remove double path_rename hook calls for RENAME_EXCHANGE Landlock: file linking and renaming support 2 1 - --- 2022-03-29 Mickaël Salaün New
[v2,05/12] landlock: Move filesystem helpers and add a new one Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,04/12] landlock: Fix same-layer rule unions Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,03/12] landlock: Create find_rule() from unmask_layers() Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,02/12] landlock: Reduce the maximum number of layers to 16 Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[v2,01/12] landlock: Define access_mask_t to enforce a consistent access mask size Landlock: file linking and renaming support - 1 - --- 2022-03-29 Mickaël Salaün New
[18/18] bpf-preload/selftests: Preload a test eBPF program and check pinned objects bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[17/18] bpf-preload/selftests: Add test for automatic generation of preload methods bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[16/18] bpf-preload: Do kernel mount to ensure that pinned objects don't disappear bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[15/18] bpf-preload: Generate code of kernel module to preload bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[14/18] bpf-preload: Switch to new preload registration method bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[13/18] bpf-preload: Move pinned links and maps to a dedicated directory in bpffs bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[12/18] bpf-preload: Implement new registration method for preloading eBPF programs bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[11/18] bpf-preload: Store multiple bpf_preload_ops structures in a linked list bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[10/18] bpf-preload: Generate bpf_preload_ops bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
[09/18] bpf-preload: Generate code to pin non-internal maps bpf: Secure and authenticated preloading of eBPF programs - - - --- 2022-03-28 Roberto Sassu New
« 1 2 ... 4 5 6 … 120 121 »