Toggle navigation
Patchwork
Security modules development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: none
| 17310 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Mainlined
Queued
Needs ACK
Handled Elsewhere
In Next
Search
Archived
No
Yes
Both
Delegate
------
Nobody
holtmann
holtmann
holtmann
agk
mchehab
mchehab
gregkh
gregkh
mtosatti
lethal
lethal
avi
cvaroqui
jbrassow
mikulas
dtor
bmarzins
tmlind
jmberg
jmberg
mcgrof
mcgrof
mcgrof
lenb
lenb
kyle
felipebalbi
varenet
helge
helge
khilman
khilman
khilman
khilman
jwoithe
mlin
Zhang Rui
Zhang Rui
iksaif
cjackiewicz
hmh
jbarnes
jbarnes
jbarnes
willy
snitzer
iwamatsu
dougsland
mjg59
rafael
rafael
rafael
ericvh@gmail.com
ykzhao
venkip
sandeen
pwsan
lucho@ionkov.net
rminnich
anholt
aystarik
roland
shefty
mason
glikely
krh
djbw
djbw
djbw
cmarinas
doyu
jrn
sage
tomba
mmarek
cjb
jikos
bcousson
jic23
olof
olof
olof
nsekhar
weiny2
horms
horms
bwidawsk
bwidawsk
shemminger
eulfhan
josef
josef
josef
dianders
jpan9
hal
kdave
bleung
evalenti
jlbec
wsa
bhelgaas
vkoul
vkoul
szlin
davejiang
markgross
tagr
tiwai
vireshk
mmind
dledford
geert
geert
herbert
herbert
kvalo
kvalo
kvalo
bentiss
arend
rzwisler
stellarhopper
stellarhopper
jejb
matthias_bgg
dvhart
axboe
axboe
pcmoore
pcmoore
pcmoore
mkp
mkp
stefan_schmidt
leon
lucvoo
jsakkine
jsakkine
jsakkine
bamse
bamse
demarchi
krzk
groeck
groeck
sboyd
sboyd
mturquette
mturquette
0andriy
carlocaione
luca
dgc
kbingham
derosier
narmstrong
narmstrong
atull
tytso
tytso
djwong
bvanassche
omos
jpirko
jpirko
GustavoARSilva
pkshih
patersonc
brauner
shuahkh
shuahkh
shuahkh
palmer
palmer
jgg
Kishon
idosch
labbott
jsimmons
lfadmin
broonie
broonie
broonie
mricon
mricon
mricon
kees
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
arnd
linusw
perfinion
bbrezillon
bachradsusi
rostedt
rostedt
kholk
nbd
ebiggers
ebiggers
pavelm
sds
m0reeze
ganis
jwcart2
matttbe
andmur01
lorpie01
chanwoochoi
dlezcano
jhedberg
vudentz
robertfoss
bgix
tedd_an
tsbogend
wens
wcrobert
robher
kstewart
kwilczynski
hansg
bpf
netdev
dsa
ethtool
netdrv
martineau
abelloni
trix
pabeni
mani_sadhasivam
mlimonci
liusong6
mjp
tohojo
prestwoj
prestwoj
dhowells
tzungbi
conchuod
paulmck
jes
mtkaczyk
colyli
cem
pateldipen1984
iweiny
iweiny
bjorn
mhiramat
JanKiszka
jaegeuk
mraynal
aring
konradybcio
ij
Hailan
jstitt007
denkenz
denkenz
mkorenbl
jjohnson
frank_li
geliang
mdraidci
mdraidci
peluse
ppavlu
joelgranados
cel
Apply
«
1
2
3
4
…
173
174
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[RFC,v3,3/3] selftests/landlock: Test that MPTCP actions are not restricted
Fix non-TCP sockets restriction
- - -
-
-
-
2025-02-05
Mikhail Ivanov
New
[RFC,v3,2/3] selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
Fix non-TCP sockets restriction
- - -
-
-
-
2025-02-05
Mikhail Ivanov
New
[RFC,v3,1/3] landlock: Fix non-TCP sockets restriction
Fix non-TCP sockets restriction
- - -
-
-
-
2025-02-05
Mikhail Ivanov
New
ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
- - -
-
-
-
2025-02-04
Roberto Sassu
New
[v7,7/7] ima: measure kexec load and exec events as critical data
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,6/7] ima: make the kexec extra memory configurable
ima: kexec: measure events between kexec load and excute
- - -
-
-
-
2025-02-03
steven chen
New
[v7,5/7] ima: kexec: move IMA log copy from kexec load to execute
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
Untitled series #930245
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,3/7] ima: kexec: skip IMA segment validation after kexec soft reboot
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,2/7] kexec: define functions to map and unmap segments
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,1/7] ima: define and call ima_alloc_kexec_file_buf
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,7/7] ima: measure kexec load and exec events as critical data
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,6/7] ima: make the kexec extra memory configurable
ima: kexec: measure events between kexec load and excute
- - -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
Untitled series #930146
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,3/7] ima: kexec: skip IMA segment validation after kexec soft reboot
ima: kexec: measure events between kexec load and excute
- - -
-
-
-
2025-02-03
steven chen
New
[v7,2/7] kexec: define functions to map and unmap segments
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,1/7] ima: define and call ima_alloc_kexec_file_buf
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,7/7] ima: measure kexec load and exec events as critical data
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[v7,6/7] ima: make the kexec extra memory configurable
ima: kexec: measure events between kexec load and excute
- - -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
Untitled series #930144
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,4/7] ima: kexec: define functions to copy IMA log at soft boot
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,3/7] ima: kexec: skip IMA segment validation after kexec soft reboot
ima: kexec: measure events between kexec load and excute
- - -
-
-
-
2025-02-03
steven chen
New
[v7,2/7] kexec: define functions to map and unmap segments
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-02-03
steven chen
New
[v7,1/7] ima: define and call ima_alloc_kexec_file_buf
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-02-03
steven chen
New
[RFC,v1,3/3] samples/landlock: Print domain ID
Expose Landlock domain IDs via pidfd
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[RFC,v1,2/3] pidfd: Extend PIDFD_GET_INFO with PIDFD_INFO_LANDLOCK_*_DOMAIN
Expose Landlock domain IDs via pidfd
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[RFC,v1,1/3] landlock: Add landlock_read_domain_id()
Expose Landlock domain IDs via pidfd
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,24/24] landlock: Add audit documentation
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,23/24] selftests/landlock: Add audit tests for ptrace
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,22/24] selftests/landlock: Test audit with restrict flags
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,21/24] selftests/landlock: Add tests for audit and LANDLOCK_RESTRICT_SELF_QUIET
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,20/24] selftests/landlock: Extend tests for landlock_restrict_self()'s flags
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,19/24] samples/landlock: Enable users to log sandbox denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,18/24] landlock: Add LANDLOCK_RESTRICT_SELF_LOG_CROSS_EXEC
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,17/24] landlock: Add LANDLOCK_RESTRICT_SELF_QUIET_SUBDOMAINS
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,16/24] landlock: Add LANDLOCK_RESTRICT_SELF_QUIET
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,15/24] landlock: Log scoped denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,14/24] landlock: Log TCP bind and connect denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,13/24] landlock: Log truncate and IOCTL denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,12/24] landlock: Log file-related denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,11/24] landlock: Log mount-related denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,10/24] landlock: Add AUDIT_LANDLOCK_DOMAIN and log domain status
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,09/24] landlock: Add AUDIT_LANDLOCK_ACCESS and log ptrace denials
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,08/24] landlock: Identify domain execution crossing
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,07/24] landlock: Prepare to use credential instead of domain for fowner
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,06/24] landlock: Prepare to use credential instead of domain for scope
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,05/24] landlock: Prepare to use credential instead of domain for network
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,04/24] landlock: Prepare to use credential instead of domain for filesystem
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,03/24] landlock: Move domain hierarchy management
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,02/24] landlock: Add unique ID generator
Landlock audit support
- - -
-
-
-
2025-01-31
Mickaël Salaün
New
[v5,01/24] lsm: Add audit_log_lsm_data() helper
Landlock audit support
1 - -
-
-
-
2025-01-31
Mickaël Salaün
New
tomoyo: use better patterns for procfs in learning mode
tomoyo: use better patterns for procfs in learning mode
- - -
-
-
-
2025-01-31
Tetsuo Handa
New
[v12,bpf-next,5/5] selftests/bpf: Test kfuncs that set and remove xattr from BPF programs
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-30
Song Liu
New
[v12,bpf-next,4/5] bpf: fs/xattr: Add BPF kfuncs to set and remove xattrs
Enable writing xattr from BPF programs
1 1 -
-
-
-
2025-01-30
Song Liu
New
[v12,bpf-next,3/5] bpf: lsm: Add two more sleepable hooks
Enable writing xattr from BPF programs
- 1 -
-
-
-
2025-01-30
Song Liu
New
[v12,bpf-next,2/5] selftests/bpf: Extend test fs_kfuncs to cover security.bpf. xattr names
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-30
Song Liu
New
[v12,bpf-next,1/5] fs/xattr: bpf: Introduce security.bpf. xattr name prefix
Enable writing xattr from BPF programs
1 2 -
-
-
-
2025-01-30
Song Liu
New
[v11,bpf-next,7/7] selftests/bpf: Test kfuncs that set and remove xattr from BPF programs
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,6/7] bpf: fs/xattr: Add BPF kfuncs to set and remove xattrs
Enable writing xattr from BPF programs
1 - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,5/7] bpf: Use btf_kfunc_id_set.remap logic for bpf_dynptr_from_skb
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,4/7] bpf: Extend btf_kfunc_id_set to handle kfunc polymorphism
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,3/7] bpf: lsm: Add two more sleepable hooks
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,2/7] selftests/bpf: Extend test fs_kfuncs to cover security.bpf. xattr names
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-29
Song Liu
New
[v11,bpf-next,1/7] fs/xattr: bpf: Introduce security.bpf. xattr name prefix
Enable writing xattr from BPF programs
1 2 -
-
-
-
2025-01-29
Song Liu
New
[RFC,v2,2/2] ipe: add 'anonymous_memory' property for policy decisions
ipe support for anonymous memory and memfd
- - -
-
-
-
2025-01-29
Fan Wu
New
[RFC,v2,1/2] memfd,lsm: add a security hook to memfd_create()
ipe support for anonymous memory and memfd
- - -
-
-
-
2025-01-29
Fan Wu
New
[v5,3/3] vfs: add notifications for mount attach and detach
mount notification
- - -
-
-
-
2025-01-29
Miklos Szeredi
New
[v5,2/3] fanotify: notify on mount attach and detach
mount notification
- - -
-
-
-
2025-01-29
Miklos Szeredi
New
[v5,1/3] fsnotify: add mount notification infrastructure
mount notification
- - -
-
-
-
2025-01-29
Miklos Szeredi
New
[V3] audit: Initialize lsmctx to avoid memory allocation error
[V3] audit: Initialize lsmctx to avoid memory allocation error
- - -
-
-
-
2025-01-29
Huacai Chen
New
apparmor: use the condition in AA_BUG_FMT even with debug disabled
apparmor: use the condition in AA_BUG_FMT even with debug disabled
1 - -
-
-
-
2025-01-27
Mateusz Guzik
New
[v3,2/2] lsm,io_uring: add LSM hooks for io_uring_setup()
[v3,1/2] io_uring: refactor io_uring_allowed()
- - -
-
-
-
2025-01-27
Hamza Mahfooz
New
[v3,1/2] io_uring: refactor io_uring_allowed()
[v3,1/2] io_uring: refactor io_uring_allowed()
- - -
-
-
-
2025-01-27
Hamza Mahfooz
New
smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
- - -
-
-
-
2025-01-26
Konstantin Andreev
New
[V2] audit: Initialize lsmctx to avoid memory allocation error
[V2] audit: Initialize lsmctx to avoid memory allocation error
- - -
-
-
-
2025-01-25
Huacai Chen
New
[7/7] ima: measure kexec load and exec events as critical data
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,6/7] ima: make the kexec extra memory configurable
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,5/7] ima: kexec: move IMA log copy from kexec load to execute
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,4/7] ima: kexec: define functions to copy IMA log at soft boot
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-01-24
steven chen
New
[v6,3/7] ima: kexec: skip IMA segment validation after kexec soft reboot
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,2/7] kexec: define functions to map and unmap segments
ima: kexec: measure events between kexec load and excute
- 2 -
-
-
-
2025-01-24
steven chen
New
[v6,1/7] ima: define and call ima_alloc_kexec_file_buf
ima: kexec: measure events between kexec load and excute
- 1 -
-
-
-
2025-01-24
steven chen
New
[7/7] ima: measure kexec load and exec events as critical data
*** SUBJECT HERE ***
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,6/7] ima: make the kexec extra memory configurable
*** SUBJECT HERE ***
- - -
-
-
-
2025-01-24
steven chen
New
[v6,5/7] ima: kexec: move IMA log copy from kexec load to execute
*** SUBJECT HERE ***
- 1 -
-
-
-
2025-01-24
steven chen
New
[v6,4/7] ima: kexec: define functions to copy IMA log at soft boot
*** SUBJECT HERE ***
- 2 -
-
-
-
2025-01-24
steven chen
New
[v6,3/7] ima: kexec: skip IMA segment validation after kexec soft reboot
*** SUBJECT HERE ***
- - -
-
-
-
2025-01-24
steven chen
New
[v6,2/7] kexec: define functions to map and unmap segments
*** SUBJECT HERE ***
- 2 -
-
-
-
2025-01-24
steven chen
New
[v6,1/7] ima: define and call ima_alloc_kexec_file_buf
*** SUBJECT HERE ***
- 1 -
-
-
-
2025-01-24
steven chen
New
[v10,bpf-next,7/7] selftests/bpf: Test kfuncs that set and remove xattr from BPF programs
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,6/7] bpf: fs/xattr: Add BPF kfuncs to set and remove xattrs
Enable writing xattr from BPF programs
1 - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,5/7] bpf: Use btf_kfunc_id_set.remap logic for bpf_dynptr_from_skb
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,4/7] bpf: Extend btf_kfunc_id_set to handle kfunc polymorphism
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,3/7] bpf: lsm: Add two more sleepable hooks
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,2/7] selftests/bpf: Extend test fs_kfuncs to cover security.bpf. xattr names
Enable writing xattr from BPF programs
- - -
-
-
-
2025-01-24
Song Liu
New
[v10,bpf-next,1/7] fs/xattr: bpf: Introduce security.bpf. xattr name prefix
Enable writing xattr from BPF programs
1 1 -
-
-
-
2025-01-24
Song Liu
New
[man,3/3] landlock.7: Update wording in line with kernel side proposal
[1/2] landlock: Minor typo and grammar fixes in IPC scoping documentation
- - -
-
-
-
2025-01-24
Günther Noack
Handled Elsewhere
[man,2/3] landlock.7: Move over documentation for ABI version 6
Untitled series #928192
- - -
-
-
-
2025-01-24
Günther Noack
Handled Elsewhere
«
1
2
3
4
…
173
174
»