Show patches with: State = Action Required       |   12063 patches
« 1 2 3 4120 121 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[net,v3] netlabel: fix RCU annotation for IPv4 options on socket creation [net,v3] netlabel: fix RCU annotation for IPv4 options on socket creation - - - --- 2024-05-06 Davide Caratti New
apparmor: fix apparmor_socket_post_create() kernel-doc apparmor: fix apparmor_socket_post_create() kernel-doc - - - --- 2024-05-05 Jeff Johnson New
[v18,21/21] MAINTAINERS: ipe: add ipe maintainer information Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,20/21] Documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,19/21] ipe: kunit test for parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,18/21] scripts: add boot policy generation program Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,17/21] ipe: enable support for fs-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,16/21] fsverity: expose verified fsverity built-in signatures to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,15/21] security: add security_inode_setintegrity() hook Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,14/21] ipe: add support for dm-verity as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,13/21] dm verity: expose root hash digest and signature data to LSMs Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,12/21] dm: add finalize hook to target_type Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,11/21] block,lsm: add LSM blob and new LSM hooks for block device Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,10/21] ipe: add permissive toggle Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,09/21] uapi|audit|ipe: add ipe auditing support Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,08/21] ipe: add userspace interface Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,07/21] security: add new securityfs delete function Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,06/21] ipe: introduce 'boot_verified' as a trust provider Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,05/21] initramfs|security: Add a security hook to do_populate_rootfs() Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,04/21] ipe: add LSM hooks on execution and kernel read Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,03/21] ipe: add evaluation loop Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,02/21] ipe: add policy parser Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[v18,01/21] security: add ipe lsm Integrity Policy Enforcement LSM (IPE) - - - --- 2024-05-03 Fan Wu New
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[v3] nfsd: set security label during create operations [v3] nfsd: set security label during create operations - 2 - --- 2024-05-03 Stephen Smalley New
[v2] nfsd: set security label during create operations [v2] nfsd: set security label during create operations - 1 - --- 2024-05-02 Stephen Smalley New
[RFC] nfsd: set security label during create operations [RFC] nfsd: set security label during create operations - - - --- 2024-05-02 Stephen Smalley New
MAINTAINERS: update the LSM file list MAINTAINERS: update the LSM file list - - - --- 2024-05-01 Paul Moore New
[v3,2/2] fs/xattr: add *at family syscalls Untitled series #848336 - 1 - --- 2024-04-26 Christian Göttsche New
[v2] tty: n_gsm: restrict tty devices to attach [v2] tty: n_gsm: restrict tty devices to attach - - - --- 2024-04-20 Tetsuo Handa New
[RFC,v2,9/9] ima: Register to the digest_cache LSM notifier and process events ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,8/9] ima: Use digest caches for appraisal ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,7/9] ima: Use digest caches for measurement ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,6/9] ima: Store allowed usage in digest cache based on integrity metadata flags ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,5/9] ima: Modify existing boot-time built-in policies with digest cache policies ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,4/9] ima: Add digest_cache_measure/appraise boot-time built-in policies ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,3/9] ima: Add digest_cache policy keyword ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,2/9] ima: Nest iint mutex for DIGEST_LIST_CHECK hook ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[RFC,v2,1/9] ima: Introduce hook DIGEST_LIST_CHECK ima: Integrate with digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,14/14] docs: Add documentation of the digest_cache LSM security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,13/14] selftests/digest_cache: Add selftests for digest_cache LSM security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,12/14] digest_cache: Notify digest cache events security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,11/14] digest_cache: Reset digest cache on file/directory change security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,10/14] digest cache: Prefetch digest lists if requested security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,09/14] digest_cache: Add support for directories security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,08/14] digest_cache: Add management of verification data security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,07/14] digest_cache: Parse rpm digest lists security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,06/14] digest_cache: Parse tlv digest lists security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,05/14] digest_cache: Populate the digest cache from a digest list security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,04/14] digest_cache: Add hash tables and operations security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,03/14] digest_cache: Add securityfs interface security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,02/14] security: Introduce the digest_cache LSM security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v4,01/14] lib: Add TLV parser security: digest_cache LSM - - - --- 2024-04-15 Roberto Sassu New
[v2,1/1] mm: change inlined allocation helpers to account at the call site [v2,1/1] mm: change inlined allocation helpers to account at the call site 1 - - --- 2024-04-15 Suren Baghdasaryan New
[bpf-next,v3,11/11] selftests/bpf: Add verifier tests for bpf lsm Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,10/11] selftests/bpf: Add test for lsm tail call Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,09/11] selftests/bpf: Add return value checks for failed tests Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,08/11] selftests/bpf: Avoid load failure for token_lsm.c Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,07/11] bpf: Fix a false rejection caused by AND operation Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,06/11] bpf: Fix compare error in function retval_range_within Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,05/11] bpf: Avoid progs for different hooks calling each other with tail call Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,04/11] bpf, lsm: Add bpf lsm disabled hook list Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,03/11] bpf, lsm: Check bpf lsm hook return values in verifier Add check for bpf lsm return value 1 - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,02/11] bpf, lsm: Add helper to read lsm hook return value range Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[bpf-next,v3,01/11] bpf, lsm: Annotate lsm hook return value range Add check for bpf lsm return value - - - --- 2024-04-11 Xu Kuohai New
[v8,6/6] docs: trusted-encrypted: add DCP as new trust source DCP as trusted keys backend - 2 - --- 2024-04-03 David Gstir New
[v8,5/6] docs: document DCP-backed trusted keys kernel params DCP as trusted keys backend - 1 - --- 2024-04-03 David Gstir New
[v8,4/6] MAINTAINERS: add entry for DCP-based trusted keys DCP as trusted keys backend 1 - - --- 2024-04-03 David Gstir New
[v8,3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys DCP as trusted keys backend - 1 - --- 2024-04-03 David Gstir New
[v8,2/6] KEYS: trusted: improve scalability of trust source config DCP as trusted keys backend - 1 1 --- 2024-04-03 David Gstir New
[v8,1/6] crypto: mxs-dcp: Add support for hardware-bound keys DCP as trusted keys backend 1 1 - --- 2024-04-03 David Gstir New
[v10,6/7] doc: trusted-encrypted: describe new CAAM trust source KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 2 - --- 2022-05-13 Ahmad Fatoum New
[v10,5/7] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 3 5 --- 2022-05-13 Ahmad Fatoum New
[v10,4/7] crypto: caam - add in-kernel interface for blob generator KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 2 5 --- 2022-05-13 Ahmad Fatoum New
[v10,3/7] crypto: caam - determine whether CAAM supports blob encap/decap KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 1 1 --- 2022-05-13 Ahmad Fatoum New
[v10,2/7] KEYS: trusted: allow use of kernel RNG for key material KEYS: trusted: Introduce support for NXP CAAM-based trusted keys 2 3 3 --- 2022-05-13 Ahmad Fatoum New
[v10,1/7] KEYS: trusted: allow use of TEE as backend without TCG_TPM support KEYS: trusted: Introduce support for NXP CAAM-based trusted keys - 3 5 --- 2022-05-13 Ahmad Fatoum New
[v2] landlock: Explain how to support Landlock [v2] landlock: Explain how to support Landlock - 1 - --- 2022-05-13 Mickaël Salaün New
[v4] x86/kexec: Carry forward IMA measurement log on kexec [v4] x86/kexec: Carry forward IMA measurement log on kexec - 1 - --- 2022-05-12 Jonathan McDowell New
[v1] landlock: Explain how to support Landlock [v1] landlock: Explain how to support Landlock - - - --- 2022-05-12 Mickaël Salaün New
[-next] apparmor: Fix aa_str_perms() kernel-doc comment [-next] apparmor: Fix aa_str_perms() kernel-doc comment 1 - - --- 2022-05-12 Yang Li New
[v8,4/4] kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification Untitled series #640875 2 1 - --- 2022-05-12 Coiby Xu New
[v8,3/4] arm64: kexec_file: use more system keyrings to verify kernel image signature Untitled series #640875 2 - - --- 2022-05-12 Coiby Xu New
[v8,2/4] kexec, KEYS: make the code in bzImage64_verify_sig generic Untitled series #640875 1 1 - --- 2022-05-12 Coiby Xu New
loadpin: stop using bdevname loadpin: stop using bdevname - - - --- 2022-05-12 Christoph Hellwig New
[v7,4/4] kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification Untitled series #640797 1 1 - --- 2022-05-12 Coiby Xu New
[v7,3/4] arm64: kexec_file: use more system keyrings to verify kernel image signature Untitled series #640797 2 - - --- 2022-05-12 Coiby Xu New
[v7,2/4] kexec, KEYS: make the code in bzImage64_verify_sig generic Untitled series #640797 1 1 - --- 2022-05-12 Coiby Xu New
[v3] x86/kexec: Carry forward IMA measurement log on kexec [v3] x86/kexec: Carry forward IMA measurement log on kexec - - - --- 2022-05-11 Jonathan McDowell New
[v2] big_keys: Use struct for internal payload [v2] big_keys: Use struct for internal payload - - - --- 2022-05-10 Kees Cook New
big_keys: Use struct for internal payload big_keys: Use struct for internal payload - - - --- 2022-05-08 Kees Cook New
[v3,12/12] landlock: Add design choices documentation for filesystem access rights Landlock: file linking and renaming support - 1 - --- 2022-05-06 Mickaël Salaün New
[v3,11/12] landlock: Document good practices about filesystem policies Landlock: file linking and renaming support - 1 - --- 2022-05-06 Mickaël Salaün New
[v3,10/12] landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning Landlock: file linking and renaming support - 1 - --- 2022-05-06 Mickaël Salaün New
[v3,09/12] samples/landlock: Add support for file reparenting Landlock: file linking and renaming support - 1 - --- 2022-05-06 Mickaël Salaün New
[v3,08/12] selftests/landlock: Add 11 new test suites dedicated to file reparenting Landlock: file linking and renaming support - - - --- 2022-05-06 Mickaël Salaün New
« 1 2 3 4120 121 »