Show patches with: none      |   15510 patches
« 1 2 ... 8 9 10 … 155 156 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v5,4/4] vduse: Add LSM hook to check Virtio device type vduse: add support for networking devices - - - --- 2023-12-12 Maxime Coquelin pcmoore Rejected
[v5,3/4] vduse: enable Virtio-net device type vduse: add support for networking devices 1 1 - --- 2023-12-12 Maxime Coquelin pcmoore Rejected
[v5,2/4] vduse: Temporarily disable control queue features vduse: add support for networking devices - - - --- 2023-12-12 Maxime Coquelin pcmoore Rejected
[v5,1/4] vduse: validate block features only with block devices vduse: add support for networking devices 1 1 - --- 2023-12-12 Maxime Coquelin pcmoore Rejected
[RFC,v3] LSM: Officially support appending LSM hooks after boot. [RFC,v3] LSM: Officially support appending LSM hooks after boot. - - - --- 2023-12-09 Tetsuo Handa pcmoore Rejected
[RFC] overlayfs: Redirect xattr ops on security.evm to security.evm_overlayfs [RFC] overlayfs: Redirect xattr ops on security.evm to security.evm_overlayfs - - - --- 2023-12-08 Roberto Sassu Handled Elsewhere
[v8,9/9] landlock: Document IOCTL support Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,7/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,6/9] selftests/landlock: Test IOCTL with memfds Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,5/9] selftests/landlock: Test IOCTL support Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,4/9] landlock: Add IOCTL access right Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,3/9] landlock: Optimize the number of calls to get_access_mask slightly Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,2/9] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[v8,1/9] landlock: Remove remaining "inline" modifiers in .c files Landlock: IOCTL support - - - --- 2023-12-08 Günther Noack Handled Elsewhere
[bpf-next] bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list [bpf-next] bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list 1 - - --- 2023-12-08 Matt Bobrowski Handled Elsewhere
[v4,5/5] selftests/bpf: Add selftests for set_mempolicy with a lsm prog mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-08 Yafang Shao pcmoore Superseded
[v4,4/5] security: selinux: Implement set_mempolicy hook mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-08 Yafang Shao pcmoore Superseded
[v4,3/5] mm, security: Add lsm hook for memory policy adjustment mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-08 Yafang Shao pcmoore Superseded
[v4,2/5] mm: mempolicy: Revise comment regarding mempolicy mode flags mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - 1 - --- 2023-12-08 Yafang Shao pcmoore Superseded
[v4,1/5] mm, doc: Add doc for MPOL_F_NUMA_BALANCING mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - 1 - --- 2023-12-08 Yafang Shao pcmoore Superseded
[RFC,bpf-next,3/3] selftests/bpf: utilize string values for delegate_xxx mount options BPF FS mount options parsing follow ups - - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[RFC,bpf-next,2/3] bpf: extend parsing logic for BPF FS delegate_cmds mount option BPF FS mount options parsing follow ups - - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[RFC,bpf-next,1/3] bpf: add mapper macro for bpf_cmd enum BPF FS mount options parsing follow ups - - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,8/8] selftests/bpf: add tests for BPF object load with implicit token BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,7/8] selftests/bpf: add BPF object loading tests with explicit token passing BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,6/8] libbpf: wire up BPF token support at BPF object level BPF token support in libbpf's BPF object - - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,5/8] libbpf: wire up token_fd into feature probing logic BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,4/8] libbpf: move feature detection code into its own file BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,3/8] libbpf: further decouple feature checking logic from bpf_object BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,2/8] libbpf: split feature detectors definitions from cached results BPF token support in libbpf's BPF object 1 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[bpf-next,1/8] bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS BPF token support in libbpf's BPF object 2 - - --- 2023-12-07 Andrii Nakryiko Handled Elsewhere
[3/3] arch/x86: Do not include <asm/bootparam.h> in several header files arch/x86: Remove unnecessary dependencies on bootparam.h 1 - - --- 2023-12-06 Thomas Zimmermann Handled Elsewhere
[2/3] arch/x86: Add <asm/ima-efi.h> for arch_ima_efi_boot_mode arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2023-12-06 Thomas Zimmermann Handled Elsewhere
[1/3] arch/x86: Move struct pci_setup_rom into pci_setup.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2023-12-06 Thomas Zimmermann Handled Elsewhere
[11/11] hlist-bl: introduced nested locking for dm-snap vfs: inode cache scalability improvements - - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep vfs: inode cache scalability improvements - 1 - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[09/11] hash-bl: explicitly initialise hash-bl heads vfs: inode cache scalability improvements - - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[08/11] vfs: inode cache conversion to hash-bl vfs: inode cache scalability improvements - 1 - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[07/11] hlist-bl: add hlist_bl_fake() vfs: inode cache scalability improvements - - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[06/11] vfs: factor out inode hash head calculation vfs: inode cache scalability improvements 1 - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[05/11] selinux: use dlist for isec inode list vfs: inode cache scalability improvements 1 - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[04/11] lib/dlock-list: Make sibling CPUs share the same linked list vfs: inode cache scalability improvements - 2 - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[03/11] vfs: Use dlock list for superblock's inode list vfs: inode cache scalability improvements - - - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants vfs: inode cache scalability improvements 1 1 - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
[01/11] lib/dlock-list: Distributed and lock-protected lists vfs: inode cache scalability improvements - 1 - --- 2023-12-06 Dave Chinner pcmoore Handled Elsewhere
apparmor: fix possible memory leak in unpack_trans_table apparmor: fix possible memory leak in unpack_trans_table 1 - - --- 2023-12-04 Fedor Pchelkin Handled Elsewhere
mm: init_mlocked_on_free mm: init_mlocked_on_free - - - --- 2023-12-02 York Jasper Niebuhr Handled Elsewhere
[v7,9/9] landlock: Document IOCTL support Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,7/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,6/9] selftests/landlock: Test IOCTL with memfds Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,5/9] selftests/landlock: Test IOCTL support Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,4/9] landlock: Add IOCTL access right Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,3/9] landlock: Optimize the number of calls to get_access_mask slightly Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,2/9] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v7,1/9] landlock: Remove remaining "inline" modifiers in .c files Landlock: IOCTL support - - - --- 2023-12-01 Günther Noack pcmoore Handled Elsewhere
[v3,7/7] NOT kernel/man2/mbind.2: Add mode flag MPOL_F_NUMA_BALANCING mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,6/7] selftests/bpf: Add selftests for set_mempolicy with a lsm prog mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,5/7] security: selinux: Implement set_mempolicy hook mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,4/7] mm, security: Add lsm hook for memory policy adjustment mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,3/7] mm, security: Fix missed security_task_movememory() mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - - - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,2/7] mm: mempolicy: Revise comment regarding mempolicy mode flags mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - 1 - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v3,1/7] mm, doc: Add doc for MPOL_F_NUMA_BALANCING mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf - 1 - --- 2023-12-01 Yafang Shao pcmoore Superseded
[v2,3/3] io_uring/cmd: inline io_uring_cmd_get_task clean up io_uring cmd header structure - 1 - --- 2023-12-01 Pavel Begunkov Handled Elsewhere
[v2,2/3] io_uring/cmd: inline io_uring_cmd_do_in_task_lazy clean up io_uring cmd header structure - 1 - --- 2023-12-01 Pavel Begunkov Handled Elsewhere
[v2,1/3] io_uring: split out cmd api into a separate header clean up io_uring cmd header structure - 1 - --- 2023-12-01 Pavel Begunkov Handled Elsewhere
[v7,23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache Untitled series #805798 - - - --- 2023-11-30 Roberto Sassu Superseded
[v7,22/23] integrity: Remove 'integrity' LSM and move integrity functions to 'ima' LSM Untitled series #805798 - - - --- 2023-11-30 Roberto Sassu Superseded
[v7,21/23] evm: Move to LSM infrastructure Untitled series #805798 - - - --- 2023-11-30 Roberto Sassu Superseded
[v7,20/23] ima: Move IMA-Appraisal to LSM infrastructure Untitled series #805798 - 2 - --- 2023-11-30 Roberto Sassu Superseded
[v7,19/23] ima: Move to LSM infrastructure Untitled series #805798 1 - - --- 2023-11-30 Roberto Sassu Superseded
[v12,bpf-next,17/17] bpf,selinux: allocate bpf_security_struct per BPF token BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,16/17] selftests/bpf: add BPF token-enabled tests BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,15/17] libbpf: add BPF token support to bpf_prog_load() API BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,14/17] libbpf: add BPF token support to bpf_btf_load() API BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,13/17] libbpf: add BPF token support to bpf_map_create() API BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,12/17] libbpf: add bpf_token_create() API BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,11/17] bpf,lsm: add BPF token LSM hooks BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,10/17] bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,09/17] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,08/17] bpf: consistently use BPF token throughout BPF verifier logic BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,07/17] bpf: take into account BPF token when fetching helper protos BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,06/17] bpf: add BPF token support to BPF_PROG_LOAD command BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,05/17] bpf: add BPF token support to BPF_BTF_LOAD command BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,04/17] bpf: add BPF token support to BPF_MAP_CREATE command BPF token and BPF FS-based delegation - - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,03/17] bpf: introduce BPF token object BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,02/17] bpf: add BPF token delegation mount options to BPF FS BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v12,bpf-next,01/17] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach BPF token and BPF FS-based delegation 1 - - --- 2023-11-30 Andrii Nakryiko pcmoore Handled Elsewhere
[v2,2/2] selftests/landlock: Add tests to check unhandled rule's access rights Extend Landlock test to improve rule's coverage - 2 - --- 2023-11-30 Mickaël Salaün Handled Elsewhere
[v2,1/2] selftests/landlock: Add tests to check unknown rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-30 Mickaël Salaün Handled Elsewhere
proc: Update inode upon changing task security attribute proc: Update inode upon changing task security attribute - - - --- 2023-11-30 Munehisa Kamata pcmoore Under Review
[v15,bpf-next,6/6] selftests/bpf: Add test that uses fsverity and xattr to sign a file bpf: File verification with LSM and fsverity - - - --- 2023-11-29 Song Liu Handled Elsewhere
[v15,bpf-next,5/6] selftests/bpf: Add tests for filesystem kfuncs bpf: File verification with LSM and fsverity - - - --- 2023-11-29 Song Liu Handled Elsewhere
[v15,bpf-next,4/6] selftests/bpf: Sort config in alphabetic order bpf: File verification with LSM and fsverity - - - --- 2023-11-29 Song Liu Handled Elsewhere
[v15,bpf-next,3/6] Documentation/bpf: Add documentation for filesystem kfuncs bpf: File verification with LSM and fsverity - - - --- 2023-11-29 Song Liu Handled Elsewhere
[v15,bpf-next,2/6] bpf, fsverity: Add kfunc bpf_get_fsverity_digest bpf: File verification with LSM and fsverity 1 - - --- 2023-11-29 Song Liu Handled Elsewhere
[v15,bpf-next,1/6] bpf: Add kfunc bpf_get_file_xattr bpf: File verification with LSM and fsverity 2 - - --- 2023-11-29 Song Liu Handled Elsewhere
[16/16] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr() fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee pcmoore Changes Requested
[15/16] commoncap: use vfs fscaps interfaces for killpriv checks fs: use type-safe uid representation for filesystem capabilities - - - --- 2023-11-29 Seth Forshee pcmoore Changes Requested
« 1 2 ... 8 9 10 … 155 156 »