Show patches with: State = Action Required       |   12086 patches
« 1 2 ... 14 15 16120 121 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
ima: fix deadlock when traversing "ima_default_rules". ima: fix deadlock when traversing "ima_default_rules". - 1 - --- 2021-09-18 Li Qiong New
[1/1] Smack:- Use overlay inode label in smack_inode_copy_up() [1/1] Smack:- Use overlay inode label in smack_inode_copy_up() - - - --- 2021-09-17 Vishal Goel New
[GIT,PULL] SELinux fixes for v5.15 (#1) [GIT,PULL] SELinux fixes for v5.15 (#1) - - - --- 2021-09-17 Paul Moore New
[v2] integrity: support including firmware ".platform" keys at build time [v2] integrity: support including firmware ".platform" keys at build time - - - --- 2021-09-16 Nayna Jain New
[v4,8/8] Smack: Brutalist io_uring support Add LSM access controls and auditing to io_uring - - - --- 2021-09-15 Paul Moore New
[v4,7/8] selinux: add support for the io_uring access controls Add LSM access controls and auditing to io_uring - - - --- 2021-09-15 Paul Moore New
[v4,6/8] lsm,io_uring: add LSM hooks to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-15 Paul Moore New
[v4,5/8] io_uring: convert io_uring to the secure anon inode interface Add LSM access controls and auditing to io_uring - - - --- 2021-09-15 Paul Moore New
[v4,4/8] fs: add anon_inode_getfile_secure() similar to anon_inode_getfd_secure() Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-15 Paul Moore New
[v4,3/8] audit: add filtering for io_uring records Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-15 Paul Moore New
[v4,2/8] audit,io_uring,io-wq: add some basic audit support to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-15 Paul Moore New
[v4,1/8] audit: prepare audit_context for use in calling contexts beyond syscalls Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-15 Paul Moore New
[RFC,9/9] diglim: Admin guide integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,8/9] diglim: RPM parser integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,7/9] diglim: Digest list uploader integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,6/9] diglim: RPM digest list generator integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,5/9] diglim: Compact digest list generator integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,4/9] diglim: Tests - LSM integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,3/9] diglim: LSM integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,2/9] diglim: Loader integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[RFC,1/9] ima: Introduce new hook DIGEST_LIST_CHECK integrity: Introduce DIGLIM advanced features - - - --- 2021-09-15 Roberto Sassu New
[v6,13/13] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,12/13] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,11/13] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,10/13] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,09/13] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,08/13] KEYS: Introduce link restriction for machine keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,07/13] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,06/13] KEYS: Rename get_builtin_and_secondary_restriction Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,05/13] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,04/13] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,03/13] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,02/13] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v6,01/13] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - - - --- 2021-09-14 Eric Snowberg New
[v2] hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO [v2] hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO 1 2 - --- 2021-09-14 Kees Cook New
[v3,13/13] diglim: Tests integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,12/13] diglim: Remote Attestation integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,11/13] diglim: Interfaces - digests_count integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,10/13] diglim: Interfaces - digest_query integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,09/13] diglim: Interfaces - digest_list_label integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,08/13] diglim: Interfaces - digest_lists_loaded integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,07/13] diglim: Interfaces - digest_list_add, digest_list_del integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,06/13] diglim: IMA info integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,05/13] diglim: Parser integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,04/13] diglim: Methods integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,03/13] diglim: Objects integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,02/13] diglim: Basic definitions integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
[v3,01/13] diglim: Overview integrity: Introduce DIGLIM - - - --- 2021-09-14 Roberto Sassu New
lsm_audit: avoid overloading the "key" audit field lsm_audit: avoid overloading the "key" audit field - 1 - --- 2021-09-14 Ondrej Mosnacek New
hardening: Default to INIT_STACK_ALL_ZERO if CC_HAS_AUTO_VAR_INIT_ZERO hardening: Default to INIT_STACK_ALL_ZERO if CC_HAS_AUTO_VAR_INIT_ZERO - 3 - --- 2021-09-14 Will Deacon New
[-next] apparmor: Remove unused inline function label_is_visible() [-next] apparmor: Remove unused inline function label_is_visible() - - - --- 2021-09-14 Yue Haibing New
[v3,8/8] Smack: Brutalist io_uring support with debug Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,7/8] selinux: add support for the io_uring access controls Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,6/8] lsm,io_uring: add LSM hooks to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,5/8] io_uring: convert io_uring to the secure anon inode interface Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,4/8] fs: add anon_inode_getfile_secure() similar to anon_inode_getfd_secure() Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-14 Paul Moore New
[v3,3/8] audit: add filtering for io_uring records Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,2/8] audit,io_uring,io-wq: add some basic audit support to io_uring Add LSM access controls and auditing to io_uring - - - --- 2021-09-14 Paul Moore New
[v3,1/8] audit: prepare audit_context for use in calling contexts beyond syscalls Add LSM access controls and auditing to io_uring 1 - - --- 2021-09-14 Paul Moore New
[v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks [v4] lockdown,selinux: fix wrong subject in some SELinux lockdown checks 3 - - --- 2021-09-13 Ondrej Mosnacek New
[v6,1/1] NAX LSM: Add initial support NAX (No Anonymous Execution) LSM - - - --- 2021-09-11 Igor Zhbanov New
landlock: Drop "const" argument qualifier to avoid GCC 4.9 warnings landlock: Drop "const" argument qualifier to avoid GCC 4.9 warnings - - - --- 2021-09-10 Kees Cook New
integrity: support including firmware ".platform" keys at build time integrity: support including firmware ".platform" keys at build time - - - --- 2021-09-10 Nayna Jain New
smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block smack: Guard smack_ipv6_lock definition within a SMACK_IPV6_PORT_LABELING block - - - --- 2021-09-10 Sebastian Andrzej Siewior New
Revert "Enable '-Werror' by default for all kernel builds" Revert "Enable '-Werror' by default for all kernel builds" 1 1 - --- 2021-09-07 Nick Desaulniers New
[v5,12/12] integrity: Only use machine keyring when uefi_check_trust_mok_keys is true Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,11/12] integrity: Trust MOK keys if MokListTrustedRT found Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,10/12] integrity: store reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,09/12] KEYS: link secondary_trusted_keys to machine trusted keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,08/12] KEYS: integrity: change link restriction to trust the machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,07/12] KEYS: Introduce link restriction to include builtin, secondary and machine keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,06/12] KEYS: add a reference to machine keyring Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,05/12] integrity: add new keyring handler for mok keys Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,04/12] integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,03/12] KEYS: CA link restriction Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,02/12] integrity: Do not allow machine keyring updates following init Enroll kernel keys thru MOK - - - --- 2021-09-07 Eric Snowberg New
[v5,01/12] integrity: Introduce a Linux keyring called machine Enroll kernel keys thru MOK - 1 - --- 2021-09-07 Eric Snowberg New
net: remove the unnecessary check in cipso_v4_doi_free net: remove the unnecessary check in cipso_v4_doi_free 1 - - --- 2021-09-03 王贇 New
[4/1] xfstest: Add a new test to test xattr operations Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[3/1] xfstests: generic/062: Do not run on newer kernels Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[2/1] man-pages: xattr.7: Update text for user extended xattr behavior change Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
[v3,1/1] xattr: Allow user.* xattr on symlink and special files Relax restrictions on user.* xattr - - - --- 2021-09-02 Vivek Goyal New
smackfs: Fix use-after-free in netlbl_catmap_walk() smackfs: Fix use-after-free in netlbl_catmap_walk() - - - --- 2021-09-01 Pawan Gupta New
Revert "net: fix NULL pointer reference in cipso_v4_doi_free" Revert "net: fix NULL pointer reference in cipso_v4_doi_free" - - - --- 2021-09-01 王贇 New
[GIT,PULL] Smack patches for v5.15 [GIT,PULL] Smack patches for v5.15 - - - --- 2021-08-31 Casey Schaufler New
apparmor: remove unused argument of aa_umount() apparmor: remove unused argument of aa_umount() 1 1 - --- 2021-08-31 Austin Kim New
[GIT,PULL] hardening updates for v5.15-rc1 [GIT,PULL] hardening updates for v5.15-rc1 - - - --- 2021-08-30 Kees Cook New
[GIT,PULL] SELinux patches for v5.15 [GIT,PULL] SELinux patches for v5.15 - - - --- 2021-08-30 Paul Moore New
[v2] net: fix NULL pointer reference in cipso_v4_doi_free [v2] net: fix NULL pointer reference in cipso_v4_doi_free - - - --- 2021-08-30 王贇 New
ima: fix deadlock when traversing "ima_default_rules". ima: fix deadlock when traversing "ima_default_rules". - 1 - --- 2021-08-27 Li Qiong New
[bpf-next,v2,5/5] tools: testing: Add selftest for file local storage map Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,4/5] tools: bpf: update bpftool for file_storage map Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,3/5] libbpf: Add bpf_probe_map_type support for file local storage Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,2/5] tools: sync bpf.h header Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
[bpf-next,v2,1/5] bpf: Implement file local storage Implement file local storage - - - --- 2021-08-26 Kumar Kartikeya Dwivedi New
net: fix NULL pointer reference in cipso_v4_doi_free net: fix NULL pointer reference in cipso_v4_doi_free - - - --- 2021-08-26 王贇 New
ima: fix deadlock within "ima_match_policy" function. ima: fix deadlock within "ima_match_policy" function. - 1 - --- 2021-08-24 Li Qiong New
[bpf-next,RFC,v1,5/5] tools: testing: Add selftest for file local storage map Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,4/5] tools: bpf: update bpftool for file_storage map Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
[bpf-next,RFC,v1,3/5] libbpf: Add bpf_probe_map_type support for file local storage Implement file local storage - - - --- 2021-08-21 Kumar Kartikeya Dwivedi New
« 1 2 ... 14 15 16120 121 »