Show patches with: Submitter = Mickaël Salaün       |   826 patches
« 1 2 3 4 … 8 9 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v21,6/6] samples/check-exec: Add an enlighten "inc" interpreter and 28 tests Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,5/6] samples/check-exec: Add set-exec Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,4/6] selftests/landlock: Add tests for execveat + AT_EXECVE_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,3/6] selftests/exec: Add 32 tests for AT_EXECVE_CHECK and exec securebits Script execution control (was O_MAYEXEC) - - - --- 2024-11-12 Mickaël Salaün New
[v21,2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits Script execution control (was O_MAYEXEC) - 1 - --- 2024-11-12 Mickaël Salaün New
[v21,1/6] exec: Add a new AT_EXECVE_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - 1 - --- 2024-11-12 Mickaël Salaün New
[GIT,PULL] Landlock fix for v6.12-rc7 #2 [GIT,PULL] Landlock fix for v6.12-rc7 #2 - - - --- 2024-11-10 Mickaël Salaün New
[GIT,PULL] Landlock fix for v6.12-rc7 [GIT,PULL] Landlock fix for v6.12-rc7 - - - --- 2024-11-09 Mickaël Salaün New
[v4,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[v4,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[v4,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - 1 - --- 2024-11-09 Mickaël Salaün New
[RFC,v2,14/14] landlock: Control log events with LANDLOCK_RESTRICT_SELF_LOGLESS Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,13/14] landlock: Log scoped denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,12/14] landlock: Log TCP bind and connect denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,11/14] landlock: Log truncate and ioctl denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,10/14] landlock: Log file-related denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,09/14] landlock: Log mount-related denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,08/14] landlock: Log domain properties and release Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,07/14] landlock: Log ptrace denials Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,06/14] landlock: Move domain hierarchy management Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,05/14] landlock: Move access types Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,04/14] landlock: Add unique ID generator Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,03/14] landlock: Factor out check_access_path() Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore New
[RFC,v2,02/14] lsm: Add audit_log_lsm_data() helper Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore Accepted
[RFC,v2,01/14] lsm: Only build lsm_audit.c if CONFIG_AUDIT is set Landlock audit support - - - --- 2024-10-22 Mickaël Salaün pcmoore Accepted
[v3,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v3,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v3,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-22 Mickaël Salaün Handled Elsewhere
[v2,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v2,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - - - --- 2024-10-14 Mickaël Salaün Handled Elsewhere
[v20,6/6] samples/check-exec: Add an enlighten "inc" interpreter and 28 tests Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,5/6] samples/check-exec: Add set-exec Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,4/6] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,3/6] selftests/exec: Add 32 tests for AT_CHECK and exec securebits Script execution control (was O_MAYEXEC) - - - --- 2024-10-11 Mickaël Salaün Under Review
[v20,2/6] security: Add EXEC_RESTRICT_FILE and EXEC_DENY_INTERACTIVE securebits Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Under Review
[v20,1/6] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - 1 - --- 2024-10-11 Mickaël Salaün Under Review
[RFC,v1,7/7] tomoyo: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,6/7] smack: Fix inode numbers in logs [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,5/7] ipe: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,4/7] integrity: Fix inode numbers in audit records [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,3/7] selinux: Fix inode numbers in error messages [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,2/7] audit: Fix inode numbers [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS 1 - - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS [RFC,v1,1/7] fs: Add inode_get_ino() and implement get_ino() for NFS - 1 - --- 2024-10-10 Mickaël Salaün pcmoore Under Review
[v1] landlock: Improve documentation of previous limitations [v1] landlock: Improve documentation of previous limitations - 1 - --- 2024-10-04 Mickaël Salaün Handled Elsewhere
[v1,3/3] landlock: Optimize scope enforcement Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,2/3] landlock: Refactor network access mask management Refactor Landlock access mask management - - - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[v1,1/3] landlock: Refactor filesystem access mask management Refactor Landlock access mask management - 1 - --- 2024-10-01 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.12 [GIT,PULL] Landlock updates for v6.12 - - - --- 2024-09-23 Mickaël Salaün Handled Elsewhere
[v3,2/2] security: Update file_set_fowner documentation [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies [v3,1/2] fs: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-21 Mickaël Salaün pcmoore Accepted
[v2] fs,security: Fix file_set_fowner LSM hook inconsistencies [v2] fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Superseded
fs,security: Fix file_set_fowner LSM hook inconsistencies fs,security: Fix file_set_fowner LSM hook inconsistencies - - - --- 2024-08-12 Mickaël Salaün pcmoore Changes Requested
[v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() [v1] keys: Restrict KEYCTL_SESSION_TO_PARENT according to ptrace_may_access() - - - --- 2024-07-29 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.11 [GIT,PULL] Landlock fix for v6.11 - - - --- 2024-07-20 Mickaël Salaün Handled Elsewhere
[RFC,v1,3/3] landlock: Document network restrictions tied to sockets Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,2/3] selftests/landlock: Add test for socket's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v1,1/3] landlock: Use socket's domain instead of current's domain Use socket's Landlock domain - - - --- 2024-07-19 Mickaël Salaün Handled Elsewhere
[RFC,v19,5/5] samples/should-exec: Add set-should-exec Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,4/5] selftests/landlock: Add tests for execveat + AT_CHECK Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,3/5] selftests/exec: Add tests for AT_CHECK and related securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,2/5] security: Add new SHOULD_EXEC_CHECK and SHOULD_EXEC_RESTRICT securebits Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[RFC,v19,1/5] exec: Add a new AT_CHECK flag to execveat(2) Script execution control (was O_MAYEXEC) - - - --- 2024-07-04 Mickaël Salaün pcmoore Superseded
[GIT,PULL] Landlock fix for v6.10-rc2 [GIT,PULL] Landlock fix for v6.10-rc2 - - - --- 2024-05-31 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Add layout1.refer_mount_root Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün Handled Elsewhere
[v1,1/2] landlock: Fix d_parent walk Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün pcmoore New
[GIT,PULL] Landlock updates for v6.10 [GIT,PULL] Landlock updates for v6.10 - - - --- 2024-05-16 Mickaël Salaün Accepted
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün Handled Elsewhere
MAINTAINER: Add Günther Noack as Landlock reviewer MAINTAINER: Add Günther Noack as Landlock reviewer 1 - - --- 2024-04-25 Mickaël Salaün Handled Elsewhere
[v4,RESEND,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Improve AF_UNSPEC tests [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v4,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v3,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[RFC] fs: Add an use vfs_get_ioctl_handler() [RFC] fs: Add an use vfs_get_ioctl_handler() - - - --- 2024-03-15 Mickaël Salaün pcmoore RFC
[GIT,PULL] Landlock updates for v6.9 [GIT,PULL] Landlock updates for v6.9 - - - --- 2024-03-13 Mickaël Salaün pcmoore Handled Elsewhere
samples/landlock: Don't error out if a file path cannot be opened samples/landlock: Don't error out if a file path cannot be opened - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
landlock: Use f_cred in security_file_open() hook landlock: Use f_cred in security_file_open() hook - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
« 1 2 3 4 … 8 9 »