Show patches with: Archived = No       |   4909 patches
« 1 2 ... 19 20 21 … 49 50 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v9,18/25] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure 2 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,17/25] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,16/25] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,15/25] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,14/25] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,13/25] security: Introduce file_release hook security: Move IMA and EVM to the LSM infrastructure 2 1 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,12/25] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,11/25] security: Introduce inode_post_removexattr hook security: Move IMA and EVM to the LSM infrastructure 2 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,10/25] security: Introduce inode_post_setattr hook security: Move IMA and EVM to the LSM infrastructure 3 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,09/25] security: Align inode_setattr hook definition with EVM security: Move IMA and EVM to the LSM infrastructure 2 2 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 4 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,05/25] ima: Align ima_post_read_file() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 4 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 3 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v9,01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 4 - --- 2024-01-15 Roberto Sassu pcmoore Superseded
[v4] selftests/landlock:Fix two build issues [v4] selftests/landlock:Fix two build issues - 1 - --- 2024-01-15 Hu Yadi Handled Elsewhere
apparmor: lsm: fix kernel-doc typo apparmor: lsm: fix kernel-doc typo - - - --- 2024-01-15 Randy Dunlap Handled Elsewhere
[2/2] apparmor: fix namespace check in serialized stream headers from the same policy load apparmor: fix namespace check in serialized stream headers from the same policy load - - - --- 2024-01-13 Fedor Pchelkin Handled Elsewhere
[1/2] apparmor: rename the data start flag inside verify_header apparmor: fix namespace check in serialized stream headers from the same policy load - - - --- 2024-01-13 Fedor Pchelkin Handled Elsewhere
[v5,4/4] arch/x86: Do not include <asm/bootparam.h> in several files arch/x86: Remove unnecessary dependencies on bootparam.h 1 - - --- 2024-01-12 Thomas Zimmermann Handled Elsewhere
[v5,3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-12 Thomas Zimmermann Handled Elsewhere
[v5,2/4] arch/x86: Move internal setup_data structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-12 Thomas Zimmermann Handled Elsewhere
[v5,1/4] arch/x86: Move UAPI setup structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-12 Thomas Zimmermann Handled Elsewhere
selftests/filesystems:fix build error in overlayfs selftests/filesystems:fix build error in overlayfs 1 - - --- 2024-01-12 Hu Yadi Handled Elsewhere
[v3] selftests/landlock:Fix two build issues [v3] selftests/landlock:Fix two build issues - 1 - --- 2024-01-12 Hu Yadi Handled Elsewhere
[v4] selftests/move_mount_set_group:Make tests build with old libc [v4] selftests/move_mount_set_group:Make tests build with old libc 1 1 - --- 2024-01-11 Hu Yadi Handled Elsewhere
[v2] selftests/landlock:Fix two build issues [v2] selftests/landlock:Fix two build issues - 1 - --- 2024-01-11 Hu Yadi Handled Elsewhere
selftests/core: Fix build issue with CLOSE_RANGE_UNSHARE selftests/core: Fix build issue with CLOSE_RANGE_UNSHARE - 1 - --- 2024-01-11 Hu Yadi Handled Elsewhere
[v3] selftests/move_mount_set_group:Fix build issue with old libc [v3] selftests/move_mount_set_group:Fix build issue with old libc - 1 - --- 2024-01-11 Hu Yadi Handled Elsewhere
[RFC,9/9] apparmor: Switch unconfined and in tree labels to managed ref mode Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,8/9] apparmor: Switch labels to percpu rcurefcount in unmanaged mode Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,7/9] percpu-rcuref: Add basic infrastructure Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,6/9] apparmor: Initial prototype for optimizing ref switch Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,5/9] apparmor: Switch intree labels to percpu mode Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,4/9] apparmor: Add infrastructure to reclaim percpu labels Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,3/9] apparmor: Switch unconfined namespaces refcount to percpu mode Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,2/9] apparmor: Switch labels to percpu refcount in atomic mode Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[RFC,1/9] doc: Add document for apparmor refcount management Nginx refcount scalability issue with Apparmor enabled and potential solutions - - - --- 2024-01-10 Neeraj Upadhyay Handled Elsewhere
[v2] selftests/move_mount_set_group:Make tests build with old libc [v2] selftests/move_mount_set_group:Make tests build with old libc 1 1 - --- 2024-01-10 Hu Yadi Handled Elsewhere
selftests/landlock:Fix two build issues selftests/landlock:Fix two build issues - 1 - --- 2024-01-10 Hu Yadi Handled Elsewhere
selftests/move_mount_set_group:Make tests build with old libc selftests/move_mount_set_group:Make tests build with old libc - 1 - --- 2024-01-10 Hu Yadi Handled Elsewhere
[3/3] treewide: Update LLVM Bugzilla links Update LLVM Phabricator and Bugzilla links - - - --- 2024-01-09 Nathan Chancellor Handled Elsewhere
[2/3] arch and include: Update LLVM Phabricator links Update LLVM Phabricator and Bugzilla links - 1 - --- 2024-01-09 Nathan Chancellor Handled Elsewhere
[1/3] selftests/bpf: Update LLVM Phabricator links Update LLVM Phabricator and Bugzilla links 1 - - --- 2024-01-09 Nathan Chancellor Handled Elsewhere
[v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg [v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg - 1 - --- 2024-01-09 Coiby Xu Handled Elsewhere
[GIT,PULL] Landlock updates for v6.8 [GIT,PULL] Landlock updates for v6.8 - - - --- 2024-01-08 Mickaël Salaün Handled Elsewhere
[v4,4/4] arch/x86: Do not include <asm/bootparam.h> in several files arch/x86: Remove unnecessary dependencies on bootparam.h 1 - - --- 2024-01-08 Thomas Zimmermann Handled Elsewhere
[v4,3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-08 Thomas Zimmermann Handled Elsewhere
[v4,2/4] arch/x86: Move internal setup_data structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-08 Thomas Zimmermann Handled Elsewhere
[v4,1/4] arch/x86: Move UAPI setup structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-08 Thomas Zimmermann Handled Elsewhere
[GIT,PULL] lsm/lsm-pr-20240105 [GIT,PULL] lsm/lsm-pr-20240105 - - - --- 2024-01-05 Paul Moore pcmoore Accepted
[GIT,PULL] selinux/selinux-pr-20240105 [GIT,PULL] selinux/selinux-pr-20240105 - - - --- 2024-01-05 Paul Moore pcmoore Handled Elsewhere
apparmor: Fix memory leak in unpack_profile() apparmor: Fix memory leak in unpack_profile() 1 - - --- 2024-01-05 cuigaosheng Handled Elsewhere
[v3,4/4] arch/x86: Do not include <asm/bootparam.h> in several files arch/x86: Remove unnecessary dependencies on bootparam.h 1 - - --- 2024-01-04 Thomas Zimmermann Handled Elsewhere
[v3,3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-04 Thomas Zimmermann Handled Elsewhere
[v3,2/4] arch/x86: Move internal setup_data structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-04 Thomas Zimmermann Handled Elsewhere
[v3,1/4] arch/x86: Move UAPI setup structures into setup_data.h arch/x86: Remove unnecessary dependencies on bootparam.h - - - --- 2024-01-04 Thomas Zimmermann Handled Elsewhere
[bpf-next,29/29] selftests/bpf: add tests for LIBBPF_BPF_TOKEN_PATH envvar BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,28/29] libbpf: support BPF token path setting through LIBBPF_BPF_TOKEN_PATH envvar BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,27/29] selftests/bpf: add tests for BPF object load with implicit token BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,26/29] selftests/bpf: add BPF object loading tests with explicit token passing BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,25/29] libbpf: wire up BPF token support at BPF object level BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,24/29] libbpf: wire up token_fd into feature probing logic BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,23/29] libbpf: move feature detection code into its own file BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,22/29] libbpf: further decouple feature checking logic from bpf_object BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,21/29] libbpf: split feature detectors definitions from cached results BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,20/29] selftests/bpf: utilize string values for delegate_xxx mount options BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,19/29] bpf: support symbolic BPF FS delegation mount options BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,18/29] bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS BPF token 2 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,17/29] bpf,selinux: allocate bpf_security_struct per BPF token BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,16/29] selftests/bpf: add BPF token-enabled tests BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,15/29] libbpf: add BPF token support to bpf_prog_load() API BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,14/29] libbpf: add BPF token support to bpf_btf_load() API BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,13/29] libbpf: add BPF token support to bpf_map_create() API BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,12/29] libbpf: add bpf_token_create() API BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,11/29] bpf,lsm: add BPF token LSM hooks BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,10/29] bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,09/29] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,08/29] bpf: consistently use BPF token throughout BPF verifier logic BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,07/29] bpf: take into account BPF token when fetching helper protos BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,06/29] bpf: add BPF token support to BPF_PROG_LOAD command BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,05/29] bpf: add BPF token support to BPF_BTF_LOAD command BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,04/29] bpf: add BPF token support to BPF_MAP_CREATE command BPF token - - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,03/29] bpf: introduce BPF token object BPF token 2 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,02/29] bpf: add BPF token delegation mount options to BPF FS BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[bpf-next,01/29] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach BPF token 1 - - --- 2024-01-03 Andrii Nakryiko pcmoore Changes Requested
[GIT,PULL] apparmor: Final fix for v6.7-rc8 [GIT,PULL] apparmor: Final fix for v6.7-rc8 - - - --- 2024-01-03 John Johansen Handled Elsewhere
[v3] selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket [v3] selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket - - 1 --- 2024-01-03 Mickaël Salaün pcmoore Accepted
[v2] selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket [v2] selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket - - - --- 2023-12-29 Mickaël Salaün pcmoore Changes Requested
apparmor: avoid crash when parsed profile name is empty apparmor: avoid crash when parsed profile name is empty 1 - - --- 2023-12-28 Fedor Pchelkin Handled Elsewhere
selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket - - - --- 2023-12-28 Mickaël Salaün pcmoore Changes Requested
kernel: capability: Remove unnecessary ‘0’ values from ret kernel: capability: Remove unnecessary ‘0’ values from ret - - - --- 2023-12-28 Li zeming Rejected
integrity: don't throw an error immediately when failed to add a cert to the .machine keyring integrity: don't throw an error immediately when failed to add a cert to the .machine keyring - 1 - --- 2023-12-27 Coiby Xu Handled Elsewhere
kernel: Introduce a write lock/unlock wrapper for tasklist_lock kernel: Introduce a write lock/unlock wrapper for tasklist_lock - - - --- 2023-12-25 Aiqun Yu (Maria) pcmoore Handled Elsewhere
[v2] lsm: Add a __counted_by() annotation to lsm_ctx.ctx [v2] lsm: Add a __counted_by() annotation to lsm_ctx.ctx - - - --- 2023-12-22 Mark Brown pcmoore Accepted
lsm: Add a __counted_by() annotation to lsm_ctx.ctx lsm: Add a __counted_by() annotation to lsm_ctx.ctx - - - --- 2023-12-21 Mark Brown pcmoore Changes Requested
security: new security_file_ioctl_compat() hook security: new security_file_ioctl_compat() hook - 2 - --- 2023-12-19 Alfred Piccioni pcmoore Accepted
« 1 2 ... 19 20 21 … 49 50 »