Toggle navigation
Patchwork
Security modules development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Archived =
No
| 4910 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Mainlined
Queued
Needs ACK
Handled Elsewhere
In Next
Search
Archived
No
Yes
Both
Delegate
------
Nobody
holtmann
holtmann
holtmann
agk
mchehab
mchehab
gregkh
gregkh
mtosatti
lethal
lethal
avi
cvaroqui
jbrassow
mikulas
dtor
bmarzins
tmlind
jmberg
jmberg
mcgrof
mcgrof
mcgrof
lenb
lenb
kyle
felipebalbi
varenet
helge
helge
khilman
khilman
khilman
khilman
jwoithe
mlin
Zhang Rui
Zhang Rui
iksaif
cjackiewicz
hmh
jbarnes
jbarnes
jbarnes
willy
snitzer
iwamatsu
dougsland
mjg59
rafael
rafael
rafael
ericvh@gmail.com
ykzhao
venkip
sandeen
pwsan
lucho@ionkov.net
rminnich
anholt
aystarik
roland
shefty
mason
glikely
krh
djbw
djbw
djbw
cmarinas
doyu
jrn
sage
tomba
mmarek
cjb
trondmy
jikos
bcousson
jic23
olof
olof
olof
nsekhar
weiny2
horms
horms
bwidawsk
bwidawsk
shemminger
eulfhan
josef
josef
josef
dianders
jpan9
hal
kdave
bleung
evalenti
jlbec
wsa
bhelgaas
vkoul
vkoul
szlin
davejiang
markgross
tagr
tiwai
vireshk
mmind
dledford
geert
geert
herbert
herbert
kvalo
kvalo
kvalo
bentiss
arend
rzwisler
stellarhopper
stellarhopper
jejb
matthias_bgg
dvhart
axboe
axboe
pcmoore
pcmoore
pcmoore
mkp
mkp
stefan_schmidt
leon
lucvoo
jsakkine
jsakkine
jsakkine
bamse
bamse
demarchi
krzk
groeck
groeck
sboyd
sboyd
mturquette
mturquette
0andriy
carlocaione
luca
dgc
kbingham
derosier
narmstrong
narmstrong
atull
tytso
tytso
djwong
bvanassche
omos
jpirko
jpirko
GustavoARSilva
pkshih
patersonc
brauner
shuahkh
shuahkh
shuahkh
palmer
palmer
jgg
Kishon
idosch
labbott
jsimmons
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
lfadmin
broonie
broonie
broonie
mricon
mricon
mricon
kees
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
lfgitoliteapi
arnd
linusw
perfinion
bbrezillon
bachradsusi
rostedt
rostedt
kholk
nbd
ebiggers
ebiggers
pavelm
sds
m0reeze
ganis
jwcart2
matttbe
andmur01
lorpie01
chanwoochoi
dlezcano
jhedberg
vudentz
robertfoss
bgix
tedd_an
tsbogend
wens
wcrobert
robher
kstewart
kwilczynski
hansg
bpf
netdev
dsa
ethtool
netdrv
martineau
abelloni
trix
pabeni
mani_sadhasivam
mlimonci
liusong6
mjp
tohojo
pmalani
prestwoj
prestwoj
dhowells
tzungbi
conchuod
paulmck
jes
mtkaczyk
colyli
cem
pateldipen1984
iweiny
iweiny
bjorn
mhiramat
JanKiszka
jaegeuk
mraynal
aring
konradybcio
ij
Hailan
jstitt007
denkenz
denkenz
mkorenbl
jjohnson
frank_li
geliang
mdraidci
mdraidci
peluse
joelgranados
Apply
«
1
2
...
21
22
23
…
49
50
»
Patch
Series
A/R/T
S/W/F
Date
Submitter
Delegate
State
[v8,4/9] landlock: Add IOCTL access right
Landlock: IOCTL support
- - -
-
-
-
2023-12-08
Günther Noack
Handled Elsewhere
[v8,3/9] landlock: Optimize the number of calls to get_access_mask slightly
Landlock: IOCTL support
- - -
-
-
-
2023-12-08
Günther Noack
Handled Elsewhere
[v8,2/9] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests
Landlock: IOCTL support
- - -
-
-
-
2023-12-08
Günther Noack
Handled Elsewhere
[v8,1/9] landlock: Remove remaining "inline" modifiers in .c files
Landlock: IOCTL support
- - -
-
-
-
2023-12-08
Günther Noack
Handled Elsewhere
[bpf-next] bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list
[bpf-next] bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list
1 - -
-
-
-
2023-12-08
Matt Bobrowski
Handled Elsewhere
[v4,5/5] selftests/bpf: Add selftests for set_mempolicy with a lsm prog
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-08
Yafang Shao
pcmoore
Superseded
[v4,4/5] security: selinux: Implement set_mempolicy hook
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-08
Yafang Shao
pcmoore
Superseded
[v4,3/5] mm, security: Add lsm hook for memory policy adjustment
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-08
Yafang Shao
pcmoore
Superseded
[v4,2/5] mm: mempolicy: Revise comment regarding mempolicy mode flags
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- 1 -
-
-
-
2023-12-08
Yafang Shao
pcmoore
Superseded
[v4,1/5] mm, doc: Add doc for MPOL_F_NUMA_BALANCING
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- 1 -
-
-
-
2023-12-08
Yafang Shao
pcmoore
Superseded
[RFC,bpf-next,3/3] selftests/bpf: utilize string values for delegate_xxx mount options
BPF FS mount options parsing follow ups
- - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[RFC,bpf-next,2/3] bpf: extend parsing logic for BPF FS delegate_cmds mount option
BPF FS mount options parsing follow ups
- - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[RFC,bpf-next,1/3] bpf: add mapper macro for bpf_cmd enum
BPF FS mount options parsing follow ups
- - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,8/8] selftests/bpf: add tests for BPF object load with implicit token
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,7/8] selftests/bpf: add BPF object loading tests with explicit token passing
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,6/8] libbpf: wire up BPF token support at BPF object level
BPF token support in libbpf's BPF object
- - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,5/8] libbpf: wire up token_fd into feature probing logic
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,4/8] libbpf: move feature detection code into its own file
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,3/8] libbpf: further decouple feature checking logic from bpf_object
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,2/8] libbpf: split feature detectors definitions from cached results
BPF token support in libbpf's BPF object
1 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[bpf-next,1/8] bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS
BPF token support in libbpf's BPF object
2 - -
-
-
-
2023-12-07
Andrii Nakryiko
Handled Elsewhere
[3/3] arch/x86: Do not include <asm/bootparam.h> in several header files
arch/x86: Remove unnecessary dependencies on bootparam.h
1 - -
-
-
-
2023-12-06
Thomas Zimmermann
Handled Elsewhere
[2/3] arch/x86: Add <asm/ima-efi.h> for arch_ima_efi_boot_mode
arch/x86: Remove unnecessary dependencies on bootparam.h
- - -
-
-
-
2023-12-06
Thomas Zimmermann
Handled Elsewhere
[1/3] arch/x86: Move struct pci_setup_rom into pci_setup.h
arch/x86: Remove unnecessary dependencies on bootparam.h
- - -
-
-
-
2023-12-06
Thomas Zimmermann
Handled Elsewhere
[11/11] hlist-bl: introduced nested locking for dm-snap
vfs: inode cache scalability improvements
- - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[10/11] list_bl: don't use bit locks for PREEMPT_RT or lockdep
vfs: inode cache scalability improvements
- 1 -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[09/11] hash-bl: explicitly initialise hash-bl heads
vfs: inode cache scalability improvements
- - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[08/11] vfs: inode cache conversion to hash-bl
vfs: inode cache scalability improvements
- 1 -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[07/11] hlist-bl: add hlist_bl_fake()
vfs: inode cache scalability improvements
- - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[06/11] vfs: factor out inode hash head calculation
vfs: inode cache scalability improvements
1 - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[05/11] selinux: use dlist for isec inode list
vfs: inode cache scalability improvements
1 - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[04/11] lib/dlock-list: Make sibling CPUs share the same linked list
vfs: inode cache scalability improvements
- 2 -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[03/11] vfs: Use dlock list for superblock's inode list
vfs: inode cache scalability improvements
- - -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[02/11] vfs: Remove unnecessary list_for_each_entry_safe() variants
vfs: inode cache scalability improvements
1 1 -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
[01/11] lib/dlock-list: Distributed and lock-protected lists
vfs: inode cache scalability improvements
- 1 -
-
-
-
2023-12-06
Dave Chinner
pcmoore
Handled Elsewhere
apparmor: fix possible memory leak in unpack_trans_table
apparmor: fix possible memory leak in unpack_trans_table
1 - -
-
-
-
2023-12-04
Fedor Pchelkin
Handled Elsewhere
mm: init_mlocked_on_free
mm: init_mlocked_on_free
- - -
-
-
-
2023-12-02
York Jasper Niebuhr
Handled Elsewhere
[v7,9/9] landlock: Document IOCTL support
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,8/9] samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,7/9] selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH)
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,6/9] selftests/landlock: Test IOCTL with memfds
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,5/9] selftests/landlock: Test IOCTL support
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,4/9] landlock: Add IOCTL access right
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,3/9] landlock: Optimize the number of calls to get_access_mask slightly
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,2/9] selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v7,1/9] landlock: Remove remaining "inline" modifiers in .c files
Landlock: IOCTL support
- - -
-
-
-
2023-12-01
Günther Noack
pcmoore
Handled Elsewhere
[v3,7/7] NOT kernel/man2/mbind.2: Add mode flag MPOL_F_NUMA_BALANCING
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,6/7] selftests/bpf: Add selftests for set_mempolicy with a lsm prog
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,5/7] security: selinux: Implement set_mempolicy hook
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,4/7] mm, security: Add lsm hook for memory policy adjustment
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,3/7] mm, security: Fix missed security_task_movememory()
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- - -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,2/7] mm: mempolicy: Revise comment regarding mempolicy mode flags
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- 1 -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v3,1/7] mm, doc: Add doc for MPOL_F_NUMA_BALANCING
mm, security, bpf: Fine-grained control over memory policy adjustments with lsm bpf
- 1 -
-
-
-
2023-12-01
Yafang Shao
pcmoore
Superseded
[v2,3/3] io_uring/cmd: inline io_uring_cmd_get_task
clean up io_uring cmd header structure
- 1 -
-
-
-
2023-12-01
Pavel Begunkov
Handled Elsewhere
[v2,2/3] io_uring/cmd: inline io_uring_cmd_do_in_task_lazy
clean up io_uring cmd header structure
- 1 -
-
-
-
2023-12-01
Pavel Begunkov
Handled Elsewhere
[v2,1/3] io_uring: split out cmd api into a separate header
clean up io_uring cmd header structure
- 1 -
-
-
-
2023-12-01
Pavel Begunkov
Handled Elsewhere
[v7,23/23] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache
Untitled series #805798
- - -
-
-
-
2023-11-30
Roberto Sassu
Superseded
[v7,22/23] integrity: Remove 'integrity' LSM and move integrity functions to 'ima' LSM
Untitled series #805798
- - -
-
-
-
2023-11-30
Roberto Sassu
Superseded
[v7,21/23] evm: Move to LSM infrastructure
Untitled series #805798
- - -
-
-
-
2023-11-30
Roberto Sassu
Superseded
[v7,20/23] ima: Move IMA-Appraisal to LSM infrastructure
Untitled series #805798
- 2 -
-
-
-
2023-11-30
Roberto Sassu
Superseded
[v7,19/23] ima: Move to LSM infrastructure
Untitled series #805798
1 - -
-
-
-
2023-11-30
Roberto Sassu
Superseded
[v12,bpf-next,17/17] bpf,selinux: allocate bpf_security_struct per BPF token
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,16/17] selftests/bpf: add BPF token-enabled tests
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,15/17] libbpf: add BPF token support to bpf_prog_load() API
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,14/17] libbpf: add BPF token support to bpf_btf_load() API
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,13/17] libbpf: add BPF token support to bpf_map_create() API
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,12/17] libbpf: add bpf_token_create() API
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,11/17] bpf,lsm: add BPF token LSM hooks
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,10/17] bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,09/17] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,08/17] bpf: consistently use BPF token throughout BPF verifier logic
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,07/17] bpf: take into account BPF token when fetching helper protos
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,06/17] bpf: add BPF token support to BPF_PROG_LOAD command
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,05/17] bpf: add BPF token support to BPF_BTF_LOAD command
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,04/17] bpf: add BPF token support to BPF_MAP_CREATE command
BPF token and BPF FS-based delegation
- - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,03/17] bpf: introduce BPF token object
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,02/17] bpf: add BPF token delegation mount options to BPF FS
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v12,bpf-next,01/17] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach
BPF token and BPF FS-based delegation
1 - -
-
-
-
2023-11-30
Andrii Nakryiko
pcmoore
Handled Elsewhere
[v2,2/2] selftests/landlock: Add tests to check unhandled rule's access rights
Extend Landlock test to improve rule's coverage
- 2 -
-
-
-
2023-11-30
Mickaël Salaün
Handled Elsewhere
[v2,1/2] selftests/landlock: Add tests to check unknown rule's access rights
Extend Landlock test to improve rule's coverage
- 1 -
-
-
-
2023-11-30
Mickaël Salaün
Handled Elsewhere
proc: Update inode upon changing task security attribute
proc: Update inode upon changing task security attribute
- - -
-
-
-
2023-11-30
Munehisa Kamata
pcmoore
Handled Elsewhere
[v15,bpf-next,6/6] selftests/bpf: Add test that uses fsverity and xattr to sign a file
bpf: File verification with LSM and fsverity
- - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[v15,bpf-next,5/6] selftests/bpf: Add tests for filesystem kfuncs
bpf: File verification with LSM and fsverity
- - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[v15,bpf-next,4/6] selftests/bpf: Sort config in alphabetic order
bpf: File verification with LSM and fsverity
- - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[v15,bpf-next,3/6] Documentation/bpf: Add documentation for filesystem kfuncs
bpf: File verification with LSM and fsverity
- - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[v15,bpf-next,2/6] bpf, fsverity: Add kfunc bpf_get_fsverity_digest
bpf: File verification with LSM and fsverity
1 - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[v15,bpf-next,1/6] bpf: Add kfunc bpf_get_file_xattr
bpf: File verification with LSM and fsverity
2 - -
-
-
-
2023-11-29
Song Liu
Handled Elsewhere
[16/16] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr()
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[15/16] commoncap: use vfs fscaps interfaces for killpriv checks
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[14/16] commoncap: remove cap_inode_getsecurity()
fs: use type-safe uid representation for filesystem capabilities
1 - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[13/16] fs: use vfs interfaces for capabilities xattrs
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[12/16] ovl: use vfs_{get,set}_fscaps() for copy-up
fs: use type-safe uid representation for filesystem capabilities
- 1 -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[11/16] ovl: add fscaps handlers
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[10/16] fs: add vfs_remove_fscaps()
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[09/16] fs: add vfs_set_fscaps()
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[08/16] fs: add vfs_get_fscaps()
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[07/16] fs: add inode operations to get/set/remove fscaps
fs: use type-safe uid representation for filesystem capabilities
- 1 -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[06/16] capability: provide a helper for converting vfs_caps to xattr for userspace
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[05/16] capability: provide helpers for converting between xattrs and vfs_caps
fs: use type-safe uid representation for filesystem capabilities
- - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
[04/16] capability: use vfsuid_t for vfs_caps rootids
fs: use type-safe uid representation for filesystem capabilities
1 - -
-
-
-
2023-11-29
Seth Forshee (DigitalOcean)
pcmoore
Changes Requested
«
1
2
...
21
22
23
…
49
50
»