Show patches with: State = Action Required       |    Archived = No       |   1104 patches
« 1 2 3 4 … 11 12 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule ima: Fix keyrings race condition and other key related bugs - 1 - --- 2020-07-27 Tyler Hicks New
[2/2] ima: Fail rule parsing when asymmetric key measurement isn't supportable ima: Fix keyrings race condition and other key related bugs - 1 - --- 2020-07-27 Tyler Hicks New
[v2,2/2] LSM: SafeSetID: Add GID security policy handling Untitled series #324795 - 1 - --- 2020-07-27 Micah Morton New
[V3fix,ghak120] audit: initialize context values in case of mandatory events [V3fix,ghak120] audit: initialize context values in case of mandatory events - - - --- 2020-07-27 Richard Guy Briggs New
[v1,1/4,RFC] fs/trampfd: Implement the trampoline file descriptor API Implement Trampoline File Descriptor - - - --- 2020-07-28 Madhavan T. Venkataraman New
[v1,2/4,RFC] x86/trampfd: Provide support for the trampoline file descriptor Implement Trampoline File Descriptor - - - --- 2020-07-28 Madhavan T. Venkataraman New
[v1,3/4,RFC] arm64/trampfd: Provide support for the trampoline file descriptor Implement Trampoline File Descriptor - - - --- 2020-07-28 Madhavan T. Venkataraman New
[v1,4/4,RFC] arm/trampfd: Provide support for the trampoline file descriptor Implement Trampoline File Descriptor - - - --- 2020-07-28 Madhavan T. Venkataraman New
[RFC,v5,01/11] scripts: add ipe tooling to generate boot policy Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,02/11] security: add ipe lsm evaluation loop and audit system Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,03/11] security: add ipe lsm policy parser and policy loading Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,04/11] ipe: add property for trust of boot volume Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,05/11] fs: add security blob and hooks for block_device Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,06/11] dm-verity: move signature check after tree validation Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,07/11] dm-verity: add bdev_setsecurity hook for dm-verity signature Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,08/11] ipe: add property for signed dmverity volumes Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,09/11] dm-verity: add bdev_setsecurity hook for root-hash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,10/11] documentation: add ipe documentation Untitled series #325713 1 - - --- 2020-07-28 Deven Bowers New
[RFC,v5,10/12] ipe: add property for dmverity roothash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,11/11] cleanup: uapi/linux/audit.h Untitled series #325717 - - - --- 2020-07-28 Deven Bowers New
[RFC,v5,11/12] documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) 1 - - --- 2020-07-28 Deven Bowers New
[RFC,v5,12/12] cleanup: uapi/linux/audit.h Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-28 Deven Bowers New
[v4,01/17] test_firmware: Test platform fw loading on non-EFI systems Introduce partial kernel_read_file() support 1 1 - --- 2020-07-29 Kees Cook New
[v4,02/17] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum Introduce partial kernel_read_file() support 1 2 - --- 2020-07-29 Kees Cook New
[v4,03/17] fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum Introduce partial kernel_read_file() support 1 1 - --- 2020-07-29 Kees Cook New
[v4,04/17] fs/kernel_read_file: Split into separate include file Introduce partial kernel_read_file() support 2 3 - --- 2020-07-29 Kees Cook New
[v4,05/17] fs/kernel_read_file: Split into separate source file Introduce partial kernel_read_file() support 1 2 - --- 2020-07-29 Kees Cook New
[v4,06/17] fs/kernel_read_file: Remove redundant size argument Introduce partial kernel_read_file() support 1 3 - --- 2020-07-29 Kees Cook New
[v4,07/17] fs/kernel_read_file: Switch buffer size arg to size_t Introduce partial kernel_read_file() support 1 3 - --- 2020-07-29 Kees Cook New
[v4,08/17] fs/kernel_read_file: Add file_size output argument Introduce partial kernel_read_file() support 1 3 - --- 2020-07-29 Kees Cook New
[v4,09/17] LSM: Introduce kernel_post_load_data() hook Introduce partial kernel_read_file() support - 1 - --- 2020-07-29 Kees Cook New
[v4,10/17] firmware_loader: Use security_post_load_data() Introduce partial kernel_read_file() support - 1 - --- 2020-07-29 Kees Cook New
[v4,11/17] module: Call security_kernel_post_load_data() Introduce partial kernel_read_file() support 1 1 - --- 2020-07-29 Kees Cook New
[v4,12/17] LSM: Add "contents" flag to kernel_read_file hook Introduce partial kernel_read_file() support - 1 - --- 2020-07-29 Kees Cook New
[v4,13/17] IMA: Add support for file reads without contents Introduce partial kernel_read_file() support - 1 - --- 2020-07-29 Kees Cook New
[v4,14/17] fs/kernel_file_read: Add "offset" arg for partial reads Introduce partial kernel_read_file() support - - - --- 2020-07-29 Kees Cook New
[v4,15/17] firmware: Store opt_flags in fw_priv Introduce partial kernel_read_file() support - - - --- 2020-07-29 Kees Cook New
[v4,16/17] firmware: Add request_partial_firmware_into_buf() Introduce partial kernel_read_file() support - - - --- 2020-07-29 Kees Cook New
[v4,17/17] test_firmware: Test partial read support Introduce partial kernel_read_file() support - - - --- 2020-07-29 Kees Cook New
[RFC,v6,01/11] scripts: add ipe tooling to generate boot policy Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,02/11] security: add ipe lsm evaluation loop and audit system Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,03/11] security: add ipe lsm policy parser and policy loading Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,04/11] ipe: add property for trust of boot volume Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,05/11] fs: add security blob and hooks for block_device Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,06/11] dm-verity: add bdev_setsecurity hook for dm-verity signature Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,07/11] ipe: add property for signed dmverity volumes Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,08/11] dm-verity: add bdev_setsecurity hook for root-hash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,09/11] ipe: add property for dmverity roothash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[RFC,v6,10/11] documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) 1 - - --- 2020-07-30 Deven Bowers New
[RFC,v6,11/11] cleanup: uapi/linux/audit.h Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-30 Deven Bowers New
[v5,1/4] IMA: Add func to measure LSM state and policy LSM: Measure security module data - - - --- 2020-07-30 Lakshmi Ramasubramanian New
[v5,2/4] IMA: Define IMA hooks to measure LSM state and policy LSM: Measure security module data - 1 - --- 2020-07-30 Lakshmi Ramasubramanian New
[v5,3/4] LSM: Define SELinux function to measure state and policy LSM: Measure security module data - - - --- 2020-07-30 Lakshmi Ramasubramanian New
[v5,4/4] IMA: Handle early boot data measurement LSM: Measure security module data - - - --- 2020-07-30 Lakshmi Ramasubramanian New
[bpf-next,v7,1/7] A purely mechanical change to split the renaming from the actual generalization. Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,2/7] bpf: Generalize caching for sk_storage. Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,3/7] bpf: Generalize bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,4/7] bpf: Split bpf_local_storage to bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,5/7] bpf: Implement bpf_local_storage for inodes Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,6/7] bpf: Allow local storage to be used from LSM programs Generalizing bpf_local_storage - - - --- 2020-07-30 KP Singh New
[bpf-next,v7,7/7] bpf: Add selftests for local_storage Generalizing bpf_local_storage 1 - - --- 2020-07-30 KP Singh New
[v20,01/12] landlock: Add object management Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,02/12] landlock: Add ruleset and domain management Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,03/12] landlock: Set up the security framework and manage credentials Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,04/12] landlock: Add ptrace restrictions Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,05/12] LSM: Infrastructure management of the superblock Landlock LSM - 5 - --- 2020-08-02 Mickaël Salaün New
[v20,06/12] fs,security: Add sb_delete hook Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,07/12] landlock: Support filesystem access-control Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,08/12] landlock: Add syscall implementations Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,09/12] arch: Wire up Landlock syscalls Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,10/12] selftests/landlock: Add initial tests Landlock LSM - 1 - --- 2020-08-02 Mickaël Salaün New
[v20,11/12] samples/landlock: Add a sandbox manager example Landlock LSM - - - --- 2020-08-02 Mickaël Salaün New
[v20,12/12] landlock: Add user and kernel documentation Landlock LSM - 1 - --- 2020-08-02 Mickaël Salaün New
[1/5] watch_queue: Limit the number of watches a user can hold [ver #2] Mount notifications [ver #2] - 1 - --- 2020-08-03 David Howells New
[2/5] watch_queue: Make watch_sizeof() check record size [ver #2] Mount notifications [ver #2] - - - --- 2020-08-03 David Howells New
[3/5] watch_queue: Add security hooks to rule on setting mount watches [ver #2] Mount notifications [ver #2] - - - --- 2020-08-03 David Howells New
[4/5] watch_queue: Implement mount topology and attribute change notifications [ver #2] Mount notifications [ver #2] - - - --- 2020-08-03 David Howells New
[5/5] watch_queue: sample: Display mount tree change notifications [ver #2] Mount notifications [ver #2] - - - --- 2020-08-03 David Howells New
[01/18] fsinfo: Introduce a non-repeating system-unique superblock ID [ver #21] VFS: Filesystem information [ver #21] - 1 - --- 2020-08-03 David Howells New
[02/18] fsinfo: Add fsinfo() syscall to query filesystem information [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[03/18] fsinfo: Provide a bitmap of the features a filesystem supports [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[04/18] fsinfo: Allow retrieval of superblock devname, options and stats [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[05/18] fsinfo: Allow fsinfo() to look up a mount object by ID [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[06/18] fsinfo: Add a uniquifier ID to struct mount [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[07/18] fsinfo: Allow mount information to be queried [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[08/18] fsinfo: Allow mount topology and propagation info to be retrieved [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[09/18] watch_queue: Mount event counters [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[10/18] fsinfo: Provide notification overrun handling support [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[11/18] fsinfo: sample: Mount listing program [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[12/18] fsinfo: Add API documentation [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[13/18] fsinfo: Add support for AFS [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[14/18] fsinfo: Add support to ext4 [ver #21] VFS: Filesystem information [ver #21] - 1 - --- 2020-08-03 David Howells New
[15/18] fsinfo: Add an attribute that lists all the visible mounts in a namespace [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[16/18] errseq: add a new errseq_scrape function [ver #21] VFS: Filesystem information [ver #21] - 2 - --- 2020-08-03 David Howells New
[17/18] vfs: allow fsinfo to fetch the current state of s_wb_err [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[18/18] samples: add error state information to test-fsinfo.c [ver #21] VFS: Filesystem information [ver #21] - - - --- 2020-08-03 David Howells New
[GIT,PULL] Mount notifications [GIT,PULL] Mount notifications - - - --- 2020-08-03 David Howells New
[GIT,PULL] Filesystem Information [GIT,PULL] Filesystem Information - - - --- 2020-08-03 David Howells New
[bpf-next,v8,1/7] A purely mechanical change to split the renaming from the actual generalization. Generalizing bpf_local_storage 1 - - --- 2020-08-03 KP Singh New
[bpf-next,v8,2/7] bpf: Generalize caching for sk_storage. Generalizing bpf_local_storage 1 - - --- 2020-08-03 KP Singh New
« 1 2 3 4 … 11 12 »