Show patches with: State = Action Required       |   10114 patches
« 1 2 ... 9 10 11 … 101 102 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v8,1/4] KEYS: trusted: Add generic trusted keys framework Introduce TEE based Trusted Keys support - - - --- 2020-11-03 Sumit Garg New
[v5,7/7] selinux: measure state and hash of the policy using IMA IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,6/7] IMA: add critical_data to the built-in policy rules IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,5/7] IMA: validate supported kernel data sources before measurement IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,4/7] IMA: add policy to measure critical data IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,3/7] IMA: add hook to measure critical data IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,2/7] IMA: update process_buffer_measurement to measure buffer hash IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v5,1/7] IMA: generalize keyring specific measurement constructs IMA: Infrastructure for measurement of critical kernel data - - - --- 2020-11-01 Tushar Sugandhi New
[v4,3/3,RESEND] KEYS: trusted: Reserve TPM for seal and unseal operations Untitled series #373859 - - - --- 2020-10-30 Jarkko Sakkinen New
[v4,2/3,RESEND] KEYS: trusted: Fix migratable=1 failing Untitled series #373853 - - - --- 2020-10-30 Jarkko Sakkinen New
[v4,1/3,RESEND] KEYS: trusted: Fix incorrect handling of tpm_get_random() [v4,1/3,RESEND] KEYS: trusted: Fix incorrect handling of tpm_get_random() - - - --- 2020-10-30 Jarkko Sakkinen New
[v3,3/3] arm64/ima: add ima_arch support add ima_arch support for ARM64 - - - --- 2020-10-30 Chester Lin New
[v3,2/3] ima: replace arch-specific get_sb_mode() with a common helper ima_get_efi_secureboot() add ima_arch support for ARM64 - - - --- 2020-10-30 Chester Lin New
[v3,1/3] efi: generalize efi_get_secureboot add ima_arch support for ARM64 - - - --- 2020-10-30 Chester Lin New
[v3,2/2] docs: add fail_lsm_hooks info to fault-injection.rst security: add fault injection to LSM hooks - - - --- 2020-10-29 Aleksandr Nogikh New
[v3,1/2] security: add fault injection capability security: add fault injection to LSM hooks - 3 - --- 2020-10-29 Aleksandr Nogikh New
[34/34] fat: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[33/34] overlayfs: handle idmapped merged mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[32/34] overlayfs: handle idmapped lower directories fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[31/34] expfs: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[30/34] ext4: support idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[29/34] ima: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[28/34] audit: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[27/34] apparmor: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[26/34] fs: add helpers for idmap mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[25/34] exec: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[24/34] would_dump: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[23/34] utimes: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[22/34] af_unix: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[21/34] open: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[20/34] open: handle idmapped mounts in do_truncate() fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[19/34] namei: add lookup helpers with idmapped mounts aware permission checking fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[18/34] namei: prepare for idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[17/34] namei: introduce struct renamedata fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[16/34] namei: handle idmapped mounts in may_*() helpers fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[15/34] stat: add mapped_generic_fillattr() fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[14/34] commoncap: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[13/34] selftests: add idmapped mounts xattr selftest fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[12/34] xattr: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[11/34] acl: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[10/34] attr: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[09/34] inode: add idmapped mount aware init and permission helpers fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[08/34] namei: add idmapped mount aware permission helpers fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[07/34] capability: handle idmapped mounts fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[06/34] fs: add id translation helpers fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[05/34] fs: introduce MOUNT_ATTR_IDMAP fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[04/34] tests: add mount_setattr() selftests fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[03/34] fs: add mount_setattr() fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[02/34] namespace: only take read lock in do_reconfigure_mnt() fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[01/34] namespace: take lock_mount_hash() directly when changing flags fs: idmapped mounts - - - --- 2020-10-29 Christian Brauner New
[v22,12/12] landlock: Add user and kernel documentation Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,11/12] samples/landlock: Add a sandbox manager example Landlock LSM - - - --- 2020-10-27 Mickaël Salaün New
[v22,10/12] selftests/landlock: Add user space tests Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,09/12] arch: Wire up Landlock syscalls Landlock LSM - - - --- 2020-10-27 Mickaël Salaün New
[v22,08/12] landlock: Add syscall implementations Landlock LSM - - - --- 2020-10-27 Mickaël Salaün New
[v22,07/12] landlock: Support filesystem access-control Landlock LSM - - - --- 2020-10-27 Mickaël Salaün New
[v22,06/12] fs,security: Add sb_delete hook Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,05/12] LSM: Infrastructure management of the superblock Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,04/12] landlock: Add ptrace restrictions Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,03/12] landlock: Set up the security framework and manage credentials Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,02/12] landlock: Add ruleset and domain management Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v22,01/12] landlock: Add object management Landlock LSM - 1 - --- 2020-10-27 Mickaël Salaün New
[v2] perf_event_open.2: update the man page with CAP_PERFMON related information [v2] perf_event_open.2: update the man page with CAP_PERFMON related information - - - --- 2020-10-27 Alexey Budankov New
tomoyo: fix clang pointer arithmetic warning tomoyo: fix clang pointer arithmetic warning - 1 - --- 2020-10-26 Arnd Bergmann New
[RFC,v2,2/2] docs: add fail_lsm_hooks info to fault-injection.rst security: add fault injection to LSM hooks - - - --- 2020-10-26 Aleksandr Nogikh New
[RFC,v2,1/2] security: add fault injection capability security: add fault injection to LSM hooks - - - --- 2020-10-26 Aleksandr Nogikh New
[v2,8/8] MAINTAINERS: Add a new entry for the Brute LSM Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,7/8] Documentation: Add documentation for the Brute LSM Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,6/8] security/brute: Add prctls to enable/disable the fork attack detection Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,5/8] security/brute: Mitigate a fork brute force attack Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,4/8] security/brute: Detect a fork brute force attack Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,3/8] security/brute: Add sysctl attributes to allow detection fine tuning Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,2/8] security/brute: Define a LSM and manage statistical data Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
[v2,1/8] security: Add LSM hook at the point where a task gets a fatal signal Fork brute force attack mitigation - - - --- 2020-10-25 John Wood New
vsock: use ns_capable_noaudit() on socket create vsock: use ns_capable_noaudit() on socket create - 1 - --- 2020-10-23 Jeffrey Vander Stoep New
[RESEND,v18,4/4] overlayfs: inode_owner_or_capable called during execv Untitled series #368855 - - - --- 2020-10-22 Mark Salyzyn New
[RESEND,v18,4/4] overlayfs: inode_owner_or_capable called during execv overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[RESEND,v18,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[RESEND,v18,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[RESEND,v18,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-21 Mark Salyzyn New
[v18,4/4] overlayfs: inode_owner_or_capable called during execv overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[v18,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[v18,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-21 Mark Salyzyn New
[v18,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-21 Mark Salyzyn New
[v17,4/4] overlayfs: inode_owner_or_capable called during execv overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-20 Mark Salyzyn New
[v17,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-20 Mark Salyzyn New
[v17,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-20 Mark Salyzyn New
[v17,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-20 Mark Salyzyn New
mm, hugetlb: Avoid double clearing for hugetlb pages mm, hugetlb: Avoid double clearing for hugetlb pages - - - --- 2020-10-19 Guilherme Piccoli New
security: remove unneeded break security: remove unneeded break 3 - - --- 2020-10-19 Tom Rix New
[v1,2/2] doc/admin-guide: document creation of CAP_PERFMON privileged shell doc/admin-guide: update perf-security.rst with CAP_PERFMON usage flows - - - --- 2020-10-19 Alexey Budankov New
[v1,1/2] doc/admin-guide: note credentials consolidation under CAP_PERFMON doc/admin-guide: update perf-security.rst with CAP_PERFMON usage flows - - - --- 2020-10-19 Alexey Budankov New
[RESEND,v11,3/3] selftest/interpreter: Add tests for trusted_for(2) policies Add trusted_for(2) (was O_MAYEXEC) - 1 - --- 2020-10-19 Mickaël Salaün New
[RESEND,v11,2/3] arch: Wire up trusted_for(2) Add trusted_for(2) (was O_MAYEXEC) 1 1 - --- 2020-10-19 Mickaël Salaün New
[RESEND,v11,1/3] fs: Add trusted_for(2) syscall implementation and related sysctl Add trusted_for(2) (was O_MAYEXEC) - - - --- 2020-10-19 Mickaël Salaün New
[v16,4/4] overlayfs: inode_owner_or_capable called during execv overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-19 Mark Salyzyn New
[v16,3/4] overlayfs: override_creds=off option bypass creator_cred overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-19 Mark Salyzyn New
[v16,2/4] overlayfs: handle XATTR_NOSECURITY flag for get xattr method overlayfs override_creds=off & nested get xattr fix - - - --- 2020-10-19 Mark Salyzyn New
[v16,1/4] Add flags option to get xattr method paired to __vfs_getxattr overlayfs override_creds=off & nested get xattr fix 5 1 - --- 2020-10-19 Mark Salyzyn New
[RFC] treewide: cleanup unreachable breaks [RFC] treewide: cleanup unreachable breaks 1 - - --- 2020-10-17 Tom Rix New
« 1 2 ... 9 10 11 … 101 102 »