Show patches with: none      |   15875 patches
« 1 2 ... 15 16 17 … 158 159 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v4,20/23] ima: Move IMA-Appraisal to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,19/23] ima: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,18/23] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,17/23] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,16/23] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,15/23] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,14/23] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,13/23] security: Introduce file_pre_free_security hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,12/23] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,11/23] security: Introduce inode_post_removexattr hook security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,10/23] security: Introduce inode_post_setattr hook security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,09/23] security: Align inode_setattr hook definition with EVM security: Move IMA and EVM to the LSM infrastructure 1 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,08/23] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,07/23] evm: Align evm_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,06/23] evm: Align evm_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,05/23] ima: Align ima_post_read_file() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,04/23] ima: Align ima_inode_removexattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,03/23] ima: Align ima_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,02/23] ima: Align ima_file_mprotect() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
[v4,01/23] ima: Align ima_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-10-27 Roberto Sassu pcmoore Superseded
security: Don't yet account for IMA in LSM_CONFIG_COUNT calculation security: Don't yet account for IMA in LSM_CONFIG_COUNT calculation - - - --- 2023-10-26 Roberto Sassu pcmoore Accepted
[v14,12/12] landlock: Document network support Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,11/12] samples/landlock: Support TCP restrictions Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,10/12] selftests/landlock: Add network tests Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,09/12] selftests/landlock: Share enforce_ruleset() Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,08/12] landlock: Add network rules and TCP hooks support Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,07/12] landlock: Refactor landlock_add_rule() syscall Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,06/12] landlock: Refactor layer helpers Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,05/12] landlock: Move and rename layer helpers Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,04/12] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,03/12] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,02/12] landlock: Allow FS topology changes for domains without such rule type Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v14,01/12] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2023-10-26 Konstantin Meskhidze (A) Handled Elsewhere
[v4,6/6] wire up syscalls for statmount/listmount querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[v4,5/6] add listmount(2) syscall querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[v4,4/6] add statmount(2) syscall querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[v4,3/6] namespace: extract show_path() helper querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[v4,2/6] mounts: keep list of mounts in an rbtree querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[v4,1/6] add unique mount ID querying mount attributes - - - --- 2023-10-25 Miklos Szeredi pcmoore Changes Requested
[RFC,3/3] lsm: consolidate buffer size handling into lsm_fill_user_ctx() LSM syscall tweaks - - - --- 2023-10-24 Paul Moore pcmoore Accepted
[RFC,2/3] lsm: correct error codes in security_getselfattr() LSM syscall tweaks 1 1 - --- 2023-10-24 Paul Moore pcmoore Accepted
[RFC,1/3] lsm: cleanup the size counters in security_getselfattr() LSM syscall tweaks 1 1 - --- 2023-10-24 Paul Moore pcmoore Accepted
[v4,5/5] docs: trusted-encrypted: add DCP as new trust source DCP as trusted keys backend - - - --- 2023-10-24 David Gstir Handled Elsewhere
[v4,4/5] docs: document DCP-backed trusted keys kernel params DCP as trusted keys backend - - - --- 2023-10-24 David Gstir Handled Elsewhere
[v4,3/5] MAINTAINERS: add entry for DCP-based trusted keys DCP as trusted keys backend - - - --- 2023-10-24 David Gstir Handled Elsewhere
[v4,2/5] KEYS: trusted: Introduce NXP DCP-backed trusted keys DCP as trusted keys backend - - - --- 2023-10-24 David Gstir Handled Elsewhere
[v4,1/5] crypto: mxs-dcp: Add support for hardware-bound keys DCP as trusted keys backend 1 - - --- 2023-10-24 David Gstir Handled Elsewhere
[v3,6/6] KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers Untitled series #795872 - - - --- 2023-10-24 Jarkko Sakkinen Handled Elsewhere
[v3,4/6] tpm: Support TPM2 sized buffers (TPM2B) Untitled series #795872 - - - --- 2023-10-24 Jarkko Sakkinen Handled Elsewhere
[v3,3/6] tpm: Detach tpm_buf_reset() from tpm_buf_init() Untitled series #795872 - 1 - --- 2023-10-24 Jarkko Sakkinen Handled Elsewhere
[v3,2/6] tpm: Store TPM buffer length Untitled series #795872 - 1 - --- 2023-10-24 Jarkko Sakkinen Handled Elsewhere
[-next,2/2] apparmor: Fix some kernel-doc comments [-next,1/2] apparmor: Fix one kernel-doc comment - - - --- 2023-10-23 Yang Li Handled Elsewhere
[-next,1/2] apparmor: Fix one kernel-doc comment [-next,1/2] apparmor: Fix one kernel-doc comment - - - --- 2023-10-23 Yang Li Handled Elsewhere
[-next] apparmor: Fix some kernel-doc comments [-next] apparmor: Fix some kernel-doc comments - - - --- 2023-10-23 Yang Li Handled Elsewhere
apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256 apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256 1 - - --- 2023-10-22 Dimitri John Ledkov Handled Elsewhere
[v4,4/4] vduse: Add LSM hooks to check Virtio device type vduse: add support for networking devices - - - --- 2023-10-20 Maxime Coquelin pcmoore Changes Requested
[v4,3/4] vduse: Temporarily disable control queue features vduse: add support for networking devices - - - --- 2023-10-20 Maxime Coquelin pcmoore Changes Requested
[v4,2/4] vduse: enable Virtio-net device type vduse: add support for networking devices 1 1 - --- 2023-10-20 Maxime Coquelin pcmoore Changes Requested
[v4,1/4] vduse: validate block features only with block devices vduse: add support for networking devices 1 1 - --- 2023-10-20 Maxime Coquelin pcmoore Changes Requested
apparmor: mark new functions static apparmor: mark new functions static 1 - - --- 2023-10-20 Arnd Bergmann Handled Elsewhere
lsm: drop LSM_ID_IMA lsm: drop LSM_ID_IMA - 1 - --- 2023-10-18 Paul Moore pcmoore Accepted
capabilities: add a option PR_SET_CAPS for sys_prctl capabilities: add a option PR_SET_CAPS for sys_prctl - - - --- 2023-10-18 yunhui cui pcmoore Rejected
landlock: fix typo in landlock_append_net_rule() stub function landlock: fix typo in landlock_append_net_rule() stub function - - - --- 2023-10-17 Arnd Bergmann Handled Elsewhere
[v8,bpf-next,18/18] bpf,selinux: allocate bpf_security_struct per BPF token BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,17/18] selftests/bpf: add BPF token-enabled tests BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,16/18] libbpf: add BPF token support to bpf_prog_load() API BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,15/18] libbpf: add BPF token support to bpf_btf_load() API BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,14/18] libbpf: add BPF token support to bpf_map_create() API BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,13/18] selftests/bpf: fix test_maps' use of bpf_map_create_opts BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,12/18] libbpf: add bpf_token_create() API BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,11/18] bpf,lsm: add BPF token LSM hooks BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,10/18] bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,09/18] bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,08/18] bpf: consistenly use BPF token throughout BPF verifier logic BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,07/18] bpf: take into account BPF token when fetching helper protos BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,06/18] bpf: add BPF token support to BPF_PROG_LOAD command BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,05/18] bpf: add BPF token support to BPF_BTF_LOAD command BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,04/18] bpf: add BPF token support to BPF_MAP_CREATE command BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,03/18] bpf: introduce BPF token object BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,02/18] bpf: add BPF token delegation mount options to BPF FS BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v8,bpf-next,01/18] bpf: align CAP_NET_ADMIN checks with bpf_capable() approach BPF token and BPF FS-based delegation - - - --- 2023-10-16 Andrii Nakryiko pcmoore Superseded
[v13,12/12] landlock: Document Landlock's network support Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,11/12] samples/landlock: Add network demo Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,10/12] selftests/landlock: Add 7 new test variants dedicated to network Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,09/12] selftests/landlock: Share enforce_ruleset() Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,08/12] landlock: Add network rules and TCP hooks support Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,07/12] landlock: Refactor landlock_add_rule() syscall Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,06/12] landlock: Refactor layer helpers Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,05/12] landlock: Move and rename layer helpers Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,04/12] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,03/12] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,02/12] landlock: Allow FS topology changes for domains without such rule type Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v13,01/12] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2023-10-16 Konstantin Meskhidze (A) pcmoore Handled Elsewhere
[v7,bpf-next,18/18] bpf,selinux: allocate bpf_security_struct per BPF token BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,17/18] selftests/bpf: add BPF token-enabled tests BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,16/18] libbpf: add BPF token support to bpf_prog_load() API BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,15/18] libbpf: add BPF token support to bpf_btf_load() API BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,14/18] libbpf: add BPF token support to bpf_map_create() API BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,13/18] selftests/bpf: fix test_maps' use of bpf_map_create_opts BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
[v7,bpf-next,12/18] libbpf: add bpf_token_create() API BPF token and BPF FS-based delegation - - - --- 2023-10-12 Andrii Nakryiko pcmoore Changes Requested
« 1 2 ... 15 16 17 … 158 159 »