Show patches with: none      |   8990 patches
« 1 2 ... 83 84 8589 90 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[11/16] x86: Lock down IO port access when the kernel is locked down - - - 0 0 0 2016-11-16 David Howells New
[10/16] PCI: Lock down BAR access when the kernel is locked down - - - 0 0 0 2016-11-16 David Howells New
[09/16] hibernate: Disable when the kernel is locked down - - - 0 0 0 2016-11-16 David Howells New
[08/16] Copy secure_boot flag in boot params across kexec reboot - - - 0 0 0 2016-11-16 David Howells New
[07/16] kexec: Disable at runtime if the kernel is locked down - - - 0 0 0 2016-11-16 David Howells New
[06/16] Add a sysrq option to exit secure boot mode - - - 0 0 0 2016-11-16 David Howells New
[05/16] efi: Add EFI_SECURE_BOOT bit - - - 0 0 0 2016-11-16 David Howells New
[04/16] efi: Lock down the kernel if booted in secure boot mode - - - 0 0 0 2016-11-16 David Howells New
[03/16] efi: Disable secure boot if shim is in insecure mode - - - 0 0 0 2016-11-16 David Howells New
[02/16] efi: Get the secure boot status - - - 0 0 0 2016-11-16 David Howells New
[01/16] Add the ability to lock down access to the running kernel image - - - 0 0 0 2016-11-16 David Howells New
[9/9] MODSIGN: Allow the "db" UEFI variable to be suppressed - - - 0 0 0 2016-11-16 David Howells New
[8/9] MODSIGN: Import certificates from UEFI Secure Boot - - - 0 0 0 2016-11-16 David Howells New
[7/9] efi: Add an EFI signature blob parser - - - 0 0 0 2016-11-16 David Howells New
[6/9] efi: Add EFI signature data types - 1 - 0 0 0 2016-11-16 David Howells New
[5/9] efi: Add SHIM and image security database GUID definitions - 1 - 0 0 0 2016-11-16 David Howells New
[4/9] KEYS: Allow unrestricted boot-time addition of keys to secondary keyring - - - 0 0 0 2016-11-16 David Howells New
[3/9] PKCS#7: Handle blacklisted certificates - - - 0 0 0 2016-11-16 David Howells New
[2/9] X.509: Allow X.509 certs to be blacklisted - - - 0 0 0 2016-11-16 David Howells New
[1/9] KEYS: Add a system blacklist keyring - - - 0 0 0 2016-11-16 David Howells New
tpm: drop chip->is_open and chip->duration_adjusted - - - 0 0 0 2016-11-14 Jarkko Sakkinen New
Smack: Remove unnecessary smack_known_invalid - - - 0 0 0 2016-11-14 Casey Schaufler New
SELinux: Use GFP_KERNEL for selinux_parse_opts_str(). - - - 0 0 0 2016-11-14 Tetsuo Handa New
Smack: Use GFP_KERNEL for smk_netlbl_mls(). - - - 0 0 0 2016-11-14 Tetsuo Handa New
Smack: Use GFP_KERNEL for smack_parse_opts_str(). 1 - - 0 0 0 2016-11-14 Tetsuo Handa New
AppArmor: Use GFP_KERNEL for __aa_kvmalloc(). 1 - - 0 0 0 2016-11-14 Tetsuo Handa New
[v6,9/9] tpm: cleanup of printk error messages - 1 1 0 0 0 2016-11-14 Nayna New
[v6,8/9] tpm: replace of_find_node_by_name() with dev of_node property - 1 - 0 0 0 2016-11-14 Nayna New
[v6,7/9] tpm: redefine read_log() to handle ACPI/OF at runtime - 2 1 0 0 0 2016-11-14 Nayna New
[v6,6/9] tpm: fix the missing .owner in tpm_bios_measurements_ops - 1 1 0 0 0 2016-11-14 Nayna New
[v6,5/9] tpm: have event log use the tpm_chip - 1 1 0 0 0 2016-11-14 Nayna New
[v6,4/9] tpm: drop tpm1_chip_register(/unregister) - 2 1 0 0 0 2016-11-14 Nayna New
[v6,3/9] tpm: replace dynamically allocated bios_dir with a static array - - 1 0 0 0 2016-11-14 Nayna New
[v6,2/9] tpm: replace symbolic permission with octal for securityfs files - 2 1 0 0 0 2016-11-14 Nayna New
[v6,1/9] tpm: define a generic open() method for ascii & bios measurements - 2 1 0 0 0 2016-11-14 Nayna New
[3.16,119/346] KEYS: 64-bit MIPS needs to use compat_sys_keyctl for 32-bit userspace - - - 0 0 0 2016-11-14 Ben Hutchings New
[3.16,138/346] x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace - - 1 0 0 0 2016-11-14 Ben Hutchings New
[3.2,051/152] x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace - - 1 0 0 0 2016-11-14 Ben Hutchings New
[3.2,044/152] KEYS: 64-bit MIPS needs to use compat_sys_keyctl for 32-bit userspace - - - 0 0 0 2016-11-14 Ben Hutchings New
Security: selinux - Improvement in code readability when - - - 0 0 0 2016-11-11 shailendra.v@samsung.com New
[PATCHC,v7,10/10] ima: platform-independent hash value - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,09/10] ima: define a canonical binary_runtime_measurements list format - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,08/10] ima: support restoring multiple template formats - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,07/10] ima: store the builtin/custom template definitions in a list - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,06/10] ima: on soft reboot, save the measurement list 1 - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,05/10] powerpc: ima: Send the kexec buffer to the next kernel 1 - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,04/10] ima: maintain memory size needed for serializing the measurement list - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,03/10] ima: permit duplicate measurement list entries - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,02/10] ima: on soft reboot, restore the measurement list - - - 0 0 0 2016-11-10 Mimi Zohar New
[PATCHC,v7,01/10] powerpc: ima: Get the kexec buffer passed by the previous kernel 1 - - 0 0 0 2016-11-10 Mimi Zohar New
smack: parse mnt opts after privileges check 1 - - 0 0 0 2016-11-10 Himanshu Shukla New
SMACK: Do not apply star label in smack_setprocattr hook 1 - - 0 0 0 2016-11-10 Himanshu Shukla New
SMACK: Fix the memory leak in smack_cred_prepare() hook 1 - - 0 0 0 2016-11-10 Himanshu Shukla New
[v4,9/9] selinux: Add a cache for quicker retreival of PKey SIDs - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,8/9] selinux: Add IB Port SMP access vector - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,7/9] selinux: Implement Infiniband PKey "Access" access vector - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,6/9] selinux: Allocate and free infiniband security hooks - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,5/9] selinux: Create policydb version for Infiniband support - 1 - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,4/9] IB/core: Enforce security on management datagrams - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,3/9] selinux lsm IB/core: Implement LSM notification system - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,2/9] IB/core: Enforce PKey security on QPs - - - 0 0 0 2016-11-08 Daniel Jurgens New
[v4,1/9] IB/core: IB cache enhancements to support Infiniband security - 2 - 0 0 0 2016-11-08 Daniel Jurgens New
Smack: ipv6 label match fix - - - 0 0 0 2016-11-08 Casey Schaufler New
[1/1,V2] mqueue: Implment generic xattr support 1 - - 0 0 0 2016-11-07 David Graziano New
Doc: security: keys-trusted: drop duplicate blobauth entry - - - 0 0 0 2016-11-06 Baruch Siach New
[v3,1/8] exec: introduce cred_guard_light - - - 0 0 0 2016-11-05 Oleg Nesterov New
[v3,1/8] exec: introduce cred_guard_light - - - 0 0 0 2016-11-04 Eric W. Biederman New
[v3,1/8] exec: introduce cred_guard_light - - - 0 0 0 2016-11-04 Eric W. Biederman New
[v2] Smack: improves the documentation - - - 0 0 0 2016-11-04 José Bollo New
xattr: Fix setting security xattrs on sockfs - - - 0 0 0 2016-11-03 Andreas Gruenbacher New
xattr: Fix setting security xattrs on sockfs - - - 0 0 0 2016-11-03 Andreas Gruenbacher New
Smack: improves the documentation - - - 0 0 0 2016-11-03 José Bollo New
Smack: Assign smack_known_web label for kernel thread's - - - 0 0 0 2016-11-03 José Bollo New
[v3,3/3] selinux: require EXECMEM for forced ptrace poke - - - 0 0 0 2016-11-03 Jann Horn New
[v3,2/3] mm: add LSM hook for writes to readonly memory - - - 0 0 0 2016-11-03 Jann Horn New
[v3,1/3] fs/exec: don't force writing memory access 1 1 - 0 0 0 2016-11-03 Jann Horn New
[3/3] selinux: require EXECMEM for forced ptrace poke - - - 0 0 0 2016-11-03 Jann Horn New
[2/3] mm: add LSM hook for writes to readonly memory - - - 0 0 0 2016-11-03 Jann Horn New
[1/3] fs/exec: don't force writing memory access - 1 - 0 0 0 2016-11-03 Jann Horn New
LSM: Add /sys/kernel/security/lsm 1 - - 0 0 0 2016-11-02 Casey Schaufler New
Re: Problem with setxattr on sockfs with Smack after 971df15bd54ad46e907046ff33750a137b2f0096 - - - 0 0 0 2016-11-02 Andreas Gruenbacher New
[GIT,PULL] TPM bugfix - - - 0 0 0 2016-10-31 James Morris New
[v3,8/8] Documentation: add security/ptrace_checks.txt 1 - - 0 0 0 2016-10-30 Jann Horn New
[v3,7/8] proc: fix timerslack_ns handling - - - 0 0 0 2016-10-30 Jann Horn New
[v3,6/8] fs/proc: fix attr access check - - - 0 0 0 2016-10-30 Jann Horn New
[v3,5/8] proc: lock properly in ptrace_may_access callers - - - 0 0 0 2016-10-30 Jann Horn New
[v3,4/8] futex: don't leak robust_list pointer - - - 0 0 0 2016-10-30 Jann Horn New
[v3,3/8] proc: use open()-time creds for ptrace checks - - - 0 0 0 2016-10-30 Jann Horn New
[v3,2/8] exec: add privunit to task_struct - - - 0 0 0 2016-10-30 Jann Horn New
[v3,1/8] exec: introduce cred_guard_light - - - 0 0 0 2016-10-30 Jann Horn New
[v2,2/2] mm: unexport __get_user_pages_unlocked() - - - 0 0 0 2016-10-27 Lorenzo Stoakes New
[v2,1/2] mm: add locked parameter to get_user_pages_remote() - - - 0 0 0 2016-10-27 Lorenzo Stoakes New
Keyrings, user namespaces and the user_struct - - - 0 0 0 2016-10-27 Eric W. Biederman New
[2/2] mm: unexport __get_user_pages_unlocked() 1 - - 0 0 0 2016-10-27 Lorenzo Stoakes New
[1/2] mm: add locked parameter to get_user_pages_remote() - - - 0 0 0 2016-10-27 Lorenzo Stoakes New
[v6,3/3] LSM: Add context interface for proc attrs - - - 0 0 0 2016-10-27 Casey Schaufler New
[v6,2/3] LSM: module hierarchy in /proc/.../attr - - - 0 0 0 2016-10-27 Casey Schaufler New
[v6,1/3] LSM: Add /sys/kernel/security/lsm - - - 0 0 0 2016-10-27 Casey Schaufler New
[3/3] security/keys: make BIG_KEYS dependent on stdrng. - - - 0 0 0 2016-10-26 David Howells New
[2/3] KEYS: Sort out big_key initialisation - - - 0 0 0 2016-10-26 David Howells New
« 1 2 ... 83 84 8589 90 »