Show patches with: Submitter = Mickaël Salaün       |    Archived = No       |   151 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v1,2/2] selftests/landlock: Add layout1.refer_mount_root Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün New
[v1,1/2] landlock: Fix d_parent walk Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün New
[GIT,PULL] Landlock updates for v6.10 [GIT,PULL] Landlock updates for v6.10 - - - --- 2024-05-16 Mickaël Salaün New
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
MAINTAINER: Add Günther Noack as Landlock reviewer MAINTAINER: Add Günther Noack as Landlock reviewer 1 - - --- 2024-04-25 Mickaël Salaün Handled Elsewhere
[v4,RESEND,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v4,RESEND,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-04-08 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Improve AF_UNSPEC tests [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v4,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v4,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-26 Mickaël Salaün Handled Elsewhere
[v3,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[v3,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-19 Mickaël Salaün Handled Elsewhere
[RFC] fs: Add an use vfs_get_ioctl_handler() [RFC] fs: Add an use vfs_get_ioctl_handler() - - - --- 2024-03-15 Mickaël Salaün pcmoore RFC
[GIT,PULL] Landlock updates for v6.9 [GIT,PULL] Landlock updates for v6.9 - - - --- 2024-03-13 Mickaël Salaün pcmoore Handled Elsewhere
samples/landlock: Don't error out if a file path cannot be opened samples/landlock: Don't error out if a file path cannot be opened - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
landlock: Use f_cred in security_file_open() hook landlock: Use f_cred in security_file_open() hook - 1 - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[2/2] landlock: Rename "ptrace" files to "task" [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[1/2] landlock: Simplify current_check_access_socket() [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
selftests/harness: Fix TEST_F()'s vfork handling selftests/harness: Fix TEST_F()'s vfork handling - 1 2 --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v2,7/7] kunit: Add tests for fault Handle faults in KUnit tests - 1 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,6/7] kunit: Print last test location on fault Handle faults in KUnit tests - 1 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,5/7] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Handle faults in KUnit tests - 2 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,4/7] kunit: Handle test faults Handle faults in KUnit tests - 2 1 --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,3/7] kunit: Fix timeout message Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,2/7] kunit: Fix kthread reference Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[v2,1/7] kunit: Handle thread creation error Handle faults in KUnit tests - 3 - --- 2024-03-01 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fixes for v6.8-rc7 [GIT,PULL] Landlock fixes for v6.8-rc7 - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,8/8] kunit: Add tests for faults Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,7/8] kunit: Print last test location on fault Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,5/8] kunit: Handle test faults Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,4/8] kunit: Fix timeout message Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,3/8] kunit: Fix kthread reference Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,2/8] kunit: Handle thread creation error Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,1/8] kunit: Run tests when the kernel is fully setup Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v2,2/2] landlock: Warn once if a Landlock action is requested while disabled [v2,1/2] landlock: Extend documentation for kernel support - 2 - --- 2024-02-27 Mickaël Salaün Handled Elsewhere
[v2,1/2] landlock: Extend documentation for kernel support [v2,1/2] landlock: Extend documentation for kernel support - 2 - --- 2024-02-27 Mickaël Salaün Handled Elsewhere
[2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - 1 - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[2/2] AppArmor: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - 1 - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
[1/2] SELinux: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - - - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
landlock: Warn once if a Landlock action is requested while disabled landlock: Warn once if a Landlock action is requested while disabled - 2 - --- 2024-02-19 Mickaël Salaün Handled Elsewhere
landlock: Fix asymmetric private inodes referring landlock: Fix asymmetric private inodes referring - - - --- 2024-02-19 Mickaël Salaün Handled Elsewhere
[RFC] fs: Add vfs_masks_device_ioctl*() helpers [RFC] fs: Add vfs_masks_device_ioctl*() helpers - - - --- 2024-02-19 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fixes for v6.8-rc5 [GIT,PULL] Landlock fixes for v6.8-rc5 - - - --- 2024-02-14 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Clean up error logs related to capabilities Fix Landlock's net_test for non-root users - - - --- 2024-01-25 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Fix capability for net_test Fix Landlock's net_test for non-root users - - - --- 2024-01-25 Mickaël Salaün Handled Elsewhere
[v1] landlock: Add support for KUnit tests [v1] landlock: Add support for KUnit tests - 1 - --- 2024-01-18 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.8 [GIT,PULL] Landlock updates for v6.8 - - - --- 2024-01-08 Mickaël Salaün Handled Elsewhere
[v3] selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket [v3] selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket - - 1 --- 2024-01-03 Mickaël Salaün pcmoore Accepted
[v2] selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket [v2] selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket - - - --- 2023-12-29 Mickaël Salaün pcmoore Changes Requested
selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket selinux: Fix error priority for bind with AF_UNSPEC on AF_INET6 socket - - - --- 2023-12-28 Mickaël Salaün pcmoore Changes Requested
[v2,2/2] selftests/landlock: Add tests to check unhandled rule's access rights Extend Landlock test to improve rule's coverage - 2 - --- 2023-11-30 Mickaël Salaün Handled Elsewhere
[v2,1/2] selftests/landlock: Add tests to check unknown rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-30 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Add tests to check unhandled rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-20 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Add tests to check undefined rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-20 Mickaël Salaün Handled Elsewhere
[RFC,v2,19/19] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,18/19] heki: x86: Protect guest kernel memory using the KVM hypervisor Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,17/19] heki: x86: Update permissions counters during text patching Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,16/19] heki: x86: Update permissions counters when guest page permissions change Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,15/19] heki: x86: Initialize permissions counters for pages in vmap()/vunmap() Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,14/19] heki: x86: Initialize permissions counters for pages mapped into KVA Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,13/19] heki: Implement a kernel page table walker Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,12/19] x86: Implement the Memory Table feature to store arbitrary per-page data Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,11/19] KVM: x86: Add new hypercall to set EPT permissions Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,10/19] KVM: x86: Implement per-guest-page permissions Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,09/19] KVM: x86: Extend kvm_range_has_memory_attributes() with match_all Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,08/19] KVM: x86: Extend kvm_vm_set_mem_attributes() with a mask Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,07/19] KVM: x86: Make memory attribute helpers more generic Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,06/19] KVM: x86: Add kvm_x86_ops.fault_gva() Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,05/19] KVM: VMX: Add MBEC support Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,04/19] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,03/19] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,02/19] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,01/19] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.7 [GIT,PULL] Landlock updates for v6.7 - - - --- 2023-11-02 Mickaël Salaün Handled Elsewhere
[RFC,v1,7/7] landlock: Log ptrace requests Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,6/7] landlock: Log mount-related requests Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
« 1 2 »