Show patches with: none      |   15510 patches
« 1 2 ... 69 70 71 … 155 156 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[04/17] fsinfo: Allow retrieval of superblock devname, options and stats [ver #20] VFS: Filesystem information [ver #20] - - - --- 2020-07-24 David Howells New
[03/17] fsinfo: Provide a bitmap of the features a filesystem supports [ver #20] VFS: Filesystem information [ver #20] - - - --- 2020-07-24 David Howells New
[02/17] fsinfo: Add fsinfo() syscall to query filesystem information [ver #20] VFS: Filesystem information [ver #20] - - - --- 2020-07-24 David Howells New
[01/17] fsinfo: Introduce a non-repeating system-unique superblock ID [ver #20] VFS: Filesystem information [ver #20] - - - --- 2020-07-24 David Howells New
[4/4] watch_queue: sample: Display mount tree change notifications Mount notifications - - - --- 2020-07-24 David Howells New
[3/4] watch_queue: Implement mount topology and attribute change notifications Mount notifications - - - --- 2020-07-24 David Howells New
[2/4] watch_queue: Add security hooks to rule on setting mount watches Mount notifications - - - --- 2020-07-24 David Howells New
[1/4] watch_queue: Make watch_sizeof() check record size Mount notifications - - - --- 2020-07-24 David Howells New
[v7,7/7] ima: add policy support for the new file open MAY_OPENEXEC flag Add support for O_MAYEXEC - 2 - --- 2020-07-23 Mickaël Salaün New
[v7,6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing Add support for O_MAYEXEC - 2 - --- 2020-07-23 Mickaël Salaün New
[v7,5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC Add support for O_MAYEXEC 1 1 - --- 2020-07-23 Mickaël Salaün New
[v7,4/7] fs: Introduce O_MAYEXEC flag for openat2(2) Add support for O_MAYEXEC 1 - - --- 2020-07-23 Mickaël Salaün New
[v7,3/7] exec: Move path_noexec() check earlier Add support for O_MAYEXEC - - - --- 2020-07-23 Mickaël Salaün New
[v7,2/7] exec: Move S_ISREG() check earlier Add support for O_MAYEXEC - - - --- 2020-07-23 Mickaël Salaün New
[v7,1/7] exec: Change uselib(2) IS_SREG() failure to EACCES Add support for O_MAYEXEC 1 - - --- 2020-07-23 Mickaël Salaün New
[2/2] Smack: prevent underflow in smk_set_cipso() [1/2] Smack: fix another vsscanf out of bounds - - - --- 2020-07-23 Dan Carpenter New
[1/2] Smack: fix another vsscanf out of bounds [1/2] Smack: fix another vsscanf out of bounds - - - --- 2020-07-23 Dan Carpenter New
[bpf-next,v6,7/7] bpf: Add selftests for local_storage Generalizing bpf_local_storage 1 - - --- 2020-07-23 KP Singh New
[bpf-next,v6,6/7] bpf: Allow local storage to be used from LSM programs Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
[bpf-next,v6,5/7] bpf: Implement bpf_local_storage for inodes Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
[bpf-next,v6,4/7] bpf: Split bpf_local_storage to bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
[bpf-next,v6,3/7] bpf: Generalize bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
[bpf-next,v6,2/7] bpf: Generalize caching for sk_storage. Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
[bpf-next,v6,1/7] bpf: Renames to prepare for generalizing sk_storage. Generalizing bpf_local_storage - - - --- 2020-07-23 KP Singh New
Manual pages: use "root user ID" rather than "rootid" Manual pages: use "root user ID" rather than "rootid" - - - --- 2020-07-23 Michael Kerrisk (man-pages) New
Manual pages: cap_from_text.3: Clarify a detail of cap_from_text() action list Manual pages: cap_from_text.3: Clarify a detail of cap_from_text() action list - - - --- 2020-07-22 Michael Kerrisk (man-pages) New
[bpf-next,v5,7/7] bpf: Add selftests for local_storage Generalizing bpf_local_storage 1 - - --- 2020-07-22 KP Singh New
[bpf-next,v5,6/7] bpf: Allow local storage to be used from LSM programs Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[bpf-next,v5,5/7] bpf: Implement bpf_local_storage for inodes Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[bpf-next,v5,4/7] bpf: Split bpf_local_storage to bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[bpf-next,v5,3/7] bpf: Generalize bpf_sk_storage Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[bpf-next,v5,2/7] bpf: Generalize caching for sk_storage. Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[bpf-next,v5,1/7] bpf: Renames to prepare for generalizing sk_storage. Generalizing bpf_local_storage - - - --- 2020-07-22 KP Singh New
[v2] KEYS: remove redundant memset [v2] KEYS: remove redundant memset - - - --- 2020-07-22 Tom Rix New
KEYS: remove redundant memsets KEYS: remove redundant memsets - - - --- 2020-07-21 Tom Rix New
[2/2] LSM: SafeSetID: Add GID security policy handling [1/2] LSM: Signal to SafeSetID when in set*gid syscall - 1 - --- 2020-07-20 Micah Morton New
[1/2] LSM: Signal to SafeSetID when in set*gid syscall [1/2] LSM: Signal to SafeSetID when in set*gid syscall 1 1 - --- 2020-07-20 Micah Morton New
[15/15] Manual pages: capsh.1: Change .TP indent to the default Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[14/15] Manual pages: cap_get_proc.3, capsh.1: Use "UID" and "GID" consistently Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[13/15] Manual pages: cap_get_proc.3: Update description of capsetp() Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[12/15] Manual pages: cap_get_file.3: NOTES: note the effect of the Ambient set Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[11/15] Manual pages: setcap.8: Typo fix Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[10/15] Manual pages: getpcaps.8: SEE ALSO: fix section number for capsh Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[09/15] Manual pages: getpcaps.8: Remove a stray .br macro Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[08/15] Manual pages: getpcaps.8: Format options as a hanging list Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[07/15] Manual pages: getcap.8: Fix a clumsily worded sentence Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[06/15] Manual pages: getcap.8: Add missing word Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[05/15] Manual pages; cap_get_file.3: Fix some clumsily worded text Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[04/15] Manual pages: cap_copy_ext.3: Typo fix Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[03/15] Manual pages: capsh.1: Various minor wording and formatting fixes Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[02/15] Manual pages: cap_init.3: Formatting fix Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[01/15] Manual pages: various pages: Use "\-" for real minus signs Manual pages: various fixes - - - --- 2020-07-20 Michael Kerrisk (man-pages) New
[for,v5.9] netfilter: xtables: Replace HTTP links with HTTPS ones [for,v5.9] netfilter: xtables: Replace HTTP links with HTTPS ones - - - --- 2020-07-19 Alexander A. Klimov New
[v6,7/7] selftests: add clone3() CAP_CHECKPOINT_RESTORE test capabilities: Introduce CAP_CHECKPOINT_RESTORE - - - --- 2020-07-19 Adrian Reber New
[v6,6/7] prctl: exe link permission error changed from -EINVAL to -EPERM capabilities: Introduce CAP_CHECKPOINT_RESTORE - 1 - --- 2020-07-19 Adrian Reber New
[v6,5/7] prctl: Allow local CAP_CHECKPOINT_RESTORE to change /proc/self/exe capabilities: Introduce CAP_CHECKPOINT_RESTORE - - - --- 2020-07-19 Adrian Reber New
[v6,4/7] proc: allow access in init userns for map_files with CAP_CHECKPOINT_RESTORE capabilities: Introduce CAP_CHECKPOINT_RESTORE - 2 - --- 2020-07-19 Adrian Reber New
[v6,3/7] pid_namespace: use checkpoint_restore_ns_capable() for ns_last_pid capabilities: Introduce CAP_CHECKPOINT_RESTORE 1 1 - --- 2020-07-19 Adrian Reber New
[v6,2/7] pid: use checkpoint_restore_ns_capable() for set_tid capabilities: Introduce CAP_CHECKPOINT_RESTORE 1 1 - --- 2020-07-19 Adrian Reber New
[v6,1/7] capabilities: Introduce CAP_CHECKPOINT_RESTORE capabilities: Introduce CAP_CHECKPOINT_RESTORE 1 1 - --- 2020-07-19 Adrian Reber New
LSM: drop duplicated words in header file comments LSM: drop duplicated words in header file comments 1 - - --- 2020-07-17 Randy Dunlap New
[RFC,v4,12/12] cleanup: uapi/linux/audit.h Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,11/12] documentation: add ipe documentation Integrity Policy Enforcement LSM (IPE) 1 - - --- 2020-07-17 Deven Bowers New
[RFC,v4,10/12] ipe: add property for dmverity roothash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,09/12] dm-verity: add bdev_setsecurity hook for root-hash Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,08/12] ipe: add property for signed dmverity volumes Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,07/12] dm-verity: add bdev_setsecurity hook for dm-verity signature Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,06/12] dm-verity: move signature check after tree validation Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,05/12] fs: add security blob and hooks for block_device Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,04/12] ipe: add property for trust of boot volume Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,03/12] security: add ipe lsm policy parser and policy loading Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,02/12] security: add ipe lsm evaluation loop and audit system Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[RFC,v4,01/12] scripts: add ipe tooling to generate boot policy Integrity Policy Enforcement LSM (IPE) - - - --- 2020-07-17 Deven Bowers New
[v3,5/5] LSM: Define workqueue for measuring security module state LSM: Measure security module state - - - --- 2020-07-17 Lakshmi Ramasubramanian New
[v3,4/5] LSM: Define SELinux function to measure security state LSM: Measure security module state - - - --- 2020-07-17 Lakshmi Ramasubramanian New
[v3,3/5] LSM: Add security_measure_data in lsm_info struct LSM: Measure security module state - - - --- 2020-07-17 Lakshmi Ramasubramanian New
[v3,2/5] IMA: Define an IMA hook to measure LSM data LSM: Measure security module state - - - --- 2020-07-17 Lakshmi Ramasubramanian New
[v3,1/5] IMA: Add LSM_STATE func to measure LSM data LSM: Measure security module state - - - --- 2020-07-17 Lakshmi Ramasubramanian New
[13/13] fs/kernel_file_read: Add "offset" arg for partial reads Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[12/13] LSM: Add "contents" flag to kernel_read_file hook Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[11/13] module: Call security_kernel_post_load_data() Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[10/13] firmware_loader: Use security_post_load_data() Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[09/13] LSM: Introduce kernel_post_load_data() hook Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[08/13] fs/kernel_read_file: Add file_size output argument Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[07/13] fs/kernel_read_file: Switch buffer size arg to size_t Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[06/13] fs/kernel_read_file: Remove redundant size argument Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[05/13] fs/kernel_read_file: Split into separate source file Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[04/13] fs/kernel_read_file: Split into separate include file Introduce partial kernel_read_file() support 1 1 - --- 2020-07-17 Kees Cook New
[03/13] fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[02/13] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[01/13] firmware_loader: EFI firmware loader must handle pre-allocated buffer Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[RFC,5/5] keys: Implement a 'container' keyring keys: Security changes, ACLs and Container keyring - - - --- 2020-07-16 David Howells New
[RFC,4/5] keys: Split the search perms between KEY_NEED_USE and KEY_NEED_SEARCH keys: Security changes, ACLs and Container keyring - - - --- 2020-07-16 David Howells New
[RFC,3/5] keys: Provide KEYCTL_GRANT_PERMISSION keys: Security changes, ACLs and Container keyring - - - --- 2020-07-16 David Howells New
[RFC,1/5] keys: Move permissions checking decisions into the checking code keys: Security changes, ACLs and Container keyring - - - --- 2020-07-16 David Howells New
[v2,5/5] LSM: Define workqueue for measuring security module state LSM: Measure security module state - - - --- 2020-07-16 Lakshmi Ramasubramanian New
[v2,4/5] LSM: Define SELinux function to measure security state LSM: Measure security module state - - - --- 2020-07-16 Lakshmi Ramasubramanian New
[v3,3/5] LSM: Add security_measure_data in lsm_info struct LSM: Measure security module state - - - --- 2020-07-16 Lakshmi Ramasubramanian New
[v2,2/5] IMA: Define an IMA hook to measure LSM data LSM: Measure security module state - - - --- 2020-07-16 Lakshmi Ramasubramanian New
[v2,1/5] IMA: Add LSM_STATE func to measure LSM data LSM: Measure security module state - - - --- 2020-07-16 Lakshmi Ramasubramanian New
« 1 2 ... 69 70 71 … 155 156 »