Show patches with: none      |   13557 patches
« 1 2 3 4 … 135 136 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook - - - --- 2023-04-11 Roberto Sassu RFC
[v8,11/11] LSM: selftests for Linux Security Module syscalls LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,07/11] LSM: Helpers for attribute names and filling an lsm_ctx LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
[v8,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - - - --- 2023-04-11 Casey Schaufler pcmoore Changes Requested
Semantics of blktrace with lockdown (integrity) enabled kernel. Semantics of blktrace with lockdown (integrity) enabled kernel. - - - --- 2023-04-06 Konrad Rzeszutek Wilk pcmoore Changes Requested
overlayfs: Trigger file re-evaluation by IMA / EVM after writes overlayfs: Trigger file re-evaluation by IMA / EVM after writes - - 1 --- 2023-04-05 Stefan Berger Handled Elsewhere
apparmor: fix missing error check for rhashtable_insert_fast apparmor: fix missing error check for rhashtable_insert_fast 1 - - --- 2023-04-04 Danila Chernetsov Handled Elsewhere
security, lsm: security_old_inode_init_security() Handle multi LSM registration security, lsm: security_old_inode_init_security() Handle multi LSM registration - - - --- 2023-04-01 Valentin Vidić pcmoore In Next
[v10,4/4] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - 1 - --- 2023-03-31 Roberto Sassu pcmoore New
[v10,3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore New
[v10,2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore New
[v10,1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write() evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-31 Roberto Sassu pcmoore Accepted
Smack: Improve mount process memory use Smack: Improve mount process memory use - - - --- 2023-03-29 Casey Schaufler Handled Elsewhere
[v9,4/4] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v9,1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write() evm: Do HMAC of multiple per LSM xattrs for new inodes - - - --- 2023-03-29 Roberto Sassu pcmoore Changes Requested
[v10,13/13] landlock: Document Landlock's network support Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,12/13] samples/landlock: Add network demo Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,11/13] selftests/landlock: Add 10 new test suites dedicated to network Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,10/13] selftests/landlock: Share enforce_ruleset() Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,09/13] landlock: Add network rules and TCP hooks support Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,08/13] landlock: Refactor landlock_add_rule() syscall Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,07/13] landlock: Refactor layer helpers Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,06/13] landlock: Move and rename layer helpers Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,05/13] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,04/13] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,03/13] landlock: Remove unnecessary inlining Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,02/13] landlock: Allow filesystem layout changes for domains without such rule type Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,01/13] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v6,6/6] integrity: machine keyring CA configuration Add CA enforcement keyring restrictions 1 - - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,5/6] KEYS: CA link restriction Add CA enforcement keyring restrictions - 1 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,4/6] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,3/6] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,2/6] KEYS: Add missing function documentation Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,1/6] KEYS: Create static version of public_key_verify_signature Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[GIT,PULL] fscrypt fix for v6.3-rc4 [GIT,PULL] fscrypt fix for v6.3-rc4 - - - --- 2023-03-20 Eric Biggers Handled Elsewhere
selinux: remove the runtime disable functionality selinux: remove the runtime disable functionality 1 1 - --- 2023-03-17 Paul Moore pcmoore Accepted
[RESEND] fs_context: drop the unused lsm_flags member [RESEND] fs_context: drop the unused lsm_flags member - - - --- 2023-03-16 Ondrej Mosnacek Handled Elsewhere
[v7,11/11] LSM: selftests for Linux Security Module syscalls LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,07/11] LSM: Helpers for attribute names and filling an lsm_ctx LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[RFC] Randomized slab caches for kmalloc() [RFC] Randomized slab caches for kmalloc() - - - --- 2023-03-15 Gong Ruiqi Handled Elsewhere
ima: Fix potential NULL pointer access in ima_match_rules() ima: Fix potential NULL pointer access in ima_match_rules() - 1 1 --- 2023-03-14 Roman Danilov Handled Elsewhere
[v8,6/6] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,3/6] security: Remove security_old_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[v8,2/6] ocfs2: Switch to security_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes 1 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[v8,1/6] reiserfs: Switch to security_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[3/3] fscrypt: check for NULL keyring in fscrypt_put_master_key_activeref() Fix crash with fscrypt + Landlock - - - --- 2023-03-13 Eric Biggers Handled Elsewhere
[2/3] fscrypt: improve fscrypt_destroy_keyring() documentation Fix crash with fscrypt + Landlock - - - --- 2023-03-13 Eric Biggers Handled Elsewhere
[1/3] fscrypt: destroy keyring after security_sb_delete() Fix crash with fscrypt + Landlock - 1 - --- 2023-03-13 Eric Biggers Handled Elsewhere
[v1,1/2] Add release hook to LSM Add destructor hook to LSM modules - 1 - --- 2023-03-10 Mirsad Goran Todorovac Rejected
[v4,3/3] security: Remove integrity from the LSM list in Kconfig security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v4,2/3] Revert "integrity: double check iint_cache was initialized" security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v4,1/3] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v1,5/5] selftests/landlock: Add tests for pseudo filesystems Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,4/5] selftests/landlock: Make mounts configurable Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,3/5] selftests/landlock: Add supports_filesystem() helper Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,2/5] selftests/landlock: Don't create useless file layouts Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,1/5] hostfs: Fix ephemeral inodes Landlock support for UML 1 - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v3,3/3] security: Remove integrity from the LSM list in Kconfig security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
[v3,2/3] Revert "integrity: double check iint_cache was initialized" security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
[v3,1/3] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
lsm: fix a badly named parameter in security_get_getsecurity() lsm: fix a badly named parameter in security_get_getsecurity() - - - --- 2023-03-08 Paul Moore pcmoore Accepted
lsm: fix doc warnings in the LSM hook comments lsm: fix doc warnings in the LSM hook comments - - - --- 2023-03-08 Paul Moore pcmoore Accepted
Revert "integrity: double check iint_cache was initialized" Revert "integrity: double check iint_cache was initialized" - - - --- 2023-03-08 Roberto Sassu Handled Elsewhere
[v2] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM [v2] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM - - - --- 2023-03-08 Roberto Sassu pcmoore Superseded
evm: Complete description of evm_inode_setattr() evm: Complete description of evm_inode_setattr() - 1 - --- 2023-03-06 Roberto Sassu Handled Elsewhere
device_cgroup: Fix typo in devcgroup_css_alloc description device_cgroup: Fix typo in devcgroup_css_alloc description - - - --- 2023-03-04 Kamalesh Babulal pcmoore Accepted
[28/28] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[27/28] integrity: Move integrity functions to the LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[26/28] evm: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[25/28] ima: Move IMA-Appraisal to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[24/28] ima: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[23/28] security: Introduce LSM_ORDER_LAST security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[22/28] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[21/28] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[20/28] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[19/28] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[18/28] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[17/28] security: Introduce file_pre_free_security hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[16/28] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
« 1 2 3 4 … 135 136 »