Show patches with: Archived = No       |   1663 patches
« 1 2 3 4 … 16 17 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v10,05/13] landlock: Refactor merge/inherit_ruleset functions Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,04/13] landlock: Refactor landlock_find_rule/insert_rule Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,03/13] landlock: Remove unnecessary inlining Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,02/13] landlock: Allow filesystem layout changes for domains without such rule type Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v10,01/13] landlock: Make ruleset's access masks more generic Network support for Landlock - - - --- 2023-03-23 Konstantin Meskhidze (A) Handled Elsewhere
[v6,6/6] integrity: machine keyring CA configuration Add CA enforcement keyring restrictions 1 - - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,5/6] KEYS: CA link restriction Add CA enforcement keyring restrictions - 1 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,4/6] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,3/6] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - 2 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,2/6] KEYS: Add missing function documentation Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[v6,1/6] KEYS: Create static version of public_key_verify_signature Add CA enforcement keyring restrictions - 3 - --- 2023-03-22 Eric Snowberg pcmoore Handled Elsewhere
[GIT,PULL] fscrypt fix for v6.3-rc4 [GIT,PULL] fscrypt fix for v6.3-rc4 - - - --- 2023-03-20 Eric Biggers Handled Elsewhere
selinux: remove the runtime disable functionality selinux: remove the runtime disable functionality 1 1 - --- 2023-03-17 Paul Moore pcmoore Accepted
[RESEND] fs_context: drop the unused lsm_flags member [RESEND] fs_context: drop the unused lsm_flags member - - - --- 2023-03-16 Ondrej Mosnacek Handled Elsewhere
[v7,11/11] LSM: selftests for Linux Security Module syscalls LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,10/11] SELinux: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,09/11] AppArmor: Add selfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,08/11] Smack: implement setselfattr and getselfattr hooks LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,07/11] LSM: Helpers for attribute names and filling an lsm_ctx LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,06/11] LSM: wireup Linux Security Module syscalls LSM: Three basic syscalls 2 - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,05/11] LSM: Create lsm_list_modules system call LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,04/11] LSM: syscalls for current process attributes LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,03/11] proc: Use lsmids instead of lsm names for attrs LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,02/11] LSM: Maintain a table of LSM attribute data LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[v7,01/11] LSM: Identify modules by more than name LSM: Three basic syscalls - - - --- 2023-03-15 Casey Schaufler pcmoore Changes Requested
[RFC] Randomized slab caches for kmalloc() [RFC] Randomized slab caches for kmalloc() - - - --- 2023-03-15 Gong Ruiqi Handled Elsewhere
ima: Fix potential NULL pointer access in ima_match_rules() ima: Fix potential NULL pointer access in ima_match_rules() - 1 1 --- 2023-03-14 Roman Danilov Handled Elsewhere
[v8,6/6] evm: Support multiple LSMs providing an xattr evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Changes Requested
[v8,3/6] security: Remove security_old_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[v8,2/6] ocfs2: Switch to security_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes 1 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[v8,1/6] reiserfs: Switch to security_inode_init_security() evm: Do HMAC of multiple per LSM xattrs for new inodes - 2 - --- 2023-03-14 Roberto Sassu pcmoore Accepted
[3/3] fscrypt: check for NULL keyring in fscrypt_put_master_key_activeref() Fix crash with fscrypt + Landlock - - - --- 2023-03-13 Eric Biggers Handled Elsewhere
[2/3] fscrypt: improve fscrypt_destroy_keyring() documentation Fix crash with fscrypt + Landlock - - - --- 2023-03-13 Eric Biggers Handled Elsewhere
[1/3] fscrypt: destroy keyring after security_sb_delete() Fix crash with fscrypt + Landlock - 1 - --- 2023-03-13 Eric Biggers Handled Elsewhere
[v1,1/2] Add release hook to LSM Add destructor hook to LSM modules - 1 - --- 2023-03-10 Mirsad Goran Todorovac Rejected
[v4,3/3] security: Remove integrity from the LSM list in Kconfig security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v4,2/3] Revert "integrity: double check iint_cache was initialized" security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v4,1/3] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM security: Always enable integrity LSM 1 - - --- 2023-03-10 Roberto Sassu pcmoore Accepted
[v1,5/5] selftests/landlock: Add tests for pseudo filesystems Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,4/5] selftests/landlock: Make mounts configurable Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,3/5] selftests/landlock: Add supports_filesystem() helper Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,2/5] selftests/landlock: Don't create useless file layouts Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,1/5] hostfs: Fix ephemeral inodes Landlock support for UML 1 - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v3,3/3] security: Remove integrity from the LSM list in Kconfig security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
[v3,2/3] Revert "integrity: double check iint_cache was initialized" security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
[v3,1/3] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM security: Always enable integrity LSM - - - --- 2023-03-09 Roberto Sassu pcmoore Changes Requested
lsm: fix a badly named parameter in security_get_getsecurity() lsm: fix a badly named parameter in security_get_getsecurity() - - - --- 2023-03-08 Paul Moore pcmoore Accepted
lsm: fix doc warnings in the LSM hook comments lsm: fix doc warnings in the LSM hook comments - - - --- 2023-03-08 Paul Moore pcmoore Accepted
Revert "integrity: double check iint_cache was initialized" Revert "integrity: double check iint_cache was initialized" - - - --- 2023-03-08 Roberto Sassu Handled Elsewhere
[v2] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM [v2] security: Introduce LSM_ORDER_LAST and set it for the integrity LSM - - - --- 2023-03-08 Roberto Sassu pcmoore Superseded
evm: Complete description of evm_inode_setattr() evm: Complete description of evm_inode_setattr() - 1 - --- 2023-03-06 Roberto Sassu Handled Elsewhere
device_cgroup: Fix typo in devcgroup_css_alloc description device_cgroup: Fix typo in devcgroup_css_alloc description - - - --- 2023-03-04 Kamalesh Babulal pcmoore Accepted
[28/28] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[27/28] integrity: Move integrity functions to the LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[26/28] evm: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[25/28] ima: Move IMA-Appraisal to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[24/28] ima: Move to LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[23/28] security: Introduce LSM_ORDER_LAST security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[22/28] security: Introduce key_post_create_or_update hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[21/28] security: Introduce inode_post_remove_acl hook security: Move IMA and EVM to the LSM infrastructure - - - --- 2023-03-03 Roberto Sassu pcmoore New
[20/28] security: Introduce inode_post_set_acl hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[19/28] security: Introduce inode_post_create_tmpfile hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[18/28] security: Introduce path_post_mknod hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[17/28] security: Introduce file_pre_free_security hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[16/28] security: Introduce file_post_open hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[15/28] security: Introduce inode_post_removexattr hook security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[14/28] security: Introduce inode_post_setattr hook security: Move IMA and EVM to the LSM infrastructure - 2 - --- 2023-03-03 Roberto Sassu pcmoore New
[13/28] security: Align inode_setattr hook definition with EVM security: Move IMA and EVM to the LSM infrastructure 1 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[12/28] fs: Fix description of vfs_tmpfile() security: Move IMA and EVM to the LSM infrastructure 1 - - --- 2023-03-03 Roberto Sassu pcmoore New
[11/28] evm: Complete description of evm_inode_setattr() security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[10/28] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[09/28] evm: Align evm_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[08/28] evm: Align evm_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[07/28] ima: Align ima_post_read_file() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[06/28] ima: Align ima_inode_removexattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[05/28] ima: Align ima_inode_setxattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[04/28] ima: Align ima_file_mprotect() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[02/28] ima: Align ima_post_path_mknod() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[01/28] ima: Align ima_inode_post_setattr() definition with LSM infrastructure security: Move IMA and EVM to the LSM infrastructure - 1 - --- 2023-03-03 Roberto Sassu pcmoore New
[-next] AppArmor: Fix some kernel-doc comments [-next] AppArmor: Fix some kernel-doc comments 1 - - --- 2023-03-03 Yang Li Handled Elsewhere
[11/11] proc_sysctl: deprecate register_sysctl_paths() sysctl: deprecate register_sysctl_paths() - - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[10/11] csky: simplify alignment sysctl registration sysctl: deprecate register_sysctl_paths() - - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[09/11] fs-verity: simplify sysctls with register_sysctl() sysctl: deprecate register_sysctl_paths() - - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[08/11] kernel: pid_namespace: simplify sysctls with register_sysctl() sysctl: deprecate register_sysctl_paths() 1 - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[07/11] seccomp: simplify sysctls with register_sysctl_init() sysctl: deprecate register_sysctl_paths() 1 - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[06/11] yama: simplfy sysctls with register_sysctl() sysctl: deprecate register_sysctl_paths() 1 - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[05/11] loadpin: simplify sysctls use with register_sysctl() sysctl: deprecate register_sysctl_paths() 1 1 - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[04/11] apparmor: simplify sysctls with register_sysctl_init() sysctl: deprecate register_sysctl_paths() 1 1 - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[03/11] sysctl: clarify register_sysctl_init() base directory order sysctl: deprecate register_sysctl_paths() - - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[02/11] proc_sysctl: move helper which creates required subdirectories sysctl: deprecate register_sysctl_paths() - 1 - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[01/11] proc_sysctl: update docs for __register_sysctl_table() sysctl: deprecate register_sysctl_paths() - - - --- 2023-03-02 Luis Chamberlain Handled Elsewhere
[1/1] lsm: adds process attribute getter for Landlock process attribute support for Landlock - - - --- 2023-03-02 Shervin Oloumi Handled Elsewhere
[v5,6/6] integrity: machine keyring CA configuration Add CA enforcement keyring restrictions 1 - - --- 2023-03-02 Eric Snowberg Handled Elsewhere
[v5,5/6] KEYS: CA link restriction Add CA enforcement keyring restrictions - 1 - --- 2023-03-02 Eric Snowberg Handled Elsewhere
[v5,4/6] KEYS: X.509: Parse Key Usage Add CA enforcement keyring restrictions - 2 - --- 2023-03-02 Eric Snowberg Handled Elsewhere
[v5,3/6] KEYS: X.509: Parse Basic Constraints for CA Add CA enforcement keyring restrictions - 2 - --- 2023-03-02 Eric Snowberg Handled Elsewhere
[v5,2/6] KEYS: Add missing function documentation Add CA enforcement keyring restrictions - 4 - --- 2023-03-02 Eric Snowberg Handled Elsewhere
« 1 2 3 4 … 16 17 »