Show patches with: Submitter = Mickaël Salaün       |    Archived = No       |   151 patches
« 1 2 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[1/2] landlock: Simplify current_check_access_socket() [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[1/2] SELinux: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - - - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
[2/2] AppArmor: Fix lsm_get_self_attr() [1/2] SELinux: Fix lsm_get_self_attr() - 1 - --- 2024-02-23 Mickaël Salaün pcmoore Accepted
[2/2] landlock: Rename "ptrace" files to "task" [1/2] landlock: Simplify current_check_access_socket() - - - --- 2024-03-07 Mickaël Salaün Handled Elsewhere
[2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - 1 - --- 2024-02-26 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock changes for v5.19 [GIT,PULL] Landlock changes for v5.19 - - - --- 2022-05-23 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.0 [GIT,PULL] Landlock fix for v6.0 - - - --- 2022-09-02 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.0 #2 [GIT,PULL] Landlock fix for v6.0 #2 - - - --- 2022-09-23 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fix for v6.1 #2 [GIT,PULL] Landlock fix for v6.1 #2 - - - --- 2022-11-04 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fixes for v6.8-rc5 [GIT,PULL] Landlock fixes for v6.8-rc5 - - - --- 2024-02-14 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock fixes for v6.8-rc7 [GIT,PULL] Landlock fixes for v6.8-rc7 - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.1 [GIT,PULL] Landlock updates for v6.1 - - - --- 2022-10-04 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.10 [GIT,PULL] Landlock updates for v6.10 - - - --- 2024-05-16 Mickaël Salaün New
[GIT,PULL] Landlock updates for v6.2 [GIT,PULL] Landlock updates for v6.2 - - - --- 2022-12-12 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.3 [GIT,PULL] Landlock updates for v6.3 - - - --- 2023-02-20 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.4 [GIT,PULL] Landlock updates for v6.4 - - - --- 2023-04-24 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.5 [GIT,PULL] Landlock updates for v6.5 - - - --- 2023-06-26 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.6 [GIT,PULL] Landlock updates for v6.6 - - - --- 2023-09-06 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.7 [GIT,PULL] Landlock updates for v6.7 - - - --- 2023-11-02 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.8 [GIT,PULL] Landlock updates for v6.8 - - - --- 2024-01-08 Mickaël Salaün Handled Elsewhere
[GIT,PULL] Landlock updates for v6.9 [GIT,PULL] Landlock updates for v6.9 - - - --- 2024-03-13 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,1/7] lsm: Add audit_log_lsm_data() helper Landlock audit support 1 - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,2/7] landlock: Factor out check_access_path() Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,3/7] landlock: Log ruleset creation and release Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,4/7] landlock: Log domain creation and enforcement Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,5/7] landlock: Log file-related requests Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,6/7] landlock: Log mount-related requests Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v1,7/7] landlock: Log ptrace requests Landlock audit support - - - --- 2023-09-21 Mickaël Salaün pcmoore Handled Elsewhere
[RFC,v2,01/19] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,02/19] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,03/19] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,04/19] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,05/19] KVM: VMX: Add MBEC support Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,06/19] KVM: x86: Add kvm_x86_ops.fault_gva() Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,07/19] KVM: x86: Make memory attribute helpers more generic Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,08/19] KVM: x86: Extend kvm_vm_set_mem_attributes() with a mask Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,09/19] KVM: x86: Extend kvm_range_has_memory_attributes() with match_all Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,10/19] KVM: x86: Implement per-guest-page permissions Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,11/19] KVM: x86: Add new hypercall to set EPT permissions Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,12/19] x86: Implement the Memory Table feature to store arbitrary per-page data Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,13/19] heki: Implement a kernel page table walker Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,14/19] heki: x86: Initialize permissions counters for pages mapped into KVA Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,15/19] heki: x86: Initialize permissions counters for pages in vmap()/vunmap() Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,16/19] heki: x86: Update permissions counters when guest page permissions change Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,17/19] heki: x86: Update permissions counters during text patching Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,18/19] heki: x86: Protect guest kernel memory using the KVM hypervisor Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v2,19/19] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - - - --- 2023-11-13 Mickaël Salaün Handled Elsewhere
[RFC,v3,1/5] virt: Introduce Hypervisor Enforced Kernel Integrity (Heki) Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,2/5] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,3/5] KVM: x86: Add notifications for Heki policy configuration and violation Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,4/5] heki: Lock guest control registers at the end of guest kernel init Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC,v3,5/5] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - CR pinning - - - --- 2024-05-03 Mickaël Salaün New
[RFC] fs: Add an use vfs_get_ioctl_handler() [RFC] fs: Add an use vfs_get_ioctl_handler() - - - --- 2024-03-15 Mickaël Salaün pcmoore RFC
[RFC] fs: Add vfs_masks_device_ioctl*() helpers [RFC] fs: Add vfs_masks_device_ioctl*() helpers - - - --- 2024-02-19 Mickaël Salaün Handled Elsewhere
[v1,1/2] landlock: Fix d_parent walk Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün New
[v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v1,1/2] selftests/landlock: Add tests to check undefined rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-20 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Fix capability for net_test Fix Landlock's net_test for non-root users - - - --- 2024-01-25 Mickaël Salaün Handled Elsewhere
[v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,1/3] samples/landlock: Print hints about ABI versions Improve Landlock help - 1 - --- 2022-09-23 Mickaël Salaün Handled Elsewhere
[v1,1/5] hostfs: Fix ephemeral inodes Landlock support for UML 1 - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,1/8] kunit: Run tests when the kernel is fully setup Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,1/9] KVM: x86: Add kvm_x86_ops.fault_gva() Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,2/2] selftests/harness: Merge TEST_F_FORK() into TEST_F() [v1,1/2] selftests/landlock: Redefine TEST_F() as TEST_F_FORK() - - - --- 2024-03-05 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Add layout1.refer_mount_root Fix warning in collect_domain_accesses() - - - --- 2024-05-16 Mickaël Salaün New
[v1,2/2] selftests/landlock: Add tests to check unhandled rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-20 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Clean up error logs related to capabilities Fix Landlock's net_test for non-root users - - - --- 2024-01-25 Mickaël Salaün Handled Elsewhere
[v1,2/2] selftests/landlock: Improve AF_UNSPEC tests [v1,1/2] lsm: Check and handle error priority for socket_bind and socket_connect - - - --- 2024-03-27 Mickaël Salaün pcmoore Changes Requested
[v1,2/3] landlock: Slightly improve documentation and fix spelling Improve Landlock help - 1 - --- 2022-09-23 Mickaël Salaün Handled Elsewhere
[v1,2/5] selftests/landlock: Don't create useless file layouts Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,2/8] kunit: Handle thread creation error Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,2/9] KVM: x86/mmu: Add support for prewrite page tracking Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,3/3] landlock: Fix documentation style Improve Landlock help - - - --- 2022-09-23 Mickaël Salaün Handled Elsewhere
[v1,3/5] selftests/landlock: Add supports_filesystem() helper Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,3/8] kunit: Fix kthread reference Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,3/9] virt: Implement Heki common code Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,4/5] selftests/landlock: Make mounts configurable Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,4/8] kunit: Fix timeout message Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,4/9] KVM: x86: Add new hypercall to set EPT permissions Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,5/5] selftests/landlock: Add tests for pseudo filesystems Landlock support for UML - - - --- 2023-03-09 Mickaël Salaün Handled Elsewhere
[v1,5/8] kunit: Handle test faults Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,5/9] KVM: x86: Add new hypercall to lock control registers Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,6/8] kunit: Fix KUNIT_SUCCESS() calls in iov_iter tests Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,6/9] KVM: x86: Add Heki hypervisor support Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,7/8] kunit: Print last test location on fault Run KUnit tests late and handle faults - 1 - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,7/9] KVM: VMX: Add MBEC support Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,8/8] kunit: Add tests for faults Run KUnit tests late and handle faults - - - --- 2024-02-29 Mickaël Salaün Handled Elsewhere
[v1,8/9] KVM: x86/mmu: Enable guests to lock themselves thanks to MBEC Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1,9/9] virt: Add Heki KUnit tests Hypervisor-Enforced Kernel Integrity - - - --- 2023-05-05 Mickaël Salaün pcmoore Handled Elsewhere
[v1] ksmbd: Fix user namespace mapping [v1] ksmbd: Fix user namespace mapping 2 - - --- 2022-09-29 Mickaël Salaün Handled Elsewhere
[v1] landlock: Add support for KUnit tests [v1] landlock: Add support for KUnit tests - 1 - --- 2024-01-18 Mickaël Salaün Handled Elsewhere
[v1] landlock: Explain file descriptor access rights [v1] landlock: Explain file descriptor access rights - - - --- 2022-12-05 Mickaël Salaün Handled Elsewhere
[v1] landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER [v1] landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER - 1 - --- 2022-08-23 Mickaël Salaün Handled Elsewhere
[v1] selftests: Use optional USERCFLAGS and USERLDFLAGS [v1] selftests: Use optional USERCFLAGS and USERLDFLAGS - - - --- 2022-09-09 Mickaël Salaün Handled Elsewhere
[v1] selftests/landlock: Build without static libraries [v1] selftests/landlock: Build without static libraries - - - --- 2022-10-19 Mickaël Salaün Handled Elsewhere
[v1] selftests/landlock: Fix out-of-tree builds [v1] selftests/landlock: Fix out-of-tree builds - - - --- 2022-09-09 Mickaël Salaün Handled Elsewhere
[v11.1] selftests/landlock: Add 11 new test suites dedicated to network [v11.1] selftests/landlock: Add 11 new test suites dedicated to network - - - --- 2023-07-06 Mickaël Salaün Handled Elsewhere
[v2,1/2] landlock: Extend documentation for kernel support [v2,1/2] landlock: Extend documentation for kernel support - 2 - --- 2024-02-27 Mickaël Salaün Handled Elsewhere
[v2,1/2] selftests/landlock: Add tests to check unknown rule's access rights Extend Landlock test to improve rule's coverage - 1 - --- 2023-11-30 Mickaël Salaün Handled Elsewhere
« 1 2 »