Show patches with: Submitter = Kees Cook       |    State = Action Required       |   394 patches
« 1 2 3 4 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[01/13] firmware_loader: EFI firmware loader must handle pre-allocated buffer Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[01/17] doc: ReSTify seccomp_filter.txt - - - --- 2017-05-13 Kees Cook New
[01/18] vmlinux.lds.h: Avoid copy/paste of security_init section LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[01/32] netlink: Avoid memcpy() across flexible array boundary Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[02/13] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[02/17] doc: ReSTify no_new_privs.txt - - - --- 2017-05-13 Kees Cook New
[02/18] LSM: Rename .security_initcall section to .lsm_info LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[02/32] Introduce flexible array struct memcpy() helpers Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[03/13] fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[03/17] doc: ReSTify IMA-templates.txt - - - --- 2017-05-13 Kees Cook New
[03/18] LSM: Remove initcall tracing LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[03/32] flex_array: Add Kunit tests Introduce flexible array struct memcpy() helpers - 1 - --- 2022-05-04 Kees Cook New
[04/13] fs/kernel_read_file: Split into separate include file Introduce partial kernel_read_file() support 1 1 - --- 2020-07-17 Kees Cook New
[04/17] doc: ReSTify credentials.txt - - - --- 2017-05-13 Kees Cook New
[04/18] LSM: Convert from initcall to struct lsm_info LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[04/32] fortify: Add run-time WARN for cross-field memcpy() Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[05/13] fs/kernel_read_file: Split into separate source file Introduce partial kernel_read_file() support 1 - - --- 2020-07-17 Kees Cook New
[05/17] doc: ReSTify self-protection.txt - - - --- 2017-05-13 Kees Cook New
[05/18] vmlinux.lds.h: Move LSM_TABLE into INIT_DATA LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[05/32] brcmfmac: Use mem_to_flex_dup() with struct brcmf_fweh_queue_item Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[06/13] fs/kernel_read_file: Remove redundant size argument Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[06/17] doc: security: minor cleanups to build kernel-doc 1 - - --- 2017-05-13 Kees Cook New
[06/18] LSM: Convert security_initcall() into DEFINE_LSM() LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[06/32] iwlwifi: calib: Prepare to use mem_to_flex_dup() Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[07/13] fs/kernel_read_file: Switch buffer size arg to size_t Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[07/17] doc: ReSTify and split LSM.txt - - - --- 2017-05-13 Kees Cook New
[07/18] LSM: Add minor LSM initialization loop LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[07/32] iwlwifi: calib: Use mem_to_flex_dup() with struct iwl_calib_result Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[08/13] fs/kernel_read_file: Add file_size output argument Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[08/17] doc: ReSTify SELinux.txt - - - --- 2017-05-13 Kees Cook New
[08/18] integrity: Initialize as LSM_TYPE_MINOR LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[08/32] iwlwifi: mvm: Use mem_to_flex_dup() with struct ieee80211_key_conf Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[09/13] LSM: Introduce kernel_post_load_data() hook Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[09/17] doc: ReSTify apparmor.txt 1 - - --- 2017-05-13 Kees Cook New
[09/18] LSM: Record LSM name in struct lsm_info LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[09/32] p54: Use mem_to_flex_dup() with struct p54_cal_database Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[1/2] exec: Move security_bprm_secureexec() earlier - - - --- 2017-07-07 Kees Cook New
[1/2] gcc-plugins: Explicitly document purpose and deprecation schedule gcc-plugins: Explicitly document purpose and deprecation schedule - 2 - --- 2021-10-20 Kees Cook New
[1/3] Kconfig: Create "kernel hardening" config area Kconfig: Refactor memory initialization hardening - - - --- 2019-04-10 Kees Cook New
[1/3] treewide: Lift switch variables out of switches gcc-plugins: Introduce stackinit plugin 2 1 - --- 2019-01-23 Kees Cook New
[1/4] Compiler Attributes: Add Clang's __pass_object_size fortify: Add Clang support - - - --- 2022-02-02 Kees Cook New
[1/4] exec: Change uselib(2) IS_SREG() failure to EACCES Relocate execve() sanity checks 1 - - --- 2020-05-18 Kees Cook New
[1/4] firmware_loader: EFI firmware loader must handle pre-allocated buffer Fix misused kernel_read_file() enums - - - --- 2020-07-07 Kees Cook New
[1/4] seccomp: Provide matching filter for introspection - 1 - --- 2017-08-03 Kees Cook New
[1/8] selftests/seccomp: Improve calibration loop seccomp: Implement constant action bitmaps - - - --- 2020-06-16 Kees Cook New
[10/13] firmware_loader: Use security_post_load_data() Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[10/17] doc: ReSTify tomoyo.txt 1 - - --- 2017-05-13 Kees Cook New
[10/18] LSM: Plumb visibility into optional "enabled" state LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[10/32] wcn36xx: Use mem_to_flex_dup() with struct wcn36xx_hal_ind_msg Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[11/13] module: Call security_kernel_post_load_data() Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[11/17] doc: ReSTify Yama.txt - - - --- 2017-05-13 Kees Cook New
[11/18] LSM: Lift LSM selection out of individual LSMs LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[11/32] nl80211: Use mem_to_flex_dup() with struct cfg80211_cqm_config Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[12/13] LSM: Add "contents" flag to kernel_read_file hook Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[12/17] doc: ReSTify LoadPin.txt - - - --- 2017-05-13 Kees Cook New
[12/18] LSM: Introduce ordering details in struct lsm_info LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[12/32] cfg80211: Use mem_to_flex_dup() with struct cfg80211_bss_ies Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[13/13] fs/kernel_file_read: Add "offset" arg for partial reads Introduce partial kernel_read_file() support - - - --- 2020-07-17 Kees Cook New
[13/17] doc: ReSTify Smack.txt 1 - - --- 2017-05-13 Kees Cook New
[13/18] LoadPin: Initialize as LSM_TYPE_MINOR LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[13/32] mac80211: Use mem_to_flex_dup() with several structs Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[14/17] doc: ReSTify keys.txt - - - --- 2017-05-13 Kees Cook New
[14/18] Yama: Initialize as LSM_TYPE_MINOR LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[14/32] af_unix: Use mem_to_flex_dup() with struct unix_address Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[15/17] doc: ReSTify keys-ecryptfs.txt - - - --- 2017-05-13 Kees Cook New
[15/18] capability: Initialize as LSM_TYPE_MINOR LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[15/32] 802/garp: Use mem_to_flex_dup() with struct garp_attr Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[16/17] doc: ReSTify keys-request-key.txt - - - --- 2017-05-13 Kees Cook New
[16/18] LSM: Allow arbitrary LSM ordering LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[16/32] 802/mrp: Use mem_to_flex_dup() with struct mrp_attr Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[17/17] doc: ReSTify keys-trusted-encrypted.txt - - - --- 2017-05-13 Kees Cook New
[17/18] LSM: Provide init debugging LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[17/32] net/flow_offload: Use mem_to_flex_dup() with struct flow_action_cookie Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[18/18] LSM: Don't ignore initialization failures LSM: Prepare for explict LSM ordering - - - --- 2018-09-16 Kees Cook New
[18/32] firewire: Use __mem_to_flex_dup() with struct iso_interrupt_event Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[19/32] afs: Use mem_to_flex_dup() with struct afs_acl Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[2/2] exec: Use sane stack rlimit for setuid exec - - - --- 2017-07-07 Kees Cook New
[2/2] gcc-plugins: Remove cyc_complexity gcc-plugins: Explicitly document purpose and deprecation schedule - 2 - --- 2021-10-20 Kees Cook New
[2/3] gcc-plugins: Introduce stackinit plugin gcc-plugins: Introduce stackinit plugin - - - --- 2019-01-23 Kees Cook New
[2/3] kbuild: Move stackleak config to Kconfig.hardening Kconfig: Refactor memory initialization hardening - - - --- 2019-04-10 Kees Cook New
[2/4] Compiler Attributes: Add __overloadable fortify: Add Clang support - - - --- 2022-02-02 Kees Cook New
[2/4] exec: Relocate S_ISREG() check Relocate execve() sanity checks - - - --- 2020-05-18 Kees Cook New
[2/4] fs: Remove FIRMWARE_PREALLOC_BUFFER from kernel_read_file() enums Fix misused kernel_read_file() enums - - - --- 2020-07-07 Kees Cook New
[2/4] seccomp: Add SECCOMP_FILTER_FLAG_KILL_PROCESS - - - --- 2017-08-03 Kees Cook New
[2/8] seccomp: Use pr_fmt seccomp: Implement constant action bitmaps - - - --- 2020-06-16 Kees Cook New
[20/32] ASoC: sigmadsp: Use mem_to_flex_dup() with struct sigmadsp_data Introduce flexible array struct memcpy() helpers 1 - - --- 2022-05-04 Kees Cook New
[21/32] soc: qcom: apr: Use mem_to_flex_dup() with struct apr_rx_buf Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[22/32] atags_proc: Use mem_to_flex_dup() with struct buffer Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[23/32] Bluetooth: Use mem_to_flex_dup() with struct hci_op_configure_data_path Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[24/32] IB/hfi1: Use mem_to_flex_dup() for struct tid_rb_node Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[25/32] Drivers: hv: utils: Use mem_to_flex_dup() with struct cn_msg Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[26/32] ima: Use mem_to_flex_dup() with struct modsig Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[27/32] KEYS: Use mem_to_flex_dup() with struct user_key_payload Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[28/32] selinux: Use mem_to_flex_dup() with xfrm and sidtab Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[29/32] xtensa: Use mem_to_flex_dup() with struct property Introduce flexible array struct memcpy() helpers - - - --- 2022-05-04 Kees Cook New
[3/3] kbuild: Implement Clang's stack initialization Kconfig: Refactor memory initialization hardening - - - --- 2019-04-10 Kees Cook New
[3/3] lib: Introduce test_stackinit module gcc-plugins: Introduce stackinit plugin - - - --- 2019-01-23 Kees Cook New
[3/4] Compiler Attributes: Add __diagnose_as fortify: Add Clang support - - - --- 2022-02-02 Kees Cook New
[3/4] exec: Relocate path_noexec() check Relocate execve() sanity checks - - - --- 2020-05-18 Kees Cook New
[3/4] fs: Remove FIRMWARE_EFI_EMBEDDED from kernel_read_file() enums Fix misused kernel_read_file() enums - - - --- 2020-07-07 Kees Cook New
« 1 2 3 4 »