linux-security-module
6,413 threads 62,855 messages Latest
About Subsystems, Archive
- Subsystems
- Security (LSM), Landlock security module, Smack security module, Capabilities, Labeled networking (NetLabel), Credentials and 2 more
- Archive
- lore.kernel.org/linux-security-module
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- landlock bug: procfs denials because inodes have unstable identity 3 replies
- fs: don't use pseudo filesystem files as storage In review 19 replies
- lockdown: Prevent booting with lockdown enabled but IOMMU disabled In review 1 reply
- RFC v3 Case Study Verification Results and Request for Reconsideration 0 replies
- landlock: Fix landlock_restrict_self() on long executable paths New 0 replies
- Fix LSM mediation of PR_SET_SECUREBITS New 0 replies
- cipso: stop modifying live ip_options_rcu Applied 6 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 New 0 replies
- CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation 2 replies
- Fix Landlock mediation of capabilities guarding LSM policies New 0 replies
- Fix Landlock mediation of commoncap's capability checks New 0 replies
- security: introduce Kernel Assurance Plane New 0 replies
- ima: fix kexec measurement buffer overflow after failed loads In review 1 reply
- landlock: Add READ_METADATA and WRITE_METADATA access rights In review 3 replies
- initramfs: add support for xattrs in the initial ram disk In review 1 reply
- userns: Let LSMs deny the CAP_SETFCAP snapshot for mapping uid 0 In review 3 replies
- userns: per-namespace capability bounding set and opt-in netns loopback In review 15 replies
- ipv4: do not write shared IP options when sending ICMP errors In review 1 reply
- lockdown: fix the securityfs interface and add tests In review 1 reply
- keys/trusted/tpm2: rename "bool" to "boolean" In review 6 replies
- net: annotate data-races around sysctl knobs In review 5 replies
- lockdown: fix the securityfs interface and add tests In review 5 replies
- evm: fix TOCTOU heap OOB in protected xattr reads In review 3 replies
- ima: fix races when deleting measurement list entries New 0 replies
- vfs: add inode iteration method super_iter_inodes In review 11 replies
- KEYS: Replace assoc_array with rhashtable In review 1 reply
- KEYS: Replace assoc_array with rhashtable Superseded 1 reply
- KEYS: Replace assoc_array with rhashtable Superseded 1 reply
- Extend PKWM to support user-created wrapping keys In review 6 replies
- KEYS: Protect pkey method checks against type removal Superseded 14 replies
- Add offsetofp() and offsetofendp() for pointer arithmetic In review 4 replies
- sched/psi: Check CAP_SYS_RESOURCE in the initial user namespace In review 2 replies
- KEYS: changes for v7.4-rc3 Merged 1 reply
- selinux: don't label bridged packets in selinux_ip_forward() Applied 2 replies
- KEYS: Return user session keyring on lookup In review 1 reply
- KEYS: Sanitize the garbage collector In review 4 replies
- ipv4: unclone skbs before recompiling IP options In review 2 replies
- Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix) 0 replies
- security: Add PR_CAPBSET_DROP_MASK In review 8 replies
- mm: continue vma_flags_t conversion Applied 50 replies
- bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs 3 replies
- KEYS: do not let an unmatched key decide the search result In review 1 reply
- ima: fix races when deleting measurement list entries Superseded 3 replies
- IMA: periodic runtime re-measurement of process .text/GOT 6 replies
- apparmor: fix double d_instantiate() in ns_mkdir_op() New 0 replies
- KEYS: do not let an unmatched key decide the search result Superseded 3 replies
- landlock: Fix REFER in layered domains New 0 replies
- KEYS: Replace assoc_array with rhashtable Superseded 11 replies
- landlock: clarify signal scoping for pre-existing f_owner registrations In review 2 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 Superseded 1 reply