linux-security-module
6,413 threads 62,855 messages Latest
About Subsystems, Archive
- Subsystems
- Security (LSM), Landlock security module, Smack security module, Capabilities, Labeled networking (NetLabel), Credentials and 2 more
- Archive
- lore.kernel.org/linux-security-module
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- landlock bug: procfs denials because inodes have unstable identity 3 replies
- RFC v3 Case Study Verification Results and Request for Reconsideration 0 replies
- CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation 2 replies
- Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix) 0 replies
- bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs 3 replies
- IMA: periodic runtime re-measurement of process .text/GOT 6 replies
- Kernel API Firewall (kaf): subsystem-level attack surface reduction for the post-AI-CVE era 10 replies
- apparmor: slab-use-after-free in aa_get_newest_label 0 replies
- Curated eBPF/LSM mitigations for high-impact fixed CVEs 0 replies
- landlock: get_current_exe() WARNs on long exe paths 0 replies
- 1日で追いつく Claude Codeを学ぶ入門講座 0 replies
- Greetings,, 0 replies
- IT教育で、新規事業 0 replies
- 「指示待ち人間」はこう増える 0 replies
- selinux: general protection fault in avtab_search_node() during an AVC lookup 1 reply
- Proposal for a standard Competitive / Protected Session API in Linux 2 replies
- apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7 2 replies
- bpf-lsm: scoped one-shot userspace authorization binding for exec 0 replies
- 優しい社長のNG行動 0 replies
- general protection fault in security_path_post_mknod 2 replies
- Request to withdraw all current and past patch submissions 0 replies
- Heads up: Moving to a different email address for my Linux kernel/SELinux contributions 1 reply
- SafeSetID: GID transition policy lookup uses RUID as source, allowlist can be bypassed (setgid to any group including 0) 0 replies
- landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader 1 reply
- security/keys: out-of-bounds in tpm2_unseal_trusted() 1 reply
- IT教育で、新規事業 0 replies
- Apparmor deadlock in 6.12.101 in complain mode 1 reply
- Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8 1 reply
- Landlock: mount_setattr(2) is unmediated by LSMs (ro-mount confinement bypass) 1 reply
- linux-next: Tree for Jul 29 2 replies
- Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV is bypassable via io_uring IORING_OP_URING_CMD (confirmed on real NVMe hardware) 1 reply
- Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute) 3 replies
- 障害者の就労を支援する事業 新規開業パートナー募集 0 replies
- memfd_secret(): opt-in visibility for security monitoring (eBPF/audit) 2 replies
- TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ) 5 replies
- AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM) 2 replies
- Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD 10 replies
- Sashiko reviews for the LSM mailing list 8 replies
- apparmor: add support loading per permission tagging 1 reply
- Landstrip 6 replies
- security_inode_follow_link: KASAN UAF localization report 0 replies
- -next status as at v7.1-rc6 9 replies
- security_task_prctl: why -ENOSYS 6 replies
- landlock: SCOPE_SIGNAL bypass via F_SETOWN to invoker pgid -> SIGIO/SIGKILL to non-sandboxed targets 2 replies
- apparmor: AA_BUG aa_policy_destroy on aa_alloc_profile error path 0 replies
- keys: request_key_auth payload use-after-free in keyctl_instantiate_key_common() 2 replies
- Linux Security Summit Europe 2026 CfP 0 replies
- move load_uefi_certs() and keyring initcall to earlier initcall 1 reply
- lsm= with bpf before selinux breaks fscreate with EINVAL 6 replies
- landlock: warning in collect_domain_accesses via renameat2 path rename 1 reply