Capabilities
Supported 1,018 threads 1,519 messages Latest
About Lists, Files, Maintainers
- Lists
- linux-security-module
- Files
include/linux/capability.h,include/trace/events/capability.h,include/uapi/linux/capability.h,kernel/capability.c,security/commoncap.c,security/commoncap_test.c- Maintainers
- Serge Hallyn
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- Fix LSM mediation of PR_SET_SECUREBITS security/, tools/testing/selftests/landlock/ New 0 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 tools/testing/selftests/namespaces/ (3), include/linux/, kernel/, security/ New 0 replies
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
- userns: per-namespace capability bounding set and opt-in netns loopback tools/ (10), include/ (5), kernel/ (5), Documentation/, +3 In review 15 replies
- security: Add PR_CAPBSET_DROP_MASK include/ (3), kernel/ (2), tools/ (2), fs/, +1 In review 8 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 tools/testing/selftests/namespaces/ (3), include/linux/ (2), kernel/, security/ Superseded 1 reply
- security: Expand task_setscheduler LSM hook security/ (4), include/ (2), kernel/ (2), arch/, +1 In review 3 replies
- cells: a container as one kernel object include/ (28), kernel/ (28), net/ (27), fs/ (20), +9 In review 2 replies
- security: commoncap: drop stale CAP_FS_MASK FIXME security/commoncap.c In review 1 reply
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 tools/testing/selftests/namespaces/ (3), include/linux/ (2), kernel/, security/ Superseded 0 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 tools/testing/selftests/namespaces/ (3), include/linux/ (2), kernel/, security/ Superseded 0 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 include/linux/ (2), kernel/, security/ Superseded 1 reply
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (33), tools/ (13), security/ (12), include/ (8), +4 Superseded 7 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 include/linux/ (2), kernel/, security/ Superseded 1 reply
- security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid() security/commoncap.c In review 2 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 include/linux/ (2), kernel/, security/ Superseded 0 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 include/linux/ (2), kernel/, security/ Superseded 6 replies
- capabilities: close the ways around the CAP_SETFCAP rule for uid 0 include/linux/ (2), kernel/, security/, security/keys/ Superseded 7 replies
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (30), security/ (10), include/ (7), drivers/ (2), +3 Superseded 20 replies
- security: Allow dropping bounding set process-wide include/uapi/linux/, security/ In review 13 replies
- security: commoncap: clarify CAP_FS_SET comment in cap_task_fix_setuid() security/commoncap.c Superseded 1 reply
- fs: port to const struct mnt_idmap fs/ (255), include/ (13), security/ (13), Documentation/ (3), +7 In review 35 replies
- security: Expand task_setscheduler LSM hook security/ (4), include/ (2), kernel/ (2), arch/, +1 Superseded 3 replies
- Fix quota evasion on xfs and add capable_noaudit fs/xfs/ (3), fs/quota/, include/linux/, kernel/ Applied 11 replies
- Introduce capable_noaudit fs/quota/, fs/xfs/, include/linux/, kernel/ In review 20 replies
- capability: remove non-kernel-doc comments include/uapi/linux/capability.h In review 2 replies
- Fix quota evasion on xfs and add capable_noaudit fs/xfs/ (3), fs/quota/, include/linux/, kernel/ Superseded 10 replies
- security: Expand task_setscheduler LSM hook to include CPU affinity mask security/ (4), include/ (2), kernel/ (2), arch/, +1 In review 10 replies
- security, sched: Expand task_setscheduler LSM hook and related fixes security/ (4), include/ (2), kernel/ (2), arch/, +1 Superseded 4 replies
- security, sched: Expand task_setscheduler LSM hook and related fixes security/ (4), include/ (2), kernel/ (2), arch/, +1 Superseded 7 replies
- 6.6.129-rt70 drivers/ (375), net/ (62), arch/ (54), fs/ (54), +14 0 replies
- RDMA/siw: Fix potential NULL pointer dereference in header processing drivers/ (221), arch/ (59), fs/ (31), net/ (30), +11 In review 2 replies
- RDMA/siw: Fix potential NULL pointer dereference in header processing drivers/ (116), net/ (23), fs/ (22), arch/ (18), +9 In review 1 reply
- RDMA/siw: Fix potential NULL pointer dereference in header processing drivers/ (156), net/ (27), fs/ (24), arch/ (21), +9 In review 1 reply
- lsm: move inode IS_PRIVATE checks to individual LSMs security/ (10) In review 5 replies
- Rework the LSM initialization security/ (50), include/ (2) In review 9 replies
- ipc: don't audit capability check in ipc_permissions() include/linux/, ipc/ Applied 5 replies
- security: Add KUnit tests for rootid_owns_currentns() security/ (4), MAINTAINERS In review 7 replies
- exec: Fix dead-lock in de_thread with ptrace_attach fs/ (6), kernel/ (6), security/ (6), include/ (5), +2 Superseded 58 replies
- Clarify the rootid_owns_currentns security/commoncap.c In review 5 replies
- security: Add KUnit tests for rootid_owns_currentns() security/ (4) In review 2 replies
- security: Add KUnit tests for rootid_owns_currentns() security/ (4) New 0 replies
- Rework the LSM initialization security/ (50), include/ (2) Superseded 34 replies
- Rework the LSM initialization security/ (53), include/ (2) Superseded 61 replies
- Rework the LSM initialization security/ (50), include/ (2) Superseded 42 replies
- Add support for long task name kernel/ (26), fs/ (17), drivers/ (14), mm/ (10), +8 Superseded 7 replies
- Rework the LSM initialization security/ (56), include/ (2) Superseded 96 replies
- uapi: fix broken link in linux/capability.h include/uapi/linux/capability.h Superseded 6 replies
- security/commoncap: don't assume "setid" if all ids are identical Documentation/userspace-api/, security/ In review 38 replies
- quota: reorder capability check last fs/ (5), drivers/ (3), net/ (2), MAINTAINERS, +1 Applied 8 replies