Landlock security module
Supported 1,098 threads 2,872 messages Latest
About Lists, Files, Maintainers, Reviewers
- Lists
- linux-security-module
- Files
Documentation/admin-guide/LSM/landlock.rst,Documentation/security/landlock.rst,Documentation/trace/events-landlock.rst,Documentation/userspace-api/landlock.rst,fs/ioctl.c,include/linux/landlock.h,include/trace/events/landlock.h,include/uapi/linux/landlock.hand 3 more- Maintainers
- Mickaël Salaün
- Reviewers
- Günther Noack
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
- super: fixes for freezing, reconfiguration and error reporting tools/ (11), fs/ (4) Applied 15 replies
- landlock: Fix landlock_restrict_self() on long executable paths security/landlock/ (2), tools/testing/selftests/landlock/ (2), Documentation/admin-guide/LSM/ New 0 replies
- FAILED: patch "[PATCH] selftests/landlock: Fix snprintf truncation checks in test files" failed to apply to 6.18-stable tree tools/testing/selftests/landlock/ (3) New 0 replies
- Fix LSM mediation of PR_SET_SECUREBITS security/, tools/testing/selftests/landlock/ New 0 replies
- Fix Landlock mediation of capabilities guarding LSM policies security/ (6), include/ (2), tools/ (2) New 0 replies
- Fix Landlock mediation of commoncap's capability checks Documentation/ (2), tools/ (2), include/, security/ New 0 replies
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
- vfs: add inode iteration method super_iter_inodes fs/ (5), block/, include/, security/ In review 11 replies
- Add offsetofp() and offsetofendp() for pointer arithmetic drivers/ (29), net/ (12), fs/ (7), arch/, +4 In review 4 replies
- landlock: Fix REFER in layered domains security/landlock/ (2), include/uapi/linux/, tools/testing/selftests/landlock/ New 0 replies
- landlock: clarify signal scoping for pre-existing f_owner registrations Documentation/userspace-api/landlock.rst In review 2 replies
- landlock: clarify TTY signal scoping Documentation/userspace-api/, include/uapi/linux/, tools/testing/selftests/landlock/ In review 1 reply
- landlock: Add access rights on created files security/ (8), tools/ (2), Documentation/, include/ In review 10 replies
- Landlock: Restrict POSIX message queue creation and access security/ (12), tools/ (7), include/ (4), Documentation/ (2), +2 In review 1 reply
- cred: gather the "same uid" checks between tasks in one place kernel/ (8), fs/ (2), include/ (2), security/ (2), +5 In review 2 replies
- fs: clamp FIONREAD result to int range fs/ioctl.c Applied 2 replies
- landlock: Selftest fixes and cleanups tools/testing/selftests/landlock/ (19) New 0 replies
- selftests/landlock: fix the regex_escape() error check tools/testing/selftests/landlock/fs_test.c In review 2 replies
- selftests/landlock: print st_ino as unsigned long long tools/testing/selftests/landlock/fs_test.c In review 1 reply
- landlock: Fix REFER in layered domains security/landlock/, tools/testing/selftests/landlock/ Superseded 3 replies
- sched: Add support for long task name drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 In review 2 replies
- landlock: Add UDP access control support security/ (4), tools/ (2), Documentation/, include/, +1 Superseded 15 replies
- ns: fixes for the namespace LSM hooks tools/ (7), include/ (3), kernel/ (3), Documentation/ (2), +4 In review 2 replies
- ns: fixes for the namespace LSM hooks tools/ (6), kernel/ (3), include/ (2), security/ (2), +3 Superseded 8 replies
- cred: gather the "same uid" checks between tasks in one place kernel/ (8), fs/ (2), include/ (2), security/ (2), +5 Superseded 2 replies
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (33), tools/ (13), security/ (12), include/ (8), +4 Superseded 7 replies
- net: support thread-specific pidfds for send and connect include/ (10), net/ (7), tools/ (6), arch/ (4), +1 Applied 11 replies
- fs: unified VFS ancestor walk for Landlock and BPF fs/ (5), tools/ (2), include/, kernel/, +1 In review 8 replies
- Landlock: Namespace and capability control security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 In review 5 replies
- linux-next: manual merge of the landlock tree with the origin tree security/landlock/domain.h 1 reply
- landlock: Fix superblock use-after-free in release_inode() security/landlock/fs.c In review 1 reply
- Towards safer path_* API fs/ (23), security/ (4), drivers/, include/, +1 In review 18 replies
- landlock: Move the domain layer counter out of the anonymous union security/landlock/domain.h In review 9 replies
- sched: introduce for_each_process_rculock and for_each_thread_rculock kernel/ (9), mm/ (3), fs/ (2), include/, +2 In review 5 replies
- sched: Add support for long task name drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 Superseded 1 reply
- landlock: Selftest fixes and cleanups tools/testing/selftests/landlock/ (17) Superseded 1 reply
- Landlock: Namespace and capability control security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 Superseded 0 replies
- landlock: Add READ_METADATA and WRITE_METADATA access rights fs/ (30), security/ (10), include/ (7), drivers/ (2), +3 Superseded 20 replies
- fs: unified VFS ancestor walk for Landlock and BPF fs/ (5), tools/ (2), include/, kernel/, +1 In review 2 replies
- Landlock: Namespace and capability control security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 Superseded 3 replies
- linux-next: manual merge of the landlock tree with the jc_docs tree security/landlock/syscalls.c 1 reply
- lsm: Replace security_sb_mount with granular mount hooks security/ (9), include/ (2), fs/, kernel/ In review 10 replies
- net: support thread-specific pidfds for send and connect include/ (10), net/ (7), tools/ (6), arch/ (4), +1 Superseded 5 replies
- landlock: Support MPTCP bind and connect restrictions security/ (3), include/ (2), tools/ (2), Documentation/, +1 In review 5 replies
- FAILED: patch "[PATCH] landlock: Work around gcc-16 -Wuninitialized warning" failed to apply to 7.2-stable tree security/landlock/ (19) New 0 replies
- landlock: Add POSIX message queue scoping security/ (9), tools/ (3), Documentation/ (2), include/ (2), +2 In review 12 replies
- net: support thread-specific pidfds for send and connect include/ (9), net/ (7), tools/ (6), arch/ (4), +1 Applied 10 replies
- FAILED: patch "[PATCH] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout" failed to apply to 5.15-stable tree security/ (5), include/ (3), tools/ Applied 5 replies
- FAILED: patch "[PATCH] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout" failed to apply to 6.1-stable tree include/uapi/linux/, security/landlock/, security/landlock/errata/, tools/testing/selftests/landlock/ In review 6 replies
- FAILED: patch "[PATCH] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout" failed to apply to 6.6-stable tree include/uapi/linux/, security/landlock/, security/landlock/errata/, tools/testing/selftests/landlock/ Applied 3 replies