Skip to content

Landlock security module

Supported 1,105 threads 2,872 messages Latest

About Lists, Files, Maintainers, Reviewers
Lists
linux-security-module
Files
Documentation/admin-guide/LSM/landlock.rst, Documentation/security/landlock.rst, Documentation/trace/events-landlock.rst, Documentation/userspace-api/landlock.rst, fs/ioctl.c, include/linux/landlock.h, include/trace/events/landlock.h, include/uapi/linux/landlock.h and 3 more
Maintainers
Mickaël Salaün
Reviewers
Günther Noack
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. super: fixes for freezing, reconfiguration and error reporting PATCH 15 patches Christian Brauner gfs2 linux-fsdevel stable tools/ (11), fs/ (4) Applied 15 replies
  2. landlock: Fix landlock_restrict_self() on long executable paths PATCH 2 patches Daejun Park b4-sent linux-doc linux-kselftest +3 security/landlock/ (2), tools/testing/selftests/landlock/ (2), Documentation/admin-guide/LSM/ New 0 replies
  3. FAILED: patch "[PATCH] selftests/landlock: Fix snprintf truncation checks in test files" failed to apply to 6.18-stable tree PATCH 6.18.y 1 patch Sasha Levin stable tools/testing/selftests/landlock/ (3) New 0 replies
  4. Fix LSM mediation of PR_SET_SECUREBITS PATCH 2 patches Mickaël Salaün bpf linux-security-module lkml +2 security/, tools/testing/selftests/landlock/ New 0 replies
  5. Fix Landlock mediation of capabilities guarding LSM policies PATCH 6 patches Mickaël Salaün bpf linux-security-module lkml +1 security/ (6), include/ (2), tools/ (2) New 0 replies
  6. Fix Landlock mediation of commoncap's capability checks PATCH 6 patches Mickaël Salaün linux-security-module lkml Documentation/ (2), tools/ (2), include/, security/ New 0 replies
  7. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v3 18 patches Cai Xinchen bpf driver-core ecryptfs +19 fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
  8. vfs: add inode iteration method super_iter_inodes PATCH 3 patches Huang Shijie gfs2 linux-block linux-fsdevel +2 fs/ (5), block/, include/, security/ In review 11 replies
  9. Add offsetofp() and offsetofendp() for pointer arithmetic PATCH 3 patches Bence Csokas arm-scmi bpf chrome-platform +17 drivers/ (29), net/ (12), fs/ (7), arch/, +4 In review 4 replies
  10. landlock: Fix REFER in layered domains PATCH v2 4 patches Günther Noack linux-kselftest linux-security-module lkml +1 security/landlock/ (2), include/uapi/linux/, tools/testing/selftests/landlock/ New 0 replies
  11. landlock: clarify signal scoping for pre-existing f_owner registrations RFC 1 patch Shi Lecun linux-doc linux-security-module lkml Documentation/userspace-api/landlock.rst In review 2 replies
  12. landlock: clarify TTY signal scoping PATCH v3 2 patches Christopher Lusk linux-doc linux-kselftest linux-security-module +1 Documentation/userspace-api/, include/uapi/linux/, tools/testing/selftests/landlock/ In review 1 reply
  13. landlock: Add access rights on created files RFC PATCH 3 patches Farid Zakaria linux-doc linux-kselftest linux-security-module +1 security/ (8), tools/ (2), Documentation/, include/ In review 10 replies
  14. Landlock: Restrict POSIX message queue creation and access PATCH v2 4 patches Oxana Kharitonova landlock linux-fsdevel linux-security-module +2 security/ (12), tools/ (7), include/ (4), Documentation/ (2), +2 In review 1 reply
  15. cred: gather the "same uid" checks between tasks in one place PATCH v2 13 patches Josef Bacik linux-fsdevel linux-security-module kernel/ (8), fs/ (2), include/ (2), security/ (2), +5 In review 2 replies
  16. fs: clamp FIONREAD result to int range PATCH 1 patch Avi Weiss linux-api linux-fsdevel lkml fs/ioctl.c Applied 2 replies
  17. landlock: Selftest fixes and cleanups PATCH v2 27 patches Günther Noack linux-kselftest linux-security-module lkml tools/testing/selftests/landlock/ (19) New 0 replies
  18. selftests/landlock: fix the regex_escape() error check PATCH 1 patch Sasha Levin linux-kselftest linux-security-module lkml tools/testing/selftests/landlock/fs_test.c In review 2 replies
  19. selftests/landlock: print st_ino as unsigned long long PATCH 1 patch Sasha Levin linux-kselftest linux-security-module lkml tools/testing/selftests/landlock/fs_test.c In review 1 reply
  20. landlock: Fix REFER in layered domains PATCH 3 patches Günther Noack linux-kselftest linux-security-module lkml +1 security/landlock/, tools/testing/selftests/landlock/ Superseded 3 replies
  21. sched: Add support for long task name PATCH v8 6 patches André Almeida linux-api linux-mm linux-trace-kernel +2 drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 In review 2 replies
  22. landlock: Add UDP access control support PATCH v4 7 patches Matthieu Buffet linux-security-module netdev security/ (4), tools/ (2), Documentation/, include/, +1 Superseded 15 replies
  23. ns: fixes for the namespace LSM hooks PATCH v2 7 patches Christian Brauner bpf linux-fsdevel linux-security-module +1 tools/ (7), include/ (3), kernel/ (3), Documentation/ (2), +4 In review 2 replies
  24. ns: fixes for the namespace LSM hooks PATCH 8 patches Christian Brauner bpf linux-fsdevel linux-security-module +1 tools/ (6), kernel/ (3), include/ (2), security/ (2), +3 Superseded 8 replies
  25. cred: gather the "same uid" checks between tasks in one place PATCH 13 patches Josef Bacik linux-fsdevel linux-security-module kernel/ (8), fs/ (2), include/ (2), security/ (2), +5 Superseded 2 replies
  26. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v2 18 patches Cai Xinchen bpf driver-core ecryptfs +15 fs/ (33), tools/ (13), security/ (12), include/ (8), +4 Superseded 7 replies
  27. net: support thread-specific pidfds for send and connect PATCH v4 10 patches Andrew Halaney linux-fsdevel lkml netdev include/ (10), net/ (7), tools/ (6), arch/ (4), +1 Applied 11 replies
  28. fs: unified VFS ancestor walk for Landlock and BPF PATCH bpf-next 11 patches Justin Suess bpf linux-fsdevel linux-security-module +2 fs/ (5), tools/ (2), include/, kernel/, +1 In review 8 replies
  29. Landlock: Namespace and capability control PATCH v6 8 patches Mickaël Salaün linux-fsdevel linux-security-module lkml security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 In review 5 replies
  30. linux-next: manual merge of the landlock tree with the origin tree PATCH Mark Brown linux-next lkml security/landlock/domain.h 1 reply
  31. landlock: Fix superblock use-after-free in release_inode() PATCH 1 patch Günther Noack linux-security-module stable security/landlock/fs.c In review 1 reply
  32. Towards safer path_* API PATCH 10 patches Mateusz Guzik linux-fsdevel lkml fs/ (23), security/ (4), drivers/, include/, +1 In review 18 replies
  33. landlock: Move the domain layer counter out of the anonymous union PATCH 1 patch Abel Vesa linux-hardening linux-security-module lkml +1 security/landlock/domain.h In review 9 replies
  34. sched: introduce for_each_process_rculock and for_each_thread_rculock PATCH v4 15 patches Ye Liu linux-fsdevel linux-mm linux-pm +4 kernel/ (9), mm/ (3), fs/ (2), include/, +2 In review 5 replies
  35. WARNING in landlock_merge_ruleset syzbot lsm? 1 patch syzbot syzbot linux-hardening linux-security-module lkml +1 security/landlock/domain.h In review 7 replies
  36. sched: Add support for long task name PATCH v7 6 patches André Almeida linux-api linux-mm linux-trace-kernel +1 drivers/ (17), include/ (12), security/ (6), kernel/ (5), +4 Superseded 1 reply
  37. landlock: Selftest fixes and cleanups PATCH 27 patches Günther Noack linux-kselftest linux-security-module lkml tools/testing/selftests/landlock/ (17) Superseded 1 reply
  38. Landlock: Namespace and capability control PATCH v5 8 patches Mickaël Salaün linux-fsdevel linux-security-module lkml security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 Superseded 0 replies
  39. landlock: Add READ_METADATA and WRITE_METADATA access rights RFC PATCH -next 12 patches Cai Xinchen bpf driver-core ecryptfs +13 fs/ (30), security/ (10), include/ (7), drivers/ (2), +3 Superseded 20 replies
  40. fs: unified VFS ancestor walk for Landlock and BPF RFC PATCH bpf-next 12 patches Justin Suess bpf linux-fsdevel linux-security-module +2 fs/ (5), tools/ (2), include/, kernel/, +1 In review 2 replies
  41. Landlock: Namespace and capability control PATCH v4 8 patches Mickaël Salaün linux-fsdevel linux-security-module lkml +1 security/ (20), tools/ (9), Documentation/ (4), include/ (3), +1 Superseded 3 replies
  42. linux-next: manual merge of the landlock tree with the jc_docs tree PATCH Mark Brown linux-next lkml security/landlock/syscalls.c 1 reply
  43. lsm: Replace security_sb_mount with granular mount hooks PATCH v6 8 patches Song Liu linux-fsdevel linux-security-module selinux security/ (9), include/ (2), fs/, kernel/ In review 10 replies
  44. net: support thread-specific pidfds for send and connect PATCH v3 10 patches Andrew Halaney linux-fsdevel lkml netdev include/ (10), net/ (7), tools/ (6), arch/ (4), +1 Superseded 5 replies
  45. landlock: Support MPTCP bind and connect restrictions PATCH 6 patches Günther Noack linux-security-module mptcp netdev security/ (3), include/ (2), tools/ (2), Documentation/, +1 In review 5 replies
  46. FAILED: patch "[PATCH] landlock: Work around gcc-16 -Wuninitialized warning" failed to apply to 7.2-stable tree PATCH 7.2.y 5 patches [email protected] stable security/landlock/ (19) New 0 replies
  47. landlock: Add POSIX message queue scoping PATCH 6 patches Oxana Kharitonova landlock linux-security-module lkml security/ (9), tools/ (3), Documentation/ (2), include/ (2), +2 In review 12 replies
  48. net: support thread-specific pidfds for send and connect PATCH v2 10 patches Christian Brauner linux-fsdevel lkml netdev include/ (9), net/ (7), tools/ (6), arch/ (4), +1 Applied 10 replies
  49. FAILED: patch "[PATCH] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout" failed to apply to 5.15-stable tree PATCH 5.15.y 2 patches [email protected] linux-doc linux-fsdevel linux-security-module +2 security/ (5), include/ (3), tools/ Applied 5 replies
  50. FAILED: patch "[PATCH] landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout" failed to apply to 6.1-stable tree PATCH 6.1.y 1 patch [email protected] stable include/uapi/linux/, security/landlock/, security/landlock/errata/, tools/testing/selftests/landlock/ In review 6 replies
Page 1 of 23 –