Skip to content

Security (LSM)

SECURITY SUBSYSTEM

Supported 11,492 threads 71,609 messages Latest

About Lists, Files, Maintainers
Lists
linux-security-module
Files
include/linux/lsm/, include/linux/lsm_audit.h, include/linux/lsm_hook_defs.h, include/linux/lsm_hooks.h, include/linux/security.h, include/uapi/linux/lsm.h, rust/kernel/security.rs, security/ and 1 more
Maintainers
James Morris, Paul Moore, Serge E. Hallyn
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. sysctl: replace overloaded extra pointers with typed bounds and context RFC PATCH 39 patches [email protected] linux-fsdevel lkml llvm +1 net/ (33), kernel/ (29), fs/ (22), drivers/ (14), +8 In review 13 replies
  2. landlock bug: procfs denials because inodes have unstable identity DISCUSSION Günther Noack linux-fsdevel linux-security-module 3 replies
  3. pkeys-based page table hardening RFC PATCH v10 22 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm +2 arch/ (18), mm/ (6), include/ (4), security/ In review 9 replies
  4. fs: don't use pseudo filesystem files as storage RFC PATCH 41 patches Christian Brauner bpf driver-core fuse-devel +20 fs/ (18), drivers/ (9), security/ (4), tools/ (4), +5 In review 19 replies
  5. lockdown: Prevent booting with lockdown enabled but IOMMU disabled PATCH 2 patches Mario Limonciello (AMD) linux-iommu linux-security-module lkml drivers/iommu/, include/linux/, security/lockdown/ In review 1 reply
  6. RFC v3 Case Study Verification Results and Request for Reconsideration DISCUSSION Nakashima Seiichi kernel-hardening linux-security-module 0 replies
  7. FAILED: patch "[PATCH] apparmor: check accept index + 1 is in bounds" failed to apply to 6.6-stable tree PATCH 6.6.y 1 patch Sasha Levin stable security/apparmor/policy_unpack.c New 0 replies
  8. FAILED: patch "[PATCH] apparmor: check accept index + 1 is in bounds" failed to apply to 6.12-stable tree PATCH 6.12.y 1 patch Sasha Levin stable security/apparmor/policy_unpack.c Superseded 2 replies
  9. landlock: Fix landlock_restrict_self() on long executable paths PATCH 2 patches Daejun Park b4-sent linux-doc linux-kselftest +3 security/landlock/ (2), tools/testing/selftests/landlock/ (2), Documentation/admin-guide/LSM/ New 0 replies
  10. FAILED: patch "[PATCH] apparmor: fix refcount leak in aa_get_newest_profile()" failed to apply to 5.10-stable tree PATCH 5.10.y 1 patch Sasha Levin stable security/apparmor/, security/apparmor/include/ New 0 replies
  11. FAILED: patch "[PATCH] apparmor: fix refcount leak in aa_get_newest_profile()" failed to apply to 5.15-stable tree PATCH 5.15.y 1 patch Sasha Levin stable security/apparmor/, security/apparmor/include/ New 0 replies
  12. Fix LSM mediation of PR_SET_SECUREBITS PATCH 2 patches Mickaël Salaün bpf linux-security-module lkml +2 security/, tools/testing/selftests/landlock/ New 0 replies
  13. cipso: stop modifying live ip_options_rcu PATCH net 1 patch Jann Horn linux-security-module lkml netdev +2 include/ (2), net/ (2), security/ (2) Applied 6 replies
  14. capabilities: close the ways around the CAP_SETFCAP rule for uid 0 PATCH v9 3 patches Josef Bacik keyrings linux-fsdevel linux-kselftest +2 tools/testing/selftests/namespaces/ (3), include/linux/, kernel/, security/ New 0 replies
  15. CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation Case Study Nakashima Seiichi kernel-hardening linux-security-module 2 replies
  16. Fix Landlock mediation of capabilities guarding LSM policies PATCH 6 patches Mickaël Salaün bpf linux-security-module lkml +1 security/ (6), include/ (2), tools/ (2) New 0 replies
  17. Fix Landlock mediation of commoncap's capability checks PATCH 6 patches Mickaël Salaün linux-security-module lkml Documentation/ (2), tools/ (2), include/, security/ New 0 replies
  18. security: introduce Kernel Assurance Plane RFC PATCH v3 6 patches HARIHARA SUDHAN. R bpf linux-doc linux-mm +2 security/ (8), Documentation/ (3), include/ (3), kernel/ (2), +1 New 0 replies
  19. ima: fix kexec measurement buffer overflow after failed loads PATCH 1 patch Jérémy Jean kexec linux-integrity linux-security-module +2 kernel/, security/integrity/ima/ In review 1 reply
  20. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v3 18 patches Cai Xinchen bpf driver-core ecryptfs +19 fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
  21. initramfs: add support for xattrs in the initial ram disk PATCH v6 4 patches Danny Hu initramfs linux-api linux-fsdevel +4 usr/ (4), include/linux/, init/, security/integrity/ima/ In review 1 reply
  22. userns: Let LSMs deny the CAP_SETFCAP snapshot for mapping uid 0 PATCH 1 patch Mickaël Salaün keyrings linux-fsdevel linux-security-module +2 include/linux/, kernel/ In review 3 replies
  23. userns: per-namespace capability bounding set and opt-in netns loopback PATCH 8 patches Hallgrimur H. Gunnarsson containers linux-api linux-doc +5 tools/ (10), include/ (5), kernel/ (5), Documentation/, +3 In review 15 replies
  24. ipv4: do not write shared IP options when sending ICMP errors PATCH net v2 2 patches Eric Dumazet linux-security-module netdev net/ipv4/ (2) In review 1 reply
  25. lockdown: fix the securityfs interface and add tests PATCH -next -v2 8 patches Cai Xinchen bpf linux-kselftest linux-security-module +1 tools/ (5), security/ (4), include/ (2), Documentation/, +1 In review 1 reply
  26. keys/trusted/tpm2: rename "bool" to "boolean" PATCH 1 patch Dan Carpenter kernel-janitors keyrings linux-integrity +2 security/keys/trusted-keys/trusted_tpm2.c In review 6 replies
  27. net: annotate data-races around sysctl knobs PATCH net-next 14 patches Jiayuan Chen bridge linux-rdma linux-s390 +7 net/ (44), include/ (3) In review 5 replies
  28. lockdown: fix the securityfs interface and add tests PATCH -next 9 patches Cai Xinchen bpf linux-kselftest linux-security-module +1 security/ (4), tools/ (4), include/ (2), Documentation/, +1 In review 5 replies
  29. evm: fix TOCTOU heap OOB in protected xattr reads PATCH v2 1 patch Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/evm/evm_main.c In review 3 replies
  30. ima: fix races when deleting measurement list entries PATCH v3 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ (2) New 0 replies
  31. vfs: add inode iteration method super_iter_inodes PATCH 3 patches Huang Shijie gfs2 linux-block linux-fsdevel +2 fs/ (5), block/, include/, security/ In review 11 replies
  32. KEYS: Replace assoc_array with rhashtable PATCH v9 3 patches Jarkko Sakkinen bpf dm-devel fsverity +5 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 In review 1 reply
  33. KEYS: Replace assoc_array with rhashtable PATCH v8 3 patches Jarkko Sakkinen bpf dm-devel fsverity +6 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 Superseded 1 reply
  34. KEYS: Replace assoc_array with rhashtable PATCH v7 3 patches Jarkko Sakkinen bpf dm-devel fsverity +6 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 Superseded 1 reply
  35. Extend PKWM to support user-created wrapping keys PATCH v6 9 patches Srish Srinivasan keyrings linux-integrity linux-security-module +4 arch/ (7), Documentation/ (3), include/, security/ In review 6 replies
  36. KEYS: Protect pkey method checks against type removal PATCH 1 patch BeaCox keyrings linux-security-module lkml +1 security/keys/keyctl_pkey.c Superseded 14 replies
  37. Add offsetofp() and offsetofendp() for pointer arithmetic PATCH 3 patches Bence Csokas arm-scmi bpf chrome-platform +17 drivers/ (29), net/ (12), fs/ (7), arch/, +4 In review 4 replies
  38. Make hibernation work with lockdown RFC 17 patches Matthew Garrett keyrings linux-efi linux-integrity +1 drivers/ (19), kernel/ (7), include/ (4), security/ (2) In review 31 replies
  39. sched/psi: Check CAP_SYS_RESOURCE in the initial user namespace PATCH 1 patch Hungyu Lin linux-security-module lkml kernel/sched/psi.c In review 2 replies
  40. KEYS: changes for v7.4-rc3 GIT PULL Jarkko Sakkinen keyrings linux-integrity linux-security-module Merged 1 reply
  41. selinux: don't label bridged packets in selinux_ip_forward() PATCH 1 patch Joas Antonio dos Santos linux-security-module lkml netdev +2 include/linux/, security/selinux/ Applied 2 replies
  42. KEYS: Return user session keyring on lookup PATCH v3 2 patches Jarkko Sakkinen keyrings linux-integrity linux-security-module +2 security/keys/ (2), Documentation/security/keys/ In review 1 reply
  43. KEYS: Sanitize the garbage collector PATCH v5 12 patches Jarkko Sakkinen keyrings linux-cifs linux-integrity +6 net/ (17), security/ (6), fs/ (5), include/ (2), +2 In review 4 replies
  44. security: Restrict unprivileged access to /proc/config.gz PATCH 1 patch Vic B linux-hardening lkml kernel/, security/ In review 2 replies
  45. ipv4: unclone skbs before recompiling IP options PATCH net 2 patches Eric Dumazet linux-security-module netdev net/ipv4/ (2) In review 2 replies
  46. Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix) RFC v2+ Nakashima Seiichi kernel-hardening linux-security-module 0 replies
  47. security: Add PR_CAPBSET_DROP_MASK RFC PATCH v2 3 patches Jinjie Ruan linux-fsdevel linux-kselftest linux-mm +2 include/ (3), kernel/ (2), tools/ (2), fs/, +1 In review 8 replies
  48. mm: continue vma_flags_t conversion PATCH 13 patches Lorenzo Stoakes (ARM) damon kvm linux-fsdevel +9 mm/ (19), security/ (4), include/ (3), fs/ (2), +3 Applied 50 replies
  49. bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs BUG roblabla bpf linux-security-module lkml 3 replies
  50. KEYS: do not let an unmatched key decide the search result PATCH v2 1 patch Guixiong Wei keyrings linux-security-module lkml security/keys/keyring.c In review 1 reply
Page 1 of 230 –