Skip to content

Security (LSM)

SECURITY SUBSYSTEM

Supported 11,492 threads 71,609 messages Latest

About Lists, Files, Maintainers
Lists
linux-security-module
Files
include/linux/lsm/, include/linux/lsm_audit.h, include/linux/lsm_hook_defs.h, include/linux/lsm_hooks.h, include/linux/security.h, include/uapi/linux/lsm.h, rust/kernel/security.rs, security/ and 1 more
Maintainers
James Morris, Paul Moore, Serge E. Hallyn
Show bot threadsBotsLatest activityActivityNewest threadsNewMost repliesRepliesMost participantsPeople
  1. sysctl: replace overloaded extra pointers with typed bounds and context RFC PATCH 39 patches [email protected] linux-fsdevel lkml llvm +1 net/ (33), kernel/ (29), fs/ (22), drivers/ (14), +8 In review 13 replies
  2. pkeys-based page table hardening RFC PATCH v10 22 patches Kevin Brodsky linux-arm-kernel linux-hardening linux-mm +2 arch/ (18), mm/ (6), include/ (4), security/ In review 9 replies
  3. fs: don't use pseudo filesystem files as storage RFC PATCH 41 patches Christian Brauner bpf driver-core fuse-devel +20 fs/ (18), drivers/ (9), security/ (4), tools/ (4), +5 In review 19 replies
  4. lockdown: Prevent booting with lockdown enabled but IOMMU disabled PATCH 2 patches Mario Limonciello (AMD) linux-iommu linux-security-module lkml drivers/iommu/, include/linux/, security/lockdown/ In review 1 reply
  5. FAILED: patch "[PATCH] apparmor: check accept index + 1 is in bounds" failed to apply to 6.6-stable tree PATCH 6.6.y 1 patch Sasha Levin stable security/apparmor/policy_unpack.c New 0 replies
  6. FAILED: patch "[PATCH] apparmor: check accept index + 1 is in bounds" failed to apply to 6.12-stable tree PATCH 6.12.y 1 patch Sasha Levin stable security/apparmor/policy_unpack.c Superseded 2 replies
  7. landlock: Fix landlock_restrict_self() on long executable paths PATCH 2 patches Daejun Park b4-sent linux-doc linux-kselftest +3 security/landlock/ (2), tools/testing/selftests/landlock/ (2), Documentation/admin-guide/LSM/ New 0 replies
  8. FAILED: patch "[PATCH] apparmor: fix refcount leak in aa_get_newest_profile()" failed to apply to 5.10-stable tree PATCH 5.10.y 1 patch Sasha Levin stable security/apparmor/, security/apparmor/include/ New 0 replies
  9. FAILED: patch "[PATCH] apparmor: fix refcount leak in aa_get_newest_profile()" failed to apply to 5.15-stable tree PATCH 5.15.y 1 patch Sasha Levin stable security/apparmor/, security/apparmor/include/ New 0 replies
  10. Fix LSM mediation of PR_SET_SECUREBITS PATCH 2 patches Mickaël Salaün bpf linux-security-module lkml +2 security/, tools/testing/selftests/landlock/ New 0 replies
  11. cipso: stop modifying live ip_options_rcu PATCH net 1 patch Jann Horn linux-security-module lkml netdev +2 include/ (2), net/ (2), security/ (2) Applied 6 replies
  12. capabilities: close the ways around the CAP_SETFCAP rule for uid 0 PATCH v9 3 patches Josef Bacik keyrings linux-fsdevel linux-kselftest +2 tools/testing/selftests/namespaces/ (3), include/linux/, kernel/, security/ New 0 replies
  13. Fix Landlock mediation of capabilities guarding LSM policies PATCH 6 patches Mickaël Salaün bpf linux-security-module lkml +1 security/ (6), include/ (2), tools/ (2) New 0 replies
  14. Fix Landlock mediation of commoncap's capability checks PATCH 6 patches Mickaël Salaün linux-security-module lkml Documentation/ (2), tools/ (2), include/, security/ New 0 replies
  15. security: introduce Kernel Assurance Plane RFC PATCH v3 6 patches HARIHARA SUDHAN. R bpf linux-doc linux-mm +2 security/ (8), Documentation/ (3), include/ (3), kernel/ (2), +1 New 0 replies
  16. ima: fix kexec measurement buffer overflow after failed loads PATCH 1 patch Jérémy Jean kexec linux-integrity linux-security-module +2 kernel/, security/integrity/ima/ In review 1 reply
  17. landlock: Add READ_METADATA and WRITE_METADATA access rights PATCH -next v3 18 patches Cai Xinchen bpf driver-core ecryptfs +19 fs/ (33), security/ (13), tools/ (13), include/ (8), +5 In review 3 replies
  18. initramfs: add support for xattrs in the initial ram disk PATCH v6 4 patches Danny Hu initramfs linux-api linux-fsdevel +4 usr/ (4), include/linux/, init/, security/integrity/ima/ In review 1 reply
  19. userns: Let LSMs deny the CAP_SETFCAP snapshot for mapping uid 0 PATCH 1 patch Mickaël Salaün keyrings linux-fsdevel linux-security-module +2 include/linux/, kernel/ In review 3 replies
  20. userns: per-namespace capability bounding set and opt-in netns loopback PATCH 8 patches Hallgrimur H. Gunnarsson containers linux-api linux-doc +5 tools/ (10), include/ (5), kernel/ (5), Documentation/, +3 In review 15 replies
  21. ipv4: do not write shared IP options when sending ICMP errors PATCH net v2 2 patches Eric Dumazet linux-security-module netdev net/ipv4/ (2) In review 1 reply
  22. lockdown: fix the securityfs interface and add tests PATCH -next -v2 8 patches Cai Xinchen bpf linux-kselftest linux-security-module +1 tools/ (5), security/ (4), include/ (2), Documentation/, +1 In review 1 reply
  23. keys/trusted/tpm2: rename "bool" to "boolean" PATCH 1 patch Dan Carpenter kernel-janitors keyrings linux-integrity +2 security/keys/trusted-keys/trusted_tpm2.c In review 6 replies
  24. net: annotate data-races around sysctl knobs PATCH net-next 14 patches Jiayuan Chen bridge linux-rdma linux-s390 +7 net/ (44), include/ (3) In review 5 replies
  25. lockdown: fix the securityfs interface and add tests PATCH -next 9 patches Cai Xinchen bpf linux-kselftest linux-security-module +1 security/ (4), tools/ (4), include/ (2), Documentation/, +1 In review 5 replies
  26. evm: fix TOCTOU heap OOB in protected xattr reads PATCH v2 1 patch Jérémy Jean linux-integrity linux-security-module lkml +1 security/integrity/evm/evm_main.c In review 3 replies
  27. ima: fix races when deleting measurement list entries PATCH v3 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ (2) New 0 replies
  28. vfs: add inode iteration method super_iter_inodes PATCH 3 patches Huang Shijie gfs2 linux-block linux-fsdevel +2 fs/ (5), block/, include/, security/ In review 11 replies
  29. KEYS: Replace assoc_array with rhashtable PATCH v9 3 patches Jarkko Sakkinen bpf dm-devel fsverity +5 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 In review 1 reply
  30. KEYS: Replace assoc_array with rhashtable PATCH v8 3 patches Jarkko Sakkinen bpf dm-devel fsverity +6 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 Superseded 1 reply
  31. KEYS: Replace assoc_array with rhashtable PATCH v7 3 patches Jarkko Sakkinen bpf dm-devel fsverity +6 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 Superseded 1 reply
  32. Extend PKWM to support user-created wrapping keys PATCH v6 9 patches Srish Srinivasan keyrings linux-integrity linux-security-module +4 arch/ (7), Documentation/ (3), include/, security/ In review 6 replies
  33. KEYS: Protect pkey method checks against type removal PATCH 1 patch BeaCox keyrings linux-security-module lkml +1 security/keys/keyctl_pkey.c Superseded 14 replies
  34. Add offsetofp() and offsetofendp() for pointer arithmetic PATCH 3 patches Bence Csokas arm-scmi bpf chrome-platform +17 drivers/ (29), net/ (12), fs/ (7), arch/, +4 In review 4 replies
  35. Make hibernation work with lockdown RFC 17 patches Matthew Garrett keyrings linux-efi linux-integrity +1 drivers/ (19), kernel/ (7), include/ (4), security/ (2) In review 31 replies
  36. sched/psi: Check CAP_SYS_RESOURCE in the initial user namespace PATCH 1 patch Hungyu Lin linux-security-module lkml kernel/sched/psi.c In review 2 replies
  37. selinux: don't label bridged packets in selinux_ip_forward() PATCH 1 patch Joas Antonio dos Santos linux-security-module lkml netdev +2 include/linux/, security/selinux/ Applied 2 replies
  38. KEYS: Return user session keyring on lookup PATCH v3 2 patches Jarkko Sakkinen keyrings linux-integrity linux-security-module +2 security/keys/ (2), Documentation/security/keys/ In review 1 reply
  39. KEYS: Sanitize the garbage collector PATCH v5 12 patches Jarkko Sakkinen keyrings linux-cifs linux-integrity +6 net/ (17), security/ (6), fs/ (5), include/ (2), +2 In review 4 replies
  40. security: Restrict unprivileged access to /proc/config.gz PATCH 1 patch Vic B linux-hardening lkml kernel/, security/ In review 2 replies
  41. ipv4: unclone skbs before recompiling IP options PATCH net 2 patches Eric Dumazet linux-security-module netdev net/ipv4/ (2) In review 2 replies
  42. security: Add PR_CAPBSET_DROP_MASK RFC PATCH v2 3 patches Jinjie Ruan linux-fsdevel linux-kselftest linux-mm +2 include/ (3), kernel/ (2), tools/ (2), fs/, +1 In review 8 replies
  43. mm: continue vma_flags_t conversion PATCH 13 patches Lorenzo Stoakes (ARM) damon kvm linux-fsdevel +9 mm/ (19), security/ (4), include/ (3), fs/ (2), +3 Applied 50 replies
  44. KEYS: do not let an unmatched key decide the search result PATCH v2 1 patch Guixiong Wei keyrings linux-security-module lkml security/keys/keyring.c In review 1 reply
  45. ima: fix races when deleting measurement list entries PATCH v2 1 patch Weibin Liu linux-integrity linux-security-module lkml +1 security/integrity/ima/ (2) Superseded 3 replies
  46. apparmor: fix double d_instantiate() in ns_mkdir_op() PATCH 1 patch Ran Hongyun linux-security-module lkml security/apparmor/apparmorfs.c New 0 replies
  47. KEYS: do not let an unmatched key decide the search result PATCH 1 patch Guixiong Wei keyrings linux-security-module lkml security/keys/keyring.c Superseded 3 replies
  48. landlock: Fix REFER in layered domains PATCH v2 4 patches Günther Noack linux-kselftest linux-security-module lkml +1 security/landlock/ (2), include/uapi/linux/, tools/testing/selftests/landlock/ New 0 replies
  49. KEYS: Replace assoc_array with rhashtable PATCH v5 3 patches Jarkko Sakkinen bpf dm-devel fsverity +5 include/ (5), security/ (5), Documentation/ (4), lib/ (3), +4 Superseded 11 replies
  50. landlock: clarify signal scoping for pre-existing f_owner registrations RFC 1 patch Shi Lecun linux-doc linux-security-module lkml Documentation/userspace-api/landlock.rst In review 2 replies
Page 1 of 200 –