Skip to content

Security (LSM)

SECURITY SUBSYSTEM

Supported 11,209 threads 71,609 messages Latest

About Lists, Files, Maintainers
Lists
linux-security-module
Files
include/linux/lsm/, include/linux/lsm_audit.h, include/linux/lsm_hook_defs.h, include/linux/lsm_hooks.h, include/linux/security.h, include/uapi/linux/lsm.h, rust/kernel/security.rs, security/ and 1 more
Maintainers
James Morris, Paul Moore, Serge E. Hallyn
  1. landlock bug: procfs denials because inodes have unstable identity DISCUSSION Günther Noack linux-fsdevel linux-security-module 3 replies
  2. RFC v3 Case Study Verification Results and Request for Reconsideration DISCUSSION Nakashima Seiichi kernel-hardening linux-security-module 0 replies
  3. CVE-2024-0582: Why We Need a Standard for CVE Emergency Mitigation Case Study Nakashima Seiichi kernel-hardening linux-security-module 2 replies
  4. Kernel API Firewall (kaf): emergency CVE mitigation via loadable policy modules (with pre-disclosure defense appendix) RFC v2+ Nakashima Seiichi kernel-hardening linux-security-module 0 replies
  5. bpf, lsm: new first argument in 7.4 inode hooks silently breaks BPF LSMs BUG roblabla bpf linux-security-module lkml 3 replies
  6. IMA: periodic runtime re-measurement of process .text/GOT RFC Nicolai Kuntze linux-integrity linux-security-module lkml 6 replies
  7. Kernel API Firewall (kaf): subsystem-level attack surface reduction for the post-AI-CVE era RFC idea Nakashima Seiichi kernel-hardening linux-security-module 10 replies
  8. apparmor: slab-use-after-free in aa_get_newest_label BUG Shuangpeng Bai linux-security-module lkml 0 replies
  9. Curated eBPF/LSM mitigations for high-impact fixed CVEs RFC Prashant Singh bpf linux-security-module 0 replies
  10. landlock: get_current_exe() WARNs on long exe paths BUG Dwi Siswanto linux-security-module lkml 0 replies
  11. 1日で追いつく Claude Codeを学ぶ入門講座 DISCUSSION AI エージェント|イベント事務局 linux-security-module 0 replies
  12. Greetings,, DISCUSSION Micheal linux-security-module 0 replies
  13. IT教育で、新規事業 DISCUSSION 石嶋紗季 linux-security-module 0 replies
  14. 「指示待ち人間」はこう増える DISCUSSION ナレッジリンク linux-security-module 0 replies
  15. selinux: general protection fault in avtab_search_node() during an AVC lookup BUG REPORT 1sh1ro linux-security-module lkml selinux 1 reply
  16. Proposal for a standard Competitive / Protected Session API in Linux RFC 洛神葵 linux-api linux-security-module lkml 2 replies
  17. apparmor: AF_UNIX datagram send slowdown after 6456ccbd2ff7 REGRESSION Chengfeng Lin linux-security-module lkml regressions 2 replies
  18. bpf-lsm: scoped one-shot userspace authorization binding for exec RFC Eric Robles bpf linux-security-module 0 replies
  19. 優しい社長のNG行動 DISCUSSION ナレッジリンク linux-security-module 0 replies
  20. general protection fault in security_path_post_mknod BUG Farhad Alemi linux-security-module lkml 2 replies
  21. Request to withdraw all current and past patch submissions DISCUSSION Breno Rodrigues Alves linux-media linux-security-module lkml 0 replies
  22. Heads up: Moving to a different email address for my Linux kernel/SELinux contributions DISCUSSION Ondrej Mosnacek linux-security-module lkml selinux 1 reply
  23. SafeSetID: GID transition policy lookup uses RUID as source, allowlist can be bypassed (setgid to any group including 0) DISCUSSION Yan Yanhx linux-security-module 0 replies
  24. landlock: sun_path length underflow to SIZE_MAX in landlock_deny_scope_abstract_unix_socket TP_printk -> unbounded OOB read in trace reader Bug poppet lovelace linux-security-module 1 reply
  25. security/keys: out-of-bounds in tpm2_unseal_trusted() BUG co keyrings linux-integrity linux-security-module +1 1 reply
  26. IT教育で、新規事業 DISCUSSION 石嶋紗季 linux-security-module 0 replies
  27. Apparmor deadlock in 6.12.101 in complain mode REGRESSION Mattias Åsander linux-security-module lkml regressions 1 reply
  28. Subject: [REGRESSION] selinux: ~90% throughput drop in System V IPC (msg) since commit 7edea6e8c8e8 DISCUSSION Jiri Vozar linux-security-module lkml selinux 1 reply
  29. Landlock: mount_setattr(2) is unmediated by LSMs (ro-mount confinement bypass) DISCUSSION Vivek Parikh linux-fsdevel linux-security-module 1 reply
  30. linux-next: Tree for Jul 29 DISCUSSION Mark Brown linux-next linux-security-module lkml 2 replies
  31. Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV is bypassable via io_uring IORING_OP_URING_CMD (confirmed on real NVMe hardware) DISCUSSION Vivek Parikh io-uring linux-security-module 1 reply
  32. Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute) BUG Ken Grimes landlock linux-security-module 3 replies
  33. 障害者の就労を支援する事業 新規開業パートナー募集 DISCUSSION 就労移行支援事業説明会 linux-security-module 0 replies
  34. memfd_secret(): opt-in visibility for security monitoring (eBPF/audit) RFC/discuss BoxStrikesTeam linux-mm linux-security-module 2 replies
  35. TID v2.0: kernel module for cache-line zeroization against Flush+Reload (CLFLUSHOPT + LFENCE + REP STOSQ) RFC Ahmed Hassan kernel-hardening linux-api linux-crypto +5 5 replies
  36. AppArmor: TCP Fast Open bypasses connect mediation (last unaddressed LSM) DISCUSSION Bryam Vargas linux-security-module lkml netdev 2 replies
  37. Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV bypass via io_uring IORING_OP_URING_CMD DISCUSSION Bryam Vargas io-uring linux-block linux-nvme +2 10 replies
  38. Sashiko reviews for the LSM mailing list DISCUSSION Mickaël Salaün linux-security-module sashiko 8 replies
  39. apparmor: add support loading per permission tagging bug report Dan Carpenter linux-security-module 1 reply
  40. Landstrip DISCUSSION Jarkko Sakkinen landlock linux-integrity linux-security-module 6 replies
  41. security_inode_follow_link: KASAN UAF localization report DISCUSSION David Maximiliano Hermitte linux-fsdevel linux-security-module lkml 0 replies
  42. -next status as at v7.1-rc6 DISCUSSION Mark Brown linux-next linux-security-module lkml 9 replies
  43. security_task_prctl: why -ENOSYS DISCUSSION William Roberts linux-security-module selinux 6 replies
  44. landlock: SCOPE_SIGNAL bypass via F_SETOWN to invoker pgid -> SIGIO/SIGKILL to non-sandboxed targets REPORT [email protected] linux-security-module stable 2 replies
  45. apparmor: AA_BUG aa_policy_destroy on aa_alloc_profile error path BUG Farhad Alemi linux-security-module lkml 0 replies
  46. keys: request_key_auth payload use-after-free in keyctl_instantiate_key_common() bug report Shaomin Chen keyrings linux-security-module lkml 2 replies
  47. Linux Security Summit Europe 2026 CfP ANN Reshetova, Elena kernel-hardening keyrings linux-coco +4 0 replies
  48. move load_uefi_certs() and keyring initcall to earlier initcall QUESTION Yeoreum Yun keyrings linux-integrity linux-security-module +1 1 reply
  49. lsm= with bpf before selinux breaks fscreate with EINVAL BUG Vitaly Chikunov bpf linux-security-module lkml +1 6 replies
  50. landlock: warning in collect_domain_accesses via renameat2 path rename BUG 王志 linux-fsdevel linux-security-module lkml 1 reply
Page 1 of 16 –