messages from 2023-12-11 07:58:05 to 2024-03-04 10:20:27 UTC [more...]
[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
2024-03-04 10:19 UTC (70+ messages)
` [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h
` [PATCH v2 02/25] mnt_idmapping: include cred.h
` [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data
` [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps
` [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids
` [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
` [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace
` [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper
` [PATCH v2 09/25] commoncap: use is_fscaps_xattr()
` [PATCH v2 10/25] xattr: "
` [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
` [PATCH v2 12/25] selinux: add hooks for fscaps operations
` [PATCH v2 13/25] smack: "
` [PATCH v2 14/25] evm: add support for fscaps security hooks
` [PATCH v2 15/25] security: call evm fscaps hooks from generic "
` [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps
` [PATCH v2 17/25] fs: add vfs_get_fscaps()
` [PATCH v2 18/25] fs: add vfs_set_fscaps()
` [PATCH v2 19/25] fs: add vfs_remove_fscaps()
` [PATCH v2 20/25] ovl: add fscaps handlers
` [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up
` [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs
` [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity()
` [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
` [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr()
[RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE)
2024-03-02 16:37 UTC (30+ messages)
` [RFC PATCH v13 01/20] security: add ipe lsm
` [RFC PATCH v13 02/20] ipe: add policy parser
` [RFC PATCH v13 03/20] ipe: add evaluation loop
` [RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read
` [RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs()
` [RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider
` [RFC PATCH v13 07/20] security: add new securityfs delete function
` [RFC PATCH v13 08/20] ipe: add userspace interface
` [RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support
` [RFC PATCH v13 10/20] ipe: add permissive toggle
` [RFC PATCH v13 11/20] block|security: add LSM blob to block_device
` [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag
` [RFC PATCH v13 13/20] dm: add finalize hook to target_type
` [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook
` [RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider
` [RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook
` [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider
` [RFC PATCH v13 18/20] scripts: add boot policy generation program
` [RFC PATCH v13 19/20] ipe: kunit test for parser
` [RFC PATCH v13 20/20] documentation: add ipe documentation
subscribe
2024-02-27 6:49 UTC
[RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE)
2024-02-06 21:53 UTC (37+ messages)
` [RFC PATCH v12 01/20] security: add ipe lsm
` [RFC PATCH v12 02/20] ipe: add policy parser
` [RFC PATCH v12 03/20] ipe: add evaluation loop
` [RFC PATCH v12 04/20] ipe: add LSM hooks on execution and kernel read
` [RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack
` [PATCH RFC v12 5/20] "
` [RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider
` [PATCH RFC v12 6/20] "
` [RFC PATCH v12 07/20] security: add new securityfs delete function
` [RFC PATCH v12 08/20] ipe: add userspace interface
` [PATCH RFC v12 8/20] "
` [RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support
` [PATCH RFC v12 9/20] "
` [RFC PATCH v12 10/20] ipe: add permissive toggle
` [PATCH RFC "
` [RFC PATCH v12 11/20] block|security: add LSM blob to block_device
` [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag
` [RFC PATCH v12 13/20] dm: add finalize hook to target_type
` [RFC PATCH v12 14/20] dm verity: consume root hash digest and signature data via LSM hook
` [RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider
` [PATCH RFC "
` [RFC PATCH v12 16/20] fsverity: consume builtin signature via LSM hook
` [RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider
` [PATCH RFC "
` [RFC PATCH v12 18/20] scripts: add boot policy generation program
` [RFC PATCH v12 19/20] ipe: kunit test for parser
` [RFC PATCH v12 20/20] documentation: add ipe documentation
[PATCH] audit: Use KMEM_CACHE instead of kmem_cache_create
2024-01-25 15:13 UTC (2+ messages)
[PATCH] kernel: auditfilter: Remove unnecessary ‘0’ values from ret
2024-01-25 14:59 UTC (3+ messages)
[PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL
2024-01-23 23:58 UTC (7+ messages)
IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions
2024-01-22 15:15 UTC (7+ messages)
[PATCH AUTOSEL 4.19 1/5] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:15 UTC
[PATCH AUTOSEL 5.4 2/7] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:15 UTC
[PATCH AUTOSEL 5.10 2/8] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:14 UTC
[PATCH AUTOSEL 5.15 2/8] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:14 UTC
[PATCH AUTOSEL 6.1 2/9] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:14 UTC
[PATCH AUTOSEL 6.6 02/14] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:13 UTC
[PATCH AUTOSEL 6.7 02/18] audit: Send netlink ACK before setting connection in auditd_set
2024-01-16 0:12 UTC
[GIT PULL] audit/audit-pr-20240105
2024-01-09 21:40 UTC (2+ messages)
[RFC PATCH v1 0/7] Landlock audit support
2024-01-05 22:13 UTC (16+ messages)
` [RFC PATCH v1 1/7] lsm: Add audit_log_lsm_data() helper
` [RFC PATCH v1 3/7] landlock: Log ruleset creation and release
` "
` [RFC PATCH v1 4/7] landlock: Log domain creation and enforcement
` [RFC PATCH v1 5/7] landlock: Log file-related requests
[PATCH 0/2] audit: Further reduce syscall latency
2023-12-22 4:31 UTC (15+ messages)
` [PATCH 1/2] audit: Vary struct audit_entry alignment
` [PATCH 2/2] audit: Apply codegen optimizations
` [PATCH 2/2] audit: Apply special optimizations
[PATCH bpf-next v3] bpf: Include pid, uid and comm in audit output
2023-12-19 18:54 UTC
[PATCH v39 08/42] LSM: Use lsmblob in security_ipc_getsecid
2023-12-15 22:16 UTC (6+ messages)
` [PATCH v39 11/42] LSM: Use lsmblob in security_inode_getsecid
` [PATCH v39 13/42] LSM: Create new security_cred_getlsmblob LSM hook
` [PATCH v39 16/42] LSM: Ensure the correct LSM context releaser
` [PATCH v39 17/42] LSM: Use lsmcontext in security_secid_to_secctx
` [PATCH v39 18/42] LSM: Use lsmcontext in security_lsmblob_to_secctx
[PATCH 15/16] commoncap: use vfs fscaps interfaces for killpriv checks
2023-12-11 7:57 UTC (2+ messages)
page: next (older) | prev (newer) | latest
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).