org.kernel.vger.linux-security-module archive

708 archived articles, newest first (page 7 of 8). Latest articles →

Re: [PATCH 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
Sat, 18 Jul 2026 21:23:34 +0300
Jarkko Sakkinen <[email protected]> • #58890
Re: Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV is bypassable via io_uring IORING_OP_URING_CMD (confirmed on real NVMe hardware)
Sat, 18 Jul 2026 17:01:56 +0200
Mickaël Salaün <[email protected]> • #58889
Landlock: LANDLOCK_ACCESS_FS_IOCTL_DEV is bypassable via io_uring IORING_OP_URING_CMD (confirmed on real NVMe hardware)
Sat, 18 Jul 2026 19:26:48 +0530
Vivek Parikh <[email protected]> • #58888
Landlock: mount_setattr(2) is unmediated by LSMs (ro-mount confinement bypass)
Sat, 18 Jul 2026 15:44:50 +0530
Vivek Parikh <[email protected]> • #58887
Re: [PATCH] apparmor: leverage audit_log_n_untrustedstring() when possible
Fri, 17 Jul 2026 16:52:31 -0700
Ryan Lee <[email protected]> • #58886
[PATCH v2 3/3] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
Fri, 17 Jul 2026 18:03:19 -0400
Justin Suess <[email protected]> • #58885
[PATCH v2 2/3] selftests/landlock: Test LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
Fri, 17 Jul 2026 18:03:18 -0400
Justin Suess <[email protected]> • #58884
[PATCH v2 1/3] landlock: Add LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
Fri, 17 Jul 2026 18:03:17 -0400
Justin Suess <[email protected]> • #58883
[PATCH v2 0/3] Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS
Fri, 17 Jul 2026 18:03:16 -0400
Justin Suess <[email protected]> • #58882
Re: [PATCH] apparmor: leverage audit_log_n_untrustedstring() when possible
Fri, 17 Jul 2026 17:57:42 -0400
Paul Moore <[email protected]> • #58881
Re: [PATCH] apparmor: leverage audit_log_n_untrustedstring() when possible
Fri, 17 Jul 2026 17:54:34 -0400
Paul Moore <[email protected]> • #58880
[PATCH] apparmor: leverage audit_log_n_untrustedstring() when possible
Fri, 17 Jul 2026 17:52:55 -0400
Paul Moore <[email protected]> • #58879
Re: [GIT PULL] selinux/selinux-pr-20260717
Fri, 17 Jul 2026 20:17:15 +0000
[email protected] • #58878
[GIT PULL] selinux/selinux-pr-20260717
Fri, 17 Jul 2026 13:03:30 -0400
Paul Moore <[email protected]> • #58877
Re: [PATCH v3 1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_WHITEOUT for RENAME_WHITEOUT
Fri, 17 Jul 2026 11:23:08 +0200
Günther Noack <[email protected]> • #58876
Re: [PATCH v5 2/3] bpf: add bpf_init_inode_xattr kfunc for atomic inode labeling
Thu, 16 Jul 2026 17:55:15 -0400
Paul Moore <[email protected]> • #58875
Re: [PATCH v5 1/3] security: rework inode_init_security xattr handling
Thu, 16 Jul 2026 17:55:12 -0400
Paul Moore <[email protected]> • #58874
Re: [GIT PULL] Landlock fix for v7.2-rc4
Thu, 16 Jul 2026 20:25:49 +0000
[email protected] • #58873
[GIT PULL] Landlock fix for v7.2-rc4
Thu, 16 Jul 2026 21:57:52 +0200
Mickaël Salaün <[email protected]> • #58872
Re: [BUG] Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute)
Thu, 16 Jul 2026 20:14:55 +0000
Ken Grimes <[email protected]> • #58871
[PATCH] ima: Report errno for failed hash collection to audit
Thu, 16 Jul 2026 14:10:52 -0500
Frederick Lawler <[email protected]> • #58870
Re: [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Thu, 16 Jul 2026 13:25:50 -0400
Mimi Zohar <[email protected]> • #58869
Re: [RFC PATCH 12/24] fork: let kernel callers create embryonic tasks
Thu, 16 Jul 2026 08:57:58 -0700
Andy Lutomirski <[email protected]> • #58868
[RFC PATCH 24/24] Documentation: describe pidfd spawn builders
Thu, 16 Jul 2026 22:31:50 +0800
Li Chen <[email protected]> • #58867
[RFC PATCH 23/24] selftests/pidfd: cover pidfd spawn builders
Thu, 16 Jul 2026 22:31:49 +0800
Li Chen <[email protected]> • #58866
[RFC PATCH 22/24] pidfd: expose spawn builder system calls
Thu, 16 Jul 2026 22:31:48 +0800
Li Chen <[email protected]> • #58865
[RFC PATCH 21/24] pidfd: consume spawn builders on the first run attempt
Thu, 16 Jul 2026 22:31:47 +0800
Li Chen <[email protected]> • #58864
[RFC PATCH 20/24] pidfd: add initial spawn file actions
Thu, 16 Jul 2026 22:31:46 +0800
Li Chen <[email protected]> • #58863
[RFC PATCH 19/24] file: expose spawn file-action helpers
Thu, 16 Jul 2026 22:31:45 +0800
Li Chen <[email protected]> • #58862
[RFC PATCH 18/24] pidfd: make spawn builder execution signal-safe
Thu, 16 Jul 2026 22:31:44 +0800
Li Chen <[email protected]> • #58861
[RFC PATCH 17/24] pidfd: audit child spawn execution
Thu, 16 Jul 2026 22:31:43 +0800
Li Chen <[email protected]> • #58860
[RFC PATCH 16/24] audit: add pidfd spawn child contexts
Thu, 16 Jul 2026 22:31:42 +0800
Li Chen <[email protected]> • #58859
[RFC PATCH 15/24] fork: keep embryonic tasks hidden until exec completes
Thu, 16 Jul 2026 22:31:41 +0800
Li Chen <[email protected]> • #58858
[RFC PATCH 14/24] pidfd: create and execute spawn builder tasks
Thu, 16 Jul 2026 22:31:40 +0800
Li Chen <[email protected]> • #58857
[RFC PATCH 13/24] fork: let new tasks start with task work
Thu, 16 Jul 2026 22:31:39 +0800
Li Chen <[email protected]> • #58856
[RFC PATCH 12/24] fork: let kernel callers create embryonic tasks
Thu, 16 Jul 2026 22:31:38 +0800
Li Chen <[email protected]> • #58855
[RFC PATCH 11/24] pidfd: add spawn builder state tracking
Thu, 16 Jul 2026 22:31:37 +0800
Li Chen <[email protected]> • #58854
[RFC PATCH 10/24] pidfs: publish future pidfd files
Thu, 16 Jul 2026 22:31:36 +0800
Li Chen <[email protected]> • #58853
[RFC PATCH 09/24] fork: let process builders supply preallocated pids
Thu, 16 Jul 2026 22:31:35 +0800
Li Chen <[email protected]> • #58852
[RFC PATCH 08/24] pidfs: attach pids to future pidfd files
Thu, 16 Jul 2026 22:31:34 +0800
Li Chen <[email protected]> • #58851
[RFC PATCH 07/24] fork: expose vfork completion helper
Thu, 16 Jul 2026 22:31:33 +0800
Li Chen <[email protected]> • #58850
[RFC PATCH 06/24] exec: expose execveat internals to process builders
Thu, 16 Jul 2026 22:31:32 +0800
Li Chen <[email protected]> • #58849
[RFC PATCH 05/24] pidfd: add spawn builder path configuration
Thu, 16 Jul 2026 22:31:31 +0800
Li Chen <[email protected]> • #58848
[RFC PATCH 04/24] pidfd: create taskless spawn builders
Thu, 16 Jul 2026 22:31:30 +0800
Li Chen <[email protected]> • #58847
[RFC PATCH 03/24] pidfs: add taskless future pidfd inodes
Thu, 16 Jul 2026 22:31:29 +0800
Li Chen <[email protected]> • #58846
[RFC PATCH 02/24] libfs: allow custom validation of stashed inode data
Thu, 16 Jul 2026 22:31:28 +0800
Li Chen <[email protected]> • #58845
[RFC PATCH 01/24] pidfd: add spawn builder uapi
Thu, 16 Jul 2026 22:31:27 +0800
Li Chen <[email protected]> • #58844
[RFC PATCH 00/24] pidfd: add a minimal process spawn builder
Thu, 16 Jul 2026 22:31:26 +0800
Li Chen <[email protected]> • #58843
Re: [BUG] Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute)
Thu, 16 Jul 2026 11:37:41 +0200
Mickaël Salaün <[email protected]> • #58842
Re: [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Thu, 16 Jul 2026 09:29:30 +0200
Roberto Sassu <[email protected]> • #58841
障害者の就労を支援する事 業 新規開業パートナー 募集
Thu, 16 Jul 2026 09:43:08 +0900 (JST)
就労移行支援事業 説明会 <[email protected]> • #58840
Re: [PATCH] apparmor: replace decompress_zstd() prototype with its entity
Wed, 15 Jul 2026 16:18:48 -0700
John Johansen <[email protected]> • #58839
Re: [PATCH] apparmor: replace decompress_zstd() prototype with its entity
Thu, 16 Jul 2026 08:05:13 +0900
Tetsuo Handa <[email protected]> • #58838
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Wed, 15 Jul 2026 16:41:27 -0400
Paul Moore <[email protected]> • #58837
Re: [PATCH] apparmor: replace decompress_zstd() prototype with its entity
Wed, 15 Jul 2026 09:14:20 -0300
Georgia Garcia <[email protected]> • #58836
Re: [BUG] Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute)
Wed, 15 Jul 2026 10:39:29 +0200
Günther Noack <[email protected]> • #58835
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Tue, 14 Jul 2026 18:00:37 -0400
Scott Mayhew <[email protected]> • #58834
[BUG] Landlock denies LANDLOCK_ACCESS_FS_EXECUTE despite a correctly-anchored PathBeneath rule (contradicts selftest layout1.execute)
Tue, 14 Jul 2026 21:07:56 +0000
Ken Grimes <[email protected]> • #58833
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Tue, 14 Jul 2026 14:20:44 -0400
Paul Moore <[email protected]> • #58832
Re: [PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section()
Tue, 14 Jul 2026 17:49:33 +0200
Jann Horn <[email protected]> • #58831
[PATCH] apparmor: fix cred UAF caused by begin_current_label_crit_section()
Tue, 14 Jul 2026 17:38:07 +0200
Jann Horn <[email protected]> • #58830
[PATCH v2 3/3] assoc_array: trim the final shortcut word using the current chunk end
Tue, 14 Jul 2026 07:54:51 -0400
Michael Bommarito <[email protected]> • #58829
[PATCH v2 2/3] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Tue, 14 Jul 2026 07:54:50 -0400
Michael Bommarito <[email protected]> • #58828
[PATCH v2 1/3] keys: fix out-of-bounds read in keyring_get_key_chunk()
Tue, 14 Jul 2026 07:54:49 -0400
Michael Bommarito <[email protected]> • #58827
[PATCH v2 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
Tue, 14 Jul 2026 07:54:48 -0400
Michael Bommarito <[email protected]> • #58826
Re: [PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Tue, 14 Jul 2026 17:28:17 +0800
cuigaosheng <[email protected]> • #58825
Re: [PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Tue, 14 Jul 2026 11:26:58 +0200
Roberto Sassu <[email protected]> • #58824
[PATCH -next,v2] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Tue, 14 Jul 2026 17:17:08 +0800
Gaosheng Cui <[email protected]> • #58823
Re: [PATCH 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
Mon, 13 Jul 2026 19:11:39 -0700
Andrew Morton <[email protected]> • #58822
[PATCH 2/2] doc: LSM: fix module ordering description for /sys/kernel/security/lsm
Mon, 13 Jul 2026 22:38:32 -0300
Lincoln Wallace <[email protected]> • #58821
[PATCH 1/2] doc: LSM: describe CONFIG_LSM and lsm= as the selection mechanism
Mon, 13 Jul 2026 22:38:31 -0300
Lincoln Wallace <[email protected]> • #58820
[PATCH 0/2] doc: LSM: update usage document for current LSM stacking
Mon, 13 Jul 2026 22:38:30 -0300
Lincoln Wallace <[email protected]> • #58819
Re: [PATCH v2 0/7] fs/9p: Reuse inode based on path (in addition to qid)
Tue, 14 Jul 2026 02:14:00 +0100
Tingmao Wang <[email protected]> • #58818
Re: [PATCH 11/13 RFC net-next] net: cipso: guard IPv4 packet manipulation functions
Mon, 13 Jul 2026 16:03:59 +0200
Fernando Fernandez Mancera <[email protected]> • #58817
Re: [PATCH v3] hardening: Default randstruct off with rust for better allmodconfig support
Mon, 13 Jul 2026 15:02:44 +0100
Mark Brown <[email protected]> • #58816
Re: [PATCH v3] hardening: Default randstruct off with rust for better allmodconfig support
Mon, 13 Jul 2026 15:58:11 +0200
Miguel Ojeda <[email protected]> • #58815
Re: [PATCH v3] hardening: Default randstruct off with rust for better allmodconfig support
Mon, 13 Jul 2026 14:54:54 +0100
"Gary Guo" <[email protected]> • #58814
Re: [PATCH v3] hardening: Default randstruct off with rust for better allmodconfig support
Mon, 13 Jul 2026 13:45:19 +0100
Mark Brown <[email protected]> • #58813
Re: [PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Mon, 13 Jul 2026 14:06:04 +0200
Roberto Sassu <[email protected]> • #58812
[PATCH -next] ima: add cond_resched() in ima_calc_file_hash_tfm loop
Mon, 13 Jul 2026 11:10:22 +0000
Gaosheng Cui <[email protected]> • #58811
Re: [PATCH 11/13 RFC net-next] net: cipso: guard IPv4 packet manipulation functions
Sun, 12 Jul 2026 12:22:04 -0400
Paul Moore <[email protected]> • #58810
[PATCH] apparmor: replace decompress_zstd() prototype with its entity
Sun, 12 Jul 2026 19:17:59 +0900
Tetsuo Handa <[email protected]> • #58809
[PATCH 3/3] assoc_array: trim the final shortcut word when skip_to_level is chunk-aligned
Sat, 11 Jul 2026 21:45:00 -0400
Michael Bommarito <[email protected]> • #58808
[PATCH 2/3] keys: make keyring key-chunk byte order agree with keyring_diff_objects()
Sat, 11 Jul 2026 21:44:59 -0400
Michael Bommarito <[email protected]> • #58807
[PATCH 1/3] keys: fix out-of-bounds read in keyring_get_key_chunk()
Sat, 11 Jul 2026 21:44:58 -0400
Michael Bommarito <[email protected]> • #58806
[PATCH 0/3] keys: fix keyring assoc-array out-of-bounds read and index inconsistency
Sat, 11 Jul 2026 21:44:57 -0400
Michael Bommarito <[email protected]> • #58805
[PATCH 11/13 RFC net-next] net: cipso: guard IPv4 packet manipulation functions
Sun, 12 Jul 2026 03:39:09 +0200
Fernando Fernandez Mancera <[email protected]> • #58804
Re: [PATCH 0/3] Implement LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
Sat, 11 Jul 2026 13:00:20 -0400
Justin Suess <[email protected]> • #58803
Re: [GIT PULL] selinux/selinux-pr-20260710
Sat, 11 Jul 2026 03:07:56 +0000
[email protected] • #58802
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Fri, 10 Jul 2026 18:20:21 -0400
Paul Moore <[email protected]> • #58801
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Fri, 10 Jul 2026 17:55:45 -0400
Paul Moore <[email protected]> • #58800
Re: [PATCH v2] NFSv4.2: fix nfs4_listxattr size accounting
Fri, 10 Jul 2026 17:54:57 -0400
Paul Moore <[email protected]> • #58799
İlt: Re: [RESEND][RFC/discuss] memfd_secret(): opt-in visibility for security monitoring (eBPF/audit)
Fri, 10 Jul 2026 21:51:32 +0000
BoxStrikesTeam <[email protected]> • #58798
Re: [RESEND][RFC/discuss] memfd_secret(): opt-in visibility for security monitoring (eBPF/audit)
Fri, 10 Jul 2026 17:00:37 -0400
Paul Moore <[email protected]> • #58797
Re: [PATCH v2 1/9] security: add LSM blob and hooks for namespaces
Fri, 10 Jul 2026 16:42:58 -0400
Paul Moore <[email protected]> • #58796
[GIT PULL] selinux/selinux-pr-20260710
Fri, 10 Jul 2026 15:13:45 -0400
Paul Moore <[email protected]> • #58795
Re: [PATCH 2/2] module: Bring includes in linux/kmod.h up to date
Fri, 10 Jul 2026 09:57:55 -0400
Aaron Tomlin <[email protected]> • #58794
Re: [PATCH 0/3] Implement LANDLOCK_RESTRICT_SELF_NNP_ON_EXEC
Fri, 10 Jul 2026 09:56:25 -0400
Justin Suess <[email protected]> • #58793
İlt: Re: [RFC/discuss] memfd_secret(): opt-in visibility for security monitoring (eBPF/audit)
Fri, 10 Jul 2026 13:40:17 +0000
BoxStrikesTeam <[email protected]> • #58792
Re: [PATCH] PM: hibernate: Allow hibernation opt-in when locked down
Fri, 10 Jul 2026 13:09:42 +0000
Nicolas Bouchinet <[email protected]> • #58791
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.