Show patches with: State = Action Required       |    Archived = No       |   202 patches
« 1 2 3 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
[v4] KEYS: trusted: Debugging as a feature [v4] KEYS: trusted: Debugging as a feature - 1 1 --- 2026-04-15 Jarkko Sakkinen New
ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images ima: Use KEXEC_SIG_FORCE for rejecting unsigned kexec images - - - --- 2026-04-15 Chi Wang New
[GIT,PULL] IPE update for 7.1 [GIT,PULL] IPE update for 7.1 - - - --- 2026-04-13 Fan Wu New
[5.10.y] apparmor: fix memory leak in verify_header [5.10.y] apparmor: fix memory leak in verify_header - 2 1 --- 2026-04-13 Li hongliang New
[5.15.y] apparmor: fix memory leak in verify_header [5.15.y] apparmor: fix memory leak in verify_header - 2 1 --- 2026-04-13 Li hongliang New
[6.1.y] apparmor: fix memory leak in verify_header [6.1.y] apparmor: fix memory leak in verify_header - 2 1 --- 2026-04-13 Li hongliang New
[v7,10/10] landlock: Implement KUnit test for LANDLOCK_ADD_RULE_NO_INHERIT Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,09/10] selftests/landlock: Implement selftests for LANDLOCK_ADD_RULE_NO_INHERIT Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,08/10] samples/landlock: Add LANDLOCK_ADD_RULE_NO_INHERIT to landlock-sandboxer Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,07/10] landlock: Add documentation for LANDLOCK_ADD_RULE_NO_INHERIT Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,06/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,05/10] landlock: Move find_rule definition above landlock_append_fs_rule Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,04/10] landlock: Implement LANDLOCK_ADD_RULE_NO_INHERIT userspace api Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,03/10] landlock: Use landlock_walk_path_up for collect_domain_accesses Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,02/10] landlock: Use landlock_walk_path_up for is_access_to_paths_allowed Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[v7,01/10] landlock: Add path walk helper Implement LANDLOCK_ADD_RULE_NO_INHERIT - - - --- 2026-04-12 Justin Suess New
[5/5] landlock: Document chmod and chown support in example code [1/5] selftests/landlock: fix return condition on create_directory - - - --- 2026-04-12 Jeffrey Bencteux New
[4/5] samples/landlock: add support for chown and chmod [1/5] selftests/landlock: fix return condition on create_directory - - - --- 2026-04-12 Jeffrey Bencteux New
[3/5] selftests/landlock: add tests for chmod and chown restrictions [1/5] selftests/landlock: fix return condition on create_directory - - - --- 2026-04-12 Jeffrey Bencteux New
[2/5] landlock: add support for chmod and chown [1/5] selftests/landlock: fix return condition on create_directory - - - --- 2026-04-12 Jeffrey Bencteux New
[1/5] selftests/landlock: fix return condition on create_directory [1/5] selftests/landlock: fix return condition on create_directory - - - --- 2026-04-12 Jeffrey Bencteux New
trusted-keys: move pr_fmt out of trusted-type.h trusted-keys: move pr_fmt out of trusted-type.h - - - --- 2026-04-11 Josh Snyder New
[3/3] selftests/landlock: Test OverlayFS renames w/o LANDLOCK_ACCESS_FS_MAKE_CHAR landlock: Restrict renameat2 with RENAME_WHITEOUT - - - --- 2026-04-11 Günther Noack New
[2/3] selftests/landlock: Add test for RENAME_WHITEOUT denial landlock: Restrict renameat2 with RENAME_WHITEOUT - - - --- 2026-04-11 Günther Noack New
[1/3] landlock: Require LANDLOCK_ACCESS_FS_MAKE_CHAR for RENAME_WHITEOUT landlock: Restrict renameat2 with RENAME_WHITEOUT - - - --- 2026-04-11 Günther Noack New
[GIT,PULL] selinux/selinux-pr-20260410 [GIT,PULL] selinux/selinux-pr-20260410 - - - --- 2026-04-10 Paul Moore New
[GIT,PULL] lsm/lsm-pr-20260410 [GIT,PULL] lsm/lsm-pr-20260410 - - - --- 2026-04-10 Paul Moore New
[GIT,PULL] Landlock update for v7.1-rc1 [GIT,PULL] Landlock update for v7.1-rc1 - - - --- 2026-04-09 Mickaël Salaün New
[v3] KEYS: trusted: Debugging as a feature [v3] KEYS: trusted: Debugging as a feature - 1 1 --- 2026-04-09 Jarkko Sakkinen New
[v2,2/2] integrity: Add support for sigv3 verification using ML-DSA keys Add support for ML-DSA signature for EVM and IMA - - - --- 2026-04-08 Stefan Berger New
[v2,1/2] integrity: Refactor asymmetric_verify for reusability Add support for ML-DSA signature for EVM and IMA - - - --- 2026-04-08 Stefan Berger New
security: remove BUG_ON in security_skb_classify_flow security: remove BUG_ON in security_skb_classify_flow - - - --- 2026-04-08 Jiayuan Chen New
[RFC,20/20] MAINTAINERS: update entry for the Landlock subsystem BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,19/20] bpf: Document BPF_MAP_TYPE_LANDLOCK_RULESET BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,18/20] landlock: Document LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,17/20] tools: bpftool: Add documentation for landlock_ruleset BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,16/20] landlock: Bump ABI version BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,15/20] selftests/bpf: Add Landlock kfunc test runner BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,14/20] selftests/bpf: Add Landlock kfunc test program BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,13/20] selftests/bpf: Enable Landlock in selftests kernel. BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,12/20] selftests/landlock: Rename gettid wrapper for BPF reuse BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,11/20] selftests/bpf: Add Landlock kfunc declarations BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,10/20] bpf: verifier: Add Landlock ruleset map support BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,09/20] bpf: syscall: Handle Landlock ruleset maps BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,08/20] bpf: Add Landlock ruleset map type BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,07/20] bpf: arraymap: Implement Landlock ruleset map BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,06/20] bpf: lsm: Add Landlock kfuncs BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,05/20] landlock: Make ruleset deferred free RCU safe BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,04/20] selftests/landlock: Cover LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,03/20] landlock: Implement LANDLOCK_RESTRICT_SELF_NO_NEW_PRIVS BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,02/20] execve: Add set_nnp_on_point_of_no_return BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[RFC,01/20] landlock: Move operations from syscall into ruleset code BPF interface for applying Landlock rulesets - - - --- 2026-04-07 Justin Suess New
[v2,2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 [v2,1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() - 1 - --- 2026-04-07 Mickaël Salaün New
[v2,1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() [v2,1/2] landlock: Fix LOG_SUBDOMAINS_OFF inheritance across fork() - 2 - --- 2026-04-07 Mickaël Salaün New
evm: zero-initialize the evm_xattrs read buffer evm: zero-initialize the evm_xattrs read buffer - - - --- 2026-04-07 Pengpeng Hou New
[v8,9/9] selftests/landlock: Add tests for invalid use of quiet flag Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,8/9] selftests/landlock: Add tests for quiet flag with scope Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,7/9] selftests/landlock: add tests for quiet flag with net rules Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,6/9] selftests/landlock: add tests for quiet flag with fs rules Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,5/9] selftests/landlock: Replace hard-coded 16 with a constant Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,4/9] samples/landlock: Add quiet flag support to sandboxer Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,3/9] landlock: Suppress logging when quiet flag is present Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,2/9] landlock: Add API support and docs for the quiet flags Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v8,1/9] landlock: Add a place for flags to layer rules Implement LANDLOCK_ADD_RULE_QUIET - - - --- 2026-04-06 Tingmao Wang New
[v2,17/17] landlock: Document tracepoints Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,16/17] selftests/landlock: Add scope and ptrace tracepoint tests Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,15/17] selftests/landlock: Add network tracepoint tests Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,14/17] selftests/landlock: Add filesystem tracepoint tests Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,13/17] selftests/landlock: Add trace event test infrastructure and tests Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,12/17] landlock: Add tracepoints for ptrace and scope denials Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,11/17] landlock: Add landlock_deny_access_fs and landlock_deny_access_net Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,10/17] landlock: Set audit_net.sk for socket access checks Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,09/17] landlock: Add tracepoints for rule checking Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,08/17] landlock: Add restrict_self and free_domain tracepoints Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,07/17] landlock: Add landlock_add_rule_fs and landlock_add_rule_net tracepoints Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,06/17] landlock: Add create_ruleset and free_ruleset tracepoints Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,05/17] tracing: Add __print_untrusted_str() Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,04/17] landlock: Split denial logging from audit into common framework Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,03/17] landlock: Split struct landlock_domain from struct landlock_ruleset Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,02/17] landlock: Move domain query functions to domain.c Landlock tracepoints - - - --- 2026-04-06 Mickaël Salaün New
[v2,01/17] landlock: Prepare ruleset and domain type split Landlock tracepoints - 1 - --- 2026-04-06 Mickaël Salaün New
[3/3] integrity: Add support for sigv3 verification using ML-DSA keys Add support for ML-DSA signature for EVM and IMA - - - --- 2026-04-05 Stefan Berger New
[2/3] integrity: Refactor asymmetric_verify for reusability Add support for ML-DSA signature for EVM and IMA - - - --- 2026-04-05 Stefan Berger New
[1/3] crypto: public_key: Remove check for valid hash_algo for ML-DSA keys Add support for ML-DSA signature for EVM and IMA - - - --- 2026-04-05 Stefan Berger New
[v1,2/2] landlock: Allow TSYNC with LOG_SUBDOMAINS_OFF and fd=-1 [v1,1/2] landlock: Fix log_subdomains_off inheritance across fork() - 1 - --- 2026-04-04 Mickaël Salaün New
[v1,1/2] landlock: Fix log_subdomains_off inheritance across fork() [v1,1/2] landlock: Fix log_subdomains_off inheritance across fork() - 1 - --- 2026-04-04 Mickaël Salaün New
[v4,3/3] selinux: fix overlayfs mmap() and mprotect() access checks Fix incorrect overlayfs mmap() and mprotect() LSM access controls 1 - - --- 2026-04-03 Paul Moore pcmoore Under Review
[v4,2/3] lsm: add backing_file LSM hooks Fix incorrect overlayfs mmap() and mprotect() LSM access controls - 3 - --- 2026-04-03 Paul Moore pcmoore Under Review
[v4,1/3] fs: prepare for adding LSM blob to backing_file Fix incorrect overlayfs mmap() and mprotect() LSM access controls - 1 - --- 2026-04-03 Paul Moore pcmoore Under Review
[v7] backing_file: store an internal O_PATH user_path_file [v7] backing_file: store an internal O_PATH user_path_file - - - --- 2026-03-20 Amir Goldstein pcmoore Under Review
[7/7] lsm: Remove security_sb_mount and security_move_mount lsm: Replace security_sb_mount with granular mount hooks - 1 1 --- 2026-03-18 Song Liu pcmoore New
[6/7] tomoyo: Convert from sb_mount to granular mount hooks lsm: Replace security_sb_mount with granular mount hooks - - - --- 2026-03-18 Song Liu pcmoore New
[5/7] landlock: Convert from sb_mount to granular mount hooks lsm: Replace security_sb_mount with granular mount hooks - - - --- 2026-03-18 Song Liu pcmoore New
[4/7] selinux: Convert from sb_mount to granular mount hooks lsm: Replace security_sb_mount with granular mount hooks - 1 1 --- 2026-03-18 Song Liu pcmoore New
[3/7] apparmor: Convert from sb_mount to granular mount hooks lsm: Replace security_sb_mount with granular mount hooks - - - --- 2026-03-18 Song Liu pcmoore New
[2/7] apparmor: Remove redundant MS_MGC_MSK stripping in apparmor_sb_mount lsm: Replace security_sb_mount with granular mount hooks - - - --- 2026-03-18 Song Liu pcmoore New
[1/7] lsm: Add granular mount hooks to replace security_sb_mount lsm: Replace security_sb_mount with granular mount hooks - 1 1 --- 2026-03-18 Song Liu pcmoore New
lsm: Fix the crash issue in xfrm_decode_session lsm: Fix the crash issue in xfrm_decode_session - 1 - --- 2026-03-18 Feng Yang pcmoore Under Review
[RFC,v1,11/11] landlock: Add documentation for capability and namespace restrictions Landlock: Namespace and capability control - - - --- 2026-03-12 Mickaël Salaün New
[RFC,v1,10/11] samples/landlock: Add capability and namespace restriction support Landlock: Namespace and capability control - - - --- 2026-03-12 Mickaël Salaün New
« 1 2 3 »