audit  

Messages by Thread

• • [RFC PATCH v14 02/19] ipe: add policy parser Fan Wu
  • [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
  • Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Roberto Sassu
  • Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
  • [RFC PATCH v14 07/19] security: add new securityfs delete function Fan Wu
  • [RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider Fan Wu
  • [RFC PATCH v14 12/19] dm: add finalize hook to target_type Fan Wu
  • [RFC PATCH v14 08/19] ipe: add userspace interface Fan Wu
  • [RFC PATCH v14 10/19] ipe: add permissive toggle Fan Wu
  • [RFC PATCH v14 11/19] block|security: add LSM blob to block_device Fan Wu
  • [RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support Fan Wu
  • [RFC PATCH v14 18/19] ipe: kunit test for parser Fan Wu
  • [RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
  • [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Fan Wu
  • Re: [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider Randy Dunlap
  • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Eric Biggers
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Casey Schaufler
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Paul Moore
  • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook Fan Wu
  • [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Fan Wu
  • Re: [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider Randy Dunlap
  • [RFC PATCH v14 17/19] scripts: add boot policy generation program Fan Wu
  • Re: [RFC PATCH v14 17/19] scripts: add boot policy generation program Randy Dunlap
  • [RFC PATCH v14 19/19] documentation: add ipe documentation Fan Wu
  • Re: [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE) Paul Moore
• [RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE) Fan Wu
  • [RFC PATCH v13 03/20] ipe: add evaluation loop Fan Wu
  • [RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read Fan Wu
  • [RFC PATCH v13 02/20] ipe: add policy parser Fan Wu
  • [RFC PATCH v13 01/20] security: add ipe lsm Fan Wu
  • [RFC PATCH v13 07/20] security: add new securityfs delete function Fan Wu
  • [RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
  • [RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs() Fan Wu
  • [RFC PATCH v13 08/20] ipe: add userspace interface Fan Wu
  • [RFC PATCH v13 10/20] ipe: add permissive toggle Fan Wu
  • [RFC PATCH v13 11/20] block|security: add LSM blob to block_device Fan Wu
  • [RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support Fan Wu
  • [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Fan Wu
  • Re: [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Mike Snitzer
  • [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
  • Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
  • Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook Mike Snitzer
  • [RFC PATCH v13 13/20] dm: add finalize hook to target_type Fan Wu
  • Re: [RFC PATCH v13 13/20] dm: add finalize hook to target_type Mike Snitzer
  • [RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook Fan Wu
  • [RFC PATCH v13 18/20] scripts: add boot policy generation program Fan Wu
  • [RFC PATCH v13 19/20] ipe: kunit test for parser Fan Wu
  • [RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider Fan Wu
  • [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
  • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Randy Dunlap
  • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Eric Biggers
  • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
  • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Eric Biggers
  • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
  • [RFC PATCH v13 20/20] documentation: add ipe documentation Fan Wu
• subscribe delyan
• [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Seth Forshee (DigitalOcean)
  • [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h Christian Brauner
  • [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps Seth Forshee (DigitalOcean)
  • [PATCH v2 02/25] mnt_idmapping: include cred.h Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 02/25] mnt_idmapping: include cred.h Christian Brauner
  • [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data Christian Brauner
  • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Christian Brauner
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Christian Brauner
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Roberto Sassu
  • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps Seth Forshee (DigitalOcean)
  • [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids Christian Brauner
  • [PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations Paul Moore
  • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations Paul Moore
  • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations Seth Forshee (DigitalOcean)
  • [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace Christian Brauner
  • [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper Christian Brauner
  • [PATCH v2 09/25] commoncap: use is_fscaps_xattr() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 09/25] commoncap: use is_fscaps_xattr() Christian Brauner
  • [PATCH v2 10/25] xattr: use is_fscaps_xattr() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr() Christian Brauner
  • [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Paul Moore
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Christian Brauner
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Roberto Sassu
  • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps Seth Forshee (DigitalOcean)
  • [PATCH v2 13/25] smack: add hooks for fscaps operations Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations Casey Schaufler
  • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations Seth Forshee (DigitalOcean)
  • [PATCH v2 14/25] evm: add support for fscaps security hooks Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Christian Brauner
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
  • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks Roberto Sassu
  • [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs Seth Forshee (DigitalOcean)
  • [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up Seth Forshee (DigitalOcean)
  • [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Paul Moore
  • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks Paul Moore
  • [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps Christian Brauner
  • [PATCH v2 17/25] fs: add vfs_get_fscaps() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 17/25] fs: add vfs_get_fscaps() Christian Brauner
  • [PATCH v2 18/25] fs: add vfs_set_fscaps() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 18/25] fs: add vfs_set_fscaps() Christian Brauner
  • [PATCH v2 20/25] ovl: add fscaps handlers Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 20/25] ovl: add fscaps handlers Christian Brauner
  • Re: [PATCH v2 20/25] ovl: add fscaps handlers Amir Goldstein
  • Re: [PATCH v2 20/25] ovl: add fscaps handlers Seth Forshee (DigitalOcean)
  • [PATCH v2 19/25] fs: add vfs_remove_fscaps() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 19/25] fs: add vfs_remove_fscaps() Christian Brauner
  • [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity() Seth Forshee (DigitalOcean)
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Christian Brauner
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Roberto Sassu
  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces Mimi Zohar
  • [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr() Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Christian Brauner
  • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities Seth Forshee (DigitalOcean)
• [RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE) Fan Wu
  • [RFC PATCH v12 01/20] security: add ipe lsm Fan Wu
  • [RFC PATCH v12 02/20] ipe: add policy parser Fan Wu
  • [RFC PATCH v12 04/20] ipe: add LSM hooks on execution and kernel read Fan Wu
  • [RFC PATCH v12 03/20] ipe: add evaluation loop Fan Wu
  • [RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack Fan Wu
  • Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack Paul Moore
  • Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack Fan Wu
  • [RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
  • Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider Paul Moore
  • Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider Fan Wu
  • [RFC PATCH v12 07/20] security: add new securityfs delete function Fan Wu
  • [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Fan Wu
  • Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Mike Snitzer
  • Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag Fan Wu
  • [RFC PATCH v12 08/20] ipe: add userspace interface Fan Wu
  • Re: [PATCH RFC v12 8/20] ipe: add userspace interface Paul Moore
  • Re: [PATCH RFC v12 8/20] ipe: add userspace interface Fan Wu
  • Re: [PATCH RFC v12 8/20] ipe: add userspace interface Paul Moore
  • Re: [PATCH RFC v12 8/20] ipe: add userspace interface Fan Wu
  • [RFC PATCH v12 13/20] dm: add finalize hook to target_type Fan Wu
  • [RFC PATCH v12 10/20] ipe: add permissive toggle Fan Wu
  • Re: [PATCH RFC v12 10/20] ipe: add permissive toggle Paul Moore
  • [RFC PATCH v12 11/20] block|security: add LSM blob to block_device Fan Wu
  • [RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support Fan Wu
  • Re: [PATCH RFC v12 9/20] uapi|audit|ipe: add ipe auditing support Paul Moore
  • [RFC PATCH v12 16/20] fsverity: consume builtin signature via LSM hook Fan Wu
  • [RFC PATCH v12 14/20] dm verity: consume root hash digest and signature data via LSM hook Fan Wu
  • [RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider Fan Wu
  • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Paul Moore
  • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Fan Wu
  • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider Paul Moore
  • [RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider Fan Wu
  • Re: [PATCH RFC v12 17/20] ipe: enable support for fs-verity as a trust provider Paul Moore
  • [RFC PATCH v12 18/20] scripts: add boot policy generation program Fan Wu
  • [RFC PATCH v12 19/20] ipe: kunit test for parser Fan Wu
  • [RFC PATCH v12 20/20] documentation: add ipe documentation Fan Wu
• [PATCH] audit: Use KMEM_CACHE instead of kmem_cache_create Kunwu Chan
  • Re: [PATCH] audit: Use KMEM_CACHE instead of kmem_cache_create Paul Moore
• [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Paul Moore
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Paul Moore
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Jens Axboe
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Jens Axboe
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Jens Axboe
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Jens Axboe
  • Re: [PATCH] io_uring: enable audit and restrict cred override for IORING_OP_FIXED_FD_INSTALL Paul Moore
• IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Paul Moore
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Jens Axboe
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Paul Moore
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Jens Axboe
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Paul Moore
  • Re: IORING_OP_FIXED_FD_INSTALL and audit/LSM interactions Jens Axboe

• Earlier messages
• Later messages