kernel-hardening mailing list - 2021/02

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

kernel-hardening mailing list - 2021/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 13	² 14	³ 3	⁴ 3	⁵ 8	⁶ 4	⁷ 1
⁸ 1	⁹	¹⁰ 2	¹¹ 1	¹²	¹³	¹⁴
¹⁵ 10	¹⁶ 1	¹⁷ 2	¹⁸	¹⁹ 1	²⁰	²¹ 2
²² 41	²³ 6	²⁴ 13	²⁵ 17	²⁶ 2	²⁷ 12	²⁸ 4

Messages by day:

February 1 (13 messages)

[PATCH v5 0/7] Count rlimits in each user namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 1/7] Increase size of ucounts to atomic_long_t (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 2/7] Add a reference to ucounts for each cred (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 4/7] Reimplement RLIMIT_MSGQUEUE on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 5/7] Reimplement RLIMIT_SIGPENDING on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v5 7/7] kselftests: Add test to check for rlimit changes in different user namespaces (Alexey Gladkov <gladkov.alexey@...il.com>)
forkat(int pidfd), execveat(int pidfd), other awful things? ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: forkat(int pidfd), execveat(int pidfd), other awful things? ("Jason A. Donenfeld" <Jason@...c4.com>)
Re: forkat(int pidfd), execveat(int pidfd), other awful things? (Andy Lutomirski <luto@...nel.org>)
Re: forkat(int pidfd), execveat(int pidfd), other awful things? (Casey Schaufler <casey@...aufler-ca.com>)
Re: forkat(int pidfd), execveat(int pidfd), other awful things? (Christian Brauner <christian.brauner@...onical.com>)

February 2 (14 messages)

RE: forkat(int pidfd), execveat(int pidfd), other awful things? (David Laight <David.Laight@...LAB.COM>)
[PATCH v28 00/12] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 02/12] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 03/12] landlock: Set up the security framework and manage credentials (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 04/12] landlock: Add ptrace restrictions (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 05/12] LSM: Infrastructure management of the superblock (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 06/12] fs,security: Add sb_delete hook (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 08/12] landlock: Add syscall implementations (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 09/12] arch: Wire up Landlock syscalls (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 10/12] selftests/landlock: Add user space tests (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 11/12] samples/landlock: Add a sandbox manager example (Mickaël Salaün <mic@...ikod.net>)
[PATCH v28 12/12] landlock: Add user and kernel documentation (Mickaël Salaün <mic@...ikod.net>)

February 3 (3 messages)

Re: [PATCH v28 01/12] landlock: Add object management ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 08/12] landlock: Add syscall implementations ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)

February 4 (3 messages)

Re: [PATCH v28 02/12] landlock: Add ruleset and domain management ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 03/12] landlock: Set up the security framework and manage credentials ("Serge E. Hallyn" <serge@...lyn.com>)
0ac0c30c8f: WARNING:at_kernel/ucount.c:#dec_rlimit_ucounts (kernel test robot <oliver.sang@...el.com>)

February 5 (8 messages)

c632dadc10: BUG:KASAN:null-ptr-deref_in_is_ucounts_overlimit (kernel test robot <oliver.sang@...el.com>)
Re: [PATCH v28 04/12] landlock: Add ptrace restrictions ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 05/12] LSM: Infrastructure management of the superblock ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 06/12] fs,security: Add sb_delete hook ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 06/12] fs,security: Add sb_delete hook (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v28 05/12] LSM: Infrastructure management of the superblock (Casey Schaufler <casey@...aufler-ca.com>)
Re: [PATCH v28 05/12] LSM: Infrastructure management of the superblock (Casey Schaufler <casey@...aufler-ca.com>)
Joining the general Linux kernel hardening mailing list (Guy L <guylevanon1@...il.com>)

February 6 (4 messages)

Re: [PATCH v3 2/2] arm64/acpi: disallow writeable AML opregion mapping for EFI code regions (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v3 2/2] arm64/acpi: disallow writeable AML opregion mapping for EFI code regions (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v3 2/2] arm64/acpi: disallow writeable AML opregion mapping for EFI code regions (Shawn Guo <shawn.guo@...aro.org>)
Re: [PATCH v3 2/2] arm64/acpi: disallow writeable AML opregion mapping for EFI code regions (Shawn Guo <shawn.guo@...aro.org>)

February 7 (1 message)

Re: [PATCH v28 06/12] fs,security: Add sb_delete hook ("Serge E. Hallyn" <serge@...lyn.com>)

February 8 (1 message)

[ANNOUNCE][CFP] Linux Security Summit 2021 (James Morris <jmorris@...ei.org>)

February 10 (2 messages)

Re: [PATCH v28 07/12] landlock: Support filesystem access-control ("Serge E. Hallyn" <serge@...lyn.com>)
Re: [PATCH v28 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)

February 11 (1 message)

Fine-grained Forward CFI on top of Intel CET / IBT (Joao Moreira <joao@...rdrivepizza.com>)

February 15 (10 messages)

[PATCH v6 0/7] Count rlimits in each user namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 1/7] Increase size of ucounts to atomic_long_t (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 2/7] Add a reference to ucounts for each cred (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 4/7] Reimplement RLIMIT_MSGQUEUE on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 5/7] Reimplement RLIMIT_SIGPENDING on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 7/7] kselftests: Add test to check for rlimit changes in different user namespaces (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (kernel test robot <lkp@...el.com>)
Re: [PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (kernel test robot <lkp@...el.com>)

February 16 (1 message)

[PATCH v7 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)

February 17 (2 messages)

Re: [PATCH v9 05/16] kbuild: lto: merge module sections (Stephen Boyd <swboyd@...omium.org>)
f009495a8d: BUG:KASAN:use-after-free_in_user_shm_unlock (kernel test robot <oliver.sang@...el.com>)

February 19 (1 message)

Re: [PATCH v28 07/12] landlock: Support filesystem access-control ("Serge E. Hallyn" <serge@...lyn.com>)

February 21 (2 messages)

Re: [PATCH v6 0/7] Count rlimits in each user namespace (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Jens Axboe <axboe@...nel.dk>)

February 22 (41 messages)

[PATCH v7 0/7] Count rlimits in each user namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 1/7] Increase size of ucounts to atomic_long_t (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 2/7] Add a reference to ucounts for each cred (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 4/7] Reimplement RLIMIT_MSGQUEUE on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 5/7] Reimplement RLIMIT_SIGPENDING on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v7 7/7] kselftests: Add test to check for rlimit changes in different user namespaces (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v6 0/7] Count rlimits in each user namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts (Jens Axboe <axboe@...nel.dk>)
[PATCH 00/20] Manual replacement of all strlcpy in favor of strscpy (Romain Perier <romain.perier@...il.com>)
[PATCH 01/20] cgroup: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 02/20] crypto: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 03/20] devlink: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 04/20] dma-buf: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 05/20] kobject: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 06/20] ima: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 07/20] SUNRPC: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 08/20] kernfs: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 09/20] m68k/atari: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 10/20] module: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 11/20] hwmon: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 12/20] s390/hmcdrv: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 13/20] scsi: zfcp: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 14/20] target: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 15/20] ALSA: usb-audio: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 16/20] tracing/probe: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 17/20] vt: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 18/20] usb: gadget: f_midi: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 19/20] usbip: usbip_host: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH 20/20] s390/watchdog: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
Re: [PATCH 15/20] ALSA: usb-audio: Manual replacement of the deprecated strlcpy() with return values (Takashi Iwai <tiwai@...e.de>)
Re: [PATCH 11/20] hwmon: Manual replacement of the deprecated strlcpy() with return values (Guenter Roeck <linux@...ck-us.net>)
Re: [PATCH 20/20] s390/watchdog: Manual replacement of the deprecated strlcpy() with return values (Guenter Roeck <linux@...ck-us.net>)
Re: [PATCH 14/20] target: Manual replacement of the deprecated strlcpy() with return values (Bodo Stroesser <bostroesser@...il.com>)
Re: [PATCH 13/20] scsi: zfcp: Manual replacement of the deprecated strlcpy() with return values (Benjamin Block <bblock@...ux.ibm.com>)
Re: [PATCH 19/20] usbip: usbip_host: Manual replacement of the deprecated strlcpy() with return values (Shuah Khan <skhan@...uxfoundation.org>)
Re: [PATCH 00/20] Manual replacement of all strlcpy in favor of strscpy (Shuah Khan <skhan@...uxfoundation.org>)
Re: [PATCH 16/20] tracing/probe: Manual replacement of the deprecated strlcpy() with return values (Steven Rostedt <rostedt@...dmis.org>)
Re: [PATCH 14/20] target: Manual replacement of the deprecated strlcpy() with return values (kernel test robot <lkp@...el.com>)

February 23 (6 messages)

Re: [PATCH 03/20] devlink: Manual replacement of the deprecated strlcpy() with return values (Jakub Kicinski <kuba@...nel.org>)
Re: [PATCH v6 0/7] Count rlimits in each user namespace (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH 00/20] Manual replacement of all strlcpy in favor of strscpy (Romain Perier <romain.perier@...il.com>)
Re: [PATCH 11/20] hwmon: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
Re: [PATCH 01/20] cgroup: Manual replacement of the deprecated strlcpy() with return values (Michal Koutný <mkoutny@...e.com>)
Re: [PATCH 01/20] cgroup: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)

February 24 (13 messages)

[PATCH v1 1/1] Kernel Config to make randomize_va_space read-only. ("Lan Zheng (lanzheng)" <lanzheng@...co.com>)
d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (kernel test robot <oliver.sang@...el.com>)
Re: [PATCH v1 1/1] Kernel Config to make randomize_va_space read-only. (Greg KH <gregkh@...uxfoundation.org>)
Re: d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (ebiederm@...ssion.com (Eric W. Biederman))
Re: d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (ebiederm@...ssion.com (Eric W. Biederman))
Re: d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Guenter Roeck <linux@...ck-us.net>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Kees Cook <keescook@...omium.org>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Guenter Roeck <linux@...ck-us.net>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Guenter Roeck <linux@...ck-us.net>)
Re: [PATCH v9 01/16] tracing: move function tracer options to Kconfig (causing parisc build failures) (Kees Cook <keescook@...omium.org>)

February 25 (17 messages)

Re: [PATCH 16/20] tracing/probe: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)
[PATCH v1 1/1] Kernel Config to make randomize_va_space read-only. ("Lan Zheng (lanzheng)" <lanzheng@...co.com>)
Re: [PATCH v1 1/1] Kernel Config to make randomize_va_space read-only. (Greg KH <greg@...ah.com>)
[PATCH v29 00/12] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 02/12] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 03/12] landlock: Set up the security framework and manage credentials (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 04/12] landlock: Add ptrace restrictions (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 05/12] LSM: Infrastructure management of the superblock (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 06/12] fs,security: Add sb_delete hook (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 08/12] landlock: Add syscall implementations (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 09/12] arch: Wire up Landlock syscalls (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 10/12] selftests/landlock: Add user space tests (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 11/12] samples/landlock: Add a sandbox manager example (Mickaël Salaün <mic@...ikod.net>)
[PATCH v29 12/12] landlock: Add user and kernel documentation (Mickaël Salaün <mic@...ikod.net>)
Re: d28296d248: stress-ng.sigsegv.ops_per_sec -82.7% regression (Alexey Gladkov <gladkov.alexey@...il.com>)

February 26 (2 messages)

Re: [PATCH 17/20] vt: Manual replacement of the deprecated strlcpy() with return values (Jiri Slaby <jirislaby@...nel.org>)
Re: [PATCH 17/20] vt: Manual replacement of the deprecated strlcpy() with return values (Romain Perier <romain.perier@...il.com>)

February 27 (12 messages)

[PATCH v4 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)
[PATCH v5 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)
[PATCH v5 1/8] security: Add LSM hook at the point where a task gets a fatal signal (John Wood <john.wood@....com>)
[PATCH v5 2/8] security/brute: Define a LSM and manage statistical data (John Wood <john.wood@....com>)
[PATCH v5 3/8] securtiy/brute: Detect a brute force attack (John Wood <john.wood@....com>)
[PATCH v5 4/8] security/brute: Fine tuning the attack detection (John Wood <john.wood@....com>)
[PATCH v5 5/8] security/brute: Mitigate a brute force attack (John Wood <john.wood@....com>)
[PATCH v5 6/8] selftests/brute: Add tests for the Brute LSM (John Wood <john.wood@....com>)
[PATCH v5 7/8] Documentation: Add documentation for the Brute LSM (John Wood <john.wood@....com>)
[PATCH v5 8/8] MAINTAINERS: Add a new entry for the Brute LSM (John Wood <john.wood@....com>)
Re: [PATCH v5 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)
Re: [PATCH v4 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)

February 28 (4 messages)

Re: [PATCH 19/20] usbip: usbip_host: Manual replacement of the deprecated strlcpy() with return values (Sergei Shtylyov <sergei.shtylyov@...il.com>)
Re: [PATCH 11/20] hwmon: Manual replacement of the deprecated strlcpy() with return values (Joe Perches <joe@...ches.com>)
Re: [PATCH 19/20] usbip: usbip_host: Manual replacement of the deprecated strlcpy() with return values (Andy Shevchenko <andy.shevchenko@...il.com>)
Re: [PATCH v5 7/8] Documentation: Add documentation for the Brute LSM (Andi Kleen <ak@...ux.intel.com>)

161 messages

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.