Kernel Hardening
[Prev Page][Next Page]
[RFC PATCH v9 0/3] Add introspect_access(2) (was O_MAYEXEC),
Mickaël Salaün
[PATCH] sched.h: drop in_ubsan field when UBSAN is in trap mode,
Elena Petrova
[RFC PATCH v8 0/3] Add support for AT_INTERPRETED (was O_MAYEXEC),
Mickaël Salaün
[RFC PATCH 0/9] Fork brute force attack mitigation (fbfam),
John Wood
[PATCH v6 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH v5 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH] scripts: Add intended executable mode and SPDX license,
Mrinal Pandey
[PATCH v3 0/6] Use per-CPU temporary mappings for patching,
Christopher M. Riedl
init_on_alloc/init_on_free boot options,
Jirka Hladky
usercopy arch_within_stack_frames() is a no-op in almost all modern kernel configurations,
Jann Horn
[PATCH v2] overflow: Add __must_check attribute to check_*() helpers,
Kees Cook
[PATCH v4 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH RFC 0/2] Break heap spraying needed for exploiting use-after-free,
Alexander Popov
[PATCH] overflow: Add __must_check attribute to check_*() helpers,
Kees Cook
[RFC] saturate check_*_overflow() output?,
Kees Cook
[PATCH v20 00/12] Landlock LSM,
Mickaël Salaün
[PATCH v20 06/12] fs,security: Add sb_delete hook, Mickaël Salaün
[PATCH v20 07/12] landlock: Support filesystem access-control, Mickaël Salaün
[PATCH v20 08/12] landlock: Add syscall implementations, Mickaël Salaün
[PATCH v20 09/12] arch: Wire up Landlock syscalls, Mickaël Salaün
[PATCH v20 11/12] samples/landlock: Add a sandbox manager example, Mickaël Salaün
[PATCH v20 10/12] selftests/landlock: Add initial tests, Mickaël Salaün
[PATCH v20 12/12] landlock: Add user and kernel documentation, Mickaël Salaün
Alternative CET ABI,
Florian Weimer
[PATCH 1/2] kbuild: move shared library build rules to scripts/gcc-plugins/Makefile,
Masahiro Yamada
[PATCH v3 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor,
madvenka
Re: [PATCH 12/26] netfilter: switch nf_setsockopt to sockptr_t,
Jason A. Donenfeld
[PATCH v7 0/7] Add support for O_MAYEXEC,
Mickaël Salaün
- [PATCH v7 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES, Mickaël Salaün
- [PATCH v7 2/7] exec: Move S_ISREG() check earlier, Mickaël Salaün
- [PATCH v7 3/7] exec: Move path_noexec() check earlier, Mickaël Salaün
- [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Mickaël Salaün
- [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC, Mickaël Salaün
- [PATCH v7 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing, Mickaël Salaün
- [PATCH v7 7/7] ima: add policy support for the new file open MAY_OPENEXEC flag, Mickaël Salaün
- Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Thibaut Sautereau
- Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Kees Cook
[PATCH v2 0/2] kernel/trace: Remove function callback casts,
Oscar Carter
[PATCH v4 00/10] Function Granular KASLR,
Kristen Carlson Accardi
- [PATCH v4 01/10] objtool: Do not assume order of parent/child functions, Kristen Carlson Accardi
- [PATCH v4 02/10] x86: tools/relocs: Support >64K section headers, Kristen Carlson Accardi
- [PATCH v4 03/10] x86/boot: Allow a "silent" kaslr random byte fetch, Kristen Carlson Accardi
- [PATCH v4 05/10] x86: Make sure _etext includes function sections, Kristen Carlson Accardi
- [PATCH v4 06/10] x86/tools: Add relative relocs for randomized functions, Kristen Carlson Accardi
- [PATCH v4 08/10] x86: Add support for function granular KASLR, Kristen Carlson Accardi
- [PATCH v4 07/10] x86/boot/compressed: Avoid duplicate malloc() implementations, Kristen Carlson Accardi
- [PATCH v4 04/10] x86: Makefile: Add build and config option for CONFIG_FG_KASLR, Kristen Carlson Accardi
- [PATCH v4 09/10] kallsyms: Hide layout, Kristen Carlson Accardi
- [PATCH v4 10/10] module: Reorder functions, Kristen Carlson Accardi
- Re: [PATCH v4 00/10] Function Granular KASLR, Miroslav Benes
- Re: [PATCH v4 00/10] Function Granular KASLR, Joe Lawrence
- Re: [PATCH v4 00/10] Function Granular KASLR, Ingo Molnar
[PATCH RFC v2 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH 0/3] Modernize tasklet callback API,
Kees Cook
[PATCH v6 0/7] Add support for O_MAYEXEC,
Mickaël Salaün
[PATCH] gcc-plugins: Replace HTTP links with HTTPS ones,
Alexander A. Klimov
Clarification about the series to modernize the tasklet api,
Oscar Carter
[PATCH RFC 0/3] io_uring: add restrictions to support untrusted applications and guests,
Stefano Garzarella
[PATCH v19 00/12] Landlock LSM,
Mickaël Salaün
- [PATCH v19 01/12] landlock: Add object management, Mickaël Salaün
- [PATCH v19 02/12] landlock: Add ruleset and domain management, Mickaël Salaün
- [PATCH v19 03/12] landlock: Set up the security framework and manage credentials, Mickaël Salaün
- [PATCH v19 04/12] landlock: Add ptrace restrictions, Mickaël Salaün
- [PATCH v19 05/12] LSM: Infrastructure management of the superblock, Mickaël Salaün
- [PATCH v19 06/12] fs,security: Add sb_delete hook, Mickaël Salaün
- [PATCH v19 07/12] landlock: Support filesystem access-control, Mickaël Salaün
- [PATCH v19 08/12] landlock: Add syscall implementation, Mickaël Salaün
- [PATCH v19 09/12] arch: Wire up landlock() syscall, Mickaël Salaün
- [PATCH v19 10/12] selftests/landlock: Add initial tests, Mickaël Salaün
- [PATCH v19 11/12] samples/landlock: Add a sandbox manager example, Mickaël Salaün
- [PATCH v19 12/12] landlock: Add user and kernel documentation, Mickaël Salaün
[PATCH v2] parisc/kernel/ftrace: Remove function callback casts, Oscar Carter
[PATCH] parisc/kernel/ftrace: Remove function callback casts,
Oscar Carter
[PATCH] drivers/s390/char/tty3270: Remove function callback casts,
Oscar Carter
[PATCH v3 0/2] arm64/acpi: restrict AML opregion memory access,
Ard Biesheuvel
[PATCH 00/22] add support for Clang LTO,
Sami Tolvanen
- [PATCH 01/22] objtool: use sh_info to find the base for .rela sections, Sami Tolvanen
- [PATCH 02/22] kbuild: add support for Clang LTO, Sami Tolvanen
- [PATCH 03/22] kbuild: lto: fix module versioning, Sami Tolvanen
- [PATCH 04/22] kbuild: lto: fix recordmcount, Sami Tolvanen
- [PATCH 05/22] kbuild: lto: postpone objtool, Sami Tolvanen
- [PATCH 06/22] kbuild: lto: limit inlining, Sami Tolvanen
- [PATCH 07/22] kbuild: lto: merge module sections, Sami Tolvanen
- [PATCH 08/22] kbuild: lto: remove duplicate dependencies from .mod files, Sami Tolvanen
- [PATCH 09/22] init: lto: ensure initcall ordering, Sami Tolvanen
- [PATCH 10/22] init: lto: fix PREL32 relocations, Sami Tolvanen
- [PATCH 11/22] pci: lto: fix PREL32 relocations, Sami Tolvanen
- [PATCH 12/22] modpost: lto: strip .lto from module names, Sami Tolvanen
- [PATCH 13/22] scripts/mod: disable LTO for empty.c, Sami Tolvanen
- [PATCH 14/22] efi/libstub: disable LTO, Sami Tolvanen
- [PATCH 15/22] drivers/misc/lkdtm: disable LTO for rodata.o, Sami Tolvanen
- [PATCH 16/22] arm64: export CC_USING_PATCHABLE_FUNCTION_ENTRY, Sami Tolvanen
- [PATCH 17/22] arm64: vdso: disable LTO, Sami Tolvanen
- [PATCH 18/22] arm64: allow LTO_CLANG and THINLTO to be selected, Sami Tolvanen
- [PATCH 19/22] x86, vdso: disable LTO only for vDSO, Sami Tolvanen
- [PATCH 20/22] x86, ftrace: disable recordmcount for ftrace_make_nop, Sami Tolvanen
- [PATCH 21/22] x86, relocs: Ignore L4_PAGE_OFFSET relocations, Sami Tolvanen
- [PATCH 22/22] x86, build: allow LTO_CLANG and THINLTO to be selected, Sami Tolvanen
- Re: [PATCH 00/22] add support for Clang LTO, Peter Zijlstra
- Re: [PATCH 00/22] add support for Clang LTO, Masahiro Yamada
- Re: [PATCH 00/22] add support for Clang LTO, Paul Menzel
[Index of Archives]
[Linux Samsung SoC]
[Linux Actions SoC]
[Linux Rockchip SoC]
[Linux for Synopsys ARC Processors]
[Linux USB Devel]
[Video for Linux]
[Linux SCSI]
[Yosemite Forum]