Linux Containers

• Date Index

• [RFC PATCH 1/3] seccomp: Refactor notification handler to prepare for new semantics, (continued)
  • [RFC PATCH 1/3] seccomp: Refactor notification handler to prepare for new semantics, Sargun Dhillon
• [GIT PULL] user namespace updates for v5.12-rc1, Eric W. Biederman
  • Re: [GIT PULL] user namespace updates for v5.12-rc1, pr-tracker-bot
• [PATCH v6 0/7] Count rlimits in each user namespace, Alexey Gladkov
  • [PATCH v6 1/7] Increase size of ucounts to atomic_long_t, Alexey Gladkov
  • [PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts, Alexey Gladkov
    • Re: [PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts, kernel test robot
    • Re: [PATCH v6 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts, kernel test robot
    • [PATCH v7 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts, Alexey Gladkov
    • f009495a8d: BUG:KASAN:use-after-free_in_user_shm_unlock, kernel test robot
  • [PATCH v6 7/7] kselftests: Add test to check for rlimit changes in different user namespaces, Alexey Gladkov
  • [PATCH v6 5/7] Reimplement RLIMIT_SIGPENDING on top of ucounts, Alexey Gladkov
  • [PATCH v6 4/7] Reimplement RLIMIT_MSGQUEUE on top of ucounts, Alexey Gladkov
  • [PATCH v6 2/7] Add a reference to ucounts for each cred, Alexey Gladkov
  • [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts, Alexey Gladkov
    • Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts, Jens Axboe
      • Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts, Alexey Gladkov
        • Re: [PATCH v6 3/7] Reimplement RLIMIT_NPROC on top of ucounts, Jens Axboe
  • Re: [PATCH v6 0/7] Count rlimits in each user namespace, Linus Torvalds
    • Re: [PATCH v6 0/7] Count rlimits in each user namespace, Alexey Gladkov
    • Re: [PATCH v6 0/7] Count rlimits in each user namespace, Eric W. Biederman
• Re: VIE200714-01 BL /Shipment, Taxu
• [RFC][PATCH 0/2] keys: request_key() interception in containers, David Howells
  • [PATCH 1/2] Add namespace tags that can be used for matching without pinning a ns, David Howells
    • Re: [PATCH 1/2] Add namespace tags that can be used for matching without pinning a ns, Jarkko Sakkinen
    • Re: [PATCH 1/2] Add namespace tags that can be used for matching without pinning a ns, David Howells
      • Re: [PATCH 1/2] Add namespace tags that can be used for matching without pinning a ns, Jarkko Sakkinen
  • [PATCH 2/2] keys: Allow request_key upcalls from a container to be intercepted, David Howells
• [PATCH v5 0/7] Count rlimits in each user namespace, Alexey Gladkov
  • [PATCH v5 1/7] Increase size of ucounts to atomic_long_t, Alexey Gladkov
  • [PATCH v5 4/7] Reimplement RLIMIT_MSGQUEUE on top of ucounts, Alexey Gladkov
  • [PATCH v5 3/7] Reimplement RLIMIT_NPROC on top of ucounts, Alexey Gladkov
    • c632dadc10: BUG:KASAN:null-ptr-deref_in_is_ucounts_overlimit, kernel test robot
  • [PATCH v5 5/7] Reimplement RLIMIT_SIGPENDING on top of ucounts, Alexey Gladkov
  • [PATCH v5 2/7] Add a reference to ucounts for each cred, Alexey Gladkov
  • [PATCH v5 7/7] kselftests: Add test to check for rlimit changes in different user namespaces, Alexey Gladkov
  • [PATCH v5 6/7] Reimplement RLIMIT_MEMLOCK on top of ucounts, Alexey Gladkov
    • 0ac0c30c8f: WARNING:at_kernel/ucount.c:#dec_rlimit_ucounts, kernel test robot
• [PATCH v4 0/7] Count rlimits in each user namespace, Alexey Gladkov
  • [PATCH v4 4/7] Move RLIMIT_SIGPENDING counter to ucounts, Alexey Gladkov
  • [PATCH v4 6/7] Move RLIMIT_NPROC check to the place where we increment the counter, Alexey Gladkov
  • [PATCH v4 7/7] kselftests: Add test to check for rlimit changes in different user namespaces, Alexey Gladkov
  • [PATCH v4 5/7] Move RLIMIT_MEMLOCK counter to ucounts, Alexey Gladkov
  • [PATCH v4 2/7] Move RLIMIT_NPROC counter to ucounts, Alexey Gladkov
  • [PATCH v4 1/7] Add a reference to ucounts for each cred, Alexey Gladkov
  • [PATCH v4 3/7] Move RLIMIT_MSGQUEUE counter to ucounts, Alexey Gladkov
• [PATCH v6 00/40] idmapped mounts, Christian Brauner
  • [PATCH v6 02/40] fs: add id translation helpers, Christian Brauner
    • Re: [PATCH v6 02/40] fs: add id translation helpers, Vivek Goyal
  • [PATCH v6 01/40] mount: attach mappings to mounts, Christian Brauner
  • [PATCH v6 03/40] fs: add file and path permissions helpers, Christian Brauner
    • Re: [PATCH v6 03/40] fs: add file and path permissions helpers, James Morris
  • [PATCH v6 04/40] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 04/40] capability: handle idmapped mounts, James Morris
  • [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, James Morris
    • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, J. Bruce Fields
      • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
        • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, J. Bruce Fields
          • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
  • [PATCH v6 09/40] xattr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, James Morris
  • [PATCH v6 06/40] inode: make init and permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v6 06/40] inode: make init and permission helpers idmapped mount aware, James Morris
  • [PATCH v6 16/40] open: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 16/40] open: handle idmapped mounts, James Morris
    • Re: [PATCH v6 16/40] open: handle idmapped mounts, Christoph Hellwig
  • [PATCH v6 11/40] stat: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 11/40] stat: handle idmapped mounts, James Morris
  • [PATCH v6 13/40] namei: introduce struct renamedata, Christian Brauner
  • [PATCH v6 14/40] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH v6 19/40] fcntl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 19/40] fcntl: handle idmapped mounts, James Morris
  • [PATCH v6 15/40] open: handle idmapped mounts in do_truncate(), Christian Brauner
    • Re: [PATCH v6 15/40] open: handle idmapped mounts in do_truncate(), Christoph Hellwig
  • [PATCH v6 18/40] utimes: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 18/40] utimes: handle idmapped mounts, James Morris
  • [PATCH v6 08/40] acl: handle idmapped mounts, Christian Brauner
  • [PATCH v6 07/40] attr: handle idmapped mounts, Christian Brauner
  • [PATCH v6 17/40] af_unix: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 17/40] af_unix: handle idmapped mounts, James Morris
  • [PATCH v6 12/40] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
    • Re: [PATCH v6 12/40] namei: handle idmapped mounts in may_*() helpers, James Morris
  • [PATCH v6 10/40] commoncap: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 10/40] commoncap: handle idmapped mounts, James Morris
  • [PATCH v6 30/40] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v6 20/40] init: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 20/40] init: handle idmapped mounts, Christoph Hellwig
  • [PATCH v6 38/40] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v6 27/40] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
    • Re: [PATCH v6 27/40] ecryptfs: do not mount on top of idmapped mounts, James Morris
  • [PATCH v6 31/40] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v6 28/40] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
    • Re: [PATCH v6 28/40] overlayfs: do not mount on top of idmapped mounts, James Morris
  • [PATCH v6 32/40] fs: split out functions to hold writers, Christian Brauner
  • [PATCH v6 26/39] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v6 33/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v6 25/40] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v6 37/40] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v6 36/40] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v6 29/40] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v6 24/40] fs: make helpers idmap mount aware, Christian Brauner
  • [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 23/40] exec: handle idmapped mounts, James Morris
    • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Eric W. Biederman
      • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
        • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Serge E. Hallyn
          • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
        • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Serge E. Hallyn
  • [PATCH v6 22/40] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
    • Re: [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
      • Re: [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
  • [PATCH v6 34/40] fs: add mount_setattr(), Christian Brauner
  • [PATCH v6 21/40] ioctl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 21/40] ioctl: handle idmapped mounts, James Morris
  • [PATCH v6 39/40] xfs: support idmapped mounts, Christian Brauner
    • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Darrick J. Wong
      • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Christian Brauner
      • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Christoph Hellwig
  • [PATCH v6 40/40] generic/622: add fstests for idmapped mounts, Christian Brauner
  • Re: [PATCH v6 00/40] idmapped mounts, Serge E. Hallyn
  • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, David Howells
    • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, David Howells
      • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, Christian Brauner
• [RFC PATCH v3 0/8] Count rlimits in each user namespace, Alexey Gladkov
  • [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Alexey Gladkov
    • c25050162e: WARNING:at_lib/refcount.c:#refcount_warn_saturate, kernel test robot
    • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Linus Torvalds
      • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Alexey Gladkov
        • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Linus Torvalds
          • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Alexey Gladkov
            • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Kaiwan N Billimoria
            • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Eric W. Biederman
              • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Eric W. Biederman
              • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Alexey Gladkov
                • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Eric W. Biederman
                  • Re: [RFC PATCH v3 1/8] Use refcount_t for ucounts reference counting, Alexey Gladkov
  • [RFC PATCH v3 7/8] Move RLIMIT_NPROC check to the place where we increment the counter, Alexey Gladkov
  • [RFC PATCH v3 5/8] Move RLIMIT_SIGPENDING counter to ucounts, Alexey Gladkov
  • [RFC PATCH v3 4/8] Move RLIMIT_MSGQUEUE counter to ucounts, Alexey Gladkov
  • [RFC PATCH v3 6/8] Move RLIMIT_MEMLOCK counter to ucounts, Alexey Gladkov
  • [RFC PATCH v3 3/8] Move RLIMIT_NPROC counter to ucounts, Alexey Gladkov
  • [RFC PATCH v3 8/8] kselftests: Add test to check for rlimit changes in different user namespaces, Alexey Gladkov
  • [RFC PATCH v3 2/8] Add a reference to ucounts for each cred, Alexey Gladkov
    • 14c3c8a27f: kernel_BUG_at_kernel/cred.c, kernel test robot
    • [PATCH v4 2/8] Add a reference to ucounts for each cred, Alexey Gladkov
• [PATCH v5 00/42] idmapped mounts, Christian Brauner
  • [PATCH v5 02/42] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v5 01/42] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v5 04/42] fs: split out functions to hold writers, Christian Brauner
  • [PATCH v5 03/42] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v5 05/42] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v5 08/42] fs: add id translation helpers, Christian Brauner
  • [PATCH v5 10/42] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 10/42] capability: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 09/42] mount: attach mappings to mounts, Christian Brauner
    • Re: [PATCH v5 09/42] mount: attach mappings to mounts, Christoph Hellwig
  • [PATCH v5 07/42] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v5 11/42] namei: make permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v5 11/42] namei: make permission helpers idmapped mount aware, Christoph Hellwig
  • [PATCH v5 12/42] inode: make init and permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v5 12/42] inode: make init and permission helpers idmapped mount aware, Christoph Hellwig
  • [PATCH v5 14/42] acl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 14/42] acl: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 17/42] commoncap: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 17/42] commoncap: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 19/42] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
    • Re: [PATCH v5 19/42] namei: handle idmapped mounts in may_*() helpers, Christoph Hellwig
  • [PATCH v5 18/42] stat: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 18/42] stat: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 06/42] fs: add mount_setattr(), Christian Brauner
  • [PATCH v5 16/42] xattr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 16/42] xattr: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 15/42] fs: add file_user_ns() helper, Christian Brauner
    • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Christoph Hellwig
    • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Jann Horn via Containers
      • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Christian Brauner
  • [PATCH v5 13/42] attr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 13/42] attr: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 20/42] namei: introduce struct renamedata, Christian Brauner
    • Re: [PATCH v5 20/42] namei: introduce struct renamedata, Christoph Hellwig
  • [PATCH v5 39/42] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v5 42/42] generic/622: add fstests for idmapped mounts, Christian Brauner
  • [PATCH v5 41/42] tests: extend mount_setattr tests, Christian Brauner
    • Re: [PATCH v5 41/42] tests: extend mount_setattr tests, Randy Dunlap
  • [PATCH v5 21/42] namei: prepare for idmapped mounts, Christian Brauner
    • Re: [PATCH v5 21/42] namei: prepare for idmapped mounts, Christoph Hellwig
  • [PATCH v5 34/42] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v5 30/42] would_dump: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 30/42] would_dump: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 35/42] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v5 32/42] fs: make helpers idmap mount aware, Christian Brauner
    • Re: [PATCH v5 32/42] fs: make helpers idmap mount aware, Christoph Hellwig
  • [PATCH v5 23/42] open: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 23/42] open: handle idmapped mounts, Christoph Hellwig
      • Re: [PATCH v5 23/42] open: handle idmapped mounts, Christian Brauner
  • [PATCH v5 22/42] open: handle idmapped mounts in do_truncate(), Christian Brauner
    • Re: [PATCH v5 22/42] open: handle idmapped mounts in do_truncate(), Christoph Hellwig
  • [PATCH v5 38/42] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v5 26/42] fcntl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 26/42] fcntl: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 33/42] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v5 29/42] ioctl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 29/42] ioctl: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 37/42] xfs: support idmapped mounts, Christian Brauner
    • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Dave Chinner
      • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Christian Brauner
        • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Dave Chinner
      • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Christoph Hellwig
  • [PATCH v5 28/42] init: handle idmapped mounts, Christian Brauner
  • [PATCH v5 25/42] utimes: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 25/42] utimes: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 31/42] exec: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 31/42] exec: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 36/42] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
    • Re: [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
      • Re: [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH v5 27/42] notify: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 27/42] notify: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 24/42] af_unix: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 24/42] af_unix: handle idmapped mounts, Christoph Hellwig
  • Re: [PATCH v5 00/42] idmapped mounts, Darrick J. Wong
    • Re: [PATCH v5 00/42] idmapped mounts, Christian Brauner
    • Re: [PATCH v5 00/42] idmapped mounts, Dave Chinner
      • Re: [PATCH v5 00/42] idmapped mounts, Christoph Hellwig
        • Re: [PATCH v5 00/42] idmapped mounts, Theodore Ts'o
          • Re: [PATCH v5 00/42] idmapped mounts, Christian Brauner
• [PATCH ghak90 v11 00/11] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 v11 01/11] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 v11 02/11] audit: add container id, Richard Guy Briggs
  • [PATCH ghak90 v11 03/11] audit: log container info of syscalls, Richard Guy Briggs
  • [PATCH ghak90 v11 04/11] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
  • [PATCH ghak90 v11 05/11] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 v11 06/11] audit: add containerid support for user records, Richard Guy Briggs
  • [PATCH ghak90 v11 07/11] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 v11 08/11] audit: add support for containerid to network namespaces, Richard Guy Briggs
  • [PATCH ghak90 v11 09/11] audit: contid check descendancy and nesting, Richard Guy Briggs
  • [PATCH ghak90 v11 10/11] audit: track container nesting, Richard Guy Briggs
  • [PATCH ghak90 v11 11/11] audit: add capcontid to set contid outside init_user_ns, Richard Guy Briggs
• [RFC PATCH v2 0/8] Count rlimits in each user namespace, Alexey Gladkov
  • [RFC PATCH v2 1/8] Use atomic type for ucounts reference counting, Alexey Gladkov
    • Re: [RFC PATCH v2 1/8] Use atomic type for ucounts reference counting, Eric W. Biederman
      • Re: [RFC PATCH v2 1/8] Use atomic type for ucounts reference counting, Kees Cook
  • [RFC PATCH v2 4/8] Move RLIMIT_NPROC counter to ucounts, Alexey Gladkov
  • [RFC PATCH v2 2/8] Add a reference to ucounts for each user, Alexey Gladkov
    • 59ebc79722: kernel_BUG_at_kernel/cred.c, kernel test robot
    • Re: [RFC PATCH v2 2/8] Add a reference to ucounts for each user, Eric W. Biederman
  • [RFC PATCH v2 3/8] Increase size of ucounts to atomic_long_t, Alexey Gladkov
  • [RFC PATCH v2 8/8] Move RLIMIT_NPROC check to the place where we increment the counter, Alexey Gladkov
  • [RFC PATCH v2 6/8] Move RLIMIT_SIGPENDING counter to ucounts, Alexey Gladkov
  • [RFC PATCH v2 7/8] Move RLIMIT_MEMLOCK counter to ucounts, Alexey Gladkov
  • [RFC PATCH v2 5/8] Move RLIMIT_MSGQUEUE counter to ucounts, Alexey Gladkov
  • Re: [RFC PATCH v2 0/8] Count rlimits in each user namespace, Linus Torvalds
    • Re: [RFC PATCH v2 0/8] Count rlimits in each user namespace, Eric W. Biederman
• RE: follow up 2021, Susan Taylor
• [PATCH ghau51/ghau40 v10 00/11] add support for audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 01/11] AUDIT_CONTAINER_OP message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 02/11] AUDIT_CONTAINER_ID message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 03/11] auditctl: add support for AUDIT_CONTID filter, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 04/11] add ausearch containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 06/11] libaudit: add support to get the task audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 05/11] start normalization containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 08/11] add support for audit_signal_info2, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 07/11] signal_info: only print context if it is available., Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 09/11] contid: interpret correctly CONTAINER_ID contid field csv, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 10/11] ausearch: convert contid to comma-sep/carrat-mod cnode/clist, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v10 11/11] libaudit: add support to get and set capcontid on a task, Richard Guy Briggs
• [PATCH ghak90 v10 00/11] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Richard Guy Briggs
    • Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Paul Moore
      • Re: [PATCH ghak90 v10 01/11] audit: collect audit task parameters, Richard Guy Briggs
  • [PATCH ghak90 v10 02/11] audit: add container id, Richard Guy Briggs
  • [PATCH ghak90 v10 04/11] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
  • [PATCH ghak90 v10 03/11] audit: log container info of syscalls, Richard Guy Briggs
  • [PATCH ghak90 v10 05/11] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH ghak90 v10 06/11] audit: add containerid support for user records, Richard Guy Briggs
  • [PATCH ghak90 v10 07/11] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 v10 08/11] audit: add support for containerid to network namespaces, Richard Guy Briggs
  • [PATCH ghak90 v10 09/11] audit: contid check descendancy and nesting, Richard Guy Briggs
  • [PATCH ghak90 v10 10/11] audit: track container nesting, Richard Guy Briggs
  • [PATCH ghak90 v10 11/11] audit: add capcontid to set contid outside init_user_ns, Richard Guy Briggs
• [PATCH v4 00/40] idmapped mounts, Christian Brauner
  • [PATCH v4 01/40] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
    • Re: [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christoph Hellwig
      • Re: [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v4 10/40] capability: handle idmapped mounts, Christian Brauner
  • [PATCH v4 09/40] mount: attach mappings to mounts, Christian Brauner
  • [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
    • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christoph Hellwig
      • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
        • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christoph Hellwig
          • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
            • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
  • [PATCH v4 03/40] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v4 12/40] inode: make init and permission helpers idmapped mount aware, Christian Brauner
  • [PATCH v4 17/40] stat: handle idmapped mounts, Christian Brauner
  • [PATCH v4 02/40] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v4 07/40] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v4 04/40] fs: split out functions to hold writers, Christian Brauner
    • Re: [PATCH v4 04/40] fs: split out functions to hold writers, Christoph Hellwig
  • [PATCH v4 11/40] namei: make permission helpers idmapped mount aware, Christian Brauner
  • [PATCH v4 19/40] namei: introduce struct renamedata, Christian Brauner
  • [PATCH v4 16/40] commoncap: handle idmapped mounts, Christian Brauner
  • [PATCH v4 08/40] fs: add id translation helpers, Christian Brauner
  • [PATCH v4 15/40] xattr: handle idmapped mounts, Christian Brauner
  • [PATCH v4 13/40] attr: handle idmapped mounts, Christian Brauner
  • [PATCH v4 14/40] acl: handle idmapped mounts, Christian Brauner
  • [PATCH v4 18/40] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
  • [PATCH v4 24/40] utimes: handle idmapped mounts, Christian Brauner
  • [PATCH v4 38/40] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH v4 29/40] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH v4 23/40] af_unix: handle idmapped mounts, Christian Brauner
  • [PATCH v4 21/40] open: handle idmapped mounts in do_truncate(), Christian Brauner
  • [PATCH v4 37/40] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v4 36/40] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v4 20/40] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH v4 33/40] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v4 22/40] open: handle idmapped mounts, Christian Brauner
  • [PATCH v4 35/40] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v4 39/40] tests: extend mount_setattr tests, Christian Brauner
  • [PATCH v4 27/40] init: handle idmapped mounts, Christian Brauner
  • [PATCH v4 32/40] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v4 25/40] fcntl: handle idmapped mounts, Christian Brauner
  • [PATCH v4 26/40] notify: handle idmapped mounts, Christian Brauner
  • [PATCH v4 31/40] fs: make helpers idmap mount aware, Christian Brauner
  • [PATCH v4 28/40] ioctl: handle idmapped mounts, Christian Brauner
  • [PATCH v4 30/40] exec: handle idmapped mounts, Christian Brauner
  • [PATCH v4 34/40] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v4 40/40] generic/618: add fstests for idmapped mounts, Christian Brauner
• Re: [PATCH] kernel: automatically split user namespace extent, Eric W. Biederman
  • Re: [PATCH] kernel: automatically split user namespace extent, Giuseppe Scrivano
    • Re: [PATCH] kernel: automatically split user namespace extent, Serge E. Hallyn
      • Re: [PATCH] kernel: automatically split user namespace extent, Giuseppe Scrivano
        • Re: [PATCH] kernel: automatically split user namespace extent, Giuseppe Scrivano
          • Re: [PATCH] kernel: automatically split user namespace extent, Serge E. Hallyn
• [PATCH v3 00/38] idmapped mounts, Christian Brauner
  • [PATCH v3 01/38] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
    • Re: [PATCH v3 01/38] namespace: take lock_mount_hash() directly when changing flags, Christoph Hellwig
      • Re: [PATCH v3 01/38] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v3 02/38] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
    • Re: [PATCH v3 02/38] mount: make {lock,unlock}_mount_hash() static, Christoph Hellwig
      • Re: [PATCH v3 02/38] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v3 07/38] mount: attach mappings to mounts, Christian Brauner
    • Re: [PATCH v3 07/38] mount: attach mappings to mounts, Christoph Hellwig
      • Re: [PATCH v3 07/38] mount: attach mappings to mounts, Tycho Andersen
      • Re: [PATCH v3 07/38] mount: attach mappings to mounts, Christian Brauner
  • [PATCH v3 08/38] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v3 08/38] capability: handle idmapped mounts, Serge E. Hallyn
  • [PATCH v3 04/38] fs: add mount_setattr(), Christian Brauner
    • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christoph Hellwig
      • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christian Brauner
        • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christoph Hellwig
          • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christoph Hellwig
            • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christian Brauner
              • Re: [PATCH v3 04/38] fs: add mount_setattr(), Christoph Hellwig
  • [PATCH v3 03/38] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
    • Re: [PATCH v3 03/38] namespace: only take read lock in do_reconfigure_mnt(), Christoph Hellwig
      • Re: [PATCH v3 03/38] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v3 06/38] fs: add id translation helpers, Christian Brauner
    • Re: [PATCH v3 06/38] fs: add id translation helpers, Christoph Hellwig
      • Re: [PATCH v3 06/38] fs: add id translation helpers, Christian Brauner
  • [PATCH v3 09/38] namei: add idmapped mount aware permission helpers, Christian Brauner
    • Re: [PATCH v3 09/38] namei: add idmapped mount aware permission helpers, Serge E. Hallyn
      • Re: [PATCH v3 09/38] namei: add idmapped mount aware permission helpers, Christian Brauner
    • Re: [PATCH v3 09/38] namei: add idmapped mount aware permission helpers, Christoph Hellwig
      • Re: [PATCH v3 09/38] namei: add idmapped mount aware permission helpers, Christian Brauner
  • [PATCH v3 14/38] commoncap: handle idmapped mounts, Christian Brauner
  • [PATCH v3 17/38] namei: introduce struct renamedata, Christian Brauner
    • Re: [PATCH v3 17/38] namei: introduce struct renamedata, Christoph Hellwig
      • Re: [PATCH v3 17/38] namei: introduce struct renamedata, Christian Brauner
  • [PATCH v3 16/38] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
  • [PATCH v3 19/38] open: handle idmapped mounts in do_truncate(), Christian Brauner
  • [PATCH v3 10/38] inode: add idmapped mount aware init and permission helpers, Christian Brauner
    • Re: [PATCH v3 10/38] inode: add idmapped mount aware init and permission helpers, Christoph Hellwig
      • Re: [PATCH v3 10/38] inode: add idmapped mount aware init and permission helpers, Christian Brauner
  • [PATCH v3 15/38] stat: handle idmapped mounts, Christian Brauner
  • [PATCH v3 05/38] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v3 13/38] xattr: handle idmapped mounts, Christian Brauner
  • [PATCH v3 11/38] attr: handle idmapped mounts, Christian Brauner
  • [PATCH v3 12/38] acl: handle idmapped mounts, Christian Brauner
  • [PATCH v3 18/38] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH v3 34/38] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v3 21/38] af_unix: handle idmapped mounts, Christian Brauner
  • [PATCH v3 24/38] notify: handle idmapped mounts, Christian Brauner
  • [PATCH v3 22/38] utimes: handle idmapped mounts, Christian Brauner
  • [PATCH v3 36/38] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH v3 27/38] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH v3 32/38] fat: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v3 32/38] fat: handle idmapped mounts, Mauricio Vásquez Bernal
      • Re: [PATCH v3 32/38] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v3 23/38] fcntl: handle idmapped mounts, Christian Brauner
  • [PATCH v3 26/38] ioctl: handle idmapped mounts, Christian Brauner
  • [PATCH v3 35/38] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v3 28/38] exec: handle idmapped mounts, Christian Brauner
  • [PATCH v3 25/38] init: handle idmapped mounts, Christian Brauner
  • [PATCH v3 30/38] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v3 38/38] generic/618: add fstests for idmapped mounts, Christian Brauner
  • [PATCH v3 37/38] tests: extend mount_setattr tests, Christian Brauner
  • [PATCH v3 33/38] ext4: support idmapped mounts, Christian Brauner
    • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Mauricio Vásquez Bernal
      • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Christian Brauner
    • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Christoph Hellwig
      • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Christian Brauner
        • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Christoph Hellwig
          • Re: [PATCH v3 33/38] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v3 31/38] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v3 20/38] open: handle idmapped mounts, Christian Brauner
  • [PATCH v3 29/38] fs: add helpers for idmap mounts, Christian Brauner
  • Re: [PATCH v3 00/38] idmapped mounts, Serge E. Hallyn
    • Re: [PATCH v3 00/38] idmapped mounts, Christian Brauner
• SECCOMP_IOCTL_NOTIF_ADDFD race condition, Alban Crequy
  • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Tycho Andersen
    • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Sargun Dhillon
    • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Tycho Andersen
      • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Sargun Dhillon
        • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Tycho Andersen
          • Re: SECCOMP_IOCTL_NOTIF_ADDFD race condition, Kees Cook
• [PATCH v3 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
  • [PATCH v3 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
  • [PATCH v3 2/2] selftests: core: add tests for CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • [selftests] 4d9c16a494: kernel-selftests.core.make_fail, kernel test robot
  • Re: [PATCH v3 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
• [PATCH v2 00/39] fs: idmapped mounts, Christian Brauner
  • [PATCH v2 03/39] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v2 01/39] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v2 02/39] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v2 06/39] fs: add id translation helpers, Christian Brauner
  • [PATCH v2 04/39] fs: add mount_setattr(), Christian Brauner
  • [PATCH v2 07/39] mount: attach mappings to mounts, Christian Brauner
    • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Tycho Andersen
      • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Tycho Andersen
        • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Christian Brauner
          • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Tycho Andersen
            • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Christian Brauner
              • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Tycho Andersen
                • Re: [PATCH v2 07/39] mount: attach mappings to mounts, Christian Brauner
  • [PATCH v2 05/39] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v2 08/39] capability: handle idmapped mounts, Christian Brauner
  • [PATCH v2 09/39] namei: add idmapped mount aware permission helpers, Christian Brauner
  • [PATCH v2 10/39] inode: add idmapped mount aware init and permission helpers, Christian Brauner
    • Re: [PATCH v2 10/39] inode: add idmapped mount aware init and permission helpers, Serge E. Hallyn
  • [PATCH v2 17/39] namei: introduce struct renamedata, Christian Brauner
  • [PATCH v2 13/39] xattr: handle idmapped mounts, Christian Brauner
  • [PATCH v2 14/39] commoncap: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v2 14/39] commoncap: handle idmapped mounts, Paul Moore
      • Re: [PATCH v2 14/39] commoncap: handle idmapped mounts, Christian Brauner
  • [PATCH v2 15/39] stat: handle idmapped mounts, Christian Brauner
  • [PATCH v2 12/39] acl: handle idmapped mounts, Christian Brauner
  • [PATCH v2 11/39] attr: handle idmapped mounts, Christian Brauner
  • [PATCH v2 19/39] open: handle idmapped mounts in do_truncate(), Christian Brauner
  • [PATCH v2 16/39] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
  • [PATCH v2 18/39] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH v2 36/39] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v2 31/39] audit: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v2 31/39] audit: handle idmapped mounts, Paul Moore
      • Re: [PATCH v2 31/39] audit: handle idmapped mounts, Christian Brauner
        • Re: [PATCH v2 31/39] audit: handle idmapped mounts, Paul Moore
  • [PATCH v2 33/39] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v2 37/39] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH v2 29/39] fs: add helpers for idmap mounts, Christian Brauner
  • [PATCH v2 24/39] notify: handle idmapped mounts, Christian Brauner
  • [PATCH v2 38/39] selftests: add idmapped mounts xattr selftest, Christian Brauner
  • [PATCH v2 32/39] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v2 39/39] tests: add vfs/idmapped mounts test suite, Christian Brauner
    • Re: [PATCH v2 39/39] tests: add vfs/idmapped mounts test suite, Kees Cook
  • [PATCH v2 28/39] exec: handle idmapped mounts, Christian Brauner
  • [PATCH v2 25/39] init: handle idmapped mounts, Christian Brauner
  • [PATCH v2 22/39] utimes: handle idmapped mounts, Christian Brauner
  • [PATCH v2 30/39] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v2 20/39] open: handle idmapped mounts, Christian Brauner
  • [PATCH v2 23/39] fcntl: handle idmapped mounts, Christian Brauner
  • [PATCH v2 26/39] ioctl: handle idmapped mounts, Christian Brauner
  • [PATCH v2 27/39] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH v2 34/39] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v2 21/39] af_unix: handle idmapped mounts, Christian Brauner
  • [PATCH v2 35/39] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
  • Re: [PATCH v2 00/39] fs: idmapped mounts, Jonathan Corbet
    • Re: [PATCH v2 00/39] fs: idmapped mounts, Christian Brauner
  • Re: [PATCH v2 00/39] fs: idmapped mounts, Stephen Barber
  • Re: [PATCH v2 00/39] fs: idmapped mounts, Darrick J. Wong
    • Re: [PATCH v2 00/39] fs: idmapped mounts, Christian Brauner
      • Re: [PATCH v2 00/39] fs: idmapped mounts, Christoph Hellwig
        • Re: [PATCH v2 00/39] fs: idmapped mounts, Christian Brauner
• [PATCH seccomp v2 0/8] seccomp: add bitmap cache support on remaining arches and report cache in procfs, YiFei Zhu
  • [PATCH seccomp v2 2/8] parisc: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 1/8] csky: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 3/8] powerpc: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 4/8] riscv: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 5/8] s390: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 6/8] sh: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 7/8] xtensa: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp v2 8/8] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
  • Re: [PATCH seccomp v2 0/8] seccomp: add bitmap cache support on remaining arches and report cache in procfs, Kees Cook
• FW: 10K LinkedIn Leads at 500, Tina Joseph
• RFC: default to spec_store_bypass_disable=prctl spectre_v2_user=prctl, Andrea Arcangeli
  • Re: RFC: default to spec_store_bypass_disable=prctl spectre_v2_user=prctl, Kees Cook
  • Re: RFC: default to spec_store_bypass_disable=prctl spectre_v2_user=prctl, Thomas Gleixner
    • Re: RFC: default to spec_store_bypass_disable=prctl spectre_v2_user=prctl, Andrea Arcangeli
      • [PATCH 0/1] x86: deduplicate the spectre_v2_user documentation, Andrea Arcangeli
        • [PATCH 1/1] x86: deduplicate the spectre_v2_user documentation, Andrea Arcangeli
    • [PATCH 1/1] x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl, Andrea Arcangeli
• [PATCH seccomp 0/8] seccomp: add bitmap cache support on remaining arches and report cache in procfs, YiFei Zhu
  • [PATCH seccomp 1/8] csky: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp 2/8] parisc: Enable seccomp architecture tracking, YiFei Zhu
    • Re: [PATCH seccomp 2/8] parisc: Enable seccomp architecture tracking, Helge Deller
  • [PATCH seccomp 3/8] powerpc: Enable seccomp architecture tracking, YiFei Zhu
    • Re: [PATCH seccomp 3/8] powerpc: Enable seccomp architecture tracking, Michael Ellerman
      • Re: [PATCH seccomp 3/8] powerpc: Enable seccomp architecture tracking, YiFei Zhu
        • Re: [PATCH seccomp 3/8] powerpc: Enable seccomp architecture tracking, Michael Ellerman
  • [PATCH seccomp 4/8] riscv: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp 5/8] s390: Enable seccomp architecture tracking, YiFei Zhu
    • Re: [PATCH seccomp 5/8] s390: Enable seccomp architecture tracking, Heiko Carstens
  • [PATCH seccomp 6/8] sh: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp 7/8] xtensa: Enable seccomp architecture tracking, YiFei Zhu
  • [PATCH seccomp 8/8] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
  • Re: [PATCH seccomp 0/8] seccomp: add bitmap cache support on remaining arches and report cache in procfs, Kees Cook
• [PATCH 1/3] seccomp: Return from SECCOMP_IOCTL_NOTIF_RECV when children are gone, Jann Horn via Containers
  • [PATCH 2/3] samples: seccomp: simplify user-trap sample, Jann Horn via Containers
  • [PATCH 3/3] selftests/seccomp: Test NOTIF_RECV empty/dead errors, Jann Horn via Containers
  • Re: [PATCH 1/3] seccomp: Return from SECCOMP_IOCTL_NOTIF_RECV when children are gone, Christian Brauner
  • Re: [PATCH 1/3] seccomp: Return from SECCOMP_IOCTL_NOTIF_RECV when children are gone, Sargun Dhillon
• [RFC PATCH v1 0/4] Per user namespace rlimits, Alexey Gladkov
  • [RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t, Alexey Gladkov
    • Re: [RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t, Christian Brauner
      • Re: [RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t, Alexey Gladkov
  • [RFC PATCH v1 3/4] Do not allow fork if RLIMIT_NPROC is exceeded in the user namespace tree, Alexey Gladkov
  • [RFC PATCH v1 2/4] Move the user's process counter to ucounts, Alexey Gladkov
  • [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted, Alexey Gladkov
    • Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted, Jann Horn via Containers
      • Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted, Alexey Gladkov
    • Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted, Sargun Dhillon
      • Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted, Alexey Gladkov
  • Re: [RFC PATCH v1 0/4] Per user namespace rlimits, Christian Brauner
• [PATCH 00/34] fs: idmapped mounts, Christian Brauner
  • [PATCH 01/34] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
    • Re: [PATCH 01/34] namespace: take lock_mount_hash() directly when changing flags, Christoph Hellwig
      • Re: [PATCH 01/34] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH 02/34] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH 06/34] fs: add id translation helpers, Christian Brauner
    • Re: [PATCH 06/34] fs: add id translation helpers, Christoph Hellwig
      • Re: [PATCH 06/34] fs: add id translation helpers, Christian Brauner
  • [PATCH 08/34] namei: add idmapped mount aware permission helpers, Christian Brauner
  • [PATCH 07/34] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH 07/34] capability: handle idmapped mounts, Christoph Hellwig
      • Re: [PATCH 07/34] capability: handle idmapped mounts, Christian Brauner
  • [PATCH 05/34] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
    • Re: [PATCH 05/34] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
      • Re: [PATCH 05/34] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH 09/34] inode: add idmapped mount aware init and permission helpers, Christian Brauner
  • [PATCH 10/34] attr: handle idmapped mounts, Christian Brauner
  • [PATCH 15/34] stat: add mapped_generic_fillattr(), Christian Brauner
  • [PATCH 18/34] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH 14/34] commoncap: handle idmapped mounts, Christian Brauner
  • [PATCH 12/34] xattr: handle idmapped mounts, Christian Brauner
  • [PATCH 04/34] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH 17/34] namei: introduce struct renamedata, Christian Brauner
  • [PATCH 13/34] selftests: add idmapped mounts xattr selftest, Christian Brauner
  • [PATCH 25/34] exec: handle idmapped mounts, Christian Brauner
  • [PATCH 03/34] fs: add mount_setattr(), Christian Brauner
    • Re: [PATCH 03/34] fs: add mount_setattr(), Christoph Hellwig
      • Re: [PATCH 03/34] fs: add mount_setattr(), Christian Brauner
  • [PATCH 11/34] acl: handle idmapped mounts, Christian Brauner
  • [PATCH 16/34] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
  • [PATCH 19/34] namei: add lookup helpers with idmapped mounts aware permission checking, Christian Brauner
  • [PATCH 22/34] af_unix: handle idmapped mounts, Christian Brauner
  • [PATCH 31/34] expfs: handle idmapped mounts, Christian Brauner
  • [PATCH 20/34] open: handle idmapped mounts in do_truncate(), Christian Brauner
  • [PATCH 27/34] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH 28/34] audit: handle idmapped mounts, Christian Brauner
  • [PATCH 24/34] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH 23/34] utimes: handle idmapped mounts, Christian Brauner
  • [PATCH 32/34] overlayfs: handle idmapped lower directories, Christian Brauner
    • Re: [PATCH 32/34] overlayfs: handle idmapped lower directories, Amir Goldstein
      • Re: [PATCH 32/34] overlayfs: handle idmapped lower directories, Christian Brauner
  • [PATCH 30/34] ext4: support idmapped mounts, Christian Brauner
  • [PATCH 33/34] overlayfs: handle idmapped merged mounts, Christian Brauner
    • Re: [PATCH 33/34] overlayfs: handle idmapped merged mounts, Amir Goldstein
  • [PATCH 29/34] ima: handle idmapped mounts, Christian Brauner
  • [PATCH 26/34] fs: add helpers for idmap mounts, Christian Brauner
  • [PATCH 21/34] open: handle idmapped mounts, Christian Brauner
  • [PATCH 34/34] fat: handle idmapped mounts, Christian Brauner
  • Re: [PATCH 00/34] fs: idmapped mounts, Dave Chinner
    • Re: [PATCH 00/34] fs: idmapped mounts, Christian Brauner
      • Re: [PATCH 00/34] fs: idmapped mounts, Tycho Andersen
  • Re: [PATCH 00/34] fs: idmapped mounts, Sargun Dhillon
  • Re: [PATCH 00/34] fs: idmapped mounts, Eric W. Biederman
    • Re: [PATCH 00/34] fs: idmapped mounts, Aleksa Sarai
      • Re: [PATCH 00/34] fs: idmapped mounts, Eric W. Biederman
        • Re: [PATCH 00/34] fs: idmapped mounts, Serge E. Hallyn
        • Re: [PATCH 00/34] fs: idmapped mounts, Seth Forshee
          • Re: [PATCH 00/34] fs: idmapped mounts, Serge E. Hallyn
        • Re: [PATCH 00/34] fs: idmapped mounts, Alban Crequy
    • Re: [PATCH 00/34] fs: idmapped mounts, Tycho Andersen
      • Re: [PATCH 00/34] fs: idmapped mounts, Serge E. Hallyn
      • Re: [PATCH 00/34] fs: idmapped mounts, Eric W. Biederman
        • Re: [PATCH 00/34] fs: idmapped mounts, Stéphane Graber
        • Re: [PATCH 00/34] fs: idmapped mounts, Tycho Andersen
    • Re: [PATCH 00/34] fs: idmapped mounts, Lennart Poettering
      • Re: [PATCH 00/34] fs: idmapped mounts, Sargun Dhillon
      • Re: [PATCH 00/34] fs: idmapped mounts, Eric W. Biederman
  • Re: [PATCH 00/34] fs: idmapped mounts, Andy Lutomirski
    • Re: [PATCH 00/34] fs: idmapped mounts, Christian Brauner
      • Re: [PATCH 00/34] fs: idmapped mounts, Serge E. Hallyn
      • Re: [PATCH 00/34] fs: idmapped mounts, Andy Lutomirski
• [PATCH v2 0/2] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Aleksa Sarai
  • [PATCH v2 2/2] selftests: openat2: add RESOLVE_ conflict test, Aleksa Sarai
  • [PATCH v2 1/2] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Aleksa Sarai
  • Re: [PATCH v2 0/2] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Christian Brauner
• For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page [v2], Tycho Andersen
    • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page [v2], Tycho Andersen
  • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
    • Re: For review: seccomp_user_notif(2) manual page [v2], Tycho Andersen
      • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page [v2], Tycho Andersen
    • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
          • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
    • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
          • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
  • Re: For review: seccomp_user_notif(2) manual page [v2], Sargun Dhillon
    • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page [v2], Sargun Dhillon
        • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
          • Re: For review: seccomp_user_notif(2) manual page [v2], Sargun Dhillon
            • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
              • Re: For review: seccomp_user_notif(2) manual page [v2], Sargun Dhillon
                • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
  • Re: For review: seccomp_user_notif(2) manual page [v2], Christian Brauner
    • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page [v2], Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page [v2], Michael Kerrisk (man-pages)
• [PATCH v2 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
  • [PATCH v2 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • Re: [PATCH v2 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC, Christian Brauner
  • [PATCH v2 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • Re: [PATCH v2 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
  • Re: [PATCH v2 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
    • Re: [PATCH v2 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
      • Re: [PATCH v2 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
• [PATCH 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
  • [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
      • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Rasmus Villemoes
        • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
      • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Al Viro
      • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Christian Brauner
      • Re: [PATCH 1/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC, Rasmus Villemoes
  • [PATCH 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC, Giuseppe Scrivano
    • RE: [PATCH 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC, David Laight
• [PATCH] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Aleksa Sarai
  • Re: [PATCH] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Christian Brauner
  • Re: [PATCH] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Shuah Khan
    • Re: [PATCH] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT, Aleksa Sarai
• For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
    • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
        • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
          • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
            • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
              • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
                  • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
                      • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                        • Re: For review: seccomp_user_notif(2) manual page, Sargun Dhillon
                          • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                            • Re: For review: seccomp_user_notif(2) manual page, Sargun Dhillon
                              • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
              • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
              • Re: For review: seccomp_user_notif(2) manual page, Kees Cook
                • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                  • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                    • Re: For review: seccomp_user_notif(2) manual page, Kees Cook
                      • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers