Linux Containers

• Date Index

• Re: For review: seccomp_user_notif(2) manual page, (continued)
  • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
    • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
  • Re: For review: seccomp_user_notif(2) manual page, Kees Cook
    • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
  • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
    • Re: For review: seccomp_user_notif(2) manual page, Christian Brauner
      • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
          • Re: For review: seccomp_user_notif(2) manual page, Christian Brauner
            • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
          • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
            • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
        • Re: For review: seccomp_user_notif(2) manual page, Christian Brauner
    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
        • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
          • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
            • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
              • Re: For review: seccomp_user_notif(2) manual page, Jann Horn via Containers
                • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page, Kees Cook
    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
      • Re: For review: seccomp_user_notif(2) manual page, Kees Cook
        • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page, Christian Brauner
    • Re: For review: seccomp_user_notif(2) manual page, Michael Kerrisk (man-pages)
  • Re: For review: seccomp_user_notif(2) manual page, Sargun Dhillon
    • Re: For review: seccomp_user_notif(2) manual page, Tycho Andersen
• [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Kees Cook
  • [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Kees Cook
    • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Jann Horn via Containers
      • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Kees Cook
        • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Paul Moore
          • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Kees Cook
            • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Paul Moore
              • Re: [PATCH 4/6] seccomp: Emulate basic filters for constant action results, Kees Cook
  • [PATCH 2/6] x86: Enable seccomp architecture tracking, Kees Cook
    • Re: [PATCH 2/6] x86: Enable seccomp architecture tracking, Jann Horn via Containers
      • Re: [PATCH 2/6] x86: Enable seccomp architecture tracking, Kees Cook
  • [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Kees Cook
    • Re: [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Jann Horn via Containers
      • Re: [PATCH 1/6] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Kees Cook
  • [PATCH 6/6] [DEBUG] seccomp: Report bitmap coverage ranges, Kees Cook
  • [PATCH 5/6] selftests/seccomp: Compare bitmap vs filter overhead, Kees Cook
  • [PATCH 3/6] seccomp: Implement constant action bitmaps, Kees Cook
    • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Jann Horn via Containers
      • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Kees Cook
        • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, YiFei Zhu
          • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Kees Cook
            • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, YiFei Zhu
        • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Jann Horn via Containers
          • RE: [PATCH 3/6] seccomp: Implement constant action bitmaps, David Laight
            • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Jann Horn via Containers
    • Message not available
      • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, YiFei Zhu
        • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, Kees Cook
          • Re: [PATCH 3/6] seccomp: Implement constant action bitmaps, YiFei Zhu
  • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Rasmus Villemoes
    • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, YiFei Zhu
      • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Rasmus Villemoes
        • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, YiFei Zhu
          • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, YiFei Zhu
            • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Kees Cook
              • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, YiFei Zhu
    • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Jann Horn via Containers
  • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Andrea Arcangeli
    • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Jann Horn via Containers
    • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Kees Cook
    • Message not available
      • Re: [PATCH v1 0/6] seccomp: Implement constant action bitmaps, Tianyin Xu
• [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
  • [RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls, YiFei Zhu
    • Re: [RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls, Jann Horn via Containers
      • Re: [RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls, YiFei Zhu
        • Re: [RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls, Jann Horn via Containers
          • Re: [RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls, YiFei Zhu
    • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, Kees Cook
      • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, Jann Horn via Containers
        • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, Al Viro
          • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, Jann Horn via Containers
      • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
        • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, Kees Cook
          • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
            • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
  • [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
    • Re: [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Jann Horn via Containers
      • Re: [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Jann Horn via Containers
      • Re: [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
        • Re: [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Jann Horn via Containers
          • Re: [RFC PATCH seccomp 1/2] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
  • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Sargun Dhillon
    • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
  • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Christian Brauner
    • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
  • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Tycho Andersen
    • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
      • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Tycho Andersen
        • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
  • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Jann Horn via Containers
    • RE: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Hubertus Franke
      • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Jann Horn via Containers
  • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Kees Cook
    • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
      • Re: [RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, Kees Cook
  • [PATCH seccomp 0/6] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
    • [PATCH seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, YiFei Zhu
    • [PATCH seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
    • [PATCH seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path, YiFei Zhu
    • [PATCH seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
    • [PATCH seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
    • [PATCH seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
    • [PATCH v2 seccomp 0/6] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls, YiFei Zhu
      • [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, YiFei Zhu
        • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, Kees Cook
        • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, Geert Uytterhoeven
          • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, YiFei Zhu
          • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, Kees Cook
            • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, Geert Uytterhoeven
              • Re: [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig, Jann Horn via Containers
      • [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
        • RE: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, David Laight
          • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
            • RE: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, David Laight
              • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
                • Re: [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array, YiFei Zhu
      • [PATCH v2 seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path, YiFei Zhu
        • Re: [PATCH v2 seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path, Kees Cook
          • Re: [PATCH v2 seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path, YiFei Zhu
      • [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
        • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Kees Cook
          • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
            • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
              • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Kees Cook
                • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Andy Lutomirski
                  • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Kees Cook
                    • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Andy Lutomirski
                      • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Kees Cook
                        • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Andy Lutomirski
                      • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, YiFei Zhu
                        • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Andy Lutomirski
                          • Re: [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent, Kees Cook
      • [PATCH v2 seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
        • Re: [PATCH v2 seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
          • Re: [PATCH v2 seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
            • Re: [PATCH v2 seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
      • [PATCH v2 seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
        • Re: [PATCH v2 seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead, Kees Cook
          • Re: [PATCH v2 seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
  • [PATCH v3 seccomp 0/5] seccomp: Add bitmap cache of constant allow filter results, YiFei Zhu
    • [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking, YiFei Zhu
      • Re: [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking, Kees Cook
        • Re: [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking, Jann Horn via Containers
          • Re: [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking, Kees Cook
            • Re: [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking, Jann Horn via Containers
    • [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
      • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Jann Horn via Containers
        • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Kees Cook
        • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
          • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Jann Horn via Containers
      • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Kees Cook
        • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
          • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Kees Cook
            • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
      • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
        • Re: [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Kees Cook
    • [PATCH v3 seccomp 3/5] seccomp/cache: Lookup syscall allowlist for fast path, YiFei Zhu
      • Re: [PATCH v3 seccomp 3/5] seccomp/cache: Lookup syscall allowlist for fast path, Kees Cook
        • Re: [PATCH v3 seccomp 3/5] seccomp/cache: Lookup syscall allowlist for fast path, YiFei Zhu
          • Re: [PATCH v3 seccomp 3/5] seccomp/cache: Lookup syscall allowlist for fast path, Kees Cook
    • [PATCH v3 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
    • [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
      • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Jann Horn via Containers
        • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
        • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
          • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Jann Horn via Containers
            • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
      • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
        • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Jann Horn via Containers
          • Re: [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
    • [PATCH v4 seccomp 0/5] seccomp: Add bitmap cache of constant allow filter results, YiFei Zhu
      • [PATCH v4 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path, YiFei Zhu
        • Re: [PATCH v4 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path, Jann Horn via Containers
        • Re: [PATCH v4 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path, Kees Cook
      • [PATCH v4 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
        • Re: [PATCH v4 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Jann Horn via Containers
          • Re: [PATCH v4 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Kees Cook
      • [PATCH v4 seccomp 3/5] x86: Enable seccomp architecture tracking, YiFei Zhu
        • Re: [PATCH v4 seccomp 3/5] x86: Enable seccomp architecture tracking, Andy Lutomirski
          • Re: [PATCH v4 seccomp 3/5] x86: Enable seccomp architecture tracking, YiFei Zhu
            • Re: [PATCH v4 seccomp 3/5] x86: Enable seccomp architecture tracking, Andy Lutomirski
      • [PATCH v4 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
      • [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
        • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, kernel test robot
        • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Jann Horn via Containers
        • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
          • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
            • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
              • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                  • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
                    • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                      • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
                        • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                          • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                            • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
                              • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
                                • Re: [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Kees Cook
      • [PATCH v5 seccomp 0/5]seccomp: Add bitmap cache of constant allow filter results, YiFei Zhu
        • [PATCH v5 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path, YiFei Zhu
          • Re: [PATCH v5 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path, Jann Horn via Containers
        • [PATCH v5 seccomp 3/5] x86: Enable seccomp architecture tracking, YiFei Zhu
        • [PATCH v5 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, YiFei Zhu
          • Re: [PATCH v5 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow, Jann Horn via Containers
        • [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
          • Re: [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Jann Horn via Containers
          • Re: [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Geert Uytterhoeven
            • Re: [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, YiFei Zhu
              • Re: [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache, Geert Uytterhoeven
        • [PATCH v5 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead, YiFei Zhu
        • Re: [PATCH v5 seccomp 0/5]seccomp: Add bitmap cache of constant allow filter results, Kees Cook
• intel/AMD Mini PC iPC, 28 solution options, Tys
  • <Possible follow-ups>
  • intel/AMD Mini PC iPC, 28 solution options, Tys
• LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Christian Brauner
  • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Serge E. Hallyn
    • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Josh Triplett
      • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Andy Lutomirski
        • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Eric W. Biederman
          • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Serge E. Hallyn
            • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Eric W. Biederman
              • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Serge E. Hallyn
                • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Eric W. Biederman
      • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
        • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Serge E. Hallyn
          • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
            • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Serge E. Hallyn
              • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
                • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Snaipe via Containers
                  • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
                    • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Franklin “Snaipe” Mathieu via Containers
                    • Message not available
                      • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
                        • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Giuseppe Scrivano
  • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Enrico Weigelt, metux IT consult
    • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Eric W. Biederman
      • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Christian Brauner
        • The problem of setgroups and containers, Eric W. Biederman
          • Re: The problem of setgroups and containers, Eric W. Biederman
            • [RFC][PATCH] userns: Limit process in a user namespace to what the creator is allowed, Eric W. Biederman
              • Re: [RFC][PATCH] userns: Limit process in a user namespace to what the creator is allowed, Christian Brauner
      • Re: LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces, Enrico Weigelt, metux IT consult
• Per user rlimits, Eric W. Biederman
  • Re: Per user rlimits, Sargun Dhillon
    • Re: Per user rlimits, Aleksa Sarai
      • Re: Per user rlimits, Aleksa Sarai
        • Re: Per user rlimits, Eric W. Biederman
• Re: Containers Digest, Vol 169, Issue 34, Esther Faride Chau Durazo
• Use cases for multiple uid mapping?, Eric W. Biederman
  • Re: Use cases for multiple uid mapping?, Stéphane Graber via Containers
    • Re: Use cases for multiple uid mapping?, Sargun Dhillon
  • Re: Use cases for multiple uid mapping?, James Bottomley
  • Re: Use cases for multiple uid mapping?, Serge E. Hallyn
    • Re: Use cases for multiple uid mapping?, Eric W. Biederman
      • Re: Use cases for multiple uid mapping?, Alban Crequy
        • Re: Use cases for multiple uid mapping?, Christian Brauner
• Re: [PATCH] MAINTAINERS: add namespace entry, Eric W. Biederman
  • Re: [PATCH] MAINTAINERS: add namespace entry, Christian Brauner
  • Re: [PATCH] MAINTAINERS: add namespace entry, Kees Cook
  • Re: [PATCH] MAINTAINERS: add namespace entry, Aleksa Sarai
• Overlayfs @Plumbers, Amir Goldstein
  • Re: Overlayfs @Plumbers, Eric W. Biederman
    • Re: Overlayfs @Plumbers, Aleksa Sarai
      • Re: Overlayfs @Plumbers, Sargun Dhillon
        • Re: Overlayfs @Plumbers, Giuseppe Scrivano
        • Re: Overlayfs @Plumbers, Amir Goldstein
      • Re: Overlayfs @Plumbers, Amir Goldstein
• [RFC PATCH 10/30] ima: Add ima namespace ID to the ima ML related structures, krzysztof.struczynski
  • [RFC PATCH 11/30] ima: Keep track of the measurment list per ima namespace, krzysztof.struczynski
  • [RFC PATCH 12/30] ima: Check ima namespace ID during digest entry lookup, krzysztof.struczynski
  • [RFC PATCH 13/30] ima: Add a new ima template that includes namespace ID, krzysztof.struczynski
  • [RFC PATCH 14/30] ima: Add per namespace view of the measurement list, krzysztof.struczynski
  • [RFC PATCH 15/30] ima: Add a reader counter to the integrity inode data, krzysztof.struczynski
  • [RFC PATCH 16/30] ima: Extend permissions to the ima securityfs entries, krzysztof.struczynski
  • [RFC PATCH 17/30] ima: Add the violation counter to the namespace, krzysztof.struczynski
  • [RFC PATCH 18/30] ima: Change the owning user namespace of the ima namespace if necessary, krzysztof.struczynski
  • [RFC PATCH 19/30] ima: Configure the new ima namespace from securityfs, krzysztof.struczynski
  • [RFC PATCH 21/30] user namespace: Add function that checks if the UID map is defined, krzysztof.struczynski
  • [RFC PATCH 20/30] ima: Parse per ima namespace policy file, krzysztof.struczynski
  • [RFC PATCH 22/30] ima: Remap IDs of subject based rules if necessary, krzysztof.struczynski
  • [RFC PATCH 23/30] keys: Add domain tag to the keyring search criteria, krzysztof.struczynski
  • [RFC PATCH 24/30] keys: Include key domain tag in the iterative search, krzysztof.struczynski
  • [RFC PATCH 25/30] keys: Allow to set key domain tag separately from the key type, krzysztof.struczynski
  • [RFC PATCH 26/30] ima: Add key domain to the ima namespace, krzysztof.struczynski
  • [RFC PATCH 27/30] integrity: Add key domain tag to the search criteria, krzysztof.struczynski
  • [RFC PATCH 28/30] ima: Load per ima namespace x509 certificate, krzysztof.struczynski
  • [RFC PATCH 29/30] ima: Add dummy boot aggregate to per ima namespace measurement list, krzysztof.struczynski
  • [RFC PATCH 30/30] ima: Set ML template per ima namespace, krzysztof.struczynski
• [RFC PATCH 00/30] ima: Introduce IMA namespace, krzysztof.struczynski
  • [RFC PATCH 02/30] ima: Add a list of the installed ima namespaces, krzysztof.struczynski
  • [RFC PATCH 03/30] ima: Bind ima namespace to the file descriptor, krzysztof.struczynski
  • [RFC PATCH 04/30] ima: Add ima policy related data to the ima namespace, krzysztof.struczynski
  • [RFC PATCH 01/30] ima: Introduce ima namespace, krzysztof.struczynski
  • [RFC PATCH 05/30] ima: Add methods for parsing ima policy configuration string, krzysztof.struczynski
  • [RFC PATCH 07/30] ima: Extend the APIs in the integrity subsystem, krzysztof.struczynski
  • [RFC PATCH 08/30] ima: Add integrity inode related data to the ima namespace, krzysztof.struczynski
  • [RFC PATCH 06/30] ima: Add ima namespace to the ima subsystem APIs, krzysztof.struczynski
  • [RFC PATCH 09/30] ima: Enable per ima namespace policy settings, krzysztof.struczynski
  • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Christian Brauner
    • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
  • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, James Bottomley
    • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
      • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
        • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
        • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
  • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Christian Brauner
    • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
    • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
      • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
        • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Luke Hinds
          • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
            • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
            • RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
              • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
          • Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
• [RFC PATCH 0/5] keys: Security changes, ACLs and Container keyring, David Howells
  • [RFC PATCH 1/5] keys: Move permissions checking decisions into the checking code, David Howells
  • [RFC PATCH 2/5] keys: Replace uid/gid/perm permissions checking with an ACL, David Howells
  • [RFC PATCH 3/5] keys: Provide KEYCTL_GRANT_PERMISSION, David Howells
  • [RFC PATCH 4/5] keys: Split the search perms between KEY_NEED_USE and KEY_NEED_SEARCH, David Howells
  • [RFC PATCH 5/5] keys: Implement a 'container' keyring, David Howells
  • Re: [RFC PATCH 0/5] keys: Security changes, ACLs and Container keyring, Eric W. Biederman
• [PATCH v7 0/9] Add seccomp notifier ioctl that enables adding fds, Kees Cook
  • [PATCH v7 2/9] pidfd: Add missing sock updates for pidfd_getfd(), Kees Cook
    • Re: [PATCH v7 2/9] pidfd: Add missing sock updates for pidfd_getfd(), Jann Horn via Containers
      • Re: [PATCH v7 2/9] pidfd: Add missing sock updates for pidfd_getfd(), Kees Cook
      • Re: [PATCH v7 2/9] pidfd: Add missing sock updates for pidfd_getfd(), Kees Cook
  • [PATCH v7 3/9] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
    • Re: [PATCH v7 3/9] net/scm: Regularize compat handling of scm_detach_fds(), John Stultz
      • Re: [PATCH v7 3/9] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
        • Re: [PATCH v7 3/9] net/scm: Regularize compat handling of scm_detach_fds(), John Stultz
          • Re: [PATCH v7 3/9] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
  • [PATCH v7 4/9] fs: Move __scm_install_fd() to __receive_fd(), Kees Cook
  • [PATCH v7 1/9] net/compat: Add missing sock updates for SCM_RIGHTS, Kees Cook
    • Re: [PATCH v7 1/9] net/compat: Add missing sock updates for SCM_RIGHTS, Christian Brauner
  • [PATCH v7 5/9] fs: Add receive_fd() wrapper for __receive_fd(), Kees Cook
  • [PATCH v7 7/9] fs: Expand __receive_fd() to accept existing fd, Kees Cook
  • [PATCH v7 6/9] pidfd: Replace open-coded receive_fd(), Kees Cook
  • [PATCH v7 9/9] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
  • [PATCH v7 8/9] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
    • Re: [PATCH v7 8/9] seccomp: Introduce addfd ioctl to seccomp user notifier, Will Drewry
• [PATCH v6 0/7] Add seccomp notifier ioctl that enables adding fds, Kees Cook
  • [PATCH v6 1/7] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
    • Re: [PATCH v6 1/7] net/scm: Regularize compat handling of scm_detach_fds(), Christian Brauner
      • Re: [PATCH v6 1/7] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
  • [PATCH v6 2/7] fs: Move __scm_install_fd() to __receive_fd(), Kees Cook
    • Re: [PATCH v6 2/7] fs: Move __scm_install_fd() to __receive_fd(), Christoph Hellwig
    • Re: [PATCH v6 2/7] fs: Move __scm_install_fd() to __receive_fd(), Christian Brauner
  • [PATCH v6 4/7] pidfd: Replace open-coded partial receive_fd(), Kees Cook
    • Re: [PATCH v6 4/7] pidfd: Replace open-coded partial receive_fd(), Christian Brauner
      • Re: [PATCH v6 4/7] pidfd: Replace open-coded partial receive_fd(), Kees Cook
      • Re: [PATCH v6 4/7] pidfd: Replace open-coded partial receive_fd(), Kees Cook
        • Re: [PATCH v6 4/7] pidfd: Replace open-coded partial receive_fd(), Christian Brauner
  • [PATCH v6 7/7] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
  • [PATCH v6 3/7] fs: Add receive_fd() wrapper for __receive_fd(), Kees Cook
    • Re: [PATCH v6 3/7] fs: Add receive_fd() wrapper for __receive_fd(), Christoph Hellwig
    • Re: [PATCH v6 3/7] fs: Add receive_fd() wrapper for __receive_fd(), Christian Brauner
      • Re: [PATCH v6 3/7] fs: Add receive_fd() wrapper for __receive_fd(), Kees Cook
  • [PATCH v6 5/7] fs: Expand __receive_fd() to accept existing fd, Kees Cook
    • Re: [PATCH v6 5/7] fs: Expand __receive_fd() to accept existing fd, Christian Brauner
      • Re: [PATCH v6 5/7] fs: Expand __receive_fd() to accept existing fd, Kees Cook
  • [PATCH v6 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
    • Re: [PATCH v6 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
      • Re: [PATCH v6 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
        • Re: [PATCH v6 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
• Virtual Linux Plumbers 2020, 24-28 August: Containers and Checkpoint/Restore microconference CFP Open until 20 July, Christian Brauner
• Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Eric W. Biederman
  • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Christian Brauner
    • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Aleksa Sarai
    • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Matt Bennett
      • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Eric W. Biederman
        • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Aleksa Sarai
          • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Matt Bennett
  • <Possible follow-ups>
  • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Eric W. Biederman
    • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Matt Bennett
      • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Eric W. Biederman
        • Re: [PATCH 0/5] RFC: connector: Add network namespace awareness, Evgeniy Polyakov
• [PATCH ghau51/ghau40 v9 00/11] add support for audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 05/11] start normalization containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 02/11] AUDIT_CONTAINER_ID message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 03/11] auditctl: add support for AUDIT_CONTID filter, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 01/11] AUDIT_CONTAINER_OP message type basic support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 06/11] libaudit: add support to get the task audit container identifier, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 04/11] add ausearch containerid support, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 07/11] signal_info: only print context if it is available., Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 08/11] add support for audit_signal_info2, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 09/11] contid: interpret correctly CONTAINER_ID contid field csv, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 10/11] ausearch: convert contid to comma-sep/carrat-mod cnode/clist, Richard Guy Briggs
  • [PATCH ghau51/ghau40 v9 11/11] libaudit: add support to get and set capcontid on a task, Richard Guy Briggs
• [PATCH ghak90 V9 00/13] audit: implement container identifier, Richard Guy Briggs
  • [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
      • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
          • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Richard Guy Briggs
            • Re: [PATCH ghak90 V9 01/13] audit: collect audit task parameters, Paul Moore
  • [PATCH ghak90 V9 02/13] audit: add container id, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
      • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
    • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
      • Re: [PATCH ghak90 V9 02/13] audit: add container id, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 02/13] audit: add container id, Paul Moore
  • [PATCH ghak90 V9 03/13] audit: read container ID of a process, Richard Guy Briggs
  • [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 04/13] audit: log drop of contid on exit of last task, Paul Moore
  • [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
      • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
          • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
            • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
              • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Steve Grubb
                • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
              • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
                • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Richard Guy Briggs
                  • Re: [PATCH ghak90 V9 05/13] audit: log container info of syscalls, Paul Moore
  • [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Paul Moore
      • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Paul Moore
          • Re: [PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon, Richard Guy Briggs
  • [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 07/13] audit: add support for non-syscall auxiliary records, Paul Moore
  • [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Paul Moore
      • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 08/13] audit: add containerid support for user records, Paul Moore
  • [PATCH ghak90 V9 09/13] audit: add containerid filtering, Richard Guy Briggs
  • [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Paul Moore
      • Re: [PATCH ghak90 V9 10/13] audit: add support for containerid to network namespaces, Richard Guy Briggs
  • [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Paul Moore
      • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
        • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Paul Moore
          • Re: [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting, Richard Guy Briggs
  • [PATCH ghak90 V9 12/13] audit: track container nesting, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 12/13] audit: track container nesting, Paul Moore
  • [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns, Richard Guy Briggs
    • Re: [PATCH ghak90 V9 13/13] audit: add capcontid to set contid outside init_user_ns, Paul Moore
• [PATCH v5 0/7] Add seccomp notifier ioctl that enables adding fds, Kees Cook
  • [PATCH v5 3/7] fs: Add fd_install_received() wrapper for __fd_install_received(), Kees Cook
    • Re: [PATCH v5 3/7] fs: Add fd_install_received() wrapper for __fd_install_received(), Sargun Dhillon
      • Re: [PATCH v5 3/7] fs: Add fd_install_received() wrapper for __fd_install_received(), Kees Cook
        • RE: [PATCH v5 3/7] fs: Add fd_install_received() wrapper for __fd_install_received(), David Laight
  • [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Kees Cook
    • Re: [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Christian Brauner
      • Re: [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Kees Cook
        • Re: [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Christian Brauner
          • Re: [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Christian Brauner
          • Re: [PATCH v5 4/7] pidfd: Replace open-coded partial fd_install_received(), Kees Cook
  • [PATCH v5 2/7] fs: Move __scm_install_fd() to __fd_install_received(), Kees Cook
  • [PATCH v5 1/7] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
  • [PATCH v5 7/7] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
  • [PATCH v5 5/7] fs: Expand __fd_install_received() to accept fd, Kees Cook
  • [PATCH v5 6/7] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
• [RFC][PATCH 0/8] seccomp: Implement constant action bitmaps, Kees Cook
  • [PATCH 1/8] selftests/seccomp: Improve calibration loop, Kees Cook
  • [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Kees Cook
    • Re: [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Andy Lutomirski
    • Re: [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Jann Horn via Containers
      • Re: [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Andy Lutomirski
        • Re: [PATCH 3/8] seccomp: Introduce SECCOMP_PIN_ARCHITECTURE, Jann Horn via Containers
  • [PATCH 2/8] seccomp: Use pr_fmt, Kees Cook
  • [PATCH 5/8] selftests/seccomp: Compare bitmap vs filter overhead, Kees Cook
  • [PATCH 7/8] x86: Enable seccomp constant action bitmaps, Kees Cook
  • [PATCH 6/8] x86: Provide API for local kernel TLB flushing, Kees Cook
    • Re: [PATCH 6/8] x86: Provide API for local kernel TLB flushing, Andy Lutomirski
      • Re: [PATCH 6/8] x86: Provide API for local kernel TLB flushing, Kees Cook
  • [PATCH 4/8] seccomp: Implement constant action bitmaps, Kees Cook
    • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Jann Horn via Containers
      • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Kees Cook
        • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Jann Horn via Containers
          • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Kees Cook
          • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Andy Lutomirski
    • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Dave Hansen
      • Re: [PATCH 4/8] seccomp: Implement constant action bitmaps, Kees Cook
  • [PATCH 8/8] [DEBUG] seccomp: Report bitmap coverage ranges, Kees Cook
  • Re: [RFC][PATCH 0/8] seccomp: Implement constant action bitmaps, Andy Lutomirski
    • Re: [RFC][PATCH 0/8] seccomp: Implement constant action bitmaps, Kees Cook
• [PATCH v4 00/11] Add seccomp notifier ioctl that enables adding fds, Kees Cook
  • [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Kees Cook
    • Re: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Sargun Dhillon
      • Re: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Kees Cook
    • RE: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), David Laight
      • Re: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Kees Cook
    • Re: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Christian Brauner
      • Re: [PATCH v4 02/11] fs: Move __scm_install_fd() to __fd_install_received(), Kees Cook
  • [PATCH v4 03/11] fs: Add fd_install_received() wrapper for __fd_install_received(), Kees Cook
    • RE: [PATCH v4 03/11] fs: Add fd_install_received() wrapper for __fd_install_received(), David Laight
      • Re: [PATCH v4 03/11] fs: Add fd_install_received() wrapper for __fd_install_received(), Kees Cook
        • RE: [PATCH v4 03/11] fs: Add fd_install_received() wrapper for __fd_install_received(), David Laight
  • [PATCH v4 04/11] pidfd: Replace open-coded partial fd_install_received(), Kees Cook
  • [PATCH v4 09/11] selftests/seccomp: Rename user_trap_syscall() to user_notif_syscall(), Kees Cook
    • Re: [PATCH v4 09/11] selftests/seccomp: Rename user_trap_syscall() to user_notif_syscall(), Tycho Andersen
  • [PATCH v4 01/11] net/scm: Regularize compat handling of scm_detach_fds(), Kees Cook
  • [PATCH v4 07/11] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
  • [PATCH v4 11/11] seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID, Kees Cook
  • [PATCH v4 05/11] fs: Expand __fd_install_received() to accept fd, Kees Cook
  • [PATCH v4 08/11] selftests/seccomp: Make kcmp() less required, Kees Cook
    • Re: [PATCH v4 08/11] selftests/seccomp: Make kcmp() less required, Tycho Andersen
      • Re: [PATCH v4 08/11] selftests/seccomp: Make kcmp() less required, Kees Cook
  • [PATCH v4 06/11] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
  • [PATCH v4 10/11] seccomp: Switch addfd to Extensible Argument ioctl, Kees Cook
    • Re: [PATCH v4 10/11] seccomp: Switch addfd to Extensible Argument ioctl, Tycho Andersen
      • Re: [PATCH v4 10/11] seccomp: Switch addfd to Extensible Argument ioctl, Kees Cook
        • Re: [PATCH v4 10/11] seccomp: Switch addfd to Extensible Argument ioctl, Tycho Andersen
  • Re: [PATCH v4 00/11] Add seccomp notifier ioctl that enables adding fds, Sargun Dhillon
• [RFC PATCH] seccomp: Add extensibility mechanism to read notifications, Sargun Dhillon
  • Re: [RFC PATCH] seccomp: Add extensibility mechanism to read notifications, Jann Horn via Containers
    • Re: [RFC PATCH] seccomp: Add extensibility mechanism to read notifications, Sargun Dhillon
  • Re: [RFC PATCH] seccomp: Add extensibility mechanism to read notifications, Tycho Andersen
  • Re: [RFC PATCH] seccomp: Add extensibility mechanism to read notifications, Kees Cook
• Virtual Linux Plumbers 2020: Containers and Checkpoint/Restore microconference CFP Open until 20 July, Christian Brauner
  • Virtual Linux Plumbers 2020 (24-28 August): Containers and Checkpoint/Restore microconference CFP Open until 20 July, Christian Brauner
• Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Eric W. Biederman
  • Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Christian Brauner
    • Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Alexey Gladkov
  • Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Alexey Gladkov
    • Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Eric W. Biederman
      • Re: [PATCH 0/2] proc: use subset option to hide some top-level procfs entries, Alexey Gladkov
• [PATCH v3 0/4] Add seccomp notifier ioctl that enables adding fds, Sargun Dhillon
  • [PATCH v3 2/4] pid: Use file_receive helper to copy FDs, Sargun Dhillon
  • [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
      • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
        • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
        • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
          • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
          • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
            • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
              • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                  • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                      • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
                        • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                          • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                            • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                        • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                        • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                          • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
                          • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                            • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
                              • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                          • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                            • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
                              • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                              • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                                • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                                  • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                                  • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
                                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                                    • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Kees Cook
                                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
                                    • RE: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, David Laight
                    • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Christian Brauner
      • Re: [PATCH v3 1/4] fs, net: Standardize on file_receive helper to move fds across processes, Sargun Dhillon
  • [PATCH v3 3/4] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
  • [PATCH v3 4/4] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Sargun Dhillon
  • Re: [PATCH v3 0/4] Add seccomp notifier ioctl that enables adding fds, Robert Sesek via Containers
  • Re: [PATCH v3 0/4] Add seccomp notifier ioctl that enables adding fds, Kees Cook
    • Re: [PATCH v3 0/4] Add seccomp notifier ioctl that enables adding fds, Sargun Dhillon
      • Re: [PATCH v3 0/4] Add seccomp notifier ioctl that enables adding fds, Kees Cook
• [PATCH v3] seccomp: Add find_notification helper, Sargun Dhillon
  • Re: [PATCH v3] seccomp: Add find_notification helper, Kees Cook
  • Re: [PATCH v3] seccomp: Add find_notification helper, Nathan Chancellor
    • Re: [PATCH v3] seccomp: Add find_notification helper, Kees Cook
    • Re: [PATCH v3] seccomp: Add find_notification helper, Sargun Dhillon
      • Re: [PATCH v3] seccomp: Add find_notification helper, Nathan Chancellor
• [PATCH v3 1/4] seccomp: rename "usage" to "refs" and document, Christian Brauner
  • [PATCH v3 4/4] tests: test seccomp filter notifications, Christian Brauner
    • Re: [PATCH v3 4/4] tests: test seccomp filter notifications, Kees Cook
  • [PATCH v3 2/4] seccomp: release filter after task is fully dead, Christian Brauner
    • Re: [PATCH v3 2/4] seccomp: release filter after task is fully dead, Kees Cook
  • [PATCH v3 3/4] seccomp: notify about unused filter, Christian Brauner
    • Re: [PATCH v3 3/4] seccomp: notify about unused filter, Kees Cook
      • Re: [PATCH v3 3/4] seccomp: notify about unused filter, Christian Brauner
  • Re: [PATCH v3 1/4] seccomp: rename "usage" to "refs" and document, Kees Cook
• [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
  • [PATCH v2 2/2] tests: test seccomp filter notifications, Christian Brauner
    • Re: [PATCH v2 2/2] tests: test seccomp filter notifications, Kees Cook
      • Re: [PATCH v2 2/2] tests: test seccomp filter notifications, Christian Brauner
  • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Kees Cook
    • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Jann Horn via Containers
      • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Kees Cook
      • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
        • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Kees Cook
          • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
      • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
    • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
      • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Kees Cook
    • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
      • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Kees Cook
        • Re: [PATCH v2 1/2] seccomp: notify user trap about unused filter, Christian Brauner
• [PATCH v2 0/3] Add seccomp notifier ioctl that enables adding fds, Sargun Dhillon
  • [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
    • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
      • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
        • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
      • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
        • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
          • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Jann Horn via Containers
            • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
            • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
              • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
          • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
            • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
              • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
                • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
                  • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
          • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Al Viro
            • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
              • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
                • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Kees Cook
    • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Giuseppe Scrivano
    • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
      • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
        • Re: [PATCH v2 2/3] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
  • [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Sargun Dhillon
    • Re: [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
      • Re: [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Tycho Andersen
      • Re: [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Sargun Dhillon
        • Re: [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Tycho Andersen
        • Re: [PATCH v2 3/3] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Kees Cook
  • [PATCH v2 1/3] seccomp: Add find_notification helper, Sargun Dhillon
    • Re: [PATCH v2 1/3] seccomp: Add find_notification helper, Kees Cook
      • Re: [PATCH v2 1/3] seccomp: Add find_notification helper, Sargun Dhillon
        • Re: [PATCH v2 1/3] seccomp: Add find_notification helper, Kees Cook
    • Re: [PATCH v2 1/3] seccomp: Add find_notification helper, Christian Brauner
  • Re: [PATCH v2 0/3] Add seccomp notifier ioctl that enables adding fds, Tycho Andersen
• [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
  • [PATCH 2/2] tests: test seccomp filter notifications, Christian Brauner
  • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Tycho Andersen
    • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
  • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Sargun Dhillon
    • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
  • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
    • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Tycho Andersen
      • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
        • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Tycho Andersen
          • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
    • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
      • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
        • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
          • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
            • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
              • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Jann Horn via Containers
              • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
                • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
          • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Kees Cook
  • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Jann Horn via Containers
    • Re: [PATCH 1/2] seccomp: notify user trap about unused filter, Christian Brauner
• [PATCH 0/5] Add seccomp notifier ioctl that enables adding fds, Sargun Dhillon
  • [PATCH 3/5] selftests/seccomp: Test SECCOMP_IOCTL_NOTIF_ADDFD, Sargun Dhillon
  • [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
    • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Tycho Andersen
      • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Tycho Andersen
    • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Al Viro
      • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
        • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Al Viro
    • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
      • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Sargun Dhillon
        • Re: [PATCH 2/5] seccomp: Introduce addfd ioctl to seccomp user notifier, Christian Brauner
  • [PATCH 1/5] seccomp: Add find_notification helper, Sargun Dhillon
    • Re: [PATCH 1/5] seccomp: Add find_notification helper, Tycho Andersen
    • Re: [PATCH 1/5] seccomp: Add find_notification helper, Christian Brauner
  • [PATCH 4/5] seccomp: Add SECCOMP_ADDFD_FLAG_MOVE flag to add fd ioctl, Sargun Dhillon
    • Re: [PATCH 4/5] seccomp: Add SECCOMP_ADDFD_FLAG_MOVE flag to add fd ioctl, Christian Brauner
      • Re: [PATCH 4/5] seccomp: Add SECCOMP_ADDFD_FLAG_MOVE flag to add fd ioctl, Sargun Dhillon
  • [PATCH 5/5] selftests/seccomp: Add test for addfd move semantics, Sargun Dhillon
• [ANNOUNCE] Containers and Checkpoint/Restore Microconference Accepted into 2020 Linux Plumbers Conference, Mike Rapoport
• seccomp feature development, Kees Cook
  • Re: seccomp feature development, Jann Horn via Containers
    • Re: seccomp feature development, Aleksa Sarai
      • Re: seccomp feature development, Christian Brauner