Linux Integrity

Date Index

[RFC PATCH 11/30] ima: Keep track of the measurment list per ima namespace, (continued)
- [RFC PATCH 11/30] ima: Keep track of the measurment list per ima namespace, krzysztof.struczynski
- [RFC PATCH 14/30] ima: Add per namespace view of the measurement list, krzysztof.struczynski
- [RFC PATCH 18/30] ima: Change the owning user namespace of the ima namespace if necessary, krzysztof.struczynski
- [RFC PATCH 19/30] ima: Configure the new ima namespace from securityfs, krzysztof.struczynski
- [RFC PATCH 16/30] ima: Extend permissions to the ima securityfs entries, krzysztof.struczynski
- [RFC PATCH 23/30] keys: Add domain tag to the keyring search criteria, krzysztof.struczynski
- [RFC PATCH 26/30] ima: Add key domain to the ima namespace, krzysztof.struczynski
- [RFC PATCH 29/30] ima: Add dummy boot aggregate to per ima namespace measurement list, krzysztof.struczynski
- [RFC PATCH 30/30] ima: Set ML template per ima namespace, krzysztof.struczynski
- [RFC PATCH 25/30] keys: Allow to set key domain tag separately from the key type, krzysztof.struczynski
- [RFC PATCH 28/30] ima: Load per ima namespace x509 certificate, krzysztof.struczynski
- [RFC PATCH 27/30] integrity: Add key domain tag to the search criteria, krzysztof.struczynski
- [RFC PATCH 21/30] user namespace: Add function that checks if the UID map is defined, krzysztof.struczynski
- [RFC PATCH 17/30] ima: Add the violation counter to the namespace, krzysztof.struczynski
- [RFC PATCH 20/30] ima: Parse per ima namespace policy file, krzysztof.struczynski
- [RFC PATCH 22/30] ima: Remap IDs of subject based rules if necessary, krzysztof.struczynski
- [RFC PATCH 24/30] keys: Include key domain tag in the iterative search, krzysztof.struczynski
- [RFC PATCH 15/30] ima: Add a reader counter to the integrity inode data, krzysztof.struczynski
[RFC PATCH 00/30] ima: Introduce IMA namespace, krzysztof.struczynski
- [RFC PATCH 01/30] ima: Introduce ima namespace, krzysztof.struczynski
- [RFC PATCH 03/30] ima: Bind ima namespace to the file descriptor, krzysztof.struczynski
- [RFC PATCH 06/30] ima: Add ima namespace to the ima subsystem APIs, krzysztof.struczynski
- [RFC PATCH 08/30] ima: Add integrity inode related data to the ima namespace, krzysztof.struczynski
- [RFC PATCH 09/30] ima: Enable per ima namespace policy settings, krzysztof.struczynski
- [RFC PATCH 07/30] ima: Extend the APIs in the integrity subsystem, krzysztof.struczynski
- [RFC PATCH 05/30] ima: Add methods for parsing ima policy configuration string, krzysztof.struczynski
- [RFC PATCH 04/30] ima: Add ima policy related data to the ima namespace, krzysztof.struczynski
- [RFC PATCH 02/30] ima: Add a list of the installed ima namespaces, krzysztof.struczynski
- Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Christian Brauner
  - RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
- Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, James Bottomley
  - RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
    - Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
      - Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
      - RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
- Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Christian Brauner
  - RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
  - Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
    - Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
      - Message not available
        
        Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Mimi Zohar
        
        RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
        
        RE: [RFC PATCH 00/30] ima: Introduce IMA namespace, Krzysztof Struczynski
        
        Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
      - Message not available
        
        Re: [RFC PATCH 00/30] ima: Introduce IMA namespace, Dr. Greg
[PATCH 0/4] integrity: improve user feedback for invalid bootparams, Bruno Meneguele
- [PATCH 1/4] ima: add check for enforced appraise option, Bruno Meneguele
- [PATCH 2/4] integrity: invalid kernel parameters feedback, Bruno Meneguele
  - Re: [PATCH 2/4] integrity: invalid kernel parameters feedback, Mimi Zohar
- [PATCH 3/4] ima: limit secure boot feedback scope for appraise, Bruno Meneguele
  - Re: [PATCH 3/4] ima: limit secure boot feedback scope for appraise, Mimi Zohar
    - Re: [PATCH 3/4] ima: limit secure boot feedback scope for appraise, Bruno Meneguele
- [PATCH 4/4] integrity: prompt keyring name for unknown key request, Bruno Meneguele
  - Re: [PATCH 4/4] integrity: prompt keyring name for unknown key request, Mimi Zohar
[PATCH v4 0/1] add sysfs exports for TPM 2 PCR registers, James Bottomley
- [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
  - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
    - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
      - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jerry Snitselaar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Serge E. Hallyn
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Mimi Zohar
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Serge E. Hallyn
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
      - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jason Gunthorpe
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
        
        Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
  - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
    - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
      - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
  - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Petr Vorel
    - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, James Bottomley
    - Re: [PATCH v4 1/1] tpm: add sysfs exports for all banks of PCR registers, Jarkko Sakkinen
[PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Petr Vorel
- [PATCH v3 1/4] IMA/ima_keys.sh: Fix policy content check usage, Petr Vorel
- [PATCH v3 2/4] IMA: Refactor datafiles directory, Petr Vorel
- [PATCH v3 4/4] IMA/ima_keys.sh: Enhance policy checks, Petr Vorel
- [PATCH v3 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Petr Vorel
- Re: [PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Lakshmi Ramasubramanian
- Re: [PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Mimi Zohar
  - Re: [PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Petr Vorel
  - Re: [PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Lakshmi Ramasubramanian
    - Re: [PATCH v3 0/4] IMA: verify measurement of certificate imported into a keyring, Petr Vorel
[PATCH 0/2] dm-devel:dm-crypt: infrastructure for measurement of DM target data using IMA, Tushar Sugandhi
- [PATCH 1/2] dm-devel: collect target data and submit to IMA to measure, Tushar Sugandhi
- [PATCH 2/2] dm-crypt: collect data and submit to DM to measure, Tushar Sugandhi
- Re: [PATCH 0/2] dm-devel:dm-crypt: infrastructure for measurement of DM target data using IMA, Mimi Zohar
  - Re: [PATCH 0/2] dm-devel:dm-crypt: infrastructure for measurement of DM target data using IMA, Tushar Sugandhi
[ima-evm-utils][PATCH] Install the swtpm package, if available, Mimi Zohar
- Re: [ima-evm-utils][PATCH] Install the swtpm package, if available, Mimi Zohar
  - Re: [ima-evm-utils][PATCH] Install the swtpm package, if available, Petr Vorel
- Re: [ima-evm-utils][PATCH] Install the swtpm package, if available, Bruno Meneguele
- Re: [ima-evm-utils][PATCH] Install the swtpm package, if available, Stefan Berger
[linux-ima-user]Systemd cgroups freezes after activating EVM, Vranceanu, Vladut
[PATCH ima-evm-utils 0/9] Docker based Travis CI builds, Petr Vorel
- [PATCH ima-evm-utils 1/9] configure: Fix tss2-esys check, Petr Vorel
- [PATCH ima-evm-utils 2/9] man: Fix xmlcatalog path detection, Petr Vorel
- [PATCH ima-evm-utils 3/9] man: Generate doc targets only when XSL found, Petr Vorel
- [PATCH ima-evm-utils 8/9] tests: Require cmp, Petr Vorel
- [PATCH ima-evm-utils 4/9] install-swtpm.sh: Ignore certificate for download, Petr Vorel
- [PATCH ima-evm-utils 5/9] install-swtpm.sh: Update ibmtpm to version 1637, Petr Vorel
- [PATCH ima-evm-utils 7/9] autogen.sh: Cleanup, Petr Vorel
- [PATCH ima-evm-utils 6/9] Remove install-tpm2-tss.sh, Petr Vorel
- [PATCH ima-evm-utils 9/9] travis: Switch to docker based builds, Petr Vorel
  - Re: [PATCH ima-evm-utils 9/9] travis: Switch to docker based builds, Mimi Zohar
  - Re: [PATCH ima-evm-utils 9/9] travis: Switch to docker based builds, Petr Vorel
    - Re: [PATCH ima-evm-utils 9/9] travis: Switch to docker based builds, Bruno Meneguele
      - Re: [PATCH ima-evm-utils 9/9] travis: Switch to docker based builds, Petr Vorel
- Re: [PATCH ima-evm-utils 0/9] Docker based Travis CI builds, Bruno Meneguele
- Re: [PATCH ima-evm-utils 0/9] Docker based Travis CI builds, Mimi Zohar
  - Re: [PATCH ima-evm-utils 0/9] Docker based Travis CI builds, Petr Vorel
    - Re: [PATCH ima-evm-utils 0/9] Docker based Travis CI builds, Mimi Zohar
      - Re: [PATCH ima-evm-utils 0/9] Docker based Travis CI builds, George Wilson
[PATCH 0/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
- [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
  - Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Stephen Smalley
    - Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
      - Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Stephen Smalley
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Stephen Smalley
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Mimi Zohar
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Casey Schaufler
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Mimi Zohar
        
        Re: [PATCH 2/2] SELinux: Measure state and hash of policy using IMA, Lakshmi Ramasubramanian
- [PATCH 1/2] IMA: Handle early boot data measurement, Lakshmi Ramasubramanian
[PATCH ima-evm-utils 1/2] man: Fix xmlcatalog path detection, Petr Vorel
- [PATCH ima-evm-utils 2/2] man: Generate doc targets only when XSL found, Petr Vorel
[PATCH 0/3] IMA: Infrastructure for measurement of critical kernel data, Tushar Sugandhi
- [PATCH 3/3] IMA: define IMA hook to measure critical data from kernel components, Tushar Sugandhi
- [PATCH 1/3] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
- [PATCH 2/3] IMA: add policy to support measuring critical data from kernel components, Tushar Sugandhi
  - Re: [PATCH 2/3] IMA: add policy to support measuring critical data from kernel components, Mimi Zohar
    - Re: [PATCH 2/3] IMA: add policy to support measuring critical data from kernel components, Tushar Sugandhi
      - Re: [PATCH 2/3] IMA: add policy to support measuring critical data from kernel components, Mimi Zohar
        
        Re: [PATCH 2/3] IMA: add policy to support measuring critical data from kernel components, Tushar Sugandhi
Re: WARNING: suspicious RCU usage in tipc_l2_send_msg, syzbot
[PATCH v2 0/2] ima: Fix keyrings race condition and other key related bugs, Tyler Hicks
- [PATCH v2 2/2] ima: Fail rule parsing when asymmetric key measurement isn't supportable, Tyler Hicks
- [PATCH v2 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule, Tyler Hicks
- Re: [PATCH v2 0/2] ima: Fix keyrings race condition and other key related bugs, Mimi Zohar
  - Re: [PATCH v2 0/2] ima: Fix keyrings race condition and other key related bugs, Tyler Hicks
- Re: [PATCH v2 0/2] ima: Fix keyrings race condition and other key related bugs, Nayna
ima-evm-utils: version 1.3.1 released, Mimi Zohar
[PATCH] field-dictionary.csv: Add errno to audit message field dictionary, Lakshmi Ramasubramanian
- Re: [PATCH] field-dictionary.csv: Add errno to audit message field dictionary, Paul Moore
[PATCH v2 0/4] IMA: verify measurement of certificate imported into a keyring, Petr Vorel
- [PATCH v2 1/4] IMA/ima_keys.sh Fix policy content check usage, Petr Vorel
- [PATCH v2 2/4] IMA: Refactor datafiles directory, Petr Vorel
- [PATCH v2 4/4] IMA/ima_keys.sh: Enhance policy checks, Petr Vorel
- [PATCH v2 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Petr Vorel
  - Re: [PATCH v2 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Lakshmi Ramasubramanian
  - Re: [PATCH v2 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Mimi Zohar
    - Re: [PATCH v2 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Lakshmi Ramasubramanian
    - Re: [PATCH v2 3/4] IMA: Add a test to verify measurement of certificate imported into a keyring, Petr Vorel
- Re: [PATCH v2 0/4] IMA: verify measurement of certificate imported into a keyring, Petr Vorel
[PATCH] security: ima: delete a repeated word in comments, Randy Dunlap
[PATCH 1/1] IMA/ima_keys.sh Fix policy content check usage, Petr Vorel
- Re: [PATCH 1/1] IMA/ima_keys.sh Fix policy content check usage, Petr Vorel
  - Re: [PATCH 1/1] IMA/ima_keys.sh Fix policy content check usage, Lakshmi Ramasubramanian
  - Re: [PATCH 1/1] IMA/ima_keys.sh Fix policy content check usage, Petr Vorel
- Re: [PATCH 1/1] IMA/ima_keys.sh Fix policy content check usage, Petr Vorel
[GIT PULL] integrity subsystem updates for v5.9, Mimi Zohar
[PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
- [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Lakshmi Ramasubramanian
  - Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Mimi Zohar
    - Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Stephen Smalley
      - Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Mimi Zohar
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Stephen Smalley
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Mimi Zohar
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Stephen Smalley
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Tyler Hicks
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Stephen Smalley
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, John Johansen
        
        Re: [PATCH v6 1/4] IMA: Add func to measure LSM state and policy, Mimi Zohar
- [PATCH v6 4/4] IMA: Handle early boot data measurement, Lakshmi Ramasubramanian
- [PATCH v6 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
- [PATCH v6 2/4] IMA: Define IMA hooks to measure LSM state and policy, Lakshmi Ramasubramanian
- Re: [PATCH v6 0/4] LSM: Measure security module data, Casey Schaufler
  - Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
    - Re: [PATCH v6 0/4] LSM: Measure security module data, Casey Schaufler
      - Re: [PATCH v6 0/4] LSM: Measure security module data, Tyler Hicks
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Tyler Hicks
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Tyler Hicks
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Casey Schaufler
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Mimi Zohar
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Casey Schaufler
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Casey Schaufler
        
        Re: [PATCH v6 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
  - Re: [PATCH v6 0/4] LSM: Measure security module data, Mimi Zohar
- Re: [PATCH v6 0/4] LSM: Measure security module data, Mimi Zohar
[PATCH v1 0/3] Verify measurement of certificate imported into a keyring, Lachlan Sneff
- [PATCH 1/3] IMA: Update key test documentation, Lachlan Sneff
- [PATCH 2/3] IMA: Refactor datafiles directory, Lachlan Sneff
- [PATCH 3/3] IMA: Add a test to verify measurement of certificate imported into a keyring, Lachlan Sneff
- <Possible follow-ups>
- [PATCH v1 0/3] Verify measurement of certificate imported into a keyring, Lachlan Sneff
  - [PATCH 1/3] IMA: Update key test documentation, Lachlan Sneff
    - Re: [PATCH 1/3] IMA: Update key test documentation, Petr Vorel
      - Re: [PATCH 1/3] IMA: Update key test documentation, Lachlan Sneff
        
        Re: [PATCH 1/3] IMA: Update key test documentation, Petr Vorel
    - Re: [PATCH 1/3] IMA: Update key test documentation, Petr Vorel
  - [PATCH 2/3] IMA: Refactor datafiles directory, Lachlan Sneff
    - Re: [PATCH 2/3] IMA: Refactor datafiles directory, Petr Vorel
      - Re: [PATCH 2/3] IMA: Refactor datafiles directory, Petr Vorel
        
        Re: [PATCH 2/3] IMA: Refactor datafiles directory, Petr Vorel
  - [PATCH 3/3] IMA: Add a test to verify measurement of certificate imported into a keyring, Lachlan Sneff
[RFC][PATCH 0/3] ima: Digest Lists extension, Roberto Sassu
- [RFC][PATCH 2/3] ima: Add support for appraisal with digest lists, Roberto Sassu
- [RFC][PATCH 1/3] ima: Add support for measurement with digest lists, Roberto Sassu
- [RFC][PATCH 3/3] evm: Add support for digest lists of metadata, Roberto Sassu
[ima-evm-utils: PATCH 0/5] initial travis support, Mimi Zohar
- [ima-evm-utils: PATCH 2/5] ima-evm-utils: travis: download, compile, and install a swTPM, Mimi Zohar
- [ima-evm-utils: PATCH 1/5] ima-evm-utils: travis: define travis.yml, Mimi Zohar
- [ima-evm-utils: PATCH 3/5] ima-evm-utils: travis: dependency on TSS for initializing software TPM, Mimi Zohar
- [ima-evm-utils: PATCH 4/5] ima-evm-utils: travis: support tpm2-tss, Mimi Zohar
- [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
  - Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
    - Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
      - Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Petr Vorel
        
        Re: [ima-evm-utils: PATCH 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
  - Re: [ima-evm-utils: PATCH v1 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
    - Re: [ima-evm-utils: PATCH v1 5/5] ima-evm-utils: travis: openssl gost engine, Vitaly Chikunov
      - Re: [ima-evm-utils: PATCH v1 5/5] ima-evm-utils: travis: openssl gost engine, Mimi Zohar
- Re: [ima-evm-utils: PATCH 0/5] initial travis support, Petr Vorel
[ima-evm-utils: PATCH 0/3] evmctl option improvements, Mimi Zohar
- [ima-evm-utils: PATCH 2/3] Rename "--validate" to "--ignore-violations", Mimi Zohar
  - Re: [ima-evm-utils: PATCH 2/3] Rename "--validate" to "--ignore-violations", Lakshmi Ramasubramanian
- [ima-evm-utils: PATCH 1/3] Drop the ima_measurement "--verify" option, Mimi Zohar
  - Re: [ima-evm-utils: PATCH 1/3] Drop the ima_measurement "--verify" option, Lakshmi Ramasubramanian
- [ima-evm-utils: PATCH 3/3] Update the ima_boot_aggregate apsects of the "README" and "help" files, Mimi Zohar
  - Re: [ima-evm-utils: PATCH 3/3] Update the ima_boot_aggregate apsects of the "README" and "help" files, Lakshmi Ramasubramanian
[PATCH v1] tpm: use %*ph to print small buffer, Andy Shevchenko
- Re: [PATCH v1] tpm: use %*ph to print small buffer, Petr Vorel
  - Re: [PATCH v1] tpm: use %*ph to print small buffer, Jarkko Sakkinen
- Re: [PATCH v1] tpm: use %*ph to print small buffer, Jarkko Sakkinen
  - Re: [PATCH v1] tpm: use %*ph to print small buffer, Andy Shevchenko
    - Re: [PATCH v1] tpm: use %*ph to print small buffer, Jarkko Sakkinen
      - Re: [PATCH v1] tpm: use %*ph to print small buffer, Andy Shevchenko
        
        Re: [PATCH v1] tpm: use %*ph to print small buffer, Jarkko Sakkinen
[linux-ima-user]EVM does not permit changes on /proc filesystem, Vranceanu, Vladut
[PATCH v5 0/4] LSM: Measure security module data, Lakshmi Ramasubramanian
- [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
  - Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
    - Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
      - Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Stephen Smalley
        
        Re: [PATCH v5 3/4] LSM: Define SELinux function to measure state and policy, Lakshmi Ramasubramanian
- [PATCH v5 4/4] IMA: Handle early boot data measurement, Lakshmi Ramasubramanian
  - Re: [PATCH v5 4/4] IMA: Handle early boot data measurement, Lakshmi Ramasubramanian
    - Re: [PATCH v5 4/4] IMA: Handle early boot data measurement, Tyler Hicks
- [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Lakshmi Ramasubramanian
  - Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Tyler Hicks
    - Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Lakshmi Ramasubramanian
      - Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Tyler Hicks
    - Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Casey Schaufler
      - Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy, Lakshmi Ramasubramanian
- [PATCH v5 2/4] IMA: Define IMA hooks to measure LSM state and policy, Lakshmi Ramasubramanian
  - Re: [PATCH v5 2/4] IMA: Define IMA hooks to measure LSM state and policy, Tyler Hicks
[RFC PATCH v6 00/11] Integrity Policy Enforcement LSM (IPE), Deven Bowers
- [RFC PATCH v6 04/11] ipe: add property for trust of boot volume, Deven Bowers
- [RFC PATCH v6 09/11] ipe: add property for dmverity roothash, Deven Bowers
- [RFC PATCH v6 08/11] dm-verity: add bdev_setsecurity hook for root-hash, Deven Bowers
- [RFC PATCH v6 03/11] security: add ipe lsm policy parser and policy loading, Deven Bowers
- [RFC PATCH v6 11/11] cleanup: uapi/linux/audit.h, Deven Bowers
- [RFC PATCH v6 07/11] ipe: add property for signed dmverity volumes, Deven Bowers
- [RFC PATCH v6 10/11] documentation: add ipe documentation, Deven Bowers
- [RFC PATCH v6 02/11] security: add ipe lsm evaluation loop and audit system, Deven Bowers
- [RFC PATCH v6 01/11] scripts: add ipe tooling to generate boot policy, Deven Bowers
- [RFC PATCH v6 06/11] dm-verity: add bdev_setsecurity hook for dm-verity signature, Deven Bowers
- [RFC PATCH v6 05/11] fs: add security blob and hooks for block_device, Deven Bowers
[PATCH v4 00/17] Introduce partial kernel_read_file() support, Kees Cook
- [PATCH v4 01/17] test_firmware: Test platform fw loading on non-EFI systems, Kees Cook
- [PATCH v4 15/17] firmware: Store opt_flags in fw_priv, Kees Cook
- [PATCH v4 14/17] fs/kernel_file_read: Add "offset" arg for partial reads, Kees Cook
- [PATCH v4 16/17] firmware: Add request_partial_firmware_into_buf(), Kees Cook
- [PATCH v4 13/17] IMA: Add support for file reads without contents, Kees Cook
- [PATCH v4 09/17] LSM: Introduce kernel_post_load_data() hook, Kees Cook
  - Re: [PATCH v4 09/17] LSM: Introduce kernel_post_load_data() hook, Mimi Zohar
  - Re: [PATCH v4 09/17] LSM: Introduce kernel_post_load_data() hook, KP Singh
- [PATCH v4 11/17] module: Call security_kernel_post_load_data(), Kees Cook
  - Re: [PATCH v4 11/17] module: Call security_kernel_post_load_data(), Jessica Yu
    - Re: [PATCH v4 11/17] module: Call security_kernel_post_load_data(), KP Singh
- [PATCH v4 10/17] firmware_loader: Use security_post_load_data(), Kees Cook
  - Re: [PATCH v4 10/17] firmware_loader: Use security_post_load_data(), Mimi Zohar
- [PATCH v4 12/17] LSM: Add "contents" flag to kernel_read_file hook, Kees Cook
  - Re: [PATCH v4 12/17] LSM: Add "contents" flag to kernel_read_file hook, Mimi Zohar
- [PATCH v4 07/17] fs/kernel_read_file: Switch buffer size arg to size_t, Kees Cook
  - Re: [PATCH v4 07/17] fs/kernel_read_file: Switch buffer size arg to size_t, James Morris
- [PATCH v4 08/17] fs/kernel_read_file: Add file_size output argument, Kees Cook
  - Re: [PATCH v4 08/17] fs/kernel_read_file: Add file_size output argument, James Morris
- [PATCH v4 06/17] fs/kernel_read_file: Remove redundant size argument, Kees Cook
  - Re: [PATCH v4 06/17] fs/kernel_read_file: Remove redundant size argument, James Morris
- [PATCH v4 05/17] fs/kernel_read_file: Split into separate source file, Kees Cook
- [PATCH v4 04/17] fs/kernel_read_file: Split into separate include file, Kees Cook
  - Re: [PATCH v4 04/17] fs/kernel_read_file: Split into separate include file, James Morris
- [PATCH v4 02/17] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum, Kees Cook
- [PATCH v4 03/17] fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum, Kees Cook
- [PATCH v4 17/17] test_firmware: Test partial read support, Kees Cook
Measure data again even when it has not changed, Lakshmi Ramasubramanian
- Re: Measure data again even when it has not changed, Mimi Zohar
  - Re: Measure data again even when it has not changed, Lakshmi Ramasubramanian
    - Re: Measure data again even when it has not changed, Mimi Zohar
      - Re: Measure data again even when it has not changed, Lakshmi Ramasubramanian
        
        Re: Measure data again even when it has not changed, Stephen Smalley
[RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Deven Bowers
- [RFC PATCH v5 01/11] scripts: add ipe tooling to generate boot policy, Deven Bowers
- [RFC PATCH v5 02/11] security: add ipe lsm evaluation loop and audit system, Deven Bowers
- [RFC PATCH v5 06/11] dm-verity: move signature check after tree validation, Deven Bowers
  - Re: [RFC PATCH v5 06/11] dm-verity: move signature check after tree validation, Eric Biggers
    - Re: [RFC PATCH v5 06/11] dm-verity: move signature check after tree validation, Deven Bowers
- [RFC PATCH v5 09/11] dm-verity: add bdev_setsecurity hook for root-hash, Deven Bowers
- [RFC PATCH v5 11/12] documentation: add ipe documentation, Deven Bowers
- [RFC PATCH v5 12/12] cleanup: uapi/linux/audit.h, Deven Bowers
- [RFC PATCH v5 10/12] ipe: add property for dmverity roothash, Deven Bowers
- [RFC PATCH v5 08/11] ipe: add property for signed dmverity volumes, Deven Bowers
- [RFC PATCH v5 05/11] fs: add security blob and hooks for block_device, Deven Bowers
  - Re: [RFC PATCH v5 05/11] fs: add security blob and hooks for block_device, Casey Schaufler
    - Re: [RFC PATCH v5 05/11] fs: add security blob and hooks for block_device, Al Viro
      - Re: [RFC PATCH v5 05/11] fs: add security blob and hooks for block_device, Deven Bowers
- [RFC PATCH v5 03/11] security: add ipe lsm policy parser and policy loading, Deven Bowers
- [RFC PATCH v5 11/11] cleanup: uapi/linux/audit.h, Deven Bowers
- [RFC PATCH v5 10/11] documentation: add ipe documentation, Deven Bowers
- [RFC PATCH v5 07/11] dm-verity: add bdev_setsecurity hook for dm-verity signature, Deven Bowers
- [RFC PATCH v5 04/11] ipe: add property for trust of boot volume, Deven Bowers
- Re: [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Pavel Machek
  - Re: [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Sasha Levin
    - Re: [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Pavel Machek
      - Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Deven Bowers
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Morris
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Morris
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Morris
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Morris
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Mimi Zohar
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Pavel Machek
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Bottomley
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), James Morris
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Chuck Lever
        
        Re: [dm-devel] [RFC PATCH v5 00/11] Integrity Policy Enforcement LSM (IPE), Deven Bowers
[PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, madvenka
- [PATCH v1 2/4] [RFC] x86/trampfd: Provide support for the trampoline file descriptor, madvenka
  - Re: [PATCH v1 2/4] [RFC] x86/trampfd: Provide support for the trampoline file descriptor, Greg KH
    - Re: [PATCH v1 2/4] [RFC] x86/trampfd: Provide support for the trampoline file descriptor, Madhavan T. Venkataraman
- [PATCH v1 4/4] [RFC] arm/trampfd: Provide support for the trampoline file descriptor, madvenka
- [PATCH v1 1/4] [RFC] fs/trampfd: Implement the trampoline file descriptor API, madvenka
  - Re: [PATCH v1 1/4] [RFC] fs/trampfd: Implement the trampoline file descriptor API, Oleg Nesterov
    - Re: [PATCH v1 1/4] [RFC] fs/trampfd: Implement the trampoline file descriptor API, Madhavan T. Venkataraman
      - Re: [PATCH v1 1/4] [RFC] fs/trampfd: Implement the trampoline file descriptor API, Oleg Nesterov
- [PATCH v1 3/4] [RFC] arm64/trampfd: Provide support for the trampoline file descriptor, madvenka
- RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Andy Lutomirski
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
      - Message not available
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Andy Lutomirski
- Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Casey Schaufler
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, James Morris
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Andy Lutomirski
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Florian Weimer
  - RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Pavel Machek
      - RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
  - Message not available
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Andy Lutomirski
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
        
        RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
        
        RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Florian Weimer
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Andy Lutomirski
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
    - RE: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, David Laight
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
- Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
  - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
    - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
      - Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Pavel Machek
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Pavel Machek
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Madhavan T. Venkataraman
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mickaël Salaün
        
        Re: [PATCH v1 0/4] [RFC] Implement Trampoline File Descriptor, Mark Rutland
IMA/EVM interfaces, Denis Efremov
- RE: IMA/EVM interfaces, Roberto Sassu
  - Re: IMA/EVM interfaces, Denis Efremov
    - RE: IMA/EVM interfaces, Roberto Sassu
      - Re: IMA/EVM interfaces, Mimi Zohar
[PATCH v5 0/2] synquacer: add TPM support, Masahisa Kojima
- [PATCH v5 1/2] tpm: tis: add support for MMIO TPM on SynQuacer, Masahisa Kojima
  - Re: [PATCH v5 1/2] tpm: tis: add support for MMIO TPM on SynQuacer, Jarkko Sakkinen
- [PATCH v5 2/2] dt-bindings: Add SynQucer TPM MMIO as a trivial device, Masahisa Kojima
  - Re: [PATCH v5 2/2] dt-bindings: Add SynQucer TPM MMIO as a trivial device, Jarkko Sakkinen
  - Re: [PATCH v5 2/2] dt-bindings: Add SynQucer TPM MMIO as a trivial device, Jarkko Sakkinen
    - Re: [PATCH v5 2/2] dt-bindings: Add SynQucer TPM MMIO as a trivial device, Ard Biesheuvel
      - Re: [PATCH v5 2/2] dt-bindings: Add SynQucer TPM MMIO as a trivial device, Jarkko Sakkinen
[PATCH v6 4/4] IMA: Add test for kexec cmdline measurement, Petr Vorel
- Re: [PATCH v6 4/4] IMA: Add test for kexec cmdline measurement, Lachlan Sneff
- Re: [PATCH v6 4/4] IMA: Add test for kexec cmdline measurement, Mimi Zohar
  - Re: [PATCH v6 4/4] IMA: Add test for kexec cmdline measurement, Petr Vorel
[PATCH v5 0/4] IMA: kexec cmdline measurement, Petr Vorel
- [PATCH v5 2/4] IMA: Add policy related helpers, Petr Vorel
  - Re: [PATCH v5 2/4] IMA: Add policy related helpers, Mimi Zohar
    - Re: [PATCH v5 2/4] IMA: Add policy related helpers, Petr Vorel
- [PATCH v5 1/4] IMA: Rename helper to require_ima_policy_cmdline, Petr Vorel
- [PATCH v5 3/4] IMA/ima_keys.sh: Fix policy readability check, Petr Vorel
- [PATCH v5 4/4] IMA: Add test for kexec cmdline measurement, Petr Vorel
  - Re: [PATCH v5 4/4] IMA: Add test for kexec cmdline measurement, Lachlan Sneff
    - Re: [PATCH v5 4/4] IMA: Add test for kexec cmdline measurement, Petr Vorel
- Re: [PATCH v5 0/4] IMA: kexec cmdline measurement, Mimi Zohar
[PATCH 0/2] ima: Fix keyrings race condition and other key related bugs, Tyler Hicks
- [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule, Tyler Hicks
  - Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule, Lakshmi Ramasubramanian
  - Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule, Nayna
    - Re: [PATCH 1/2] ima: Pre-parse the list of keyrings in a KEY_CHECK rule, Tyler Hicks
- [PATCH 2/2] ima: Fail rule parsing when asymmetric key measurement isn't supportable, Tyler Hicks
  - Re: [PATCH 2/2] ima: Fail rule parsing when asymmetric key measurement isn't supportable, Lakshmi Ramasubramanian
[PATCH v4 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Stephen Smalley
- Re: [PATCH v4 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Mimi Zohar
  - Re: [PATCH v4 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Stephen Smalley
    - Re: [PATCH v4 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Mimi Zohar
[PATCH v2] tpm: Fix the description error of the help information in Kconfig, Tianjia Zhang
- Re: [PATCH v2] tpm: Fix the description error of the help information in Kconfig, Arnd Bergmann
  - Re: [PATCH v2] tpm: Fix the description error of the help information in Kconfig, Tianjia Zhang
[PATCH] tpm: Fix the description error of the help information in Kconfig, Tianjia Zhang
- Re: [PATCH] tpm: Fix the description error of the help information in Kconfig, Arnd Bergmann
  - Re: [PATCH] tpm: Fix the description error of the help information in Kconfig, Tianjia Zhang
    - RE: [PATCH] tpm: Fix the description error of the help information in Kconfig, Peter.Huewe
      - Re: [PATCH] tpm: Fix the description error of the help information in Kconfig, Tianjia Zhang
[PATCH] tpm/tpm_ftpm_tee: fix boolreturn.cocci warnings, kernel test robot
[PATCH v3 00/19] Introduce partial kernel_read_file() support, Kees Cook
- [PATCH v3 03/19] firmware_loader: EFI firmware loader must handle pre-allocated buffer, Kees Cook
  - Re: [PATCH v3 03/19] firmware_loader: EFI firmware loader must handle pre-allocated buffer, Greg Kroah-Hartman
    - Re: [PATCH v3 03/19] firmware_loader: EFI firmware loader must handle pre-allocated buffer, Kees Cook
      - Re: [PATCH v3 03/19] firmware_loader: EFI firmware loader must handle pre-allocated buffer, Greg Kroah-Hartman
- [PATCH v3 04/19] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum, Kees Cook
  - Re: [PATCH v3 04/19] fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum, Mimi Zohar
- [PATCH v3 13/19] module: Call security_kernel_post_load_data(), Kees Cook
- [PATCH v3 15/19] IMA: Add support for file reads without contents, Kees Cook
  - Re: [PATCH v3 15/19] IMA: Add support for file reads without contents, Mimi Zohar
    - Re: [PATCH v3 15/19] IMA: Add support for file reads without contents, Kees Cook
      - Re: [PATCH v3 15/19] IMA: Add support for file reads without contents, Greg Kroah-Hartman
        
        Re: [PATCH v3 15/19] IMA: Add support for file reads without contents, Kees Cook
- [PATCH v3 14/19] LSM: Add "contents" flag to kernel_read_file hook, Kees Cook
- [PATCH v3 11/19] LSM: Introduce kernel_post_load_data() hook, Kees Cook
  - Re: [PATCH v3 11/19] LSM: Introduce kernel_post_load_data() hook, Mimi Zohar
    - Re: [PATCH v3 11/19] LSM: Introduce kernel_post_load_data() hook, Kees Cook
- [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Kees Cook
  - Re: [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Mimi Zohar
    - Re: [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Kees Cook
      - Re: [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Mimi Zohar
        
        Re: [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Mimi Zohar
        
        Re: [PATCH v3 12/19] firmware_loader: Use security_post_load_data(), Kees Cook
- [PATCH v3 09/19] fs/kernel_read_file: Switch buffer size arg to size_t, Kees Cook
  - Re: [PATCH v3 09/19] fs/kernel_read_file: Switch buffer size arg to size_t, Mimi Zohar
- [PATCH v3 10/19] fs/kernel_read_file: Add file_size output argument, Kees Cook
  - Re: [PATCH v3 10/19] fs/kernel_read_file: Add file_size output argument, Mimi Zohar
- [PATCH v3 08/19] fs/kernel_read_file: Remove redundant size argument, Kees Cook
  - Re: [PATCH v3 08/19] fs/kernel_read_file: Remove redundant size argument, Mimi Zohar
- [PATCH v3 06/19] fs/kernel_read_file: Split into separate include file, Kees Cook
  - Re: [PATCH v3 06/19] fs/kernel_read_file: Split into separate include file, Mimi Zohar
- [PATCH v3 07/19] fs/kernel_read_file: Split into separate source file, Kees Cook
  - Re: [PATCH v3 07/19] fs/kernel_read_file: Split into separate source file, Mimi Zohar
- [PATCH v3 05/19] fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum, Kees Cook
- [PATCH v3 02/19] selftest/firmware: Add selftest timeout in settings, Kees Cook
- [PATCH v3 01/19] test_firmware: Test platform fw loading on non-EFI systems, Kees Cook
- [PATCH v3 17/19] firmware: Store opt_flags in fw_priv, Kees Cook
- [PATCH v3 19/19] test_firmware: Test partial read support, Kees Cook
- [PATCH v3 18/19] firmware: Add request_partial_firmware_into_buf(), Kees Cook
  - Re: [PATCH v3 18/19] firmware: Add request_partial_firmware_into_buf(), Luis Chamberlain
    - Re: [PATCH v3 18/19] firmware: Add request_partial_firmware_into_buf(), Takashi Iwai
      - Re: [PATCH v3 18/19] firmware: Add request_partial_firmware_into_buf(), Kees Cook
- [PATCH v3 16/19] fs/kernel_file_read: Add "offset" arg for partial reads, Kees Cook
- Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Scott Branden
- Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Greg Kroah-Hartman
  - Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Kees Cook
- Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Mimi Zohar
  - Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Scott Branden
    - Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Mimi Zohar
      - Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Scott Branden
- Re: [PATCH v3 00/19] Introduce partial kernel_read_file() support, Luis Chamberlain
[PATCH v19 14/23] LSM: Ensure the correct LSM context releaser, Casey Schaufler
[PATCH v19 12/23] IMA: Change internal interfaces to use lsmblobs, Casey Schaufler
[PATCH v19 11/23] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
[PATCH v19 10/23] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
[PATCH v19 09/23] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
[PATCH v3 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Stephen Smalley
- Re: [PATCH v3 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Mimi Zohar
  - Re: [PATCH v3 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Mimi Zohar
[PATCH v4 1/2] IMA: Fix policy readability check, Petr Vorel
- [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Petr Vorel
  - Re: [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Mimi Zohar
    - Re: [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Petr Vorel
      - Re: [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Mimi Zohar
      - Re: [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Lachlan Sneff
        
        Re: [PATCH v4 2/2] IMA: Add test for kexec cmdline measurement, Petr Vorel
[GIT PULL] tpmdd update for Linux v5.9, Jarkko Sakkinen
- Re: [GIT PULL] tpmdd update for Linux v5.9, pr-tracker-bot
[PATCH v2 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Stephen Smalley
- Re: [PATCH v2 ima-evm-utils] extend ima_measurement --pcrs option to support per-bank pcr files, Mimi Zohar
[PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
- [PATCH v7 2/7] exec: Move S_ISREG() check earlier, Mickaël Salaün
  - Re: [PATCH v7 2/7] exec: Move S_ISREG() check earlier, Eric W. Biederman
- [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Mickaël Salaün
  - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Kees Cook
  - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Al Viro
    - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Florian Weimer
      - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Mickaël Salaün
  - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Eric W. Biederman
    - Re: [PATCH v7 4/7] fs: Introduce O_MAYEXEC flag for openat2(2), Mickaël Salaün
- [PATCH v7 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES, Mickaël Salaün
  - Re: [PATCH v7 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES, Eric W. Biederman
    - Re: [PATCH v7 1/7] exec: Change uselib(2) IS_SREG() failure to EACCES, Eric W. Biederman
- [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC, Mickaël Salaün
  - Re: [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC, Kees Cook
  - Re: [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC, Eric W. Biederman
    - Re: [PATCH v7 5/7] fs,doc: Enable to enforce noexec mounts or file exec through O_MAYEXEC, Mickaël Salaün
- [PATCH v7 7/7] ima: add policy support for the new file open MAY_OPENEXEC flag, Mickaël Salaün
  - Re: [PATCH v7 7/7] ima: add policy support for the new file open MAY_OPENEXEC flag, Kees Cook
- [PATCH v7 3/7] exec: Move path_noexec() check earlier, Mickaël Salaün
  - Re: [PATCH v7 3/7] exec: Move path_noexec() check earlier, Eric W. Biederman
    - Re: [PATCH v7 3/7] exec: Move path_noexec() check earlier, Mickaël Salaün
- [PATCH v7 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing, Mickaël Salaün
  - Re: [PATCH v7 6/7] selftest/openat2: Add tests for O_MAYEXEC enforcing, Kees Cook
- Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Thibaut Sautereau
- Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Kees Cook
  - Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Christian Brauner
  - Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
    - Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Al Viro
      - RE: [PATCH v7 0/7] Add support for O_MAYEXEC, David Laight
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Al Viro
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
        
        RE: [PATCH v7 0/7] Add support for O_MAYEXEC, David Laight
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
      - Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Jann Horn
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mimi Zohar
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Matthew Wilcox
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mimi Zohar
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Deven Bowers
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Al Viro
        
        Re: [PATCH v7 0/7] Add support for O_MAYEXEC, Mickaël Salaün
[PATCH] evmctl: extend ima_measurement --pcrs option to support per-bank pcr files, Stephen Smalley
[PATCH ima-evm-utils] Fix missing {u,g}id_t typedef on musl, Petr Vorel
[PATCH v3] IMA: Add test for kexec cmdline measurement, Lachlan Sneff
- Re: [PATCH v3] IMA: Add test for kexec cmdline measurement, Petr Vorel
  - Re: [PATCH v3] IMA: Add test for kexec cmdline measurement, Lachlan Sneff
    - Re: [PATCH v3] IMA: Add test for kexec cmdline measurement, Petr Vorel
[PATCH v2] IMA: Add test for kexec cmdline measurement, Lachlan Sneff

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux SCSI] [Yosemite Forum]