Linux Integrity

• Date Index

• [PATCH v4 04/14] digest_cache: Add hash tables and operations, (continued)
  • [PATCH v4 04/14] digest_cache: Add hash tables and operations, Roberto Sassu
    • Re: [PATCH v4 04/14] digest_cache: Add hash tables and operations, Jarkko Sakkinen
      • Re: [PATCH v4 04/14] digest_cache: Add hash tables and operations, Roberto Sassu
  • [PATCH v4 05/14] digest_cache: Populate the digest cache from a digest list, Roberto Sassu
  • [PATCH v4 06/14] digest_cache: Parse tlv digest lists, Roberto Sassu
  • [PATCH v4 07/14] digest_cache: Parse rpm digest lists, Roberto Sassu
  • [PATCH v4 08/14] digest_cache: Add management of verification data, Roberto Sassu
  • [PATCH v4 09/14] digest_cache: Add support for directories, Roberto Sassu
    • Re: [PATCH v4 09/14] digest_cache: Add support for directories, Jarkko Sakkinen
      • Re: [PATCH v4 09/14] digest_cache: Add support for directories, Roberto Sassu
  • [PATCH v4 10/14] digest cache: Prefetch digest lists if requested, Roberto Sassu
    • Re: [PATCH v4 10/14] digest cache: Prefetch digest lists if requested, Jarkko Sakkinen
      • Re: [PATCH v4 10/14] digest cache: Prefetch digest lists if requested, Roberto Sassu
        • Re: [PATCH v4 10/14] digest cache: Prefetch digest lists if requested, Jarkko Sakkinen
  • [PATCH v4 11/14] digest_cache: Reset digest cache on file/directory change, Roberto Sassu
    • Re: [PATCH v4 11/14] digest_cache: Reset digest cache on file/directory change, Jarkko Sakkinen
      • Re: [PATCH v4 11/14] digest_cache: Reset digest cache on file/directory change, Roberto Sassu
  • [PATCH v4 12/14] digest_cache: Notify digest cache events, Roberto Sassu
  • [PATCH v4 13/14] selftests/digest_cache: Add selftests for digest_cache LSM, Roberto Sassu
    • Re: [PATCH v4 13/14] selftests/digest_cache: Add selftests for digest_cache LSM, Jarkko Sakkinen
      • Re: [PATCH v4 13/14] selftests/digest_cache: Add selftests for digest_cache LSM, Roberto Sassu
  • [PATCH v4 14/14] docs: Add documentation of the digest_cache LSM, Roberto Sassu
  • [PATCH v4 01/14] lib: Add TLV parser, Roberto Sassu
    • Re: [PATCH v4 01/14] lib: Add TLV parser, Jarkko Sakkinen
      • Re: [PATCH v4 01/14] lib: Add TLV parser, Randy Dunlap
        • Re: [PATCH v4 01/14] lib: Add TLV parser, Jarkko Sakkinen
  • Re: [PATCH v4 00/14] security: digest_cache LSM, Jarkko Sakkinen
    • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
  • Re: [PATCH v4 00/14] security: digest_cache LSM, Bagas Sanjaya
    • Message not available
      • Re: [PATCH v4 00/14] security: digest_cache LSM, Bagas Sanjaya
        • Re: [PATCH v4 00/14] security: digest_cache LSM, Jarkko Sakkinen
        • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
  • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
    • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
      • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
        • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
          • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
            • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
              • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
                • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
                  • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
                  • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
                    • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
                      • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
                        • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
                          • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
                            • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
                              • Re: [PATCH v4 00/14] security: digest_cache LSM, Paul Moore
                                • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
              • Re: [PATCH v4 00/14] security: digest_cache LSM, Dr. Greg
                • Re: [PATCH v4 00/14] security: digest_cache LSM, Roberto Sassu
• [PATCH v2 0/1] Add ST33KTPM2XI2C chip to the TPM TIS I2C driver, Michael Haener
  • [PATCH v2 1/1] dt-bindings: tpm: Add st,st33ktpm2xi2c, Michael Haener
    • Re: [PATCH v2 1/1] dt-bindings: tpm: Add st,st33ktpm2xi2c, Krzysztof Kozlowski
      • Re: [PATCH v2 1/1] dt-bindings: tpm: Add st,st33ktpm2xi2c, Jarkko Sakkinen
    • Re: [PATCH v2 1/1] dt-bindings: tpm: Add st,st33ktpm2xi2c, Jarkko Sakkinen
• dm-integrity: 4k devices report 512b discard alignment, Eric Wheeler
  • Re: dm-integrity: 4k devices report 512b discard alignment, Milan Broz
    • Re: dm-integrity: 4k devices report 512b discard alignment, Eric Wheeler
• [PATCH 0/2] Add ST33KTPM2XI2C chip to the TPM TIS I2C driver, M. Haener
  • [PATCH 1/2] tpm: tis_i2c: Add compatible string st,st33ktpm2xi2c, M. Haener
    • Re: [PATCH 1/2] tpm: tis_i2c: Add compatible string st,st33ktpm2xi2c, Jarkko Sakkinen
  • [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, M. Haener
    • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Lukas Wunner
        • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
          • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Lukas Wunner
            • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
              • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Lukas Wunner
                • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
                  • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Lukas Wunner
                    • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
                      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Haener, Michael
                        • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Jarkko Sakkinen
    • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Haener, Michael
        • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
    • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Jarkko Sakkinen
      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
      • Re: [PATCH 2/2] dt-bindings: tpm: Add st,st33ktpm2xi2c to TCG TIS binding, Krzysztof Kozlowski
• [PATCH v17 00/21] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [PATCH v17 01/21] security: add ipe lsm, Fan Wu
  • [PATCH v17 03/21] ipe: add evaluation loop, Fan Wu
  • [PATCH v17 04/21] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [PATCH v17 02/21] ipe: add policy parser, Fan Wu
  • [PATCH v17 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  • [PATCH v17 07/21] security: add new securityfs delete function, Fan Wu
  • [PATCH v17 06/21] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [PATCH v17 10/21] ipe: add permissive toggle, Fan Wu
  • [PATCH v17 08/21] ipe: add userspace interface, Fan Wu
  • [PATCH v17 11/21] block,lsm: add LSM blob and new LSM hooks for block device, Fan Wu
  • [PATCH v17 12/21] dm: add finalize hook to target_type, Fan Wu
  • [PATCH v17 13/21] dm verity: consume root hash digest and expose signature data via LSM hook, Fan Wu
    • Re: [PATCH v17 13/21] dm verity: consume root hash digest and expose signature data via LSM hook, Eric Biggers
      • Re: [PATCH v17 13/21] dm verity: consume root hash digest and expose signature data via LSM hook, Fan Wu
  • [PATCH v17 09/21] uapi|audit|ipe: add ipe auditing support, Fan Wu
  • [PATCH v17 18/21] scripts: add boot policy generation program, Fan Wu
  • [PATCH v17 16/21] fsverity: expose verified fsverity built-in signatures to LSMs, Fan Wu
    • Re: [PATCH v17 16/21] fsverity: expose verified fsverity built-in signatures to LSMs, Eric Biggers
  • [PATCH v17 21/21] MAINTAINERS: ipe: add ipe maintainer information, Fan Wu
  • [PATCH v17 15/21] security: add security_inode_setintegrity() hook, Fan Wu
  • [PATCH v17 17/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [PATCH v17 17/21] ipe: enable support for fs-verity as a trust provider, Eric Biggers
      • Re: [PATCH v17 17/21] ipe: enable support for fs-verity as a trust provider, Eric Biggers
  • [PATCH v17 19/21] ipe: kunit test for parser, Fan Wu
  • [PATCH v17 14/21] ipe: add support for dm-verity as a trust provider, Fan Wu
  • [PATCH v17 20/21] Documentation: add ipe documentation, Fan Wu
    • Re: [PATCH v17 20/21] Documentation: add ipe documentation, Bagas Sanjaya
      • Re: [PATCH v17 20/21] Documentation: add ipe documentation, Randy Dunlap
        • Re: [PATCH v17 20/21] Documentation: add ipe documentation, Bagas Sanjaya
    • Re: [PATCH v17 20/21] Documentation: add ipe documentation, Eric Biggers
      • Re: [PATCH v17 20/21] Documentation: add ipe documentation, Eric Biggers
• [RFC 0/2] ima: Fix detection of read/write violations on stacked filesystems, Stefan Berger
  • [RFC 1/2] ovl: Define D_REAL_FILEDATA for d_real to return dentry with data, Stefan Berger
    • Re: [RFC 1/2] ovl: Define D_REAL_FILEDATA for d_real to return dentry with data, Amir Goldstein
  • [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Stefan Berger
    • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Amir Goldstein
      • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Stefan Berger
        • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Miklos Szeredi
          • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Mimi Zohar
            • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Miklos Szeredi
              • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Mimi Zohar
                • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Miklos Szeredi
                  • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Mimi Zohar
                    • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Miklos Szeredi
                      • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Mimi Zohar
                        • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Miklos Szeredi
                          • Re: [RFC 2/2] ima: Fix detection of read/write violations on stacked filesystems, Mimi Zohar
• [PATCH v7] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v7] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
• [PATCH][next] tpm/eventlog: remove redundant assignment to variabel ret, Colin Ian King
  • Re: [PATCH][next] tpm/eventlog: remove redundant assignment to variabel ret, Jarkko Sakkinen
• [PATCH 0/2] TPM documentation updates, Jarkko Sakkinen
  • [PATCH 1/2] MAINTAINERS: Update URL's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE DRIVER, Jarkko Sakkinen
  • [PATCH 2/2] Documentation: tpm_tis, Jarkko Sakkinen
    • Re: [PATCH 2/2] Documentation: tpm_tis, Bagas Sanjaya
      • Re: [PATCH 2/2] Documentation: tpm_tis, Jarkko Sakkinen
• [PATCH v6] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
    • Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
      • Re: [PATCH v6] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
• [PATCH v5] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v5] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
    • Re: [PATCH v5] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
      • Re: [PATCH v5] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
• [PATCH v5][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
  • Re: [PATCH v5][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
    • Re: [PATCH v5][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
      • Re: [PATCH v5][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
        • Re: [PATCH v5][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
• [PATCH 0/1] char: tpm: Handle HAS_IOPORT dependencies, Niklas Schnelle
  • [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Niklas Schnelle
    • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Arnd Bergmann
      • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Jarkko Sakkinen
      • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Niklas Schnelle
        • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Arnd Bergmann
          • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Niklas Schnelle
            • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Arnd Bergmann
    • Re: [PATCH 1/1] char: tpm: handle HAS_IOPORT dependencies, Jarkko Sakkinen
• TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, William Brown
  • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
    • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
      • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, James Bottomley
        • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, William Brown
          • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
        • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
          • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, William Brown
            • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
    • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, William Brown
      • Re: TPM error 0x0901, possibly related to TPM2_PT_CONTEXT_GAP_MAX, Jarkko Sakkinen
• [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was, Roberto Sassu
  • Re: [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was, Mimi Zohar
    • Re: [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was, Paul Moore
  • Re: [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was, Linus Torvalds
  • Re: [RESEND][PATCH v3] security: Place security_path_post_mknod() where the original IMA call was, Al Viro
• [PATCH 00/34] address all -Wunused-const warnings, Arnd Bergmann
  • [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Arnd Bergmann
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Krzysztof Kozlowski
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Andy Shevchenko
      • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Corey Minyard
        • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Andy Shevchenko
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Corey Minyard
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Jarkko Sakkinen
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Greg Kroah-Hartman
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Xu Yilun
    • Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, Peter Rosin
  • Re: [PATCH 00/34] address all -Wunused-const warnings, patchwork-bot+netdevbpf
  • Re: (subset) [PATCH 00/34] address all -Wunused-const warnings, Sebastian Reichel
  • Re: (subset) [PATCH 00/34] address all -Wunused-const warnings, Michael Ellerman
• [PATCH v8 0/6] DCP as trusted keys backend, David Gstir
  • [PATCH v8 1/6] crypto: mxs-dcp: Add support for hardware-bound keys, David Gstir
  • [PATCH v8 2/6] KEYS: trusted: improve scalability of trust source config, David Gstir
  • [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, David Gstir
    • RE: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Kshitiz Varshney
      • Re: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Ahmad Fatoum
        • RE: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Kshitiz Varshney
  • [PATCH v8 4/6] MAINTAINERS: add entry for DCP-based trusted keys, David Gstir
  • [PATCH v8 5/6] docs: document DCP-backed trusted keys kernel params, David Gstir
  • [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
    • Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Bagas Sanjaya
    • Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
      • RE: [EXT] Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Kshitiz Varshney
        • Re: [EXT] Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
        • Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
          • RE: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Kshitiz Varshney
            • Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
              • Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
      • Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Herbert Xu
        • Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
• [GIT PULL] security changes for v6.9-rc3, Roberto Sassu
  • Re: [GIT PULL] security changes for v6.9-rc3, Roberto Sassu
  • <Possible follow-ups>
  • [GIT PULL] security changes for v6.9-rc3, Roberto Sassu
    • Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
      • Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
        • Re: [GIT PULL] security changes for v6.9-rc3, Al Viro
          • Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
          • Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
            • Re: [GIT PULL] security changes for v6.9-rc3, Al Viro
              • Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
            • Re: [GIT PULL] security changes for v6.9-rc3, Eric W. Biederman
              • Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
      • Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
        • Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
• [PATCH v2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
• [PATCH v4][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
• [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
  • [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Roberto Sassu
    • Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Mimi Zohar
      • Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Roberto Sassu
      • Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Paul Moore
        • Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Mimi Zohar
          • Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Paul Moore
  • Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Mimi Zohar
    • Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
  • Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Paul Moore
• [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [PATCH v16 03/20] ipe: add evaluation loop, Fan Wu
    • Re: [PATCH v16 03/20] ipe: add evaluation loop, Jarkko Sakkinen
  • [PATCH v16 01/20] security: add ipe lsm, Fan Wu
    • Re: [PATCH v16 01/20] security: add ipe lsm, Jarkko Sakkinen
      • Re: [PATCH v16 01/20] security: add ipe lsm, Randy Dunlap
        • Re: [PATCH v16 01/20] security: add ipe lsm, Jarkko Sakkinen
  • [PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [PATCH v16 02/20] ipe: add policy parser, Fan Wu
    • Re: [PATCH v16 02/20] ipe: add policy parser, Jarkko Sakkinen
    • Re: [PATCH v16 02/20] ipe: add policy parser, Jarkko Sakkinen
  • [PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  • [PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
    • Re: [PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
  • [PATCH v16 08/20] ipe: add userspace interface, Fan Wu
  • [PATCH v16 12/20] dm: add finalize hook to target_type, Fan Wu
  • [PATCH v16 10/20] ipe: add permissive toggle, Fan Wu
  • [PATCH v16 15/20] security: add security_inode_setintegrity() hook, Fan Wu
    • Re: [PATCH v16 15/20] security: add security_inode_setintegrity() hook, Paul Moore
  • [PATCH v16 11/20] block|security: add LSM blob to block_device, Fan Wu
    • Re: [PATCH v16 11/20] block|security: add LSM blob to block_device, kernel test robot
    • Re: [PATCH v16 11/20] block|security: add LSM blob to block_device, Paul Moore
  • [PATCH v16 14/20] ipe: add support for dm-verity as a trust provider, Fan Wu
    • Re: [PATCH v16 14/20] ipe: add support for dm-verity as a trust provider, Paul Moore
  • [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
  • [PATCH v16 07/20] security: add new securityfs delete function, Fan Wu
  • [PATCH v16 19/20] ipe: kunit test for parser, Fan Wu
  • [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook, Fan Wu
    • Re: [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook, Eric Biggers
  • [PATCH v16 18/20] scripts: add boot policy generation program, Fan Wu
  • [PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
  • [PATCH v16 20/20] documentation: add ipe documentation, Fan Wu
  • Re: [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Jarkko Sakkinen
    • Re: [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Jarkko Sakkinen
• [PATCH] ima: define an init_module critical data record, Mimi Zohar
  • Re: [PATCH] ima: define an init_module critical data record, Jarkko Sakkinen
    • Re: [PATCH] ima: define an init_module critical data record, Mimi Zohar
      • Re: [PATCH] ima: define an init_module critical data record, Jarkko Sakkinen
• [PATCH v7 0/6] DCP as trusted keys backend, David Gstir
  • [PATCH v7 1/6] crypto: mxs-dcp: Add support for hardware-bound keys, David Gstir
  • [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config, David Gstir
    • Re: [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config, Jarkko Sakkinen
  • [PATCH v7 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, David Gstir
  • [PATCH v7 4/6] MAINTAINERS: add entry for DCP-based trusted keys, David Gstir
  • [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params, David Gstir
    • Re: [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params, Jarkko Sakkinen
  • [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
    • Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
      • Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
        • Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
          • Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
• [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
  • Re: [GIT PULL] tpmdd changes for v6.9-rc2, Linus Torvalds
    • Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
      • Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
      • Re: [GIT PULL] tpmdd changes for v6.9-rc2, Linus Torvalds
        • Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
• RE: kernel crash in mknod, Roberto Sassu
  • Re: kernel crash in mknod, Al Viro
  • Re: kernel crash in mknod, Christian Brauner
    • Re: kernel crash in mknod, Paul Moore
    • RE: kernel crash in mknod, Roberto Sassu
      • Re: kernel crash in mknod, Christian Brauner
        • Re: kernel crash in mknod, Paul Moore
        • Re: kernel crash in mknod, Roberto Sassu
          • Re: kernel crash in mknod, Christian Brauner
            • Re: kernel crash in mknod, Roberto Sassu
              • Re: kernel crash in mknod, Christian Brauner
                • Re: kernel crash in mknod, Paul Moore
              • Re: kernel crash in mknod, Paul Moore
    • Message not available
      • Re: kernel crash in mknod, Al Viro
        • Re: kernel crash in mknod, Al Viro
        • Re: kernel crash in mknod, Paulo Alcantara
          • Re: kernel crash in mknod, Al Viro
            • Re: kernel crash in mknod, Paulo Alcantara
  • Re: kernel crash in mknod, Paul Moore
• [PATCH] ima: Fix use-after-free on a dentry's dname.name, Stefan Berger
  • Re: [PATCH] ima: Fix use-after-free on a dentry's dname.name, Mimi Zohar
• [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH v4] Documentation: tpm_tis, Jakub Kicinski
    • Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH v4] Documentation: tpm_tis, Daniel P. Smith
    • Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
      • Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
• [PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
    • Re: [PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
• [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
  • Re: [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
    • Re: [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
• [PATCH v2][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
• [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH v2] Documentation: tpm_tis, Randy Dunlap
    • Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH v2] Documentation: tpm_tis, Stefan Berger
    • Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
      • Re: [PATCH v2] Documentation: tpm_tis, Stefan Berger
        • Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
          • Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
            • Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
• [PATCH v2] MAINTAINERS: Update URL's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE DRIVER, Jarkko Sakkinen
• [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
    • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Matthew Garrett
      • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Eric Biggers
    • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Alberto Mardegan
    • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, tianjia.zhang
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Eric Biggers
    • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Petr Vorel
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Baryshkov
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Patrick Uiterwijk
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
  • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Svahn, Kai
    • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Svahn, Kai
      • Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
• [RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [RFC PATCH v15 03/21] ipe: add evaluation loop, Fan Wu
  • [RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [RFC PATCH v15 01/21] security: add ipe lsm, Fan Wu
  • [RFC PATCH v15 02/21] ipe: add policy parser, Fan Wu
  • [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
    • Re: [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Casey Schaufler
      • Re: [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Paul Moore
  • [RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [RFC PATCH v15 07/21] security: add new securityfs delete function, Fan Wu
  • [RFC PATCH v15 11/21] block|security: add LSM blob to block_device, Fan Wu
  • [RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
    • Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
      • Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
        • Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
          • Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
      • Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  • [RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook, Fan Wu
    • Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Paul Moore
      • Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
        • Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
          • Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Fan Wu
            • Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
  • [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Eric Biggers
      • Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Roberto Sassu
        • Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
      • Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
  • [RFC PATCH v15 10/21] ipe: add permissive toggle, Fan Wu
  • [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Fan Wu
    • Re: [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Eric Biggers
      • Re: [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Paul Moore
  • [RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider, Fan Wu
  • [RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook, Fan Wu
    • Re: [PATCH RFC v15 16/21] security: add security_inode_setintegrity() hook, Paul Moore
  • [RFC PATCH v15 08/21] ipe: add userspace interface, Fan Wu
  • [RFC PATCH v15 13/21] dm: add finalize hook to target_type, Fan Wu
  • [RFC PATCH v15 20/21] ipe: kunit test for parser, Fan Wu
  • [RFC PATCH v15 19/21] scripts: add boot policy generation program, Fan Wu
  • [RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support, Fan Wu
  • [RFC PATCH v15 21/21] documentation: add ipe documentation, Fan Wu
• [GIT PULL] tpmdd changes for v6.9, Jarkko Sakkinen
  • Re: [GIT PULL] tpmdd changes for v6.9, pr-tracker-bot
• [PATCH RFC 0/8] Clavis LSM, Eric Snowberg
  • [PATCH RFC 3/8] efi: Make clavis boot param persist across kexec, Eric Snowberg
  • [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
    • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
      • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
    • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
      • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
        • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
    • RE: [EXTERNAL] [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Bharat Bhushan
    • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Mimi Zohar
      • Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
  • [PATCH RFC 2/8] clavis: Introduce a new system keyring called clavis, Eric Snowberg
  • [PATCH RFC 4/8] clavis: Prevent clavis boot param from changing during kexec, Eric Snowberg
  • [PATCH RFC 5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE), Eric Snowberg
  • [PATCH RFC 6/8] keys: Add ability to track intended usage of the public key, Eric Snowberg
  • [PATCH RFC 7/8] clavis: Introduce a new key type called clavis_key_acl, Eric Snowberg
  • [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Eric Snowberg
    • Re: [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Randy Dunlap
      • Re: [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Eric Snowberg
• [RFC PATCH v2 0/3] Preserve TPM log across kexec, Stefan Berger
  • [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
    • Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Christophe Leroy
      • Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
    • Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jerry Snitselaar
    • Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jarkko Sakkinen
  • [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
    • Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Jarkko Sakkinen
      • Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
        • Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Jarkko Sakkinen
          • Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
  • [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Stefan Berger
    • Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Lukas Wunner
      • Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Stefan Berger
      • Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Jarkko Sakkinen
• [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
    • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
    • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
      • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
        • Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
• [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
  • Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Seth Forshee
    • Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
      • Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
• [PATCH 0/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
  • [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
    • Re: [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Jarkko Sakkinen
      • Re: [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
      • [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Paul Menzel
          • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
          • [PATCH v3] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
          • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
            • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
              • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
              • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
            • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
              • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
                • Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
• [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [RFC PATCH v14 01/19] security: add ipe lsm, Fan Wu
    • Re: [RFC PATCH v14 01/19] security: add ipe lsm, Roberto Sassu
      • Re: [RFC PATCH v14 01/19] security: add ipe lsm, Fan Wu
  • [RFC PATCH v14 04/19] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [RFC PATCH v14 03/19] ipe: add evaluation loop, Fan Wu
  • [RFC PATCH v14 02/19] ipe: add policy parser, Fan Wu
  • [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
    • Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Roberto Sassu
      • Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  • [RFC PATCH v14 07/19] security: add new securityfs delete function, Fan Wu
  • [RFC PATCH v14 10/19] ipe: add permissive toggle, Fan Wu
  • [RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [RFC PATCH v14 12/19] dm: add finalize hook to target_type, Fan Wu
  • [RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support, Fan Wu
  • [RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  • [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
    • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Eric Biggers
      • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Eric Biggers
        • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Paul Moore
        • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
          • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Casey Schaufler
            • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
              • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Paul Moore
      • Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
  • [RFC PATCH v14 18/19] ipe: kunit test for parser, Fan Wu
  • [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider, Fan Wu
    • Re: [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider, Randy Dunlap
  • [RFC PATCH v14 11/19] block|security: add LSM blob to block_device, Fan Wu
  • [RFC PATCH v14 08/19] ipe: add userspace interface, Fan Wu
  • [RFC PATCH v14 17/19] scripts: add boot policy generation program, Fan Wu
    • Re: [RFC PATCH v14 17/19] scripts: add boot policy generation program, Randy Dunlap
  • [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider, Randy Dunlap
  • [RFC PATCH v14 19/19] documentation: add ipe documentation, Fan Wu
  • Re: [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE), Paul Moore
• [PATCH] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
  • Re: [PATCH] Fix TPM chip hanging system before suspend/shutdown, Jarkko Sakkinen
• [PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
  • [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
    • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Michael Ellerman
      • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
        • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Conor Dooley
          • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
            • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Conor Dooley
      • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
        • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
          • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
            • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
            • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Michael Ellerman
              • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
                • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
    • Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jarkko Sakkinen
  • [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
    • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Michael Ellerman
      • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
    • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Conor Dooley
    • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
      • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
        • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
          • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
          • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Michael Ellerman
            • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
              • Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
  • Re: [PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
    • Re: [PATCH 0/2] Preserve TPM log across kexec, Rob Herring
      • Re: [PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
• Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Samuel Lee
  • Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Ken Goldman
  • Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Ken Goldman
• [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christian Brauner
  • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christoph Hellwig
  • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Seth Forshee
  • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Serge E. Hallyn
  • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christian Brauner
  • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Jarkko Sakkinen
    • Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Jarkko Sakkinen
• [GIT PULL] integrity: subsystem update for v6.8-rcX, Mimi Zohar
  • Re: [GIT PULL] integrity: subsystem update for v6.8-rcX, pr-tracker-bot
• [PATCH] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH] Documentation: tpm_tis, Jarkko Sakkinen
  • Re: [PATCH] Documentation: tpm_tis, Randy Dunlap
    • Re: [PATCH] Documentation: tpm_tis, Jarkko Sakkinen
• [PATCH v2] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE DRIVER, Jarkko Sakkinen
• [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
  • Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
  • Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
    • Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
• [ima-evm-utils PATCH] Add missing newline to error message, Stefan Berger
• [RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [RFC PATCH v13 03/20] ipe: add evaluation loop, Fan Wu
  • [RFC PATCH v13 02/20] ipe: add policy parser, Fan Wu
  • [RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [RFC PATCH v13 01/20] security: add ipe lsm, Fan Wu
  • [RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  • [RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [RFC PATCH v13 07/20] security: add new securityfs delete function, Fan Wu
  • [RFC PATCH v13 10/20] ipe: add permissive toggle, Fan Wu
  • [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
    • Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
    • Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
  • [RFC PATCH v13 13/20] dm: add finalize hook to target_type, Fan Wu
    • Re: [RFC PATCH v13 13/20] dm: add finalize hook to target_type, Mike Snitzer
  • [RFC PATCH v13 11/20] block|security: add LSM blob to block_device, Fan Wu
  • [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
    • Re: [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Mike Snitzer
  • [RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook, Fan Wu
  • [RFC PATCH v13 08/20] ipe: add userspace interface, Fan Wu
  • [RFC PATCH v13 18/20] scripts: add boot policy generation program, Fan Wu
  • [RFC PATCH v13 19/20] ipe: kunit test for parser, Fan Wu
  • [RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
  • [RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
  • [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Randy Dunlap
    • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
      • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
        • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
          • Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
  • [RFC PATCH v13 20/20] documentation: add ipe documentation, Fan Wu
• TPM error path on probe, Tim Harvey
  • Re: TPM error path on probe, Lino Sanfilippo
    • Re: TPM error path on probe, Tim Harvey
    • Re: TPM error path on probe, Jarkko Sakkinen
• [PATCH v4 ima-evm-utils 0/7] Implement imaevm_signhash and add provider support, Stefan Berger
  • [PATCH v4 ima-evm-utils 3/7] Implement imaevm_signhash library function and deprecate sign_hash, Stefan Berger
  • [PATCH v4 ima-evm-utils 6/7] tests: Add pkcs11 test using provider, Stefan Berger
  • [PATCH v4 ima-evm-utils 2/7] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
  • [PATCH v4 ima-evm-utils 7/7] ci: Install pkcs11-provider where available, Stefan Berger
  • [PATCH v4 ima-evm-utils 5/7] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
  • [PATCH v4 ima-evm-utils 1/7] tests: Skip pkcs11 test if no engine support in evmctl, Stefan Berger
  • [PATCH v4 ima-evm-utils 4/7] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
• [PATCH v3 ima-evm-utils 0/7] Deprecate sign_hash and add provider support, Stefan Berger
  • [PATCH v3 ima-evm-utils 1/7] tests: Skip pkcs11 test if no engine support in evmctl, Stefan Berger
  • [PATCH v3 ima-evm-utils 2/7] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
  • [PATCH v3 ima-evm-utils 6/7] tests: Add pkcs11 test using provider, Stefan Berger
  • [PATCH v3 ima-evm-utils 5/7] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
  • [PATCH v3 ima-evm-utils 7/7] ci: Install pkcs11-provider where available, Stefan Berger
  • [PATCH v3 ima-evm-utils 3/7] Pass ENGINE and keyid through to function using them, Stefan Berger
  • [PATCH v3 ima-evm-utils 4/7] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
  • Re: [PATCH v3 ima-evm-utils 0/7] Deprecate sign_hash and add provider support, Stefan Berger
• [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
  • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Paul Menzel
    • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
  • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, James Bottomley
    • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
      • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, James Bottomley
        • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
          • Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
• [PATCH v3 00/10] evm: Support signatures on stacked filesystem, Stefan Berger
  • [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change, Stefan Berger
    • Re: [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change, Mimi Zohar
  • [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash, Stefan Berger
    • Re: [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash, Mimi Zohar
  • [PATCH v3 01/10] ima: Rename backing_inode to real_inode, Stefan Berger
    • Re: [PATCH v3 01/10] ima: Rename backing_inode to real_inode, Mimi Zohar
  • [PATCH v3 06/10] evm: Store and detect metadata inode attributes changes, Stefan Berger
  • [PATCH v3 05/10] ima: Move file-change detection variables into new structure, Stefan Berger
  • [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
    • Re: [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Mimi Zohar
  • [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
    • Re: [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs, Mimi Zohar
  • [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
    • Re: [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr, Mimi Zohar
  • [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Stefan Berger
    • Re: [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Mimi Zohar
  • [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Stefan Berger
    • Re: [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Mimi Zohar
  • Re: [PATCH v3 00/10] evm: Support signatures on stacked filesystem, Mimi Zohar
• [PATCH v2 ima-evm-utils 0/6] Deprecate sign_hash and add provider support, Stefan Berger
  • [PATCH v2 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Stefan Berger
    • Re: [PATCH v2 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Mimi Zohar
  • [PATCH v2 ima-evm-utils 5/6] tests: Add pkcs11 test using provider, Stefan Berger
  • [PATCH v2 ima-evm-utils 6/6] ci: Install pkcs11-provider where available, Stefan Berger
  • [PATCH v2 ima-evm-utils 1/6] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
  • [PATCH v2 ima-evm-utils 3/6] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
  • [PATCH v2 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
• [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Seth Forshee (DigitalOcean)
  • [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h, Christian Brauner
  • [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps, Seth Forshee (DigitalOcean)
  • [PATCH v2 02/25] mnt_idmapping: include cred.h, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 02/25] mnt_idmapping: include cred.h, Christian Brauner
  • [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data, Christian Brauner
  • [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids, Christian Brauner
  • [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Christian Brauner
      • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Christian Brauner
    • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Roberto Sassu
      • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Roberto Sassu
          • Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
  • [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace, Christian Brauner
  • [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Christian Brauner
  • [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Paul Moore
      • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Paul Moore
          • Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
  • [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Casey Schaufler
      • Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
  • [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Christian Brauner
  • [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)