Linux Integrity

• Date Index

• Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr(), (continued)
  • Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Christian Brauner
  • [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
      • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
        • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
          • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
      • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
    • Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
  • [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Paul Moore
      • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Christian Brauner
    • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Roberto Sassu
      • Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
  • [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Christian Brauner
  • [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs, Seth Forshee (DigitalOcean)
  • [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Christian Brauner
  • [PATCH v2 17/25] fs: add vfs_get_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 17/25] fs: add vfs_get_fscaps(), Christian Brauner
  • [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Christian Brauner
    • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Amir Goldstein
      • Re: [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
  • [PATCH v2 18/25] fs: add vfs_set_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 18/25] fs: add vfs_set_fscaps(), Christian Brauner
  • [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Christian Brauner
  • [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up, Seth Forshee (DigitalOcean)
  • [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
      • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
  • [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity(), Seth Forshee (DigitalOcean)
  • [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
        • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
          • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
            • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
              • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
                      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                  • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
                    • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
                      • Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
  • [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr(), Seth Forshee (DigitalOcean)
  • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Christian Brauner
    • Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Seth Forshee (DigitalOcean)
• [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Matthew Garrett
    • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
    • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Stefan Berger
    • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, James Bottomley
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Vitaly Chikunov
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Ken Goldman
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Bruno Meneguele
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Roberto Sassu
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, George Wilson
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Tergel Myanganbayar
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, André Draszik
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Frank Sorenson
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Stephen Smalley
  • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Vivek Goyal
    • Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
• [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, syzbot
  • Re: [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, Roberto Sassu
    • Message not available
      • Re: [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, Roberto Sassu
  • Re: [syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry, syzbot
• [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v10 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  • [PATCH v10 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
  • [PATCH v10 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
  • [PATCH v10 12/25] security: Introduce file_post_open hook, Roberto Sassu
  • [PATCH v10 13/25] security: Introduce file_release hook, Roberto Sassu
  • [PATCH v10 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
  • [PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  • [PATCH v10 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
  • [PATCH v10 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
  • [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
    • Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
      • Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Mimi Zohar
  • [PATCH v10 20/25] ima: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v10 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  • [PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
  • [PATCH v10 22/25] evm: Move to LSM infrastructure, Roberto Sassu
  • [PATCH v10 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
  • [PATCH v10 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
  • [PATCH v10 25/25] integrity: Remove LSM, Roberto Sassu
  • [PATCH v10 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
  • Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
    • Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • Re: [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Eric Snowberg
• [PATCH v8 00/15] x86: Trenchboot secure dynamic launch Linux kernel support, Ross Philipson
  • [PATCH v8 03/15] x86: Secure Launch Kconfig, Ross Philipson
    • Re: [PATCH v8 03/15] x86: Secure Launch Kconfig, Ard Biesheuvel
      • Re: [PATCH v8 03/15] x86: Secure Launch Kconfig, ross . philipson
  • [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Ross Philipson
    • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Ard Biesheuvel
      • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Andrew Cooper
        • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
      • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
    • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Kim Phillips
      • Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
  • [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ross Philipson
    • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ard Biesheuvel
      • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel Kiper
      • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
        • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, H. Peter Anvin
          • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
        • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ard Biesheuvel
          • Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
  • [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ross Philipson
    • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
      • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
        • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
          • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
            • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
              • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
                • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
                  • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
                    • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
                      • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andy Lutomirski
                        • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
                          • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, ross . philipson
                          • Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Jarkko Sakkinen
  • [PATCH v8 05/15] x86: Secure Launch main header file, Ross Philipson
  • [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ross Philipson
    • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ard Biesheuvel
      • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Daniel P. Smith
        • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ard Biesheuvel
          • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Daniel P. Smith
    • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, kernel test robot
    • Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, kernel test robot
  • [PATCH v8 08/15] x86: Secure Launch kernel late boot stub, Ross Philipson
  • [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ross Philipson
    • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ard Biesheuvel
      • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, ross . philipson
        • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, H. Peter Anvin
          • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ard Biesheuvel
    • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, kernel test robot
    • Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, kernel test robot
  • [PATCH v8 02/15] Documentation/x86: Secure Launch kernel documentation, Ross Philipson
  • [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, Ross Philipson
    • Re: [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, Ard Biesheuvel
      • Re: [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, ross . philipson
  • [PATCH v8 09/15] x86: Secure Launch SMP bringup support, Ross Philipson
  • [PATCH v8 10/15] kexec: Secure Launch kexec SEXIT support, Ross Philipson
  • [PATCH v8 12/15] tpm: Add ability to set the preferred locality the TPM chip uses, Ross Philipson
  • [PATCH v8 11/15] reboot: Secure Launch SEXIT support on reboot paths, Ross Philipson
  • [PATCH v8 13/15] tpm: Add sysfs interface to allow setting and querying the preferred locality, Ross Philipson
• [PATCH v5 0/8] ima: kexec: measure events between kexec load and execute, Tushar Sugandhi
  • [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Tushar Sugandhi
    • Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Stefan Berger
      • Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Tushar Sugandhi
        • Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Mimi Zohar
    • Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Mimi Zohar
    • Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Petr Tesařík
  • [PATCH v5 3/8] ima: kexec: skip IMA segment validation after kexec soft reboot, Tushar Sugandhi
  • [PATCH v5 2/8] kexec: define functions to map and unmap segments, Tushar Sugandhi
    • Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Stefan Berger
      • Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Tushar Sugandhi
    • Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Mimi Zohar
  • [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
    • Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Mimi Zohar
      • Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Mimi Zohar
        • Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Petr Tesařík
  • [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
    • Re: [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Stefan Berger
      • Re: [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
    • Re: [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Stefan Berger
      • Re: [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
  • [PATCH v5 5/8] ima: kexec: move IMA log copy from kexec load to execute, Tushar Sugandhi
    • Re: [PATCH v5 5/8] ima: kexec: move IMA log copy from kexec load to execute, Stefan Berger
    • Re: [PATCH v5 5/8] ima: kexec: move IMA log copy from kexec load to execute, Mimi Zohar
    • Re: [PATCH v5 5/8] ima: kexec: move IMA log copy from kexec load to execute, Petr Tesařík
  • [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
    • Re: [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
    • Re: [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Mimi Zohar
  • [PATCH v5 7/8] ima: make the kexec extra memory configurable, Tushar Sugandhi
    • Re: [PATCH v5 7/8] ima: make the kexec extra memory configurable, Mimi Zohar
  • Re: [PATCH v5 0/8] ima: kexec: measure events between kexec load and execute, Mimi Zohar
• init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Paul Menzel
  • Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Jarkko Sakkinen
    • Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Paul Menzel
      • Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Jarkko Sakkinen
• [RFC][PATCH 0/8] ima: Integrate with digest_cache LSM, Roberto Sassu
  • [RFC][PATCH 1/8] ima: Introduce hook DIGEST_LIST_CHECK, Roberto Sassu
  • [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Roberto Sassu
    • Re: [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Mimi Zohar
      • Re: [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Roberto Sassu
  • [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Roberto Sassu
    • Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Mimi Zohar
      • Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Roberto Sassu
        • Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Mimi Zohar
  • [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Roberto Sassu
    • Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
      • Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Roberto Sassu
        • Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
    • Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
  • [RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache, Roberto Sassu
    • Re: [RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache, Mimi Zohar
  • [RFC][PATCH 6/8] ima: Use digest cache for measurement, Roberto Sassu
    • Re: [RFC][PATCH 6/8] ima: Use digest cache for measurement, Mimi Zohar
      • Re: [RFC][PATCH 6/8] ima: Use digest cache for measurement, Roberto Sassu
  • [RFC][PATCH 7/8] ima: Use digest cache for appraisal, Roberto Sassu
  • [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Roberto Sassu
    • Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Mimi Zohar
      • Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Roberto Sassu
        • Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Mimi Zohar
• [PATCH v7 00/21] add integrity and security to TPM2 transactions, James Bottomley
  • [PATCH v7 01/21] tpm: Remove unused tpm_buf_tag(), James Bottomley
  • [PATCH v7 02/21] tpm: Remove tpm_send(), James Bottomley
  • [PATCH v7 03/21] tpm: Move buffer handling from static inlines to real functions, James Bottomley
  • [PATCH v7 04/21] tpm: Update struct tpm_buf documentation comments, James Bottomley
  • [PATCH v7 05/21] tpm: Store the length of the tpm_buf data separately., James Bottomley
  • [PATCH v7 06/21] tpm: TPM2B formatted buffers, James Bottomley
  • [PATCH v7 07/21] tpm: Add tpm_buf_read_{u8,u16,u32}, James Bottomley
  • [PATCH v7 08/21] KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers, James Bottomley
  • [PATCH v7 09/21] crypto: lib - implement library version of AES in CFB mode, James Bottomley
  • [PATCH v7 10/21] tpm: add buffer function to point to returned parameters, James Bottomley
  • [PATCH v7 11/21] tpm: export the context save and load commands, James Bottomley
  • [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
    • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
      • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
    • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Gabríel Arthúr Pétursson
      • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
        • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
        • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Gabríel Arthúr Pétursson
          • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
            • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
          • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Ken Goldman
            • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
      • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
        • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
          • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
            • Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
  • [PATCH v7 13/21] tpm: Add HMAC session start and end functions, James Bottomley
    • Re: [PATCH v7 13/21] tpm: Add HMAC session start and end functions, Jarkko Sakkinen
      • Re: [PATCH v7 13/21] tpm: Add HMAC session start and end functions, James Bottomley
  • [PATCH v7 14/21] tpm: Add HMAC session name/handle append, James Bottomley
    • Re: [PATCH v7 14/21] tpm: Add HMAC session name/handle append, Jarkko Sakkinen
      • Re: [PATCH v7 14/21] tpm: Add HMAC session name/handle append, James Bottomley
  • [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, James Bottomley
    • Re: [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, Jarkko Sakkinen
      • Re: [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, James Bottomley
  • [PATCH v7 16/21] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
    • Re: [PATCH v7 16/21] tpm: add hmac checks to tpm2_pcr_extend(), Jarkko Sakkinen
  • [PATCH v7 17/21] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
    • Re: [PATCH v7 17/21] tpm: add session encryption protection to tpm2_get_random(), Jarkko Sakkinen
  • [PATCH v7 18/21] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
    • Re: [PATCH v7 18/21] KEYS: trusted: Add session encryption protection to the seal/unseal path, Jarkko Sakkinen
  • [PATCH v7 19/21] tpm: add the null key name as a sysfs export, James Bottomley
    • Re: [PATCH v7 19/21] tpm: add the null key name as a sysfs export, Jarkko Sakkinen
  • [PATCH v7 20/21] Documentation: add tpm-security.rst, James Bottomley
  • [PATCH v7 21/21] tpm: disable the TPM if NULL name changes, James Bottomley
    • Re: [PATCH v7 21/21] tpm: disable the TPM if NULL name changes, Jarkko Sakkinen
  • Re: [PATCH v7 00/21] add integrity and security to TPM2 transactions, Jarkko Sakkinen
• [PATCH v3 00/13] security: digest_cache LSM, Roberto Sassu
  • [PATCH v3 01/13] lib: Add TLV parser, Roberto Sassu
  • [PATCH v3 02/13] security: Introduce the digest_cache LSM, Roberto Sassu
    • Re: [PATCH v3 02/13] security: Introduce the digest_cache LSM, Randy Dunlap
      • Re: [PATCH v3 02/13] security: Introduce the digest_cache LSM, Roberto Sassu
  • [PATCH v3 03/13] digest_cache: Add securityfs interface, Roberto Sassu
  • [PATCH v3 04/13] digest_cache: Add hash tables and operations, Roberto Sassu
  • [PATCH v3 05/13] digest_cache: Populate the digest cache from a digest list, Roberto Sassu
  • [PATCH v3 06/13] digest_cache: Parse tlv digest lists, Roberto Sassu
  • [PATCH v3 07/13] digest_cache: Parse rpm digest lists, Roberto Sassu
  • [PATCH v3 08/13] digest_cache: Add management of verification data, Roberto Sassu
  • [PATCH v3 09/13] digest_cache: Add support for directories, Roberto Sassu
  • [PATCH v3 10/13] digest cache: Prefetch digest lists if requested, Roberto Sassu
  • [PATCH v3 11/13] digest_cache: Reset digest cache on file/directory change, Roberto Sassu
  • [PATCH v3 12/13] selftests/digest_cache: Add selftests for digest_cache LSM, Roberto Sassu
  • [PATCH v3 13/13] docs: Add documentation of the digest_cache LSM, Roberto Sassu
  • Re: [PATCH v3 00/13] security: digest_cache LSM, Roberto Sassu
• [PATCH v3 00/32] spi: get rid of some legacy macros, Uwe Kleine-König
  • [PATCH v3 26/32] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
  • Re: [PATCH v3 00/32] spi: get rid of some legacy macros, Mark Brown
  • Re: [PATCH v3 00/32] spi: get rid of some legacy macros, patchwork-bot+chrome-platform
  • Re: [PATCH v3 00/32] spi: get rid of some legacy macros, patchwork-bot+chrome-platform
• [PATCH v2 0/9] evm: Support signatures on stacked filesystem, Stefan Berger
  • [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Stefan Berger
    • Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Amir Goldstein
      • Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Jeff Layton
        • Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Stefan Berger
  • [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
    • Re: [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
    • Re: [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Paul Moore
  • [PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Stefan Berger
    • Re: [PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Amir Goldstein
  • [PATCH v2 3/9] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
  • [PATCH v2 8/9] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Stefan Berger
  • [PATCH v2 1/9] ima: Rename backing_inode to real_inode, Stefan Berger
    • Re: [PATCH v2 1/9] ima: Rename backing_inode to real_inode, Amir Goldstein
  • [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, Stefan Berger
    • Re: [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, Amir Goldstein
    • Re: [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, kernel test robot
  • [PATCH v2 6/9] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
  • [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, Stefan Berger
    • Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, kernel test robot
    • Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, Amir Goldstein
    • Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, kernel test robot
• [PATCH v1 ima-evm-utils 0/6] Deprecate sign_hash and add provider support, Stefan Berger
  • [PATCH v1 ima-evm-utils 5/6] tests: Add pkcs11 test using provider, Stefan Berger
  • [PATCH v1 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Stefan Berger
  • [PATCH v1 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
    • Re: [PATCH v1 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
  • [PATCH v1 ima-evm-utils 6/6] ci: Install pkcs11-provider where available, Stefan Berger
  • [PATCH v1 ima-evm-utils 3/6] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
  • [PATCH v1 ima-evm-utils 1/6] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
• [ANNOUNCE] CFP: Linux Security Summit Europe 2024, Reshetova, Elena
• [PATCH 0/2] Decomplicate file_dentry(), Amir Goldstein
  • [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
    • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Miklos Szeredi
      • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
        • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Christian Brauner
          • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
    • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
    • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
      • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
        • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
          • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
            • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
              • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
            • Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
  • [PATCH 1/2] fs: make file_dentry() a simple accessor, Amir Goldstein
    • Re: [PATCH 1/2] fs: make file_dentry() a simple accessor, Stefan Berger
  • Re: [PATCH 0/2] Decomplicate file_dentry(), Christian Brauner
• [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Lino Sanfilippo
  • RE: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Elliott, Robert (Servers)
    • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
    • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Lino Sanfilippo
  • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
  • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Paul Menzel
    • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
      • Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Paul Menzel
• [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
    • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
      • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
      • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Alexander Steffen
        • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
          • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
                  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
          • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
                • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, James Bottomley
                • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, James Bottomley
                    • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
                    • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                      • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
                • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, ross . philipson
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
                • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
          • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
            • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
              • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
          • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Alexander Steffen
        • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
  • Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
• [PATCH 3/3] tpm: make locality request return value consistent, Daniel P. Smith
  • Re: [PATCH 3/3] tpm: make locality request return value consistent, Jarkko Sakkinen
    • Re: [PATCH 3/3] tpm: make locality request return value consistent, Daniel P. Smith
      • Re: [PATCH 3/3] tpm: make locality request return value consistent, Jarkko Sakkinen
      • Re: [PATCH 3/3] tpm: make locality request return value consistent, Alexander Steffen
• [PATCH v2 0/3] tpm: make locality handling resilient, Daniel P. Smith
• [no subject], Daniel P. Smith
• [PATCH 2/3] tpm: ensure tpm is in known state at startup, Daniel P. Smith
  • Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Jarkko Sakkinen
    • Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Daniel P. Smith
      • Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Jarkko Sakkinen
• [RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
  • [RFC PATCH v12 01/20] security: add ipe lsm, Fan Wu
  • [RFC PATCH v12 02/20] ipe: add policy parser, Fan Wu
  • [RFC PATCH v12 03/20] ipe: add evaluation loop, Fan Wu
  • [RFC PATCH v12 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
  • [RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack, Fan Wu
    • Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack, Paul Moore
      • Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack, Fan Wu
  • [RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
    • Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider, Paul Moore
      • Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  • [RFC PATCH v12 07/20] security: add new securityfs delete function, Fan Wu
  • [RFC PATCH v12 13/20] dm: add finalize hook to target_type, Fan Wu
  • [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
    • Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Mike Snitzer
      • Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
  • [RFC PATCH v12 14/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  • [RFC PATCH v12 16/20] fsverity: consume builtin signature via LSM hook, Fan Wu
  • [RFC PATCH v12 10/20] ipe: add permissive toggle, Fan Wu
    • Re: [PATCH RFC v12 10/20] ipe: add permissive toggle, Paul Moore
  • [RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
    • Re: [PATCH RFC v12 9/20] uapi|audit|ipe: add ipe auditing support, Paul Moore
  • [RFC PATCH v12 11/20] block|security: add LSM blob to block_device, Fan Wu
  • [RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
    • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Paul Moore
      • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
        • Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Paul Moore
  • [RFC PATCH v12 18/20] scripts: add boot policy generation program, Fan Wu
  • [RFC PATCH v12 08/20] ipe: add userspace interface, Fan Wu
    • Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Paul Moore
      • Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Fan Wu
        • Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Paul Moore
          • Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Fan Wu
  • [RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
    • Re: [PATCH RFC v12 17/20] ipe: enable support for fs-verity as a trust provider, Paul Moore
  • [RFC PATCH v12 19/20] ipe: kunit test for parser, Fan Wu
  • [RFC PATCH v12 20/20] documentation: add ipe documentation, Fan Wu
• [PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Rob Herring
  • Re: [PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Rob Herring
    • Re: [PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Jarkko Sakkinen
• [PATCH 0/5] evm: Support signatures on stacked filesystem, Stefan Berger
  • [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
    • Re: [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Amir Goldstein
      • Re: [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Mimi Zohar
  • [PATCH 2/5] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
    • Re: [PATCH 2/5] evm: Implement per signature type decision in security_inode_copy_up_xattr, Amir Goldstein
  • [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Stefan Berger
    • Re: [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Amir Goldstein
      • Re: [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Stefan Berger
  • [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
    • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
      • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
          • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
            • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
              • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
                • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
                  • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
                    • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
                      • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
                        • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
                          • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
                            • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
                              • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
                                • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
                                • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
            • Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
  • [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
    • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
      • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
        • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
          • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
            • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
              • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
      • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
    • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, kernel test robot
    • Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, kernel test robot
  • Re: [PATCH 0/5] evm: Support signatures on stacked filesystem, Amir Goldstein
    • Re: [PATCH 0/5] evm: Support signatures on stacked filesystem, Stefan Berger
• Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Philipp Rudo
  • Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Alexander Graf
    • Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Philipp Rudo
• [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Samuel Ortiz
  • [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Samuel Ortiz
    • Re: [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Dionna Amalie Glaze
    • Re: [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Jarkko Sakkinen
  • [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Samuel Ortiz
    • Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Kuppuswamy Sathyanarayanan
    • Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Jarkko Sakkinen
    • Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Mikko Ylinen
  • [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, Samuel Ortiz
    • Re: [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, Kuppuswamy Sathyanarayanan
      • Re: [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, James Bottomley
  • [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
    • Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, James Bottomley
      • Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
        • Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, James Bottomley
          • Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
            • Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Xing, Cedric
  • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Jarkko Sakkinen
  • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
    • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Middleton
      • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
        • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Kuppuswamy Sathyanarayanan
          • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
            • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
              • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
                • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
                  • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
                    • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Kuppuswamy Sathyanarayanan
                      • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
                        • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
                          • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
                            • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
                              • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
                                • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
                                • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
                              • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
                                • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Middleton
                            • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Mikko Ylinen
                            • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dr. Greg
                        • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Lukas Wunner
    • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Qinkun Bao
      • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Samuel Ortiz
        • Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Qinkun Bao
• ref leak in request_asymmetric_key ?, Billie Alsup (balsup)
  • Re: ref leak in request_asymmetric_key ?, Billie Alsup (balsup)
• [PATCH v5 0/2] Add device tree for IBM system1 BMC, Ninad Palsule
  • [PATCH v5 1/2] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
  • [PATCH v5 2/2] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
• [GIT PULL] integrity: subsystem updates for v6.8-rc1, Mimi Zohar
  • Re: [GIT PULL] integrity: subsystem updates for v6.8-rc1, pr-tracker-bot
• [PATCH v3] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v3] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
    • Re: [PATCH v3] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
• [PATCH v4 0/7] ima: kexec: measure events between kexec load and execute, Tushar Sugandhi
  • [PATCH v4 2/7] kexec: define functions to map and unmap segments, Tushar Sugandhi
    • Re: [PATCH v4 2/7] kexec: define functions to map and unmap segments, Stefan Berger
      • Re: [PATCH v4 2/7] kexec: define functions to map and unmap segments, Tushar Sugandhi
  • [PATCH v4 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot, Tushar Sugandhi
  • [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
    • Re: [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Stefan Berger
      • Re: [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
  • [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Tushar Sugandhi
    • Re: [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Mimi Zohar
      • Re: [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Tushar Sugandhi
  • [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
    • Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Stefan Berger
      • Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
        • Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Stefan Berger
    • Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Mimi Zohar
      • Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
  • [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
    • Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
      • Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
        • Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
    • Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Mimi Zohar
      • Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
  • [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
    • Re: [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Mimi Zohar
      • Re: [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
• [PATCH v2 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
  • [PATCH v2 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
  • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
    • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jonathan Cameron
      • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jonathan Cameron
  • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Greg Kroah-Hartman
    • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
      • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Greg Kroah-Hartman
      • Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jarkko Sakkinen
  • Re: (subset) [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
• [PATCH v2] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
  • Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
    • Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
      • Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
• [PATCH v4 0/3] Add device tree for IBM system1 BMC, Ninad Palsule
  • [PATCH v4 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
  • [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
    • Re: [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Rob Herring
      • Re: [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
  • [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
    • Re: [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Bjorn Helgaas
      • Re: [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
• [PATCH v2 0/1] Add more compatibility strings to tpm-tis-i2c, Ninad Palsule
  • [PATCH v2 1/1] tpm: tis-i2c: Add more compatible strings, Ninad Palsule
    • Re: [PATCH v2 1/1] tpm: tis-i2c: Add more compatible strings, Guenter Roeck
• tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Paul Menzel
  • Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
  • Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
    • Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Paul Menzel
      • Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
• [PATCH 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
  • [PATCH 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
    • Re: [PATCH 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Jarkko Sakkinen
  • Re: [PATCH 00/33] spi: get rid of some legacy macros, Mark Brown
    • Re: [PATCH 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
• [PATCH] tpm/tpm_ftpm_tee: fix all kernel-doc warnings, Randy Dunlap
  • Re: [PATCH] tpm/tpm_ftpm_tee: fix all kernel-doc warnings, Jarkko Sakkinen
• [PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
  • [PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 1/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 2/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 3/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 5/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 6/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 7/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 8/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Paul Moore
  • [PATCH v9 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
    • Re: [PATCH v9 9/25] security: Align inode_setattr hook definition with EVM, Paul Moore
  • [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
    • Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Paul Moore
    • Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Christian Brauner
  • [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
    • Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Paul Moore
    • Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Christian Brauner
  • [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
        • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
          • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
    • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
      • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
        • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
          • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
            • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
              • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
                • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
                  • Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
  • [PATCH v9 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Paul Moore
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Christian Brauner
    • Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Stefan Berger
  • [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Paul Moore
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Christian Brauner
    • Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Stefan Berger
  • [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
    • Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Paul Moore
    • Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Christian Brauner
  • [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
    • Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Paul Moore
    • Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Christian Brauner
  • [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
    • Re: [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Paul Moore
  • [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
    • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
    • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
      • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
        • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
          • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
            • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
              • Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
  • [PATCH v9 20/25] ima: Move to LSM infrastructure, Roberto Sassu
    • Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Casey Schaufler