Linux Integrity

Date Index

Re: [PATCH 33/34] drivers: remove incorrect of_match_ptr/ACPI_PTR annotations, (continued)
- Re: [PATCH 00/34] address all -Wunused-const warnings, patchwork-bot+netdevbpf
- Re: (subset) [PATCH 00/34] address all -Wunused-const warnings, Sebastian Reichel
- Re: (subset) [PATCH 00/34] address all -Wunused-const warnings, Michael Ellerman
- Re: [PATCH 00/34] address all -Wunused-const warnings, Andy Shevchenko
[PATCH v8 0/6] DCP as trusted keys backend, David Gstir
- [PATCH v8 1/6] crypto: mxs-dcp: Add support for hardware-bound keys, David Gstir
- [PATCH v8 2/6] KEYS: trusted: improve scalability of trust source config, David Gstir
- [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, David Gstir
  - RE: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Kshitiz Varshney
    - Re: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Ahmad Fatoum
      - RE: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, Kshitiz Varshney
- [PATCH v8 4/6] MAINTAINERS: add entry for DCP-based trusted keys, David Gstir
- [PATCH v8 5/6] docs: document DCP-backed trusted keys kernel params, David Gstir
- [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
  - Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Bagas Sanjaya
  - Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
    - RE: [EXT] Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Kshitiz Varshney
      - Re: [EXT] Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
      - Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
        
        RE: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Kshitiz Varshney
        
        Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
        
        Re: [EXT] [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
    - Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Herbert Xu
      - Re: [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
[GIT PULL] security changes for v6.9-rc3, Roberto Sassu
- Re: [GIT PULL] security changes for v6.9-rc3, Roberto Sassu
- <Possible follow-ups>
- [GIT PULL] security changes for v6.9-rc3, Roberto Sassu
  - Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
    - Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
      - Re: [GIT PULL] security changes for v6.9-rc3, Al Viro
        
        Re: [GIT PULL] security changes for v6.9-rc3, Linus Torvalds
        
        Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
        
        Re: [GIT PULL] security changes for v6.9-rc3, Al Viro
        
        Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
        
        Re: [GIT PULL] security changes for v6.9-rc3, Eric W. Biederman
        
        Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
    - Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
      - Re: [GIT PULL] security changes for v6.9-rc3, Paul Moore
[PATCH v2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
[PATCH v4][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
[PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
- [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Roberto Sassu
  - Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Mimi Zohar
    - Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Roberto Sassu
    - Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Paul Moore
      - Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Mimi Zohar
        
        Re: [PATCH 2/2] ima: evm: Rename *_post_path_mknod() to *_path_post_mknod(), Paul Moore
- Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Mimi Zohar
  - Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Roberto Sassu
- Re: [PATCH 1/2] security: Handle dentries without inode in security_path_post_mknod(), Paul Moore
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
- [PATCH v16 03/20] ipe: add evaluation loop, Fan Wu
  - Re: [PATCH v16 03/20] ipe: add evaluation loop, Jarkko Sakkinen
- [PATCH v16 01/20] security: add ipe lsm, Fan Wu
  - Re: [PATCH v16 01/20] security: add ipe lsm, Jarkko Sakkinen
    - Re: [PATCH v16 01/20] security: add ipe lsm, Randy Dunlap
      - Re: [PATCH v16 01/20] security: add ipe lsm, Jarkko Sakkinen
- [PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [PATCH v16 02/20] ipe: add policy parser, Fan Wu
  - Re: [PATCH v16 02/20] ipe: add policy parser, Jarkko Sakkinen
  - Re: [PATCH v16 02/20] ipe: add policy parser, Jarkko Sakkinen
- [PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
- [PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
- [PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  - Re: [PATCH v16 13/20] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
- [PATCH v16 08/20] ipe: add userspace interface, Fan Wu
- [PATCH v16 12/20] dm: add finalize hook to target_type, Fan Wu
- [PATCH v16 10/20] ipe: add permissive toggle, Fan Wu
- [PATCH v16 15/20] security: add security_inode_setintegrity() hook, Fan Wu
  - Re: [PATCH v16 15/20] security: add security_inode_setintegrity() hook, Paul Moore
- [PATCH v16 11/20] block|security: add LSM blob to block_device, Fan Wu
  - Re: [PATCH v16 11/20] block|security: add LSM blob to block_device, kernel test robot
  - Re: [PATCH v16 11/20] block|security: add LSM blob to block_device, Paul Moore
- [PATCH v16 14/20] ipe: add support for dm-verity as a trust provider, Fan Wu
  - Re: [PATCH v16 14/20] ipe: add support for dm-verity as a trust provider, Paul Moore
- [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
  - Re: [PATCH v16 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
- [PATCH v16 07/20] security: add new securityfs delete function, Fan Wu
- [PATCH v16 19/20] ipe: kunit test for parser, Fan Wu
- [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook, Fan Wu
  - Re: [PATCH v16 16/20] fsverity: consume fsverity built-in signatures via LSM hook, Eric Biggers
- [PATCH v16 18/20] scripts: add boot policy generation program, Fan Wu
- [PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
- [PATCH v16 20/20] documentation: add ipe documentation, Fan Wu
- Re: [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Jarkko Sakkinen
  - Re: [PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE), Jarkko Sakkinen
[PATCH] ima: define an init_module critical data record, Mimi Zohar
- Re: [PATCH] ima: define an init_module critical data record, Jarkko Sakkinen
  - Re: [PATCH] ima: define an init_module critical data record, Mimi Zohar
    - Re: [PATCH] ima: define an init_module critical data record, Jarkko Sakkinen
[PATCH v7 0/6] DCP as trusted keys backend, David Gstir
- [PATCH v7 1/6] crypto: mxs-dcp: Add support for hardware-bound keys, David Gstir
- [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config, David Gstir
  - Re: [PATCH v7 2/6] KEYS: trusted: improve scalability of trust source config, Jarkko Sakkinen
- [PATCH v7 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys, David Gstir
- [PATCH v7 4/6] MAINTAINERS: add entry for DCP-based trusted keys, David Gstir
- [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params, David Gstir
  - Re: [PATCH v7 5/6] docs: document DCP-backed trusted keys kernel params, Jarkko Sakkinen
- [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
  - Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
    - Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, David Gstir
      - Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
        
        Re: [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source, Jarkko Sakkinen
[GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
- Re: [GIT PULL] tpmdd changes for v6.9-rc2, Linus Torvalds
  - Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
    - Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
    - Re: [GIT PULL] tpmdd changes for v6.9-rc2, Linus Torvalds
      - Re: [GIT PULL] tpmdd changes for v6.9-rc2, Jarkko Sakkinen
RE: kernel crash in mknod, Roberto Sassu
- Re: kernel crash in mknod, Al Viro
- Re: kernel crash in mknod, Christian Brauner
  - Re: kernel crash in mknod, Paul Moore
  - RE: kernel crash in mknod, Roberto Sassu
    - Re: kernel crash in mknod, Christian Brauner
      - Re: kernel crash in mknod, Paul Moore
      - Re: kernel crash in mknod, Roberto Sassu
        
        Re: kernel crash in mknod, Christian Brauner
        
        Re: kernel crash in mknod, Roberto Sassu
        
        Re: kernel crash in mknod, Christian Brauner
        
        Re: kernel crash in mknod, Paul Moore
        
        Re: kernel crash in mknod, Paul Moore
  - Message not available
    - Re: kernel crash in mknod, Al Viro
      - Re: kernel crash in mknod, Al Viro
      - Re: kernel crash in mknod, Paulo Alcantara
        
        Re: kernel crash in mknod, Al Viro
        
        Re: kernel crash in mknod, Paulo Alcantara
- Re: kernel crash in mknod, Paul Moore
[PATCH] ima: Fix use-after-free on a dentry's dname.name, Stefan Berger
- Re: [PATCH] ima: Fix use-after-free on a dentry's dname.name, Mimi Zohar
[PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH v4] Documentation: tpm_tis, Jakub Kicinski
  - Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH v4] Documentation: tpm_tis, Daniel P. Smith
  - Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
    - Re: [PATCH v4] Documentation: tpm_tis, Jarkko Sakkinen
[PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
  - Re: [PATCH v3] Documentation: tpm_tis, Jarkko Sakkinen
[PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
- Re: [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
  - Re: [PATCH v3][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
[PATCH v2][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
[PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH v2] Documentation: tpm_tis, Randy Dunlap
  - Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH v2] Documentation: tpm_tis, Stefan Berger
  - Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
    - Re: [PATCH v2] Documentation: tpm_tis, Stefan Berger
      - Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
        
        Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
        
        Re: [PATCH v2] Documentation: tpm_tis, Jarkko Sakkinen
[PATCH v2] MAINTAINERS: Update URL's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE DRIVER, Jarkko Sakkinen
[ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
  - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Matthew Garrett
    - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Eric Biggers
  - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Alberto Mardegan
  - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, tianjia.zhang
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Eric Biggers
  - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Petr Vorel
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Baryshkov
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Patrick Uiterwijk
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
- Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Svahn, Kai
  - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Svahn, Kai
    - Re: [ima-evm-utils: PATCH v2 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
[RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE), Fan Wu
- [RFC PATCH v15 03/21] ipe: add evaluation loop, Fan Wu
- [RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [RFC PATCH v15 01/21] security: add ipe lsm, Fan Wu
- [RFC PATCH v15 02/21] ipe: add policy parser, Fan Wu
- [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  - Re: [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Casey Schaufler
    - Re: [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs(), Paul Moore
- [RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
- [RFC PATCH v15 07/21] security: add new securityfs delete function, Fan Wu
- [RFC PATCH v15 11/21] block|security: add LSM blob to block_device, Fan Wu
- [RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  - Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
    - Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
      - Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Paul Moore
        
        Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
    - Re: [PATCH RFC v15 14/21] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
- [RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook, Fan Wu
  - Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Paul Moore
    - Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
      - Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
        
        Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Fan Wu
        
        Re: [PATCH RFC v15 12/21] security: add security_bdev_setintegrity() hook, Jarkko Sakkinen
- [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
  - Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Eric Biggers
    - Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Roberto Sassu
      - Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
    - Re: [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider, Fan Wu
- [RFC PATCH v15 10/21] ipe: add permissive toggle, Fan Wu
- [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Fan Wu
  - Re: [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Eric Biggers
    - Re: [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook, Paul Moore
- [RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider, Fan Wu
- [RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook, Fan Wu
  - Re: [PATCH RFC v15 16/21] security: add security_inode_setintegrity() hook, Paul Moore
- [RFC PATCH v15 08/21] ipe: add userspace interface, Fan Wu
- [RFC PATCH v15 13/21] dm: add finalize hook to target_type, Fan Wu
- [RFC PATCH v15 20/21] ipe: kunit test for parser, Fan Wu
- [RFC PATCH v15 19/21] scripts: add boot policy generation program, Fan Wu
- [RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support, Fan Wu
- [RFC PATCH v15 21/21] documentation: add ipe documentation, Fan Wu
[GIT PULL] tpmdd changes for v6.9, Jarkko Sakkinen
- Re: [GIT PULL] tpmdd changes for v6.9, pr-tracker-bot
[PATCH RFC 0/8] Clavis LSM, Eric Snowberg
- [PATCH RFC 3/8] efi: Make clavis boot param persist across kexec, Eric Snowberg
- [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
  - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
    - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
  - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
    - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
      - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Jarkko Sakkinen
  - RE: [EXTERNAL] [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Bharat Bhushan
  - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Mimi Zohar
    - Re: [PATCH RFC 1/8] certs: Introduce ability to link to a system key, Eric Snowberg
- [PATCH RFC 2/8] clavis: Introduce a new system keyring called clavis, Eric Snowberg
- [PATCH RFC 4/8] clavis: Prevent clavis boot param from changing during kexec, Eric Snowberg
- [PATCH RFC 5/8] keys: Add new verification type (VERIFYING_CLAVIS_SIGNATURE), Eric Snowberg
- [PATCH RFC 6/8] keys: Add ability to track intended usage of the public key, Eric Snowberg
- [PATCH RFC 7/8] clavis: Introduce a new key type called clavis_key_acl, Eric Snowberg
- [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Eric Snowberg
  - Re: [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Randy Dunlap
    - Re: [PATCH RFC 8/8] clavis: Introduce new LSM called clavis, Eric Snowberg
[RFC PATCH v2 0/3] Preserve TPM log across kexec, Stefan Berger
- [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
  - Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Christophe Leroy
    - Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
  - Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jerry Snitselaar
  - Re: [RFC PATCH v2 1/3] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jarkko Sakkinen
- [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
  - Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Jarkko Sakkinen
    - Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
      - Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Jarkko Sakkinen
        
        Re: [RFC PATCH v2 3/3] tpm: of: If available use linux,sml-log to get the log and its size, Stefan Berger
- [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Stefan Berger
  - Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Lukas Wunner
    - Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Stefan Berger
    - Re: [RFC PATCH v2 2/3] dt-bindings: tpm: Add linux,sml-log to ibm,vtpm.yaml, Jarkko Sakkinen
[PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
- Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
  - Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
- Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
  - Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
    - Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Mimi Zohar
      - Re: [PATCH v4] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
[PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
- Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Seth Forshee
  - Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
    - Re: [PATCH] evm: Change vfs_getxattr() with __vfs_getxattr() in evm_calc_hmac_or_hash(), Roberto Sassu
[PATCH 0/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
- [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
  - Re: [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Jarkko Sakkinen
    - Re: [PATCH 1/1] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
    - [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
      - Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Paul Menzel
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        
        [PATCH v3] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
      - Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Adam Alves
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
        
        Re: [PATCH v2] tpm: Fix suspend/shutdown on some boards by preserving chip Locality, Jarkko Sakkinen
[RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE), Fan Wu
- [RFC PATCH v14 01/19] security: add ipe lsm, Fan Wu
  - Re: [RFC PATCH v14 01/19] security: add ipe lsm, Roberto Sassu
    - Re: [RFC PATCH v14 01/19] security: add ipe lsm, Fan Wu
- [RFC PATCH v14 04/19] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [RFC PATCH v14 03/19] ipe: add evaluation loop, Fan Wu
- [RFC PATCH v14 02/19] ipe: add policy parser, Fan Wu
- [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
  - Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Roberto Sassu
    - Re: [RFC PATCH v14 05/19] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
- [RFC PATCH v14 07/19] security: add new securityfs delete function, Fan Wu
- [RFC PATCH v14 10/19] ipe: add permissive toggle, Fan Wu
- [RFC PATCH v14 06/19] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
- [RFC PATCH v14 12/19] dm: add finalize hook to target_type, Fan Wu
- [RFC PATCH v14 09/19] uapi|audit|ipe: add ipe auditing support, Fan Wu
- [RFC PATCH v14 13/19] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
- [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
  - Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Eric Biggers
    - Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Eric Biggers
      - Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Paul Moore
      - Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
        
        Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Casey Schaufler
        
        Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
        
        Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Paul Moore
    - Re: [RFC PATCH v14 15/19] fsverity: consume builtin signature via LSM hook, Fan Wu
- [RFC PATCH v14 18/19] ipe: kunit test for parser, Fan Wu
- [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider, Fan Wu
  - Re: [RFC PATCH v14 14/19] ipe: add support for dm-verity as a trust provider, Randy Dunlap
- [RFC PATCH v14 11/19] block|security: add LSM blob to block_device, Fan Wu
- [RFC PATCH v14 08/19] ipe: add userspace interface, Fan Wu
- [RFC PATCH v14 17/19] scripts: add boot policy generation program, Fan Wu
  - Re: [RFC PATCH v14 17/19] scripts: add boot policy generation program, Randy Dunlap
- [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider, Fan Wu
  - Re: [RFC PATCH v14 16/19] ipe: enable support for fs-verity as a trust provider, Randy Dunlap
- [RFC PATCH v14 19/19] documentation: add ipe documentation, Fan Wu
- Re: [RFC PATCH v14 00/19] Integrity Policy Enforcement LSM (IPE), Paul Moore
[PATCH] Fix TPM chip hanging system before suspend/shutdown, Adam Alves
- Re: [PATCH] Fix TPM chip hanging system before suspend/shutdown, Jarkko Sakkinen
[PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
- [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
  - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Michael Ellerman
    - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
      - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Conor Dooley
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Conor Dooley
    - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
      - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Michael Ellerman
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Rob Herring
        
        Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Stefan Berger
  - Re: [PATCH 1/2] powerpc/prom_init: Replace linux,sml-base/sml-size with linux,sml-log, Jarkko Sakkinen
- [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
  - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Michael Ellerman
    - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
  - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Conor Dooley
  - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
    - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
      - Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
        
        Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
        
        Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Michael Ellerman
        
        Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Jarkko Sakkinen
        
        Re: [PATCH 2/2] tpm: of: If available Use linux,sml-log to get the log and its size, Stefan Berger
- Re: [PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
  - Re: [PATCH 0/2] Preserve TPM log across kexec, Rob Herring
    - Re: [PATCH 0/2] Preserve TPM log across kexec, Stefan Berger
Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Samuel Lee
- Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Ken Goldman
- Re: Issue with TPM2 Encrypt/Decrypt Functionality and TSS API Integration, Ken Goldman
[PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christian Brauner
- Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christoph Hellwig
- Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Seth Forshee
- Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Serge E. Hallyn
- Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Christian Brauner
- Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Jarkko Sakkinen
  - Re: [PATCH] xattr: restrict vfs_getxattr_alloc() allocation size, Jarkko Sakkinen
[GIT PULL] integrity: subsystem update for v6.8-rcX, Mimi Zohar
- Re: [GIT PULL] integrity: subsystem update for v6.8-rcX, pr-tracker-bot
[PATCH] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH] Documentation: tpm_tis, Jarkko Sakkinen
- Re: [PATCH] Documentation: tpm_tis, Randy Dunlap
  - Re: [PATCH] Documentation: tpm_tis, Jarkko Sakkinen
[PATCH v2] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE DRIVER, Jarkko Sakkinen
[PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
- Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
- Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Mimi Zohar
  - Re: [PATCH][next] integrity: Avoid -Wflex-array-member-not-at-end warnings, Gustavo A. R. Silva
[ima-evm-utils PATCH] Add missing newline to error message, Stefan Berger
[RFC PATCH v13 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
- [RFC PATCH v13 03/20] ipe: add evaluation loop, Fan Wu
- [RFC PATCH v13 02/20] ipe: add policy parser, Fan Wu
- [RFC PATCH v13 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [RFC PATCH v13 01/20] security: add ipe lsm, Fan Wu
- [RFC PATCH v13 05/20] initramfs|security: Add a security hook to do_populate_rootfs(), Fan Wu
- [RFC PATCH v13 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
- [RFC PATCH v13 07/20] security: add new securityfs delete function, Fan Wu
- [RFC PATCH v13 10/20] ipe: add permissive toggle, Fan Wu
- [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
  - Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
  - Re: [RFC PATCH v13 14/20] dm verity: consume root hash digest and signature data via LSM hook, Mike Snitzer
- [RFC PATCH v13 13/20] dm: add finalize hook to target_type, Fan Wu
  - Re: [RFC PATCH v13 13/20] dm: add finalize hook to target_type, Mike Snitzer
- [RFC PATCH v13 11/20] block|security: add LSM blob to block_device, Fan Wu
- [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
  - Re: [RFC PATCH v13 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Mike Snitzer
- [RFC PATCH v13 16/20] fsverity: consume builtin signature via LSM hook, Fan Wu
- [RFC PATCH v13 08/20] ipe: add userspace interface, Fan Wu
- [RFC PATCH v13 18/20] scripts: add boot policy generation program, Fan Wu
- [RFC PATCH v13 19/20] ipe: kunit test for parser, Fan Wu
- [RFC PATCH v13 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
- [RFC PATCH v13 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
- [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
  - Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Randy Dunlap
  - Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
    - Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
      - Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Eric Biggers
        
        Re: [RFC PATCH v13 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
- [RFC PATCH v13 20/20] documentation: add ipe documentation, Fan Wu
TPM error path on probe, Tim Harvey
- Re: TPM error path on probe, Lino Sanfilippo
  - Re: TPM error path on probe, Tim Harvey
  - Re: TPM error path on probe, Jarkko Sakkinen
[PATCH v4 ima-evm-utils 0/7] Implement imaevm_signhash and add provider support, Stefan Berger
- [PATCH v4 ima-evm-utils 3/7] Implement imaevm_signhash library function and deprecate sign_hash, Stefan Berger
- [PATCH v4 ima-evm-utils 6/7] tests: Add pkcs11 test using provider, Stefan Berger
- [PATCH v4 ima-evm-utils 2/7] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
- [PATCH v4 ima-evm-utils 7/7] ci: Install pkcs11-provider where available, Stefan Berger
- [PATCH v4 ima-evm-utils 5/7] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
- [PATCH v4 ima-evm-utils 1/7] tests: Skip pkcs11 test if no engine support in evmctl, Stefan Berger
- [PATCH v4 ima-evm-utils 4/7] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
[PATCH v3 ima-evm-utils 0/7] Deprecate sign_hash and add provider support, Stefan Berger
- [PATCH v3 ima-evm-utils 1/7] tests: Skip pkcs11 test if no engine support in evmctl, Stefan Berger
- [PATCH v3 ima-evm-utils 2/7] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
- [PATCH v3 ima-evm-utils 6/7] tests: Add pkcs11 test using provider, Stefan Berger
- [PATCH v3 ima-evm-utils 5/7] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
- [PATCH v3 ima-evm-utils 7/7] ci: Install pkcs11-provider where available, Stefan Berger
- [PATCH v3 ima-evm-utils 3/7] Pass ENGINE and keyid through to function using them, Stefan Berger
- [PATCH v3 ima-evm-utils 4/7] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
- Re: [PATCH v3 ima-evm-utils 0/7] Deprecate sign_hash and add provider support, Stefan Berger
[PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
- Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Paul Menzel
  - Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
- Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, James Bottomley
  - Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
    - Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, James Bottomley
      - Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
        
        Re: [PATCH] MAINTAINERS: Update W's for KEYS/KEYRINGS_INTEGRITY and TPM DEVICE RIVER, Jarkko Sakkinen
[PATCH v3 00/10] evm: Support signatures on stacked filesystem, Stefan Berger
- [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change, Stefan Berger
  - Re: [PATCH v3 07/10] ima: re-evaluate file integrity on file metadata change, Mimi Zohar
- [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash, Stefan Berger
  - Re: [PATCH v3 04/10] evm: Use the metadata inode to calculate metadata hash, Mimi Zohar
- [PATCH v3 01/10] ima: Rename backing_inode to real_inode, Stefan Berger
  - Re: [PATCH v3 01/10] ima: Rename backing_inode to real_inode, Mimi Zohar
- [PATCH v3 06/10] evm: Store and detect metadata inode attributes changes, Stefan Berger
- [PATCH v3 05/10] ima: Move file-change detection variables into new structure, Stefan Berger
- [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
  - Re: [PATCH v3 08/10] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Mimi Zohar
- [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
  - Re: [PATCH v3 02/10] security: allow finer granularity in permitting copy-up of security xattrs, Mimi Zohar
- [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
  - Re: [PATCH v3 03/10] evm: Implement per signature type decision in security_inode_copy_up_xattr, Mimi Zohar
- [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Stefan Berger
  - Re: [PATCH v3 09/10] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Mimi Zohar
- [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Stefan Berger
  - Re: [PATCH v3 10/10] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Mimi Zohar
- Re: [PATCH v3 00/10] evm: Support signatures on stacked filesystem, Mimi Zohar
[PATCH v2 ima-evm-utils 0/6] Deprecate sign_hash and add provider support, Stefan Berger
- [PATCH v2 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Stefan Berger
  - Re: [PATCH v2 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Mimi Zohar
- [PATCH v2 ima-evm-utils 5/6] tests: Add pkcs11 test using provider, Stefan Berger
- [PATCH v2 ima-evm-utils 6/6] ci: Install pkcs11-provider where available, Stefan Berger
- [PATCH v2 ima-evm-utils 1/6] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
- [PATCH v2 ima-evm-utils 3/6] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
- [PATCH v2 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
[PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Seth Forshee (DigitalOcean)
- [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h, Christian Brauner
- [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps, Seth Forshee (DigitalOcean)
- [PATCH v2 02/25] mnt_idmapping: include cred.h, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 02/25] mnt_idmapping: include cred.h, Christian Brauner
- [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data, Christian Brauner
- [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids, Christian Brauner
- [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Christian Brauner
    - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Christian Brauner
  - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Roberto Sassu
    - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Roberto Sassu
        
        Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps, Seth Forshee (DigitalOcean)
- [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace, Christian Brauner
- [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper, Christian Brauner
- [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Paul Moore
    - Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Paul Moore
        
        Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
- [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Casey Schaufler
    - Re: [PATCH v2 13/25] smack: add hooks for fscaps operations, Seth Forshee (DigitalOcean)
- [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr(), Christian Brauner
- [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
    - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
      - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
        
        Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Christian Brauner
    - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
  - Re: [PATCH v2 14/25] evm: add support for fscaps security hooks, Roberto Sassu
- [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Paul Moore
    - Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Christian Brauner
  - Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Roberto Sassu
    - Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps, Seth Forshee (DigitalOcean)
- [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 09/25] commoncap: use is_fscaps_xattr(), Christian Brauner
- [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs, Seth Forshee (DigitalOcean)
- [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps, Christian Brauner
- [PATCH v2 17/25] fs: add vfs_get_fscaps(), Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 17/25] fs: add vfs_get_fscaps(), Christian Brauner
- [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 20/25] ovl: add fscaps handlers, Christian Brauner
  - Re: [PATCH v2 20/25] ovl: add fscaps handlers, Amir Goldstein
    - Re: [PATCH v2 20/25] ovl: add fscaps handlers, Seth Forshee (DigitalOcean)
- [PATCH v2 18/25] fs: add vfs_set_fscaps(), Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 18/25] fs: add vfs_set_fscaps(), Christian Brauner
- [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 19/25] fs: add vfs_remove_fscaps(), Christian Brauner
- [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up, Seth Forshee (DigitalOcean)
- [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
    - Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks, Paul Moore
- [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity(), Seth Forshee (DigitalOcean)
- [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
  - Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
    - Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
      - Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Christian Brauner
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Seth Forshee (DigitalOcean)
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Roberto Sassu
        
        Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces, Mimi Zohar
- [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr(), Seth Forshee (DigitalOcean)
- Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Christian Brauner
  - Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities, Seth Forshee (DigitalOcean)
[ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Matthew Garrett
  - Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Dmitry Kasatkin
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
  - Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Stefan Berger
  - Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, James Bottomley
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Vitaly Chikunov
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Ken Goldman
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Bruno Meneguele
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Roberto Sassu
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, George Wilson
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Tergel Myanganbayar
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, André Draszik
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Frank Sorenson
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Stephen Smalley
- Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Vivek Goyal
  - Re: [ima-evm-utils: PATCH v1 1/1] Change license to LGPL-2.0-or-later and GPL-2.0-or-later, Mimi Zohar
[syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, syzbot
- Re: [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, Roberto Sassu
  - Message not available
    - Re: [syzbot] [integrity?] [lsm?] KMSAN: uninit-value in ima_add_template_entry, Roberto Sassu
- Re: [syzbot] [lsm?] [integrity?] KMSAN: uninit-value in ima_add_template_entry, syzbot
[PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
- [PATCH v10 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
- [PATCH v10 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
- [PATCH v10 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
- [PATCH v10 12/25] security: Introduce file_post_open hook, Roberto Sassu
- [PATCH v10 13/25] security: Introduce file_release hook, Roberto Sassu
- [PATCH v10 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
- [PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
- [PATCH v10 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
- [PATCH v10 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
- [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
  - Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
    - Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA, Mimi Zohar
- [PATCH v10 20/25] ima: Move to LSM infrastructure, Roberto Sassu
- [PATCH v10 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
- [PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
- [PATCH v10 22/25] evm: Move to LSM infrastructure, Roberto Sassu
- [PATCH v10 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v10 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
- [PATCH v10 25/25] integrity: Remove LSM, Roberto Sassu
- [PATCH v10 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
- Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
  - Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
- Re: [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure, Eric Snowberg
[PATCH v8 00/15] x86: Trenchboot secure dynamic launch Linux kernel support, Ross Philipson
- [PATCH v8 03/15] x86: Secure Launch Kconfig, Ross Philipson
  - Re: [PATCH v8 03/15] x86: Secure Launch Kconfig, Ard Biesheuvel
    - Re: [PATCH v8 03/15] x86: Secure Launch Kconfig, ross . philipson
- [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Ross Philipson
  - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Ard Biesheuvel
    - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Andrew Cooper
      - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
    - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
  - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, Kim Phillips
    - Re: [PATCH v8 04/15] x86: Secure Launch Resource Table header file, ross . philipson
- [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ross Philipson
  - Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ard Biesheuvel
    - Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel Kiper
    - Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
      - Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, H. Peter Anvin
        
        Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
      - Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Ard Biesheuvel
        
        Re: [PATCH v8 01/15] x86/boot: Place kernel_info at a fixed offset, Daniel P. Smith
- [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ross Philipson
  - Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
    - Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
      - Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Ard Biesheuvel
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andrew Cooper
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Andy Lutomirski
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Eric Biggers
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, ross . philipson
        
        Re: [PATCH v8 06/15] x86: Add early SHA support for Secure Launch early measurements, Jarkko Sakkinen
- [PATCH v8 05/15] x86: Secure Launch main header file, Ross Philipson
- [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ross Philipson
  - Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ard Biesheuvel
    - Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Daniel P. Smith
      - Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Ard Biesheuvel
        
        Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, Daniel P. Smith
  - Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, kernel test robot
  - Re: [PATCH v8 14/15] x86: Secure Launch late initcall platform module, kernel test robot
- [PATCH v8 08/15] x86: Secure Launch kernel late boot stub, Ross Philipson
- [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ross Philipson
  - Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ard Biesheuvel
    - Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, ross . philipson
      - Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, H. Peter Anvin
        
        Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, Ard Biesheuvel
  - Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, kernel test robot
  - Re: [PATCH v8 15/15] x86: EFI stub DRTM launch support for Secure Launch, kernel test robot
- [PATCH v8 02/15] Documentation/x86: Secure Launch kernel documentation, Ross Philipson
- [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, Ross Philipson
  - Re: [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, Ard Biesheuvel
    - Re: [PATCH v8 07/15] x86: Secure Launch kernel early boot stub, ross . philipson
- [PATCH v8 09/15] x86: Secure Launch SMP bringup support, Ross Philipson
- [PATCH v8 10/15] kexec: Secure Launch kexec SEXIT support, Ross Philipson
- [PATCH v8 12/15] tpm: Add ability to set the preferred locality the TPM chip uses, Ross Philipson
- [PATCH v8 11/15] reboot: Secure Launch SEXIT support on reboot paths, Ross Philipson
- [PATCH v8 13/15] tpm: Add sysfs interface to allow setting and querying the preferred locality, Ross Philipson
[PATCH v5 0/8] ima: kexec: measure events between kexec load and execute, Tushar Sugandhi
- [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Tushar Sugandhi
  - Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Stefan Berger
    - Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Tushar Sugandhi
      - Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Mimi Zohar
  - Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Mimi Zohar
  - Re: [PATCH v5 4/8] ima: kexec: define functions to copy IMA log at soft boot, Petr Tesařík
- [PATCH v5 3/8] ima: kexec: skip IMA segment validation after kexec soft reboot, Tushar Sugandhi
- [PATCH v5 2/8] kexec: define functions to map and unmap segments, Tushar Sugandhi
  - Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Stefan Berger
    - Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Tushar Sugandhi
  - Re: [PATCH v5 2/8] kexec: define functions to map and unmap segments, Mimi Zohar
- [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
  - Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Mimi Zohar
    - Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Mimi Zohar
      - Re: [PATCH v5 6/8] ima: suspend measurements during buffer copy at kexec execute, Petr Tesařík
- [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
  - Re: [PATCH v5 8/8] ima: measure kexec load and exec events as critical data, Stefan Berger

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux SCSI] [Yosemite Forum]