Linux Integrity

Date Index

Re: [PATCH v5 5/8] ima: kexec: move IMA log copy from kexec load to execute, (continued)
- [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
  - Re: [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
  - Re: [PATCH v5 1/8] ima: define and call ima_alloc_kexec_file_buf, Mimi Zohar
- [PATCH v5 7/8] ima: make the kexec extra memory configurable, Tushar Sugandhi
  - Re: [PATCH v5 7/8] ima: make the kexec extra memory configurable, Mimi Zohar
- Re: [PATCH v5 0/8] ima: kexec: measure events between kexec load and execute, Mimi Zohar
init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Paul Menzel
- Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Jarkko Sakkinen
  - Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Paul Menzel
    - Re: init_tis() takes 50 ms on Dell XPS 13 9360 – almost 10 % of whole time until initrd, Jarkko Sakkinen
[RFC][PATCH 0/8] ima: Integrate with digest_cache LSM, Roberto Sassu
- [RFC][PATCH 1/8] ima: Introduce hook DIGEST_LIST_CHECK, Roberto Sassu
- [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Roberto Sassu
  - Re: [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Mimi Zohar
    - Re: [RFC][PATCH 2/8] ima: Nest iint mutex for DIGEST_LIST_CHECK hook, Roberto Sassu
- [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Roberto Sassu
  - Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Mimi Zohar
    - Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Roberto Sassu
      - Re: [RFC][PATCH 3/8] ima: Add digest_cache policy keyword, Mimi Zohar
- [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Roberto Sassu
  - Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
    - Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Roberto Sassu
      - Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
  - Re: [RFC][PATCH 4/8] ima: Add digest_cache_measure and digest_cache_appraise boot-time policies, Mimi Zohar
- [RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache, Roberto Sassu
  - Re: [RFC][PATCH 5/8] ima: Record IMA verification result of digest lists in digest cache, Mimi Zohar
- [RFC][PATCH 6/8] ima: Use digest cache for measurement, Roberto Sassu
  - Re: [RFC][PATCH 6/8] ima: Use digest cache for measurement, Mimi Zohar
    - Re: [RFC][PATCH 6/8] ima: Use digest cache for measurement, Roberto Sassu
- [RFC][PATCH 7/8] ima: Use digest cache for appraisal, Roberto Sassu
- [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Roberto Sassu
  - Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Mimi Zohar
    - Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Roberto Sassu
      - Re: [RFC][PATCH 8/8] ima: Detect if digest cache changed since last measurement/appraisal, Mimi Zohar
[PATCH v7 00/21] add integrity and security to TPM2 transactions, James Bottomley
- [PATCH v7 01/21] tpm: Remove unused tpm_buf_tag(), James Bottomley
- [PATCH v7 02/21] tpm: Remove tpm_send(), James Bottomley
- [PATCH v7 03/21] tpm: Move buffer handling from static inlines to real functions, James Bottomley
- [PATCH v7 04/21] tpm: Update struct tpm_buf documentation comments, James Bottomley
- [PATCH v7 05/21] tpm: Store the length of the tpm_buf data separately., James Bottomley
- [PATCH v7 06/21] tpm: TPM2B formatted buffers, James Bottomley
- [PATCH v7 07/21] tpm: Add tpm_buf_read_{u8,u16,u32}, James Bottomley
- [PATCH v7 08/21] KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers, James Bottomley
- [PATCH v7 09/21] crypto: lib - implement library version of AES in CFB mode, James Bottomley
- [PATCH v7 10/21] tpm: add buffer function to point to returned parameters, James Bottomley
- [PATCH v7 11/21] tpm: export the context save and load commands, James Bottomley
- [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
  - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
    - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
  - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Gabríel Arthúr Pétursson
    - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
      - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
      - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Gabríel Arthúr Pétursson
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Ken Goldman
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
    - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
      - Re: [PATCH v7 12/21] tpm: Add NULL primary creation, James Bottomley
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
        
        Re: [PATCH v7 12/21] tpm: Add NULL primary creation, Jarkko Sakkinen
- [PATCH v7 13/21] tpm: Add HMAC session start and end functions, James Bottomley
  - Re: [PATCH v7 13/21] tpm: Add HMAC session start and end functions, Jarkko Sakkinen
    - Re: [PATCH v7 13/21] tpm: Add HMAC session start and end functions, James Bottomley
- [PATCH v7 14/21] tpm: Add HMAC session name/handle append, James Bottomley
  - Re: [PATCH v7 14/21] tpm: Add HMAC session name/handle append, Jarkko Sakkinen
    - Re: [PATCH v7 14/21] tpm: Add HMAC session name/handle append, James Bottomley
- [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, James Bottomley
  - Re: [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, Jarkko Sakkinen
    - Re: [PATCH v7 15/21] tpm: Add the rest of the session HMAC API, James Bottomley
- [PATCH v7 16/21] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
  - Re: [PATCH v7 16/21] tpm: add hmac checks to tpm2_pcr_extend(), Jarkko Sakkinen
- [PATCH v7 17/21] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
  - Re: [PATCH v7 17/21] tpm: add session encryption protection to tpm2_get_random(), Jarkko Sakkinen
- [PATCH v7 18/21] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
  - Re: [PATCH v7 18/21] KEYS: trusted: Add session encryption protection to the seal/unseal path, Jarkko Sakkinen
- [PATCH v7 19/21] tpm: add the null key name as a sysfs export, James Bottomley
  - Re: [PATCH v7 19/21] tpm: add the null key name as a sysfs export, Jarkko Sakkinen
- [PATCH v7 20/21] Documentation: add tpm-security.rst, James Bottomley
- [PATCH v7 21/21] tpm: disable the TPM if NULL name changes, James Bottomley
  - Re: [PATCH v7 21/21] tpm: disable the TPM if NULL name changes, Jarkko Sakkinen
- Re: [PATCH v7 00/21] add integrity and security to TPM2 transactions, Jarkko Sakkinen
[PATCH v3 00/13] security: digest_cache LSM, Roberto Sassu
- [PATCH v3 01/13] lib: Add TLV parser, Roberto Sassu
- [PATCH v3 02/13] security: Introduce the digest_cache LSM, Roberto Sassu
  - Re: [PATCH v3 02/13] security: Introduce the digest_cache LSM, Randy Dunlap
    - Re: [PATCH v3 02/13] security: Introduce the digest_cache LSM, Roberto Sassu
- [PATCH v3 03/13] digest_cache: Add securityfs interface, Roberto Sassu
- [PATCH v3 04/13] digest_cache: Add hash tables and operations, Roberto Sassu
- [PATCH v3 05/13] digest_cache: Populate the digest cache from a digest list, Roberto Sassu
- [PATCH v3 06/13] digest_cache: Parse tlv digest lists, Roberto Sassu
- [PATCH v3 07/13] digest_cache: Parse rpm digest lists, Roberto Sassu
- [PATCH v3 08/13] digest_cache: Add management of verification data, Roberto Sassu
- [PATCH v3 09/13] digest_cache: Add support for directories, Roberto Sassu
- [PATCH v3 10/13] digest cache: Prefetch digest lists if requested, Roberto Sassu
- [PATCH v3 11/13] digest_cache: Reset digest cache on file/directory change, Roberto Sassu
- [PATCH v3 12/13] selftests/digest_cache: Add selftests for digest_cache LSM, Roberto Sassu
- [PATCH v3 13/13] docs: Add documentation of the digest_cache LSM, Roberto Sassu
- Re: [PATCH v3 00/13] security: digest_cache LSM, Roberto Sassu
[PATCH v3 00/32] spi: get rid of some legacy macros, Uwe Kleine-König
- [PATCH v3 26/32] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
- Re: [PATCH v3 00/32] spi: get rid of some legacy macros, Mark Brown
- Re: [PATCH v3 00/32] spi: get rid of some legacy macros, patchwork-bot+chrome-platform
- Re: [PATCH v3 00/32] spi: get rid of some legacy macros, patchwork-bot+chrome-platform
[PATCH v2 0/9] evm: Support signatures on stacked filesystem, Stefan Berger
- [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Stefan Berger
  - Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Amir Goldstein
    - Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Jeff Layton
      - Re: [PATCH v2 9/9] ima: Record i_version of real_inode for change detection, Stefan Berger
- [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
  - Re: [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
  - Re: [PATCH v2 2/9] security: allow finer granularity in permitting copy-up of security xattrs, Paul Moore
- [PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Stefan Berger
  - Re: [PATCH v2 7/9] fs: Rename SB_I_EVM_UNSUPPORTED to SB_I_EVM_HMAC_UNSUPPORTED, Amir Goldstein
- [PATCH v2 3/9] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
- [PATCH v2 8/9] evm: Rename is_unsupported_fs to is_unsupported_hmac_fs, Stefan Berger
- [PATCH v2 1/9] ima: Rename backing_inode to real_inode, Stefan Berger
  - Re: [PATCH v2 1/9] ima: Rename backing_inode to real_inode, Amir Goldstein
- [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, Stefan Berger
  - Re: [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, Amir Goldstein
  - Re: [PATCH v2 5/9] evm: Use the inode holding the metadata to calculate metadata hash, kernel test robot
- [PATCH v2 6/9] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
- [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, Stefan Berger
  - Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, kernel test robot
  - Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, Amir Goldstein
  - Re: [PATCH v2 4/9] ima: Reset EVM status upon detecting changes to the real file, kernel test robot
[PATCH v1 ima-evm-utils 0/6] Deprecate sign_hash and add provider support, Stefan Berger
- [PATCH v1 ima-evm-utils 5/6] tests: Add pkcs11 test using provider, Stefan Berger
- [PATCH v1 ima-evm-utils 2/6] Pass ENGINE and keyid through to function using them, Stefan Berger
- [PATCH v1 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
  - Re: [PATCH v1 ima-evm-utils 4/6] Add support for OpenSSL provider to the library and evmctl, Stefan Berger
- [PATCH v1 ima-evm-utils 6/6] ci: Install pkcs11-provider where available, Stefan Berger
- [PATCH v1 ima-evm-utils 3/6] evmctl: Replace deprecated sign_hash with imaevm_signhash, Stefan Berger
- [PATCH v1 ima-evm-utils 1/6] headers: Remove usage of CONFIG_IMA_EVM_ENGINE from public header, Stefan Berger
[ANNOUNCE] CFP: Linux Security Summit Europe 2024, Reshetova, Elena
[PATCH 0/2] Decomplicate file_dentry(), Amir Goldstein
- [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
  - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Miklos Szeredi
    - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
      - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Christian Brauner
        
        Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Amir Goldstein
  - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
  - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
    - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
      - Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
        
        Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
        
        Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Stefan Berger
        
        Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
        
        Re: [PATCH 2/2] fs: remove the inode argument to ->d_real() method, Al Viro
- [PATCH 1/2] fs: make file_dentry() a simple accessor, Amir Goldstein
  - Re: [PATCH 1/2] fs: make file_dentry() a simple accessor, Stefan Berger
- Re: [PATCH 0/2] Decomplicate file_dentry(), Christian Brauner
[PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Lino Sanfilippo
- RE: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Elliott, Robert (Servers)
  - Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
  - Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Lino Sanfilippo
- Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
- Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Paul Menzel
  - Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Jarkko Sakkinen
    - Re: [PATCH] tpm,tpm_tis: Avoid warning splat at shutdown, Paul Menzel
[PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
- Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
  - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
    - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
      - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
    - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Alexander Steffen
      - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
      - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, James Bottomley
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, James Bottomley
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, ross . philipson
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
      - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Daniel P. Smith
        
        Re: [PATCH 1/3] tpm: protect against locality counter underflow, Alexander Steffen
      - Re: [PATCH 1/3] tpm: protect against locality counter underflow, Lino Sanfilippo
- Re: [PATCH 1/3] tpm: protect against locality counter underflow, Jarkko Sakkinen
[PATCH 3/3] tpm: make locality request return value consistent, Daniel P. Smith
- Re: [PATCH 3/3] tpm: make locality request return value consistent, Jarkko Sakkinen
  - Re: [PATCH 3/3] tpm: make locality request return value consistent, Daniel P. Smith
    - Re: [PATCH 3/3] tpm: make locality request return value consistent, Jarkko Sakkinen
    - Re: [PATCH 3/3] tpm: make locality request return value consistent, Alexander Steffen
[PATCH v2 0/3] tpm: make locality handling resilient, Daniel P. Smith
[no subject], Daniel P. Smith
[PATCH 2/3] tpm: ensure tpm is in known state at startup, Daniel P. Smith
- Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Jarkko Sakkinen
  - Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Daniel P. Smith
    - Re: [PATCH 2/3] tpm: ensure tpm is in known state at startup, Jarkko Sakkinen
[RFC PATCH v12 00/20] Integrity Policy Enforcement LSM (IPE), Fan Wu
- [RFC PATCH v12 01/20] security: add ipe lsm, Fan Wu
- [RFC PATCH v12 02/20] ipe: add policy parser, Fan Wu
- [RFC PATCH v12 03/20] ipe: add evaluation loop, Fan Wu
- [RFC PATCH v12 04/20] ipe: add LSM hooks on execution and kernel read, Fan Wu
- [RFC PATCH v12 05/20] initramfs|security: Add security hook to initramfs unpack, Fan Wu
  - Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack, Paul Moore
    - Re: [PATCH RFC v12 5/20] initramfs|security: Add security hook to initramfs unpack, Fan Wu
- [RFC PATCH v12 06/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
  - Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider, Paul Moore
    - Re: [PATCH RFC v12 6/20] ipe: introduce 'boot_verified' as a trust provider, Fan Wu
- [RFC PATCH v12 07/20] security: add new securityfs delete function, Fan Wu
- [RFC PATCH v12 13/20] dm: add finalize hook to target_type, Fan Wu
- [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
  - Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Mike Snitzer
    - Re: [RFC PATCH v12 12/20] dm verity: set DM_TARGET_SINGLETON feature flag, Fan Wu
- [RFC PATCH v12 14/20] dm verity: consume root hash digest and signature data via LSM hook, Fan Wu
- [RFC PATCH v12 16/20] fsverity: consume builtin signature via LSM hook, Fan Wu
- [RFC PATCH v12 10/20] ipe: add permissive toggle, Fan Wu
  - Re: [PATCH RFC v12 10/20] ipe: add permissive toggle, Paul Moore
- [RFC PATCH v12 09/20] uapi|audit|ipe: add ipe auditing support, Fan Wu
  - Re: [PATCH RFC v12 9/20] uapi|audit|ipe: add ipe auditing support, Paul Moore
- [RFC PATCH v12 11/20] block|security: add LSM blob to block_device, Fan Wu
- [RFC PATCH v12 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
  - Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Paul Moore
    - Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Fan Wu
      - Re: [PATCH RFC v12 15/20] ipe: add support for dm-verity as a trust provider, Paul Moore
- [RFC PATCH v12 18/20] scripts: add boot policy generation program, Fan Wu
- [RFC PATCH v12 08/20] ipe: add userspace interface, Fan Wu
  - Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Paul Moore
    - Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Fan Wu
      - Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Paul Moore
        
        Re: [PATCH RFC v12 8/20] ipe: add userspace interface, Fan Wu
- [RFC PATCH v12 17/20] ipe: enable support for fs-verity as a trust provider, Fan Wu
  - Re: [PATCH RFC v12 17/20] ipe: enable support for fs-verity as a trust provider, Paul Moore
- [RFC PATCH v12 19/20] ipe: kunit test for parser, Fan Wu
- [RFC PATCH v12 20/20] documentation: add ipe documentation, Fan Wu
[PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Rob Herring
- Re: [PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Rob Herring
  - Re: [PATCH] MAINTAINERS: Add TPM DT bindings to TPM maintainers, Jarkko Sakkinen
[PATCH 0/5] evm: Support signatures on stacked filesystem, Stefan Berger
- [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Stefan Berger
  - Re: [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Amir Goldstein
    - Re: [PATCH 5/5] evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509, Mimi Zohar
- [PATCH 2/5] evm: Implement per signature type decision in security_inode_copy_up_xattr, Stefan Berger
  - Re: [PATCH 2/5] evm: Implement per signature type decision in security_inode_copy_up_xattr, Amir Goldstein
- [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Stefan Berger
  - Re: [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Amir Goldstein
    - Re: [PATCH 3/5] ima: Reset EVM status upon detecting changes to overlay backing file, Stefan Berger
- [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
  - Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
    - Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
      - Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Amir Goldstein
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
        
        Re: [PATCH 4/5] evm: Use the real inode's metadata to calculate metadata hash, Stefan Berger
- [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
  - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
    - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
      - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
        
        Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
        
        Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Amir Goldstein
        
        Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Christian Brauner
    - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, Stefan Berger
  - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, kernel test robot
  - Re: [PATCH 1/5] security: allow finer granularity in permitting copy-up of security xattrs, kernel test robot
- Re: [PATCH 0/5] evm: Support signatures on stacked filesystem, Amir Goldstein
  - Re: [PATCH 0/5] evm: Support signatures on stacked filesystem, Stefan Berger
Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Philipp Rudo
- Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Alexander Graf
  - Re: [PATCH v3 00/17] kexec: Allow preservation of ftrace buffers, Philipp Rudo
[RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Samuel Ortiz
- [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Samuel Ortiz
  - Re: [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Dionna Amalie Glaze
  - Re: [RFC PATCH v2 1/4] tsm: Runtime measurement register support, Jarkko Sakkinen
- [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Samuel Ortiz
  - Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Kuppuswamy Sathyanarayanan
  - Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Jarkko Sakkinen
  - Re: [RFC PATCH v2 2/4] tsm: Add RTMRs to the configfs-tsm hierarchy, Mikko Ylinen
- [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, Samuel Ortiz
  - Re: [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, Kuppuswamy Sathyanarayanan
    - Re: [RFC PATCH v2 3/4] tsm: Map RTMRs to TCG TPM PCRs, James Bottomley
- [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
  - Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, James Bottomley
    - Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
      - Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, James Bottomley
        
        Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Samuel Ortiz
        
        Re: [RFC PATCH v2 4/4] tsm: Allow for extending and reading configured RTMRs, Xing, Cedric
- Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Jarkko Sakkinen
- Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
  - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Middleton
    - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
      - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Kuppuswamy Sathyanarayanan
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Kuppuswamy Sathyanarayanan
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, James Bottomley
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Williams
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Xing, Cedric
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dan Middleton
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Mikko Ylinen
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Dr. Greg
        
        Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Lukas Wunner
  - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Qinkun Bao
    - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Samuel Ortiz
      - Re: [RFC PATCH v2 0/4] tsm: Runtime measurement registers ABI, Qinkun Bao
ref leak in request_asymmetric_key ?, Billie Alsup (balsup)
- Re: ref leak in request_asymmetric_key ?, Billie Alsup (balsup)
[PATCH v5 0/2] Add device tree for IBM system1 BMC, Ninad Palsule
- [PATCH v5 1/2] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
- [PATCH v5 2/2] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
[GIT PULL] integrity: subsystem updates for v6.8-rc1, Mimi Zohar
- Re: [GIT PULL] integrity: subsystem updates for v6.8-rc1, pr-tracker-bot
[PATCH v3] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
- Re: [PATCH v3] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
  - Re: [PATCH v3] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
[PATCH v4 0/7] ima: kexec: measure events between kexec load and execute, Tushar Sugandhi
- [PATCH v4 2/7] kexec: define functions to map and unmap segments, Tushar Sugandhi
  - Re: [PATCH v4 2/7] kexec: define functions to map and unmap segments, Stefan Berger
    - Re: [PATCH v4 2/7] kexec: define functions to map and unmap segments, Tushar Sugandhi
- [PATCH v4 3/7] ima: kexec: skip IMA segment validation after kexec soft reboot, Tushar Sugandhi
- [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
  - Re: [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Stefan Berger
    - Re: [PATCH v4 5/7] ima: suspend measurements during buffer copy at kexec execute, Tushar Sugandhi
- [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Tushar Sugandhi
  - Re: [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Mimi Zohar
    - Re: [PATCH v4 4/7] ima: kexec: move ima log copy from kexec load to execute, Tushar Sugandhi
- [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
  - Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Stefan Berger
    - Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
      - Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Stefan Berger
  - Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Mimi Zohar
    - Re: [PATCH v4 6/7] ima: make the kexec extra memory configurable, Tushar Sugandhi
- [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
  - Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
    - Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Stefan Berger
      - Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
  - Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Mimi Zohar
    - Re: [PATCH v4 1/7] ima: define and call ima_alloc_kexec_file_buf, Tushar Sugandhi
- [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
  - Re: [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Mimi Zohar
    - Re: [PATCH v4 7/7] ima: measure kexec load and exec events as critical data, Tushar Sugandhi
[PATCH v2 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
- [PATCH v2 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
- Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
  - Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jonathan Cameron
    - Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jonathan Cameron
- Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Greg Kroah-Hartman
  - Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
    - Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Greg Kroah-Hartman
    - Re: [PATCH v2 00/33] spi: get rid of some legacy macros, Jarkko Sakkinen
- Re: (subset) [PATCH v2 00/33] spi: get rid of some legacy macros, Mark Brown
[PATCH v2] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
- Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
  - Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Enrico Bravi
    - Re: [PATCH v2] ima: add crypto agility support for template-hash algorithm, Roberto Sassu
[PATCH v4 0/3] Add device tree for IBM system1 BMC, Ninad Palsule
- [PATCH v4 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
- [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
  - Re: [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Rob Herring
    - Re: [PATCH v4 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
- [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
  - Re: [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Bjorn Helgaas
    - Re: [PATCH v4 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
[PATCH v2 0/1] Add more compatibility strings to tpm-tis-i2c, Ninad Palsule
- [PATCH v2 1/1] tpm: tis-i2c: Add more compatible strings, Ninad Palsule
  - Re: [PATCH v2 1/1] tpm: tis-i2c: Add more compatible strings, Guenter Roeck
tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Paul Menzel
- Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
- Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
  - Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Paul Menzel
    - Re: tpm_tis_remove: `WARNING: CPU: 6 PID: 265 at kernel/workqueue.c:3397 __flush_work.isra.0+0x29f/0x2c0`, Jarkko Sakkinen
[PATCH 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
- [PATCH 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Uwe Kleine-König
  - Re: [PATCH 27/33] tpm_tis_spi: Follow renaming of SPI "master" to "controller", Jarkko Sakkinen
- Re: [PATCH 00/33] spi: get rid of some legacy macros, Mark Brown
  - Re: [PATCH 00/33] spi: get rid of some legacy macros, Uwe Kleine-König
[PATCH] tpm/tpm_ftpm_tee: fix all kernel-doc warnings, Randy Dunlap
- Re: [PATCH] tpm/tpm_ftpm_tee: fix all kernel-doc warnings, Jarkko Sakkinen
[PATCH v9 00/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
- [PATCH v9 01/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 1/25] ima: Align ima_inode_post_setattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 02/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 2/25] ima: Align ima_file_mprotect() definition with LSM infrastructure, Paul Moore
- [PATCH v9 03/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 3/25] ima: Align ima_inode_setxattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 05/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 5/25] ima: Align ima_post_read_file() definition with LSM infrastructure, Paul Moore
- [PATCH v9 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 6/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 7/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 8/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 09/25] security: Align inode_setattr hook definition with EVM, Roberto Sassu
  - Re: [PATCH v9 9/25] security: Align inode_setattr hook definition with EVM, Paul Moore
- [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Roberto Sassu
  - Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Paul Moore
  - Re: [PATCH v9 10/25] security: Introduce inode_post_setattr hook, Christian Brauner
- [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Roberto Sassu
  - Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Paul Moore
  - Re: [PATCH v9 11/25] security: Introduce inode_post_removexattr hook, Christian Brauner
- [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
  - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
  - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
    - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
  - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
    - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
      - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Christian Brauner
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
  - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
    - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
      - Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Roberto Sassu
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Mimi Zohar
        
        Re: [PATCH v9 12/25] security: Introduce file_post_open hook, Paul Moore
- [PATCH v9 14/25] security: Introduce path_post_mknod hook, Roberto Sassu
  - Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Paul Moore
  - Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Christian Brauner
  - Re: [PATCH v9 14/25] security: Introduce path_post_mknod hook, Stefan Berger
- [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Roberto Sassu
  - Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Paul Moore
  - Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Christian Brauner
  - Re: [PATCH v9 15/25] security: Introduce inode_post_create_tmpfile hook, Stefan Berger
- [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Roberto Sassu
  - Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Paul Moore
  - Re: [PATCH v9 16/25] security: Introduce inode_post_set_acl hook, Christian Brauner
- [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Roberto Sassu
  - Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Paul Moore
  - Re: [PATCH v9 17/25] security: Introduce inode_post_remove_acl hook, Christian Brauner
- [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Roberto Sassu
  - Re: [PATCH v9 18/25] security: Introduce key_post_create_or_update hook, Paul Moore
- [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
  - Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
  - Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
    - Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Paul Moore
      - Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
        
        Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
        
        Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Stefan Berger
        
        Re: [PATCH v9 19/25] integrity: Move integrity_kernel_module_request() to IMA, Roberto Sassu
- [PATCH v9 20/25] ima: Move to LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Casey Schaufler
  - Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Paul Moore
  - Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Christian Brauner
  - Re: [PATCH v9 20/25] ima: Move to LSM infrastructure, Stefan Berger
- [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Casey Schaufler
  - Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Paul Moore
  - Re: [PATCH v9 21/25] ima: Move IMA-Appraisal to LSM infrastructure, Christian Brauner
- [PATCH v9 22/25] evm: Move to LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Paul Moore
  - Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Christian Brauner
  - Re: [PATCH v9 22/25] evm: Move to LSM infrastructure, Stefan Berger
- [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Roberto Sassu
  - Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Casey Schaufler
  - Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Paul Moore
  - Re: [PATCH v9 23/25] evm: Make it independent from 'integrity' LSM, Stefan Berger
- [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Roberto Sassu
  - Re: [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Casey Schaufler
  - Re: [PATCH v9 24/25] ima: Make it independent from 'integrity' LSM, Stefan Berger
- [PATCH v9 25/25] integrity: Remove LSM, Roberto Sassu
  - Re: [PATCH v9 25/25] integrity: Remove LSM, Casey Schaufler
  - Re: [PATCH v9 25/25] integrity: Remove LSM, Paul Moore
  - Re: [PATCH v9 25/25] integrity: Remove LSM, Stefan Berger
- [PATCH v9 04/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Roberto Sassu
  - Re: [PATCH v9 4/25] ima: Align ima_inode_removexattr() definition with LSM infrastructure, Paul Moore
- [PATCH v9 13/25] security: Introduce file_release hook, Roberto Sassu
  - Re: [PATCH v9 13/25] security: Introduce file_release hook, Al Viro
    - Re: [PATCH v9 13/25] security: Introduce file_release hook, Roberto Sassu
      - Re: [PATCH v9 13/25] security: Introduce file_release hook, Casey Schaufler
        
        Re: [PATCH v9 13/25] security: Introduce file_release hook, Al Viro
        
        Re: [PATCH v9 13/25] security: Introduce file_release hook, Casey Schaufler
  - Re: [PATCH v9 13/25] security: Introduce file_release hook, Paul Moore
  - Re: [PATCH v9 13/25] security: Introduce file_release hook, Christian Brauner
  - Re: [PATCH v9 13/25] security: Introduce file_release hook, Stefan Berger
- Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
  - Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Roberto Sassu
    - Re: [PATCH v9 0/25] security: Move IMA and EVM to the LSM infrastructure, Paul Moore
[PATCH] tpm: make locality handling resilient, Daniel P. Smith
- Re: [PATCH] tpm: make locality handling resilient, Alexander Steffen
  - Re: [PATCH] tpm: make locality handling resilient, Jarkko Sakkinen
  - Re: [PATCH] tpm: make locality handling resilient, Daniel P. Smith
    - Re: [PATCH] tpm: make locality handling resilient, Jarkko Sakkinen
- Re: [PATCH] tpm: make locality handling resilient, Jarkko Sakkinen
  - Re: [PATCH] tpm: make locality handling resilient, Daniel P. Smith
- Re: [PATCH] tpm: make locality handling resilient, Lino Sanfilippo
[PATCH] arm64: dts: Fix TPM schema violations, Lukas Wunner
- Re: [PATCH] arm64: dts: Fix TPM schema violations, Heiko Stübner
  - Re: [PATCH] arm64: dts: Fix TPM schema violations, Lukas Wunner
- Re: [PATCH] arm64: dts: Fix TPM schema violations, AngeloGioacchino Del Regno
  - Re: [PATCH] arm64: dts: Fix TPM schema violations, Arnd Bergmann
    - Re: [PATCH] arm64: dts: Fix TPM schema violations, Lukas Wunner
[PATCH v2 0/4] Add missing TPM compatible strings, Lukas Wunner
- [PATCH v2 1/4] dt-bindings: tpm: Add compatible string atmel,attpm20p, Lukas Wunner
  - Re: [PATCH v2 1/4] dt-bindings: tpm: Add compatible string atmel,attpm20p, Jarkko Sakkinen
    - Re: [PATCH v2 1/4] dt-bindings: tpm: Add compatible string atmel,attpm20p, Rob Herring
  - Re: [PATCH v2 1/4] dt-bindings: tpm: Add compatible string atmel,attpm20p, Rob Herring
- [PATCH v2 2/4] tpm_tis_spi: Add compatible string atmel,attpm20p, Lukas Wunner
- [PATCH v2 3/4] tpm_tis: Add compatible string atmel,at97sc3204, Lukas Wunner
  - Re: [PATCH v2 3/4] tpm_tis: Add compatible string atmel,at97sc3204, Jarkko Sakkinen
- [PATCH v2 4/4] tpm: tis_i2c: Add compatible string nuvoton,npct75x, Lukas Wunner
  - Re: [PATCH v2 4/4] tpm: tis_i2c: Add compatible string nuvoton,npct75x, Jarkko Sakkinen
- Re: [PATCH v2 0/4] Add missing TPM compatible strings, Lukas Wunner
  - Re: [PATCH v2 0/4] Add missing TPM compatible strings, Jarkko Sakkinen
    - Re: [PATCH v2 0/4] Add missing TPM compatible strings, Jarkko Sakkinen
      - Re: [PATCH v2 0/4] Add missing TPM compatible strings, Jarkko Sakkinen
[PATCH] ARM: dts: Fix TPM schema violations, Lukas Wunner
- Re: [PATCH] ARM: dts: Fix TPM schema violations, Bruno Thomsen
[PATCH v5 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Thomas Zimmermann
- [PATCH v5 1/4] arch/x86: Move UAPI setup structures into setup_data.h, Thomas Zimmermann
- [PATCH v5 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Thomas Zimmermann
- [PATCH v5 3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file, Thomas Zimmermann
- [PATCH v5 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, Thomas Zimmermann
- Re: [PATCH v5 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Ard Biesheuvel
  - Re: [PATCH v5 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Thomas Zimmermann
    - Re: [PATCH v5 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Ard Biesheuvel
      - Re: [PATCH v5 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Borislav Petkov
[PATCH v3 0/3] Add device tree for IBM system1 BMC, Ninad Palsule
- [PATCH v3 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
  - Re: [PATCH v3 2/3] dt-bindings: Add DPS310 as trivial device, Krzysztof Kozlowski
    - Re: [PATCH v3 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
- [PATCH v3 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
  - Re: [PATCH v3 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Krzysztof Kozlowski
    - Re: [PATCH v3 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
- [PATCH v3 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
[GIT PULL] tpmdd changes for v6.8, Jarkko Sakkinen
- Re: [GIT PULL] tpmdd changes for v6.8, pr-tracker-bot
[GIT PULL] integrity: subsystem updates for v6.8, Mimi Zohar
- Re: [GIT PULL] integrity: subsystem updates for v6.8, pr-tracker-bot
[PATCH v2 0/3] Add device tree for IBM system1 BMC, Ninad Palsule
- [PATCH v2 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Ninad Palsule
  - Re: [PATCH v2 1/3] dt-bindings: arm: aspeed: add IBM system1-bmc, Krzysztof Kozlowski
- [PATCH v2 2/3] dt-bindings: Add DPS310 as trivial device, Ninad Palsule
  - Re: [PATCH v2 2/3] dt-bindings: Add DPS310 as trivial device, Krzysztof Kozlowski
- [PATCH v2 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
  - Re: [PATCH v2 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Mark Brown
    - Re: [PATCH v2 3/3] ARM: dts: aspeed: System1: IBM system1 BMC board, Ninad Palsule
[PATCH v4 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Thomas Zimmermann
- [PATCH v4 1/4] arch/x86: Move UAPI setup structures into setup_data.h, Thomas Zimmermann
- [PATCH v4 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Thomas Zimmermann
  - Re: [PATCH v4 2/4] arch/x86: Move internal setup_data structures into setup_data.h, kernel test robot
    - Re: [PATCH v4 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Nathan Chancellor
      - Re: [PATCH v4 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Thomas Zimmermann
        
        Re: [PATCH v4 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Nathan Chancellor
- [PATCH v4 3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file, Thomas Zimmermann
- [PATCH v4 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, Thomas Zimmermann
  - Re: [PATCH v4 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, kernel test robot
  - Re: [PATCH v4 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, kernel test robot
[ima-evm-utils PATCH v3 00/13] Address non concurrency-safe libimaevm global variables, Mimi Zohar
- [ima-evm-utils PATCH v3 04/13] Update imaevm_verify_hash() definition to include "hash_algo" parameter, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 04/13] Update imaevm_verify_hash() definition to include "hash_algo" parameter, Stefan Berger
- [ima-evm-utils PATCH v3 05/13] Update cmd_verify_ima() to define and use a local list of public keys, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 05/13] Update cmd_verify_ima() to define and use a local list of public keys, Stefan Berger
- [ima-evm-utils PATCH v3 01/13] Rename "public_keys" to "g_public_keys", Mimi Zohar
- [ima-evm-utils PATCH v3 08/13] Define library ima_calc_hash2() function with a hash algorithm parameter, Mimi Zohar
- [ima-evm-utils PATCH v3 06/13] Update cmd_verify_evm to define and use a local list of public keys, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 06/13] Update cmd_verify_evm to define and use a local list of public keys, Stefan Berger
- [ima-evm-utils PATCH v3 09/13] Use a local hash algorithm variable when verifying file signatures, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 09/13] Use a local hash algorithm variable when verifying file signatures, Stefan Berger
- [ima-evm-utils PATCH v3 07/13] Update ima_measurements to define and use a local list of public keys, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 07/13] Update ima_measurements to define and use a local list of public keys, Stefan Berger
- [ima-evm-utils PATCH v3 10/13] Update EVM signature verification to use a local hash algorithm variable, Mimi Zohar
- [ima-evm-utils PATCH v3 02/13] Free public keys list, Mimi Zohar
- [ima-evm-utils PATCH v3 03/13] Update library function definitions to include a "public_keys" parameter, Mimi Zohar
  - Re: [ima-evm-utils PATCH v3 03/13] Update library function definitions to include a "public_keys" parameter, Stefan Berger
- [ima-evm-utils PATCH v3 12/13] Update sign_hash_v*() definition to include the key password, Mimi Zohar
- [ima-evm-utils PATCH v3 11/13] Use a file specific hash algorithm variable for signing files, Mimi Zohar
- [ima-evm-utils PATCH v3 13/13] Define and use a file specific "keypass" variable, Mimi Zohar
[PATCH v3 0/4] arch/x86: Remove unnecessary dependencies on bootparam.h, Thomas Zimmermann
- [PATCH v3 1/4] arch/x86: Move UAPI setup structures into setup_data.h, Thomas Zimmermann
- [PATCH v3 2/4] arch/x86: Move internal setup_data structures into setup_data.h, Thomas Zimmermann
- [PATCH v3 3/4] arch/x86: Implement arch_ima_efi_boot_mode() in source file, Thomas Zimmermann
- [PATCH v3 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, Thomas Zimmermann
  - Re: [PATCH v3 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, Ard Biesheuvel
    - Re: [PATCH v3 4/4] arch/x86: Do not include <asm/bootparam.h> in several files, Thomas Zimmermann
[PATCH] dt-bindings: tpm: Add compatible string atmel,attpm20p, Lukas Wunner
- Re: [PATCH] dt-bindings: tpm: Add compatible string atmel,attpm20p, Jarkko Sakkinen
  - Re: [PATCH] dt-bindings: tpm: Add compatible string atmel,attpm20p, Jarkko Sakkinen
    - Re: [PATCH] dt-bindings: tpm: Add compatible string atmel,attpm20p, Jarkko Sakkinen
[PATCH v6 00/20] add integrity and security to TPM2 transactions, James Bottomley
- [PATCH v6 01/20] tpm: Remove unused tpm_buf_tag(), James Bottomley
- [PATCH v6 02/20] tpm: Remove tpm_send(), James Bottomley
- [PATCH v6 03/20] tpm: Move buffer handling from static inlines to real functions, James Bottomley
- [PATCH v6 04/20] tpm: Update struct tpm_buf documentation comments, James Bottomley
- [PATCH v6 05/20] tpm: Store the length of the tpm_buf data separately., James Bottomley
- [PATCH v6 06/20] tpm: TPM2B formatted buffers, James Bottomley
- [PATCH v6 07/20] tpm: Add tpm_buf_read_{u8,u16,u32}, James Bottomley
- [PATCH v6 08/20] KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers, James Bottomley
- [PATCH v6 09/20] crypto: lib - implement library version of AES in CFB mode, James Bottomley
  - Re: [PATCH v6 09/20] crypto: lib - implement library version of AES in CFB mode, Jarkko Sakkinen
- [PATCH v6 10/20] tpm: add buffer function to point to returned parameters, James Bottomley
  - Re: [PATCH v6 10/20] tpm: add buffer function to point to returned parameters, Jarkko Sakkinen
- [PATCH v6 11/20] tpm: export the context save and load commands, James Bottomley
  - Re: [PATCH v6 11/20] tpm: export the context save and load commands, Jarkko Sakkinen
- [PATCH v6 12/20] tpm: Add NULL primary creation, James Bottomley
  - Re: [PATCH v6 12/20] tpm: Add NULL primary creation, Jarkko Sakkinen
    - Re: [PATCH v6 12/20] tpm: Add NULL primary creation, James Bottomley
      - Re: [PATCH v6 12/20] tpm: Add NULL primary creation, Jarkko Sakkinen
- [PATCH v6 13/20] tpm: Add HMAC session start and end functions, James Bottomley
  - Re: [PATCH v6 13/20] tpm: Add HMAC session start and end functions, Jarkko Sakkinen
    - Re: [PATCH v6 13/20] tpm: Add HMAC session start and end functions, James Bottomley
      - Re: [PATCH v6 13/20] tpm: Add HMAC session start and end functions, Jarkko Sakkinen
        
        Re: [PATCH v6 13/20] tpm: Add HMAC session start and end functions, James Bottomley
        
        Re: [PATCH v6 13/20] tpm: Add HMAC session start and end functions, Jarkko Sakkinen
- [PATCH v6 14/20] tpm: Add HMAC session name/handle append, James Bottomley
  - Re: [PATCH v6 14/20] tpm: Add HMAC session name/handle append, Jarkko Sakkinen
- [PATCH v6 15/20] tpm: Add the rest of the session HMAC API, James Bottomley
  - Re: [PATCH v6 15/20] tpm: Add the rest of the session HMAC API, Jarkko Sakkinen
- [PATCH v6 16/20] tpm: add hmac checks to tpm2_pcr_extend(), James Bottomley
  - Re: [PATCH v6 16/20] tpm: add hmac checks to tpm2_pcr_extend(), Jarkko Sakkinen
- [PATCH v6 17/20] tpm: add session encryption protection to tpm2_get_random(), James Bottomley
  - Re: [PATCH v6 17/20] tpm: add session encryption protection to tpm2_get_random(), Jarkko Sakkinen
- [PATCH v6 18/20] KEYS: trusted: Add session encryption protection to the seal/unseal path, James Bottomley
  - Re: [PATCH v6 18/20] KEYS: trusted: Add session encryption protection to the seal/unseal path, Jarkko Sakkinen
- [PATCH v6 19/20] tpm: add the null key name as a sysfs export, James Bottomley
  - Re: [PATCH v6 19/20] tpm: add the null key name as a sysfs export, Jarkko Sakkinen
- [PATCH v6 20/20] Documentation: add tpm-security.rst, James Bottomley
  - Re: [PATCH v6 20/20] Documentation: add tpm-security.rst, Jarkko Sakkinen
[PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
- Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Eric Snowberg
  - Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
- Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Mimi Zohar
  - Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
    - Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Mimi Zohar
      - Re: Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
- Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Jarkko Sakkinen
  - Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
    - Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Jarkko Sakkinen
      - Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring, Coiby Xu
- [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg, Coiby Xu
  - Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg, Coiby Xu
    - Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg, Mimi Zohar
  - Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg, Maxime Ripard

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux SCSI] [Yosemite Forum]