kernel-hardening mailing list - 2020/04

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

kernel-hardening mailing list - 2020/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 21	² 39	³ 19	⁴ 1	⁵
⁶ 28	⁷ 11	⁸ 2	⁹ 21	¹⁰ 5	¹¹ 2	¹²
¹³ 9	¹⁴	¹⁵ 11	¹⁶ 28	¹⁷ 7	¹⁸ 2	¹⁹ 11
²⁰ 21	²¹ 16	²² 16	²³ 15	²⁴ 5	²⁵	²⁶ 1
²⁷ 26	²⁸ 8	²⁹ 12	³⁰ 10

Messages by day:

April 1 (21 messages)

Re: [PATCH v7 7/7] powerpc/32: use set_memory_attr() (Russell Currey <ruscur@...sell.cc>)
Re: [PATCH v7 7/7] powerpc/32: use set_memory_attr() (Christophe Leroy <christophe.leroy@....fr>)
Re: [RFC PATCH 03/21] list: Annotate lockless list primitives with data_race() (Marco Elver <elver@...gle.com>)
Re: CONFIG_DEBUG_INFO_BTF and CONFIG_GCC_PLUGIN_RANDSTRUCT (Kees Cook <keescook@...omium.org>)
Re: CONFIG_DEBUG_INFO_BTF and CONFIG_GCC_PLUGIN_RANDSTRUCT (Slava Bacherikov <slava@...her09.org>)
[PATCH v2 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v2 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Kees Cook <keescook@...omium.org>)
Re: [PATCH v2 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Andrii Nakryiko <andrii.nakryiko@...il.com>)
Re: CONFIG_DEBUG_INFO_BTF and CONFIG_GCC_PLUGIN_RANDSTRUCT (Andrii Nakryiko <andrii.nakryiko@...il.com>)
Re: [RFC PATCH 03/21] list: Annotate lockless list primitives with data_race() (Will Deacon <will@...nel.org>)
[PATCH v3 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v3 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v3 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Kees Cook <keescook@...omium.org>)
Re: [PATCH v3 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Andrii Nakryiko <andrii.nakryiko@...il.com>)
Re: [PATCH v3 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
[PATCH] signal: Extend exec_id to 64bits (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH] signal: Extend exec_id to 64bits (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH] signal: Extend exec_id to 64bits (Jann Horn <jannh@...gle.com>)
Re: [PATCH] signal: Extend exec_id to 64bits (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (Linus Torvalds <torvalds@...ux-foundation.org>)

April 2 (39 messages)

Re: [PATCH] signal: Extend exec_id to 64bits (Jann Horn <jannh@...gle.com>)
Re: [PATCH] signal: Extend exec_id to 64bits (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (Jann Horn <jannh@...gle.com>)
Re: [PATCH] signal: Extend exec_id to 64bits (Kees Cook <keescook@...omium.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (Bernd Edlinger <bernd.edlinger@...mail.de>)
[PATCH v8 5/7] powerpc/configs: Enable STRICT_MODULE_RWX in skiroot_defconfig (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 1/7] powerpc/mm: Implement set_memory() routines (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 3/7] powerpc/mm/ptdump: debugfs handler for W+X checks at runtime (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 7/7] powerpc/32: use set_memory_attr() (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 6/7] powerpc/mm: implement set_memory_attr() (Russell Currey <ruscur@...sell.cc>)
[PATCH v8 4/7] powerpc: Set ARCH_HAS_STRICT_MODULE_RWX (Russell Currey <ruscur@...sell.cc>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Catalin Marinas <catalin.marinas@....com>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Mark Rutland <mark.rutland@....com>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Catalin Marinas <catalin.marinas@....com>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (ebiederm@...ssion.com (Eric W. Biederman))
[PATCH] gcc-plugins/stackleak: Avoid assignment for unused macro argument (Kees Cook <keescook@...omium.org>)
Re: [PATCH] signal: Extend exec_id to 64bits (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v10 2/9] proc: allow to mount many instances of proc in one pid namespace (ebiederm@...ssion.com (Eric W. Biederman))
[PATCH v4 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v4 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v10 8/9] proc: use human-readable values for hidehid (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v11 8/9] proc: use human-readable values for hidehid (Jann Horn <jannh@...gle.com>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO ("Naveen N. Rao" <naveen.n.rao@...ux.ibm.com>)
Re: [PATCH v10 2/9] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v10 8/9] proc: use human-readable values for hidehid (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v10 7/9] proc: move hidepid values to uapi as they are user interface to mount (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v10 0/9] proc: modernize proc to support multiple private instances (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v10 8/9] proc: use human-readable values for hidehid (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO ("Naveen N. Rao" <naveen.n.rao@...ux.ibm.com>)
Re: [PATCH] signal: Extend exec_id to 64bits (Linus Torvalds <torvalds@...ux-foundation.org>)
Re: [PATCH v4 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Andrii Nakryiko <andrii.nakryiko@...il.com>)
Re: [PATCH v4 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Kees Cook <keescook@...omium.org>)
Re: [PATCH v4 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
[PATCH v5 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Slava Bacherikov <slava@...her09.org>)
Re: [PATCH v5 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Andrii Nakryiko <andrii.nakryiko@...il.com>)
Re: [PATCH v5 bpf] kbuild: fix dependencies for DEBUG_INFO_BTF (Daniel Borkmann <daniel@...earbox.net>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO (Russell Currey <ruscur@...sell.cc>)

April 3 (19 messages)

Re: [PATCH] signal: Extend exec_id to 64bits (Adam Zabrocki <pi3@....com.pl>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Will Deacon <will@...nel.org>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO (Russell Currey <ruscur@...sell.cc>)
Re: [RFC PATCH] arm64: remove CONFIG_DEBUG_ALIGN_RODATA feature (Ard Biesheuvel <ardb@...nel.org>)
kCFI sources (joao@...rdrivepizza.com <joao@...rdrivepizza.com>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO ("Naveen N. Rao" <naveen.n.rao@...ux.ibm.com>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO (Russell Currey <ruscur@...sell.cc>)
Re: [PATCH v8 2/7] powerpc/kprobes: Mark newly allocated probes as RO ("Naveen N. Rao" <naveen.n.rao@...ux.ibm.com>)
[PATCH v11 8/8] proc: use named enums for better readability (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 7/8] proc: use human-readable values for hidepid (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 3/8] proc: move hide_pid, pid_gid from pid_namespace to proc_fs_info (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 6/8] docs: proc: add documentation for "hidepid=4" and "subset=pid" options and new mount behavior (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 2/8] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 0/8] proc: modernize proc to support multiple private instances (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 4/8] proc: instantiate only pids that we can ptrace on 'hidepid=4' mount option (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 5/8] proc: add option to mount only a pids subset (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v11 1/8] proc: rename struct proc_fs_info to proc_fs_opts (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: kCFI sources (Kees Cook <keescook@...omium.org>)
Re: [PATCH v10 7/9] proc: move hidepid values to uapi as they are user interface to mount (Kees Cook <keescook@...omium.org>)

April 4 (1 message)

Re: kCFI sources (joao@...rdrivepizza.com <joao@...rdrivepizza.com>)

April 6 (28 messages)

[RFC PATCH 0/5] Prevent write to read-only pages (text, PLT/GOT (Lev Olshvang <levonshe@...il.com>)
[RFC PATCH 1/5] security : hardening : prevent write to proces's read-only pages from another process (Lev Olshvang <levonshe@...il.com>)
[RFC PATCH 2/5] Prevent write to read-only pages from another process (Lev Olshvang <levonshe@...il.com>)
[RFC PATCH 3/5] Prevent write to read-only pages text, PLT/GOT tables from another process (Lev Olshvang <levonshe@...il.com>)
[RFC PATCH 4/5] X86:Prevent write to read-only pages :text, PLT/GOT tables from another process (Lev Olshvang <levonshe@...il.com>)
[RFC PATCH 5/5] UM:Prevent write to read-only pages :text, PLT/GOT tables from another process (Lev Olshvang <levonshe@...il.com>)
[PATCH v10 00/12] add support for Clang's Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 02/12] scs: add accounting (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 04/12] scs: disable when function graph tracing is enabled (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 05/12] arm64: reserve x18 from general allocation with SCS (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 06/12] arm64: preserve x18 when CPU is suspended (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 07/12] arm64: efi: restore x18 if it was corrupted (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 08/12] arm64: vdso: disable Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 09/12] arm64: disable SCS for hypervisor code (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 10/12] arm64: implement Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 11/12] arm64: scs: add shadow stacks for SDEI (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v10 12/12] efi/libstub: disable SCS (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v10 09/12] arm64: disable SCS for hypervisor code (Kees Cook <keescook@...omium.org>)
Re: [PATCH v10 12/12] efi/libstub: disable SCS (Kees Cook <keescook@...omium.org>)
Re: [RFC PATCH 1/5] security : hardening : prevent write to proces's read-only pages from another process (Kees Cook <keescook@...omium.org>)
[PATCH v3 2/5] init_on_alloc: Unpessimize default-on builds (Kees Cook <keescook@...omium.org>)
[PATCH v3 0/5] Optionally randomize kernel stack offset each syscall (Kees Cook <keescook@...omium.org>)
[PATCH v3 1/5] jump_label: Provide CONFIG-driven build state defaults (Kees Cook <keescook@...omium.org>)
[PATCH v3 3/5] stack: Optionally randomize kernel stack offset each syscall (Kees Cook <keescook@...omium.org>)
[PATCH v3 4/5] x86/entry: Enable random_kstack_offset support (Kees Cook <keescook@...omium.org>)
[PATCH v3 5/5] arm64: entry: Enable random_kstack_offset support (Kees Cook <keescook@...omium.org>)

April 7 (11 messages)

Re: [PATCH 09/38] usercopy: Mark kmalloc caches as usercopy caches (Vlastimil Babka <vbabka@...e.cz>)
Re: [RFC PATCH 1/5] security : hardening : prevent write to proces's read-only pages from another process ("Lev R. Oshvang ." <levonshe@...il.com>)
Re: [PATCH 09/38] usercopy: Mark kmalloc caches as usercopy caches (Christian Borntraeger <borntraeger@...ibm.com>)
[PATCH] gcc-common.h: 'params.h' has been dropped in GCC10 (Frédéric Pierret (fepitre) <frederic.pierret@...es-os.org>)
Re: [PATCH v10 12/12] efi/libstub: disable SCS (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH] gcc-plugins/stackleak: Avoid assignment for unused macro argument (Alexander Popov <alex.popov@...ux.com>)
Re: [RFC PATCH 1/5] security : hardening : prevent write to proces's read-only pages from another process (Kees Cook <keescook@...omium.org>)
Re: [PATCH] gcc-plugins/stackleak: Avoid assignment for unused macro argument (Kees Cook <keescook@...omium.org>)
Re: [PATCH] gcc-common.h: 'params.h' has been dropped in GCC10 (Kees Cook <keescook@...omium.org>)
Re: [PATCH] gcc-common.h: 'params.h' has been dropped in GCC10 (Kees Cook <keescook@...omium.org>)
Re: [PATCH] gcc-common.h: 'params.h' has been dropped in GCC10 (Frédéric Pierret <frederic.pierret@...es-os.org>)

April 8 (2 messages)

Coccinelle rule for CVE-2019-18683 (Alexander Popov <alex.popov@...ux.com>)
Re: Coccinelle rule for CVE-2019-18683 (Jann Horn <jannh@...gle.com>)

April 9 (21 messages)

Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Markus Elfring <Markus.Elfring@....de>)
Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Julia Lawall <julia.lawall@...ia.fr>)
[PATCH RESEND v11 1/8] proc: rename struct proc_fs_info to proc_fs_opts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 0/8] proc: modernize proc to support multiple private instances (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 3/8] proc: move hide_pid, pid_gid from pid_namespace to proc_fs_info (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 2/8] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 4/8] proc: instantiate only pids that we can ptrace on 'hidepid=4' mount option (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 5/8] proc: add option to mount only a pids subset (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 6/8] docs: proc: add documentation for "hidepid=4" and "subset=pid" options and new mount behavior (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 8/8] proc: use named enums for better readability (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH RESEND v11 7/8] proc: use human-readable values for hidepid (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH RESEND v11 0/8] proc: modernize proc to support multiple private instances (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH RESEND v11 0/8] proc: modernize proc to support multiple private instances (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH RESEND v11 0/8] proc: modernize proc to support multiple private instances (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v10 8/9] proc: use human-readable values for hidehid (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Alexander Popov <alex.popov@...ux.com>)
Re: Coccinelle rule for CVE-2019-18683 (Alexander Popov <alex.popov@...ux.com>)
Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Alexander Popov <alex.popov@...ux.com>)
Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Julia Lawall <julia.lawall@...ia.fr>)
Re: [PATCH] x86/mm/init: Stop printing pgt_buf addresses (Arvind Sankar <nivedita@...m.mit.edu>)
Re: [PATCH] x86/mm/init: Stop printing pgt_buf addresses (Dave Hansen <dave.hansen@...el.com>)

April 10 (5 messages)

Re: [selftests/landlock] d9d464ccf6: kernel-selftests.landlock.test_base.fail (Mickaël Salaün <mic@...ikod.net>)
[selftests/landlock] d9d464ccf6: kernel-selftests.landlock.test_base.fail (kernel test robot <rong.a.chen@...el.com>)
Re: [selftests/landlock] d9d464ccf6: kernel-selftests.landlock.test_base.fail (Rong Chen <rong.a.chen@...el.com>)
Re: [Cocci] Coccinelle rule for CVE-2019-18683 (Markus Elfring <Markus.Elfring@....de>)
[PATCH v1] prevent write to proces's read-only pages (Lev Olshvang <levonshe@...il.com>)

April 11 (2 messages)

Re: Coccinelle rule for CVE-2019-18683 (Alexander Popov <alex.popov@...ux.com>)
Re: Coccinelle rule for CVE-2019-18683 (Markus Elfring <Markus.Elfring@....de>)

April 13 (9 messages)

Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Jason Yan <yanaijie@...wei.com>)
[PATCH v1 0/1] hardening : prevent write to proces's read-only pages (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 0/5] hardening : prevent write to proces's read-only pages (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 1/5] Hardening x86: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 2/5] Hardening PowerPC: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 3/5] Hardening um: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 4/5] Hardening unicore32: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
[PATCH v3 5/5] Hardening : PPC book3s64: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
Re: [PATCH v3 0/5] hardening : prevent write to proces's read-only pages (Kees Cook <keescook@...omium.org>)

April 15 (11 messages)

Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Scott Wood <oss@...error.net>)
[PATCH 0/9] Function Granular Kernel Address Space Layout Randomization (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 1/9] objtool: do not assume order of parent/child functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 2/9] x86: tools/relocs: Support >64K section headers (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 3/9] x86/boot: Allow a "silent" kaslr random byte fetch (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 4/9] x86: Makefile: Add build and config option for CONFIG_FG_KASLR (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 5/9] x86: make sure _etext includes function sections (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 6/9] x86/tools: Adding relative relocs for randomized functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 7/9] x86: Add support for function granular KASLR (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 8/9] kallsyms: hide layout (Kristen Carlson Accardi <kristen@...ux.intel.com>)
[PATCH 9/9] module: Reorder functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)

April 16 (28 messages)

Re: [PATCH 7/9] x86: Add support for function granular KASLR (kbuild test robot <lkp@...el.com>)
[PATCH v16 00/10] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 01/10] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 02/10] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 03/10] landlock: Set up the security framework and manage credentials (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 04/10] landlock: Add ptrace restrictions (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 05/10] fs,landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 06/10] landlock: Add syscall implementation (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 07/10] arch: Wire up landlock() syscall (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 08/10] selftests/landlock: Add initial tests (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 09/10] samples/landlock: Add a sandbox manager example (Mickaël Salaün <mic@...ikod.net>)
[PATCH v16 10/10] landlock: Add user and kernel documentation (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 0/5] hardening : prevent write to proces's read-only pages (Lev Olshvang <levonshe@...il.com>)
[PATCH v4 1/2] hardening : prevent write to read-only pages of user process (Lev Olshvang <levonshe@...il.com>)
[PATCH v4 2/2] Hardening x86: Forbid writes to read-only memory pages of a process (Lev Olshvang <levonshe@...il.com>)
[PATCH v11 00/12] add support for Clang's Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 02/12] scs: add accounting (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 04/12] scs: disable when function graph tracing is enabled (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 05/12] arm64: reserve x18 from general allocation with SCS (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 06/12] arm64: preserve x18 when CPU is suspended (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 07/12] arm64: efi: restore x18 if it was corrupted (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 08/12] arm64: vdso: disable Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 09/12] arm64: disable SCS for hypervisor code (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 10/12] arm64: implement Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 11/12] arm64: scs: add shadow stacks for SDEI (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v11 12/12] efi/libstub: disable SCS (Sami Tolvanen <samitolvanen@...gle.com>)

April 17 (7 messages)

Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Peter Zijlstra <peterz@...radead.org>)
Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Mark Rutland <mark.rutland@....com>)
Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Peter Zijlstra <peterz@...radead.org>)
Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Mark Rutland <mark.rutland@....com>)
Re: [PATCH RESEND v11 2/8] proc: allow to mount many instances of proc in one pid namespace (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH RESEND v11 7/8] proc: use human-readable values for hidepid (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Sami Tolvanen <samitolvanen@...gle.com>)

April 18 (2 messages)

[PATCH] gcc-plugins: structleak: remove unneeded variable 'ret' (Jason Yan <yanaijie@...wei.com>)
[PATCH] gcc-plugins: latent_entropy: remove unneeded semicolon (Jason Yan <yanaijie@...wei.com>)

April 19 (11 messages)

[PATCH v12 0/7] proc: modernize proc to support multiple private instances (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 1/7] proc: rename struct proc_fs_info to proc_fs_opts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 2/7] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 4/7] proc: add option to mount only a pids subset (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 3/7] proc: instantiate only pids that we can ptrace on 'hidepid=4' mount option (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 6/7] proc: use human-readable values for hidepid (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 7/7] proc: use named enums for better readability (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v12 5/7] docs: proc: add documentation for "hidepid=4" and "subset=pid" options and new mount behavior (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH RESEND v11 2/8] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH RESEND v11 7/8] proc: use human-readable values for hidepid (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: gcc extended format checking plugin (Masahiro Yamada <masahiroy@...nel.org>)

April 20 (21 messages)

Re: [PATCH 09/38] usercopy: Mark kmalloc caches as usercopy caches (Jiri Slaby <jslaby@...e.cz>)
Re: [PATCH 8/9] kallsyms: hide layout (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH 9/9] module: Reorder functions (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH 9/9] module: Reorder functions (Arjan van de Ven <arjan@...ux.intel.com>)
Re: [PATCH 9/9] module: Reorder functions (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH 9/9] module: Reorder functions (Arjan van de Ven <arjan@...ux.intel.com>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: [PATCH v11 03/12] scs: add support for stack usage debugging (Will Deacon <will@...nel.org>)
Re: [PATCH v11 02/12] scs: add accounting (Will Deacon <will@...nel.org>)
Re: [PATCH 09/38] usercopy: Mark kmalloc caches as usercopy caches (Kees Cook <keescook@...omium.org>)
Re: [PATCH 8/9] kallsyms: hide layout (Kristen Carlson Accardi <kristen@...ux.intel.com>)
Re: [PATCH 0/9] Function Granular Kernel Address Space Layout Randomization (Kees Cook <keescook@...omium.org>)
Re: [PATCH 9/9] module: Reorder functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)
Re: [PATCH 9/9] module: Reorder functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)
Re: [PATCH v11 04/12] scs: disable when function graph tracing is enabled (Steven Rostedt <rostedt@...dmis.org>)
Re: [PATCH] arm64: add check_wx_pages debugfs for CHECK_WX (Will Deacon <will@...nel.org>)
Re: [PATCH v2 5/5] arm64: entry: Enable random_kstack_offset support (Will Deacon <will@...nel.org>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v11 02/12] scs: add accounting (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v11 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v2 5/5] arm64: entry: Enable random_kstack_offset support (Kees Cook <keescook@...omium.org>)

April 21 (16 messages)

Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Steven Rostedt <rostedt@...dmis.org>)
[PATCH v12 00/12] add support for Clang's Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 02/12] scs: add accounting (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 04/12] scs: disable when function graph tracing is enabled (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 05/12] arm64: reserve x18 from general allocation with SCS (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 06/12] arm64: preserve x18 when CPU is suspended (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 07/12] arm64: efi: restore x18 if it was corrupted (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 08/12] arm64: vdso: disable Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 09/12] arm64: disable SCS for hypervisor code (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 10/12] arm64: implement Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 11/12] arm64: scs: add shadow stacks for SDEI (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v12 12/12] efi/libstub: disable SCS (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v2 5/5] arm64: entry: Enable random_kstack_offset support (Will Deacon <will@...nel.org>)
[PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Phong Tran <tranmanphong@...il.com>)

April 22 (16 messages)

Re: [PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Steven Price <steven.price@....com>)
Re: [PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Mark Rutland <mark.rutland@....com>)
Re: [PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Will Deacon <will@...nel.org>)
Re: [PATCH 9/9] module: Reorder functions (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Mark Rutland <mark.rutland@....com>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: [PATCH v12 02/12] scs: add accounting (Will Deacon <will@...nel.org>)
Re: [PATCH v12 03/12] scs: add support for stack usage debugging (Will Deacon <will@...nel.org>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Kees Cook <keescook@...omium.org>)
Re: [PATCH v12 01/12] add support for Clang's Shadow Call Stack (SCS) (Kees Cook <keescook@...omium.org>)
Re: [PATCH v12 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: [PATCH 9/9] module: Reorder functions (Kristen Carlson Accardi <kristen@...ux.intel.com>)
Re: [PATCH 1/9] objtool: do not assume order of parent/child functions (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v12 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)

April 23 (15 messages)

Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Jason Yan <yanaijie@...wei.com>)
[PATCH v13 2/7] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH v13 2/7] proc: allow to mount many instances of proc in one pid namespace (ebiederm@...ssion.com (Eric W. Biederman))
Re: [PATCH v12 01/12] add support for Clang's Shadow Call Stack (SCS) (Kees Cook <keescook@...omium.org>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Kees Cook <keescook@...omium.org>)
Re: [PATCH v13 2/7] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 0/8] proc: modernize proc to support multiple private instances (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 1/8] proc: rename struct proc_fs_info to proc_fs_opts (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 2/8] Use proc_pid_ns() to get pid_namespace from the proc superblock (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 3/8] proc: allow to mount many instances of proc in one pid namespace (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 4/8] proc: instantiate only pids that we can ptrace on 'hidepid=4' mount option (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 6/8] docs: proc: add documentation for "hidepid=4" and "subset=pid" options and new mount behavior (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 5/8] proc: add option to mount only a pids subset (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 8/8] proc: use named enums for better readability (Alexey Gladkov <gladkov.alexey@...il.com>)
[PATCH v13 7/8] proc: use human-readable values for hidepid (Alexey Gladkov <gladkov.alexey@...il.com>)

April 24 (5 messages)

Re: [PATCH v12 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: Re: [PATCH v2] arm64: add check_wx_pages debugfs for CHECK_WX (Phong Tran <tranmanphong@...il.com>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Will Deacon <will@...nel.org>)
Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Daniel Axtens <dja@...ens.net>)
Re: [RFC PATCH 03/21] list: Annotate lockless list primitives with data_race() (Will Deacon <will@...nel.org>)

April 26 (1 message)

Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Jason Yan <yanaijie@...wei.com>)

April 27 (26 messages)

Re: [PATCH v5 0/6] implement KASLR for powerpc/fsl_booke/64 (Daniel Axtens <dja@...ens.net>)
[PATCH v13 00/12] add support for Clang's Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 02/12] scs: add accounting (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 03/12] scs: add support for stack usage debugging (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 04/12] scs: disable when function graph tracing is enabled (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 05/12] arm64: reserve x18 from general allocation with SCS (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 07/12] arm64: efi: restore x18 if it was corrupted (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 06/12] arm64: preserve x18 when CPU is suspended (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 08/12] arm64: vdso: disable Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 09/12] arm64: disable SCS for hypervisor code (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 10/12] arm64: implement Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 11/12] arm64: scs: add shadow stacks for SDEI (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v13 12/12] efi/libstub: disable SCS (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v13 01/12] add support for Clang's Shadow Call Stack (SCS) (Miguel Ojeda <miguel.ojeda.sandonis@...il.com>)
Re: [PATCH v13 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH] nsproxy: attach to namespaces via pidfds (Jann Horn <jannh@...gle.com>)
Get involved (Oscar Carter <oscar.carter@....com>)
Re: [PATCH v13 00/12] add support for Clang's Shadow Call Stack (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH] nsproxy: attach to namespaces via pidfds (Christian Brauner <christian.brauner@...ntu.com>)
Re: [RFC PATCH 03/21] list: Annotate lockless list primitives with data_race() ("Paul E. McKenney" <paulmck@...nel.org>)
Re: [PATCH] nsproxy: attach to namespaces via pidfds (Jann Horn <jannh@...gle.com>)
Re: [PATCH] nsproxy: attach to namespaces via pidfds (Christian Brauner <christian.brauner@...ntu.com>)
Re: [PATCH v11 01/12] add support for Clang's Shadow Call Stack (SCS) (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v13 00/12] add support for Clang's Shadow Call Stack (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v13 00/12] add support for Clang's Shadow Call Stack (Sami Tolvanen <samitolvanen@...gle.com>)

April 28 (8 messages)

[PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 1/5] fs: Add support for a RESOLVE_MAYEXEC flag on openat2(2) (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 2/5] fs: Add a MAY_EXECMOUNT flag to infer the noexec mount property (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 3/5] fs: Enable to enforce noexec mounts or file exec through RESOLVE_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 4/5] selftest/openat2: Add tests for RESOLVE_MAYEXEC enforcing (Mickaël Salaün <mic@...ikod.net>)
[PATCH v3 5/5] doc: Add documentation for the fs.open_mayexec_enforce sysctl (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Jann Horn <jannh@...gle.com>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Jann Horn <jannh@...gle.com>)

April 29 (12 messages)

[RFC PATCH v2 0/5] Use per-CPU temporary mappings for patching ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
[RFC PATCH v2 1/5] powerpc/mm: Introduce temporary mm ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
[RFC PATCH v2 2/5] powerpc/lib: Initialize a temporary mm for code patching ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
[RFC PATCH v2 4/5] powerpc/lib: Add LKDTM accessor for patching addr ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
[RFC PATCH v2 3/5] powerpc/lib: Use a temporary mm for code patching ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
[RFC PATCH v2 5/5] powerpc: Add LKDTM test to hijack a patch mapping ("Christopher M. Riedl" <cmr@...ormatik.wtf>)
Re: [RFC PATCH v2 1/5] powerpc/mm: Introduce temporary mm (Christophe Leroy <christophe.leroy@....fr>)
Re: [RFC PATCH v2 1/5] powerpc/mm: Introduce temporary mm (Christophe Leroy <christophe.leroy@....fr>)
Re: [RFC PATCH v2 3/5] powerpc/lib: Use a temporary mm for code patching (Christophe Leroy <christophe.leroy@....fr>)
RE: [PATCH v13 00/12] add support for Clang's Shadow Call Stack (David Laight <David.Laight@...LAB.COM>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Florian Weimer <fw@...eb.enyo.de>)

April 30 (10 messages)

Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Aleksa Sarai <cyphar@...har.com>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Christian Brauner <christian.brauner@...ntu.com>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v3 0/5] Add support for RESOLVE_MAYEXEC ("Lev R. Oshvang ." <levonshe@...il.com>)
[PATCH v4 0/5] Add support for O_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
[PATCH v4 1/5] fs: Add support for an O_MAYEXEC flag on openat2(2) (Mickaël Salaün <mic@...ikod.net>)
[PATCH v4 2/5] fs: Add a MAY_EXECMOUNT flag to infer the noexec mount property (Mickaël Salaün <mic@...ikod.net>)
[PATCH v4 3/5] fs: Enable to enforce noexec mounts or file exec through O_MAYEXEC (Mickaël Salaün <mic@...ikod.net>)
[PATCH v4 4/5] selftest/openat2: Add tests for O_MAYEXEC enforcing (Mickaël Salaün <mic@...ikod.net>)
[PATCH v4 5/5] doc: Add documentation for the fs.open_mayexec_enforce sysctl (Mickaël Salaün <mic@...ikod.net>)

347 messages

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.