kernel-hardening mailing list - 2020/11

Follow @Openwall on Twitter for new release announcements and other news

[<prev month] [next month>] [year] [list]

kernel-hardening mailing list - 2020/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 10	³ 25	⁴ 18	⁵ 2	⁶ 1	⁷	⁸
⁹ 3	¹⁰ 9	¹¹ 1	¹² 13	¹³ 7	¹⁴ 1	¹⁵ 1
¹⁶ 2	¹⁷ 1	¹⁸ 21	¹⁹ 1	²⁰ 13	²¹ 13	²²
²³ 5	²⁴ 1	²⁵	²⁶	²⁷ 7	²⁸	²⁹
³⁰ 6

Messages by day:

November 2 (10 messages)

[RFC PATCH v1 0/4] Per user namespace rlimits (Alexey Gladkov <gladkov.alexey@...il.com>)
[RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted (Alexey Gladkov <gladkov.alexey@...il.com>)
[RFC PATCH v1 2/4] Move the user's process counter to ucounts (Alexey Gladkov <gladkov.alexey@...il.com>)
[RFC PATCH v1 3/4] Do not allow fork if RLIMIT_NPROC is exceeded in the user namespace tree (Alexey Gladkov <gladkov.alexey@...il.com>)
[RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted (Jann Horn <jannh@...gle.com>)
Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [RFC PATCH v1 0/4] Per user namespace rlimits (Christian Brauner <christian.brauner@...ntu.com>)
Re: [RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t (Christian Brauner <christian.brauner@...ntu.com>)
Re: [RFC PATCH v1 1/4] Increase size of ucounts to atomic_long_t (Alexey Gladkov <gladkov.alexey@...il.com>)

November 3 (25 messages)

[PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH 1/4] elf: Pass the fd to note processing [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH 2/4] elf: Move note processing after l_phdr is updated [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH 4/4] aarch64: Remove the bti link_map field [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH 3/4] aarch64: Use mmap to add PROT_BTI instead of mprotect [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [PATCH 3/4] aarch64: Use mmap to add PROT_BTI instead of mprotect [BZ #26831] (Florian Weimer <fweimer@...hat.com>)
Re: [PATCH 2/4] elf: Move note processing after l_phdr is updated [BZ #26831] (Florian Weimer <fweimer@...hat.com>)
Re: [PATCH 2/4] elf: Move note processing after l_phdr is updated [BZ #26831] ("H.J. Lu" <hjl.tools@...il.com>)
Re: [PATCH 2/4] elf: Move note processing after l_phdr is updated [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [PATCH 2/4] elf: Move note processing after l_phdr is updated [BZ #26831] ("H.J. Lu" <hjl.tools@...il.com>)
Re: [PATCH v22 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Mark Brown <broonie@...nel.org>)
[PATCH v23 00/12] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 02/12] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 03/12] landlock: Set up the security framework and manage credentials (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 04/12] landlock: Add ptrace restrictions (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 05/12] LSM: Infrastructure management of the superblock (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 06/12] fs,security: Add sb_delete hook (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 08/12] landlock: Add syscall implementations (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 09/12] arch: Wire up Landlock syscalls (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 10/12] selftests/landlock: Add user space tests (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 11/12] samples/landlock: Add a sandbox manager example (Mickaël Salaün <mic@...ikod.net>)
[PATCH v23 12/12] landlock: Add user and kernel documentation (Mickaël Salaün <mic@...ikod.net>)

November 4 (18 messages)

Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Topi Miettinen <toiwoton@...il.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Will Deacon <will@...nel.org>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Florian Weimer <fweimer@...hat.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Topi Miettinen <toiwoton@...il.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Mark Brown <broonie@...nel.org>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Jeremy Linton <jeremy.linton@....com>)
Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted (Sargun Dhillon <sargun@...gun.me>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Catalin Marinas <catalin.marinas@....com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Catalin Marinas <catalin.marinas@....com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Florian Weimer <fweimer@...hat.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Topi Miettinen <toiwoton@...il.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Mark Rutland <mark.rutland@....com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [RFC PATCH v1 4/4] Allow to change the user namespace in which user rlimits are counted (Alexey Gladkov <gladkov.alexey@...il.com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Mark Brown <broonie@...nel.org>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Jeremy Linton <jeremy.linton@....com>)
Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Jeremy Linton <jeremy.linton@....com>)

November 5 (2 messages)

Re: [PATCH 0/4] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [PATCH] mm, hugetlb: Avoid double clearing for hugetlb pages ("Guilherme G. Piccoli" <gpiccoli@...onical.com>)

November 6 (1 message)

Re: [PATCH v2 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)

November 9 (3 messages)

Re: [PATCH v2 7/8] Documentation: Add documentation for the Brute LSM (Randy Dunlap <rdunlap@...radead.org>)
Re: [PATCH v2 7/8] Documentation: Add documentation for the Brute LSM (John Wood <john.wood@....com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)

November 10 (9 messages)

Re: [PATCH v2 7/8] Documentation: Add documentation for the Brute LSM (Randy Dunlap <rdunlap@...radead.org>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Nick Desaulniers <ndesaulniers@...gle.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v23 00/12] Landlock LSM (James Morris <jmorris@...ei.org>)
Re: [PATCH v23 00/12] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)

November 11 (1 message)

Re: [PATCH v2 0/8] Fork brute force attack mitigation (Kees Cook <keescook@...omium.org>)

November 12 (13 messages)

[PATCH v24 00/12] Landlock LSM (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 02/12] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 03/12] landlock: Set up the security framework and manage credentials (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 04/12] landlock: Add ptrace restrictions (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 05/12] LSM: Infrastructure management of the superblock (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 06/12] fs,security: Add sb_delete hook (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 08/12] landlock: Add syscall implementations (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 09/12] arch: Wire up Landlock syscalls (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 10/12] selftests/landlock: Add user space tests (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 11/12] samples/landlock: Add a sandbox manager example (Mickaël Salaün <mic@...ikod.net>)
[PATCH v24 12/12] landlock: Add user and kernel documentation (Mickaël Salaün <mic@...ikod.net>)

November 13 (7 messages)

Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Sami Tolvanen <samitolvanen@...gle.com>)

November 14 (1 message)

Re: [PATCH v6 22/25] x86/asm: annotate indirect jumps (Josh Poimboeuf <jpoimboe@...hat.com>)

November 15 (1 message)

Re: [PATCH v2 0/8] Fork brute force attack mitigation (John Wood <john.wood@....com>)

November 16 (2 messages)

Re: [PATCH v22 01/12] landlock: Add object management (Pavel Machek <pavel@....cz>)
Re: [PATCH v22 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)

November 17 (1 message)

Re: [PATCH v24 00/12] Landlock LSM (James Morris <jmorris@...ei.org>)

November 18 (21 messages)

[PATCH v7 00/17] Add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 01/17] tracing: move function tracer options to Kconfig (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 02/17] kbuild: add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 03/17] kbuild: lto: fix module versioning (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 04/17] kbuild: lto: limit inlining (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 05/17] kbuild: lto: merge module sections (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 06/17] kbuild: lto: remove duplicate dependencies from .mod files (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 07/17] init: lto: ensure initcall ordering (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 08/17] init: lto: fix PREL32 relocations (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 09/17] PCI: Fix PREL32 relocations for LTO (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 10/17] modpost: lto: strip .lto from module names (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 11/17] scripts/mod: disable LTO for empty.c (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 12/17] efi/libstub: disable LTO (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 13/17] drivers/misc/lkdtm: disable LTO for rodata.o (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 14/17] arm64: vdso: disable LTO (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 15/17] KVM: arm64: disable LTO for the nVHE directory (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 16/17] arm64: disable recordmcount with DYNAMIC_FTRACE_WITH_REGS (Sami Tolvanen <samitolvanen@...gle.com>)
[PATCH v7 17/17] arm64: allow LTO_CLANG and THINLTO to be selected (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v4] mm: Optional full ASLR for mmap() and mremap() (Jann Horn <jannh@...gle.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Nick Desaulniers <ndesaulniers@...gle.com>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Nick Desaulniers <ndesaulniers@...gle.com>)

November 19 (1 message)

Re: [PATCH v4] mm: Optional full ASLR for mmap() and mremap() (Topi Miettinen <toiwoton@...il.com>)

November 20 (13 messages)

Re: [PATCH v24 02/12] landlock: Add ruleset and domain management (James Morris <jmorris@...ei.org>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Josh Poimboeuf <jpoimboe@...hat.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Kees Cook <keescook@...omium.org>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Nick Desaulniers <ndesaulniers@...gle.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Nathan Chancellor <natechancellor@...il.com>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Kees Cook <keescook@...omium.org>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Nick Desaulniers <ndesaulniers@...gle.com>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Kees Cook <keescook@...omium.org>)

November 21 (13 messages)

Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Nathan Chancellor <natechancellor@...il.com>)
Re: [PATCH v24 01/12] landlock: Add object management (Jann Horn <jannh@...gle.com>)
Re: [PATCH v24 08/12] landlock: Add syscall implementations (Jann Horn <jannh@...gle.com>)
Re: [PATCH v24 12/12] landlock: Add user and kernel documentation (Jann Horn <jannh@...gle.com>)
Re: [PATCH v24 07/12] landlock: Support filesystem access-control (Jann Horn <jannh@...gle.com>)
Re: [PATCH v24 02/12] landlock: Add ruleset and domain management (Jann Horn <jannh@...gle.com>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Ard Biesheuvel <ardb@...nel.org>)
Re: [PATCH v24 02/12] landlock: Add ruleset and domain management (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v24 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v24 01/12] landlock: Add object management (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Marc Zyngier <maz@...terjones.org>)
Re: [PATCH v7 02/17] kbuild: add support for Clang LTO (Kees Cook <keescook@...omium.org>)

November 23 (5 messages)

Re: [PATCH v7 15/17] KVM: arm64: disable LTO for the nVHE directory (David Brazdil <dbrazdil@...gle.com>)
Re: [PATCH v7 15/17] KVM: arm64: disable LTO for the nVHE directory (Sami Tolvanen <samitolvanen@...gle.com>)
Re: [PATCH v24 07/12] landlock: Support filesystem access-control (Jann Horn <jannh@...gle.com>)
Re: [PATCH v24 07/12] landlock: Support filesystem access-control (Mickaël Salaün <mic@...ikod.net>)
Re: [PATCH v24 07/12] landlock: Support filesystem access-control (Jann Horn <jannh@...gle.com>)

November 24 (1 message)

Re: [PATCH v24 12/12] landlock: Add user and kernel documentation (James Morris <jmorris@...ei.org>)

November 27 (7 messages)

[PATCH v2 0/6] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 1/6] aarch64: Fix missing BTI protection from dependencies [BZ #26926] (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 2/6] elf: lose is closely tied to _dl_map_object_from_fd (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 3/6] elf: Fix failure handling in _dl_map_object_from_fd (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 4/6] elf: Move note processing after l_phdr is updated (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 5/6] elf: Pass the fd to note processing (Szabolcs Nagy <szabolcs.nagy@....com>)
[PATCH v2 6/6] aarch64: Use mmap to add PROT_BTI instead of mprotect [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)

November 30 (6 messages)

Re: [PATCH v7 14/17] arm64: vdso: disable LTO (Will Deacon <will@...nel.org>)
Re: [PATCH v7 16/17] arm64: disable recordmcount with DYNAMIC_FTRACE_WITH_REGS (Will Deacon <will@...nel.org>)
Re: [PATCH v7 17/17] arm64: allow LTO_CLANG and THINLTO to be selected (Will Deacon <will@...nel.org>)
Re: [PATCH v7 00/17] Add support for Clang LTO (Will Deacon <will@...nel.org>)
Re: [PATCH v2 0/6] aarch64: avoid mprotect(PROT_BTI|PROT_EXEC) [BZ #26831] (Szabolcs Nagy <szabolcs.nagy@....com>)
Re: [PATCH v7 14/17] arm64: vdso: disable LTO (Sami Tolvanen <samitolvanen@...gle.com>)

161 messages

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.