messages from 2024-03-12 12:10:14 to 2024-03-28 20:17:31 UTC [more...]
[PATCH v16 00/20] Integrity Policy Enforcement LSM (IPE)
2024-03-28 20:17 UTC (13+ messages)
` [PATCH v16 01/20] security: add ipe lsm
` [PATCH v16 02/20] ipe: add policy parser
` [PATCH v16 03/20] ipe: add evaluation loop
` [PATCH v16 04/20] ipe: add LSM hooks on execution and kernel read
` [PATCH v16 05/20] initramfs|security: Add a security hook to do_populate_rootfs()
` [PATCH v16 06/20] ipe: introduce 'boot_verified' as a trust provider
` [PATCH v16 07/20] security: add new securityfs delete function
` [PATCH v16 08/20] ipe: add userspace interface
` [PATCH v16 09/20] uapi|audit|ipe: add ipe auditing support
` [PATCH v16 10/20] ipe: add permissive toggle
` [PATCH v16 11/20] block|security: add LSM blob to block_device
` [PATCH v16 12/20] dm: add finalize hook to target_type
[RFC PATCH v15 00/21] Integrity Policy Enforcement LSM (IPE)
2024-03-21 17:25 UTC (41+ messages)
` [RFC PATCH v15 01/21] security: add ipe lsm
` [RFC PATCH v15 02/21] ipe: add policy parser
` [RFC PATCH v15 03/21] ipe: add evaluation loop
` [RFC PATCH v15 04/21] ipe: add LSM hooks on execution and kernel read
` [RFC PATCH v15 05/21] initramfs|security: Add a security hook to do_populate_rootfs()
` [RFC PATCH v15 06/21] ipe: introduce 'boot_verified' as a trust provider
` [RFC PATCH v15 07/21] security: add new securityfs delete function
` [RFC PATCH v15 08/21] ipe: add userspace interface
` [RFC PATCH v15 09/21] uapi|audit|ipe: add ipe auditing support
` [RFC PATCH v15 10/21] ipe: add permissive toggle
` [RFC PATCH v15 11/21] block|security: add LSM blob to block_device
` [RFC PATCH v15 12/21] security: add security_bdev_setintegrity() hook
` [PATCH RFC "
` [RFC PATCH v15 13/21] dm: add finalize hook to target_type
` [RFC PATCH v15 14/21] dm verity: consume root hash digest and signature data via LSM hook
` [PATCH RFC "
` [RFC PATCH v15 15/21] ipe: add support for dm-verity as a trust provider
` [RFC PATCH v15 16/21] security: add security_inode_setintegrity() hook
` [PATCH RFC "
` [RFC PATCH v15 17/21] fsverity: consume builtin signature via LSM hook
` [RFC PATCH v15 18/21] ipe: enable support for fs-verity as a trust provider
` [RFC PATCH v15 19/21] scripts: add boot policy generation program
` [RFC PATCH v15 20/21] ipe: kunit test for parser
` [RFC PATCH v15 21/21] documentation: add ipe documentation
Debian #1066832: [fsverity-utils] hard Build-Depends on unportable package pandoc
2024-03-20 22:37 UTC
[PATCHSET v5.2] fs-verity support for XFS
2024-03-20 16:22 UTC (37+ messages)
` [PATCH 01/29] fsverity: remove hash page spin lock
` [PATCH 02/29] xfs: add parent pointer support to attribute code
` [PATCH 03/29] xfs: define parent pointer ondisk extended attribute format
` [PATCH 04/29] xfs: add parent pointer validator functions
` [PATCH 05/29] fs: add FS_XFLAG_VERITY for verity files
` [PATCH 06/29] fsverity: pass tree_blocksize to end_enable_verity()
` [PATCH 07/29] fsverity: support block-based Merkle tree caching
` [PATCH 08/29] fsverity: add per-sb workqueue for post read processing
` [PATCH 09/29] fsverity: add tracepoints
` [PATCH 10/29] fsverity: fix "support block-based Merkle tree caching"
` [PATCH 11/29] fsverity: send the level of the merkle tree block to ->read_merkle_tree_block
` [PATCH 12/29] fsverity: pass the new tree size and block size to ->begin_enable_verity
` [PATCH 13/29] iomap: integrate fs-verity verification into iomap's read path
` [PATCH 14/29] xfs: add attribute type for fs-verity
` [PATCH 15/29] xfs: add fs-verity ro-compat flag
` [PATCH 16/29] xfs: add inode on-disk VERITY flag
` [PATCH 17/29] xfs: initialize fs-verity on file open and cleanup on inode destruction
` [PATCH 18/29] xfs: don't allow to enable DAX on fs-verity sealed inode
` [PATCH 19/29] xfs: disable direct read path for fs-verity files
` [PATCH 20/29] xfs: widen flags argument to the xfs_iflags_* helpers
` [PATCH 21/29] xfs: add fs-verity support
` [PATCH 22/29] xfs: create a per-mount shrinker for verity inodes merkle tree blocks
` [PATCH 23/29] xfs: create an icache tag for files with cached "
` [PATCH 24/29] xfs: shrink verity blob cache
` [PATCH 25/29] xfs: clean up stale fsverity metadata before starting
` [PATCH 26/29] xfs: better reporting and error handling in xfs_drop_merkle_tree
` [PATCH 27/29] xfs: make scrub aware of verity dinode flag
` [PATCH 28/29] xfs: add fs-verity ioctls
` [PATCH 29/29] xfs: enable ro-compat fs-verity flag
[PATCHBOMB v5.3] fs-verity support for XFS
2024-03-20 15:11 UTC (92+ messages)
` [PATCHSET "
` [PATCH 01/40] fsverity: remove hash page spin lock
` [PATCH 02/40] xfs: add parent pointer support to attribute code
` [PATCH 03/40] xfs: define parent pointer ondisk extended attribute format
` [PATCH 04/40] xfs: add parent pointer validator functions
` [PATCH 05/40] fs: add FS_XFLAG_VERITY for verity files
` [PATCH 06/40] fsverity: pass tree_blocksize to end_enable_verity()
` [PATCH 07/40] fsverity: support block-based Merkle tree caching
` [PATCH 08/40] fsverity: add per-sb workqueue for post read processing
` [PATCH 09/40] fsverity: add tracepoints
` [PATCH 10/40] fsverity: fix "support block-based Merkle tree caching"
` [PATCH 11/40] fsverity: send the level of the merkle tree block to ->read_merkle_tree_block
` [PATCH 12/40] fsverity: pass the new tree size and block size to ->begin_enable_verity
` [PATCH 13/40] fsverity: expose merkle tree geometry to callers
` [PATCH 14/40] fsverity: rely on cached block callers to retain verified state
` [PATCH 15/40] fsverity: box up the write_merkle_tree_block parameters too
` [PATCH 16/40] fsverity: pass the zero-hash value to the implementation
` [PATCH 17/40] fsverity: report validation errors back to the filesystem
` [PATCH 18/40] iomap: integrate fs-verity verification into iomap's read path
` [PATCH 19/40] xfs: add attribute type for fs-verity
` [PATCH 20/40] xfs: add fs-verity ro-compat flag
` [PATCH 21/40] xfs: add inode on-disk VERITY flag
` [PATCH 22/40] xfs: initialize fs-verity on file open and cleanup on inode destruction
` [PATCH 23/40] xfs: don't allow to enable DAX on fs-verity sealed inode
` [PATCH 24/40] xfs: disable direct read path for fs-verity files
` [PATCH 25/40] xfs: widen flags argument to the xfs_iflags_* helpers
` [PATCH 26/40] xfs: add fs-verity support
` [PATCH 27/40] xfs: create a per-mount shrinker for verity inodes merkle tree blocks
` [PATCH 28/40] xfs: create an icache tag for files with cached "
` [PATCH 29/40] xfs: shrink verity blob cache
` [PATCH 30/40] xfs: clean up stale fsverity metadata before starting
` [PATCH 31/40] xfs: better reporting and error handling in xfs_drop_merkle_tree
` [PATCH 32/40] xfs: make scrub aware of verity dinode flag
` [PATCH 33/40] xfs: add fs-verity ioctls
` [PATCH 34/40] xfs: advertise fs-verity being available on filesystem
` [PATCH 35/40] xfs: teach online repair to evaluate fsverity xattrs
` [PATCH 36/40] xfs: don't store trailing zeroes of merkle tree blocks
` [PATCH 37/40] xfs: create separate name hash function for xattrs
` [PATCH 38/40] xfs: use merkle tree offset as attr hash
` [PATCH 39/40] xfs: don't bother storing merkle tree blocks for zeroed data blocks
` [PATCH 40/40] xfs: enable ro-compat fs-verity flag
` [PATCH 01/20] xfsprogs: add parent pointer support to attribute code
` [PATCH 02/20] xfsprogs: define parent pointer xattr format
` [PATCH 03/20] xfsprogs: Add xfs_verify_pptr
` [PATCH 04/20] fs: add FS_XFLAG_VERITY for verity files
` [PATCH 05/20] xfs: add attribute type for fs-verity
` [PATCH 06/20] xfs: add fs-verity ro-compat flag
` [PATCH 07/20] xfs: add inode on-disk VERITY flag
` [PATCH 08/20] xfs: add fs-verity support
` [PATCH 09/20] xfs: advertise fs-verity being available on filesystem
` [PATCH 10/20] xfs: create separate name hash function for xattrs
` [PATCH 11/20] xfs: use merkle tree offset as attr hash
` [PATCH 12/20] xfs: enable ro-compat fs-verity flag
` [PATCH 13/20] libfrog: add fsverity to xfs_report_geom output
` [PATCH 14/20] xfs_db: introduce attr_modify command
` [PATCH 15/20] xfs_db: make attr_set/remove/modify be able to handle fs-verity attrs
` [PATCH 16/20] man: document attr_modify command
` [PATCH 17/20] xfs_db: dump verity features and metadata
` [PATCH 18/20] xfs_db: dump merkle tree data
` [PATCH 19/20] xfs_repair: junk fsverity xattrs when unnecessary
` [PATCH 20/20] mkfs.xfs: add verity parameter
` [PATCHSET v5.3] fstests: fs-verity support for XFS
` [PATCH 1/3] common/verity: enable fsverity "
` [PATCH 2/3] xfs/{021,122}: adapt to fsverity xattrs
` [PATCH 3/3] common/populate: add verity files to populate xfs images
[fsverity-utils PATCH] Eliminate dependency on pandoc
2024-03-20 1:19 UTC
[PATCH v5 00/24] fs-verity support for XFS
2024-03-13 21:03 UTC (38+ messages)
` [PATCH v5 06/24] fsverity: pass tree_blocksize to end_enable_verity()
` [PATCH v5 11/24] xfs: add XBF_VERITY_SEEN xfs_buf flag
` [PATCH v5 20/24] xfs: disable direct read path for fs-verity files
` [PATCH v5 22/24] xfs: make scrub aware of verity dinode flag
` [PATCH v5 23/24] xfs: add fs-verity ioctls
[GIT PULL] fsverity updates for 6.9
2024-03-12 22:24 UTC (2+ messages)
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).