| [v7,6/6] samples: add an example of seccomp user trap |
|
|
|
2018-09-27 |
Tycho Andersen |
|
New |
| [RFC,v2,v2,1/1] ns: add binfmt_misc to the mount namespace |
|
|
|
2018-10-02 |
Laurent Vivier |
|
New |
| [RFC,v3,1/1] ns: add binfmt_misc to the user namespace |
|
|
|
2018-10-03 |
Laurent Vivier |
|
New |
| [2/3] namei: implement AT_THIS_ROOT chroot-like path resolution |
|
|
|
2018-10-04 |
Aleksa Sarai |
|
New |
| [2/3] namei: implement AT_THIS_ROOT chroot-like path resolution |
|
|
|
2018-10-05 |
Aleksa Sarai |
|
New |
| [RFC,v4,1/1] ns: add binfmt_misc to the user namespace |
|
|
|
2018-10-06 |
Laurent Vivier |
|
New |
| [v2,1/3] namei: implement O_BENEATH-style AT_* flags |
|
|
|
2018-10-09 |
Aleksa Sarai |
|
New |
| [v3,1/3] namei: implement O_BENEATH-style AT_* flags |
|
|
|
2018-10-09 |
Aleksa Sarai |
|
New |
| [v3,2/3] namei: implement AT_THIS_ROOT chroot-like path resolution |
|
|
|
2018-10-09 |
Aleksa Sarai |
|
New |
| [v3,3/3] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2018-10-09 |
Aleksa Sarai |
|
New |
| [RFC,v5,1/1] ns: add binfmt_misc to the user namespace |
|
|
|
2018-10-09 |
Laurent Vivier |
|
New |
| [v6,1/1] ns: add binfmt_misc to the user namespace |
1 |
|
|
2018-10-10 |
Laurent Vivier |
|
New |
| [v8,1/2] seccomp: add a return code to trap to userspace |
|
|
|
2018-10-29 |
Tycho Andersen |
|
New |
| [v8,2/2] samples: add an example of seccomp user trap |
|
|
|
2018-10-29 |
Tycho Andersen |
|
New |
| [v8,1/2] seccomp: add a return code to trap to userspace |
|
|
|
2018-10-30 |
Tycho Andersen |
|
New |
| [ghak90,(was,ghak32),V4,09/10] audit: NETFILTER_PKT: record each container ID associated with a n... |
|
|
|
2018-10-31 |
Richard Guy Briggs |
|
New |
| [RFC,1/6] shiftfs: uid/gid shifting bind mount |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [RFC,2/6] shiftfs: map inodes to lower fs inodes instead of dentries |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [RFC,3/6] shiftfs: copy inode attrs up from underlying fs |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [RFC,4/6] shiftfs: translate uids using s_user_ns from lower fs |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [RFC,5/6] shiftfs: add support for posix acls |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [RFC,6/6] shiftfs: support nested shiftfs mounts |
|
|
|
2018-11-01 |
Seth Forshee |
|
New |
| [v4,1/4] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2018-11-12 |
Aleksa Sarai |
|
New |
| [v4,2/4] namei: O_BENEATH-style path resolution flags |
|
|
|
2018-11-12 |
Aleksa Sarai |
|
New |
| [v4,3/4] namei: O_THISROOT: chroot-like path resolution |
|
|
|
2018-11-12 |
Aleksa Sarai |
|
New |
| [v4,4/4] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2018-11-12 |
Aleksa Sarai |
|
New |
| NAK: KEYS: keyctl_chown_key: validate current key uid/gid and capabilities wrt namespace |
|
|
|
2018-12-02 |
Dimitri John Ledkov |
|
New |
| [v9,1/4] seccomp: hoist struct seccomp_data recalculation higher |
1 |
|
|
2018-12-03 |
Tycho Andersen |
|
New |
| [v9,2/4] seccomp: switch system call argument type to void * |
1 |
|
|
2018-12-03 |
Tycho Andersen |
|
New |
| [v9,3/4] seccomp: add a return code to trap to userspace |
1 |
|
|
2018-12-03 |
Tycho Andersen |
|
New |
| [v9,4/4] samples: add an example of seccomp user trap |
|
|
|
2018-12-03 |
Tycho Andersen |
|
New |
| [v10,1/4] seccomp: hoist struct seccomp_data recalculation higher |
1 |
|
|
2018-12-09 |
Tycho Andersen |
|
New |
| [v10,2/4] seccomp: switch system call argument type to void * |
1 |
|
|
2018-12-09 |
Tycho Andersen |
|
New |
| [v10,3/4] seccomp: add a return code to trap to userspace |
1 |
|
|
2018-12-09 |
Tycho Andersen |
|
New |
| [v10,4/4] samples: add an example of seccomp user trap |
|
|
|
2018-12-09 |
Tycho Andersen |
|
New |
| [v5,1/5] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2019-02-13 |
Aleksa Sarai |
|
New |
| [v5,2/5] namei: O_BENEATH-style path resolution flags |
|
|
|
2019-02-13 |
Aleksa Sarai |
|
New |
| [v5,3/5] namei: O_THISROOT: chroot-like path resolution |
|
|
|
2019-02-13 |
Aleksa Sarai |
|
New |
| [v5,4/5] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2019-02-13 |
Aleksa Sarai |
|
New |
| [v5,5/5] binfmt_*: scope path resolution of interpreters |
|
|
|
2019-02-13 |
Aleksa Sarai |
|
New |
| [RESEND,v5,1/5] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2019-03-06 |
Aleksa Sarai |
|
New |
| [RESEND,v5,2/5] namei: O_BENEATH-style path resolution flags |
|
|
|
2019-03-06 |
Aleksa Sarai |
|
New |
| [RESEND,v5,3/5] namei: O_THISROOT: chroot-like path resolution |
|
|
|
2019-03-06 |
Aleksa Sarai |
|
New |
| [RESEND,v5,4/5] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2019-03-06 |
Aleksa Sarai |
|
New |
| [RESEND,v5,5/5] binfmt_*: scope path resolution of interpreters |
|
|
|
2019-03-06 |
Aleksa Sarai |
|
New |
| [ghak90,V5,01/10] audit: collect audit task parameters |
1 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,02/10] audit: add container id |
3 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,03/10] audit: read container ID of a process |
2 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,04/10] audit: log container info of syscalls |
3 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,05/10] audit: add containerid support for ptrace and signals |
1 |
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,06/10] audit: add support for non-syscall auxiliary records |
2 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,07/10] audit: add containerid support for user records |
1 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,08/10] audit: add containerid filtering |
2 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,09/10] audit: add support for containerid to network namespaces |
1 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghak90,V5,10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS |
1 |
1 |
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,1/6] AUDIT_CONTAINER_OP message type basic support |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,2/6] AUDIT_CONTAINER_ID message type basic support |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,3/6] auditctl: add support for AUDIT_CONTID filter |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,4/6] add ausearch containerid support |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,5/6] start normalization containerid support |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v5,6/6] libaudit: add support to get the task audit container identifier |
|
|
|
2019-03-15 |
Richard Guy Briggs |
|
New |
| [RESEND,v5,1/5] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2019-03-20 |
Aleksa Sarai |
|
New |
| [RESEND,v5,2/5] namei: O_BENEATH-style path resolution flags |
|
|
|
2019-03-20 |
Aleksa Sarai |
|
New |
| [RESEND,v5,3/5] namei: O_THISROOT: chroot-like path resolution |
|
|
|
2019-03-20 |
Aleksa Sarai |
|
New |
| [RESEND,v5,4/5] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2019-03-20 |
Aleksa Sarai |
|
New |
| [RESEND,v5,5/5] binfmt_*: scope path resolution of interpreters |
|
|
|
2019-03-20 |
Aleksa Sarai |
|
New |
| [RFC] x86/asm: Introduce static_retcall(s) |
|
|
|
2019-03-27 |
Andrei Vagin |
|
New |
| [RFC] vdso: introduce timens_static_branch |
|
|
|
2019-03-27 |
Andrei Vagin |
|
New |
| [ghak90,V5,09/10] audit: add support for containerid to network namespaces |
|
|
|
2019-04-04 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,01/10] audit: collect audit task parameters |
1 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,02/10] audit: add container id |
3 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,03/10] audit: read container ID of a process |
2 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,04/10] audit: log container info of syscalls |
3 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,05/10] audit: add contid support for signalling the audit daemon |
1 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,06/10] audit: add support for non-syscall auxiliary records |
2 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,07/10] audit: add containerid support for user records |
1 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,08/10] audit: add containerid filtering |
2 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,09/10] audit: add support for containerid to network namespaces |
1 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghak90,V6,10/10] audit: NETFILTER_PKT: record each container ID associated with a netNS |
1 |
1 |
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,1/7] AUDIT_CONTAINER_OP message type basic support |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,2/7] AUDIT_CONTAINER_ID message type basic support |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,3/7] auditctl: add support for AUDIT_CONTID filter |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,4/7] add ausearch containerid support |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,5/7] start normalization containerid support |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,6/7] libaudit: add support to get the task audit container identifier |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [ghau51/ghau40,v6,7/7] add support for audit_signal_info2 |
|
|
|
2019-04-09 |
Richard Guy Briggs |
|
New |
| [PATCHv3,14/27] x86/vdso: Add offsets page in vvar |
|
|
|
2019-04-25 |
Jann Horn via Containers |
|
New |
| [v6,1/6] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v6,2/6] namei: O_BENEATH-style path resolution flags |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v6,3/6] namei: LOOKUP_IN_ROOT: chroot-like path resolution |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v6,4/6] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v6,5/6] binfmt_*: scope path resolution of interpreters |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v6,6/6] namei: resolveat(2) syscall |
|
|
|
2019-05-06 |
Aleksa Sarai |
|
New |
| [v7,1/5] namei: split out nd->dfd handling to dirfd_path_init |
|
|
|
2019-05-07 |
Aleksa Sarai |
|
New |
| [v7,2/5] namei: O_BENEATH-style path resolution flags |
|
|
|
2019-05-07 |
Aleksa Sarai |
|
New |
| [v7,3/5] namei: LOOKUP_IN_ROOT: chroot-like path resolution |
|
|
|
2019-05-07 |
Aleksa Sarai |
|
New |
| [v7,4/5] namei: aggressively check for nd->root escape on ".." resolution |
|
|
|
2019-05-07 |
Aleksa Sarai |
|
New |
| [v7,5/5] namei: resolveat(2) syscall |
|
|
|
2019-05-07 |
Aleksa Sarai |
|
New |
| [RFC,v8,01/10] namei: obey trailing magic-link DAC permissions |
|
|
|
2019-05-20 |
Aleksa Sarai |
|
New |
| [RFC,v8,02/10] procfs: switch magic-link modes to be more sane |
|
|
|
2019-05-20 |
Aleksa Sarai |
|
New |