Fil-C is a memory-safe implementation of C and C++ that aims to let C code — complete with po [...]| LWN.net
Fil-C is a memory-safe implementation of C and C++ that aims to let C code — complete with po [...]| LWN.net
From: Mickaël Salaün To: linux-kernel@vger.kernel.org Subject: [RFC v3 22/22] samples/landlo [...]| LWN.net
Copyright © 2016, Eklektix, Inc.| LWN.net
From: Andy Lutomirski To: Mickaël Salaün Subject: Re: [RFC v3 18/22] cgroup,landlock: Add C [...]| LWN.net
=?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= <mic-AT-digikod.net>, Alexei Starovoitov <ast-AT-kernel.org>, Andy Lutomirski <luto-AT-amacapital.net>, Arnd Bergmann <arnd-AT-arndb.de>, Casey Schaufler <casey-AT-schaufler-ca.com>, Daniel Borkmann <daniel-AT-iogearbox.net>, Daniel Mack <daniel-AT-zonque.org>, David Drysdale <drysdale-AT-google.com>, "David S . Miller" <davem-AT-davemloft.net>, Elena Reshetova <elena.reshetova-AT-intel.com>,...| LWN.net
I've begun building out the skeleton of a Linux Security Module, and I'd like to| LWN.net
Control groups (cgroups) perform two basic functions in the kernel: they allow the hierarchical [...]| LWN.net
One of the many approaches to improving system security consists of reducing the attack surface [...]| LWN.net
The Free Software Foundation's Licensing and Compliance Lab concerns itself with many aspects o [...]| LWN.net
Version 0.14 of the Typst document processor has been released. If you need to comply with accessibility-related regulations, Typst 0.14 has your back. Typst now generates accessible documents by default, with opt-in support for stricter checks. For those working with complex illustrations, PDFs are now supported as a native image format. In case you're typesetting a book, the new character-level justification will give your layout the final touch. And if you're building a website or blog, ma...| LWN.net
Security updates have been issued by AlmaLinux (webkit2gtk3), Debian (bind9, chromium, python-internetarchive, and tryton-sao), Fedora (dokuwiki and php-php81_bc-strftime), Mageia (firefox, nss & rootcerts and thunderbird), Slackware (openssl), SUSE (bleachbit, chromium, kernel, mozilla-nss, and python311-uv), and Ubuntu (fetchmail, golang-go.crypto, and linux-oracle-5.4).| LWN.net
Open-source foundations and projects that have charity status in the US may want to see if GoFundMe has created a profile for them without permission. The company has operated since 2010 as a self-service fundraising platform; individuals or groups could create pages to raise money for all manner of causes. In June, the company announced that it would expand its offerings to "manage all aspects of charitable giving" for users through its platform. That seems to include creating profiles for n...| LWN.net
Greg Kroah-Hartman has released the 6.17.5, 6.12.55, and 6.6.114 stable kernels. As usual, each contains important fixes throughout the tree; users are advised to upgrade.| LWN.net
The Spectre class of hardware vulnerabilities truly is a gift that keeps on giving. New variants are still being discovered in current CPUs nearly eight years after the disclosure of this problem, and developers are still working to minimize the performance costs that come from defending against it. The masked user-space access mechanism is a case in point: it reduces the cost of defending against some speculative attacks, but it brought some challenges of its own that are only now being addr...| LWN.net
The AlmaLinux project has announced that the upcoming 10.1 release will include support for Btrfs: Btrfs support encompasses both kernel and userspace enablement, and it is now possible to install AlmaLinux OS with a Btrfs filesystem from the very beginning. Initial enablement was scoped to the installer and storage management stack, and broader support within the AlmaLinux software collection for Btrfs features is forthcoming. Btrfs support in AlmaLinux OS did not happen in isolation. This w...| LWN.net
Security updates have been issued by AlmaLinux (ipa, kernel, and thunderbird), Debian (gdk-pixbuf, gegl, gimp, intel-microcode, raptor2, request-tracker4, and request-tracker5), Fedora (samba and wireshark), Mageia (haproxy, nginx, openssl, and python-django), Oracle (kernel and thunderbird), Red Hat (redis and redis:7), Slackware (bind), SUSE (aws-cli, local-npm-registry, python-boto3, python- botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python- pytest-cov, python-p...| LWN.net
Inside this week's LWN.net Weekly Edition: Front: Git 3.0 topics; Lazy imports for Python; RubyGems; LLMs for patch review; DebugFS. Briefs: Fedora AI policy; OpenBSD 7.8; DigiKam 8.8.0; Forgejo 13.0; KDE Plasma 6.5; RubyGems; Valkey 9.0.0; Quotes; ... Announcements: Newsletters, conferences, security updates, patches, and more.| LWN.net
The Fedora Council has approved an AI-assisted contributions policy. This follows several weeks of discussion, some of which was covered by LWN on October 1. The final policy contains substantial differences from the initial proposal, and now requires disclosure of AI tools "when the significant part of the contribution is taken from a tool without changes".| LWN.net
KDE Plasma 6.5 has been released. Notable new features include automatic light-to-dark theme switching based on time of day, support for the experimental Wayland picture-in-picture protocol, as well as a number of usability and accessibility improvements. See the complete changelog for a list of the new features, enhancements, and bug fixes.| LWN.net
DebugFS is the kernel's anything-goes, no-rules interface: whenever a kernel developer needs quick access to internal details of the kernel to debug a problem, or to implement an experimental control interface, they can expose them via DebugFS. This is possible because DebugFS is not subject to the normal rules for user-space-interface stability, nor to the rules about exposing sensitive kernel information. Supporting DebugFS in Rust drivers is an important step toward being able to debug rea...| LWN.net
OpenBSD 7.8 has been released. As usual, this release includes a long list of changes; see the changelog for all of the details.| LWN.net
Security updates have been issued by Fedora (inih, mingw-exiv2, and mod_http2), SUSE (ffmpeg-4, kernel, libqt5-qtbase, protobuf, python-ldap, and python313), and Ubuntu (erlang, ffmpeg, linux, linux-aws, linux-gcp, linux-oem-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime, linux-aws, linux-azure, linux-azure-6.14, linux-azure-nvidia-6.14, linux-azure-fips, linux-oracle-5.4, and linux-realtime-6.14).| LWN.net
Version 9.0.0 of the Valkey distributed key-value database has been released. Notable features [...]| LWN.net
The Ubuntu Project has announced that a bug in the Rust-based uutils version of the date comman [...]| LWN.net
Debian packagers have a great deal of latitude when it comes to the configuration of the softwa [...]| LWN.net
The Git source-code management system is a foundational tool upon which much of the free-softwa [...]| LWN.net
In September, a group of long-time maintainers of Ruby packaging tools projects had their GitHu [...]| LWN.net
Support for BPF in the kernel has been tied to the LLVM toolchain since the advent of extended [...]| LWN.net
The file_operations structure in the kernel is a set of function pointers implementing, as the [...]| LWN.net
Sudden increases in the size of Fedora's initramfs files have prompted the project to fast-trac [...]| LWN.net
Copyright © 2025, Eklektix, Inc.| lwn.net
The Fedora Council began a process to create a policy on AI-assisted contributions in 2024, st [...]| LWN.net
Support for BPF in the kernel has been tied to the LLVM toolchain since the advent of extended [...]| LWN.net
Email is often seen as a technology with a dim future; it is slow, easily faked, and buried in [...]| LWN.net
Blender 4.5 LTS was released on July 15, 2025, and will be supported through 2027. This is the [...]| LWN.net
In the first article in this series, we commenced our historical search for design patterns in [...]| LWN.net
The exploration of design patterns is importantly a historical search. It is possible to tell [...]| LWN.net
Legal concerns?| lwn.net
Legal concerns?| lwn.net
Legal concerns?| lwn.net
Legal concerns?| lwn.net
Legal concerns?| lwn.net
Legal concerns?| lwn.net
The Fedora project has posted a proposal for a policy regarding the use of AI tools when develo [...]| LWN.net
Safe, ergonomic interoperability between Rust and C/C++ was a popular topic at RustConf 2025 [...]| LWN.net
Typst is a program for document typesetting. It is especially well-suited to technical material [...]| LWN.net
The Capability Hardware Enhanced RISC Instructions (CHERI) project is a rethinking of computer [...]| LWN.net
The restartable sequences feature, which was added to the 4.18 kernel in 2018, exists to enable [...]| LWN.net
Since we last looked at the WordPress dispute, WP Engine has sought a preliminary injunction ag [...]| LWN.net
Brooke Deuson is the developer behind Trafficking Free Tomorrow, a nonprofit organization tha [...]| LWN.net
[$] A policy for Link tags| lwn.net
There are many challenges involved with running a web site like LWN. Some of them, such as fin [...]| LWN.net
Keynote sessions at Open Source Summit events tend not to allow much time for detailed talks, a [...]| LWN.net
At Akademy 2025, the KDE Project released an alpha version of KDE Linux, a distribution built b [...]| LWN.net
Arnd Bergmann started his Open Source Summit Europe 2025 talk with a clear statement of positio [...]| LWN.net
After more than two years of development, the Debian Project has released its new stable versio [...]| LWN.net
Statically typed programming languages can help catch mismatches between the kinds of values a [...]| LWN.net
Despite the fact that the Linux Kernel is mostly written in C, it makes broad use of some techn [...]| LWN.net
As has been widely reported elsewhere, an attempt was recently made to slip a back door into th [...]| LWN.net
There is an inherent limit to the privacy of the public cloud. While Linux can isolate virtual [...]| LWN.net
FFmpeg 8.0 released| lwn.net
By some appearances, at least, the kernel community has been relatively insulated from the onsl [...]| LWN.net
Linux offers two modes for file I/O: buffered and direct. Buffered I/O passes through the kern [...]| LWN.net
The Arch Linux project is especially well-known in the Linux community for two things: its roll [...]| LWN.net
StarDict is a GPLv3-licensed cross-platform dictionary application. It includes dictionaries f [...]| LWN.net
If a file system discussion goes on long enough, someone will bring up soft updates eventually [...]| LWN.net
Antonio Cuni, who is a longtime Python performance engineer and PyPy developer, gave a presenta [...]| LWN.net
The Linux kernel already provides several ways to get random numbers, each with its own set of [...]| LWN.net
The QUIC transport-layer network protocol is not exactly new; it was first covered here in 2013 [...]| LWN.net
Performance of Python programs has been a major focus of development for the language over the [...]| LWN.net
Anybody working to harden a computing system is likely to look at sandboxing fairly early in th [...]| LWN.net
The 6.8 merge window has gotten off to a relatively slow start; reasons for that include a sign [...]| LWN.net
Welcome| lwn.net
At the Linux Application Summit (LAS) in April, Sebastian Wick said that, by many metrics, Flat [...]| LWN.net
Operating system kernels, at their best, should not be noticed by user space at all; in particu [...]| LWN.net
LWN.net is dedicated to providing the best available coverage of the Linux| lwn.net
One of the first uses of the BPF virtual machine outside of networking was to implement access- [...]| LWN.net
An overview of fuzz testing and the go-fuzz tool, as well as a look at the recent draft design for including fuzz testing in the `go` tool (LWN.net).| Ben Hoyt's technical writing
A look at Sourcegraph, a code search and code intelligence tool (LWN.net).| Ben Hoyt's technical writing
Please consider subscribing to LWN| lwn.net
The focus of 2013's Google Test Automation Conference, held April 23 and 24 in New York City, was "Testing Media and Mobile". A major theme was WebDriver, which is an API for automating web browsers. Mozilla presented its work on WebDriver support in Gecko and extensions to WebDriver to allow automated testing of FirefoxOS beyond just the Gecko-powered content layer. Google talked about WebDriver support in Chrome/Chromium, including Chrome on Android. Others demonstrated FOSS software that r...| David Röthlisberger
Ninja is a build tool, similar in spirit to make, that was born from the Chrome browser project in 2011. It is unique among build systems in that it was explicitly designed to be used as an "assembly language" by higher-level build tools. Beyond that, Ninja is fast. It is used by several large open-source projects and it has changed the way I approach build systems.| David Röthlisberger
Ready to give LWN a try?| lwn.net
This index covers articles that appeared in LWN on various security-related topics. Articles from 2007 on are indexed here.| lwn.net
Last week's Kernel Page included a brief item about the hiding of kernel addresses from user sp [...]| LWN.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net
Thread information| lwn.net