Selinux Reference Policy

• Date Index

• [PATCH 3/9] xserver: ICEauthority can be in /run/user, (continued)
  • [PATCH 3/9] xserver: ICEauthority can be in /run/user, Jason Zaman
    • Re: [PATCH 3/9] xserver: ICEauthority can be in /run/user, Chris PeBenito
  • [PATCH 4/9] devicekit: udisks needs access to /run/mount/utab.lock, Jason Zaman
    • Re: [PATCH 4/9] devicekit: udisks needs access to /run/mount/utab.lock, Chris PeBenito
  • [PATCH 5/9] dirmngr: accept unix stream socket, Jason Zaman
    • Re: [PATCH 5/9] dirmngr: accept unix stream socket, Chris PeBenito
  • [PATCH 6/9] fstools: add zfs-auto-snapshot, Jason Zaman
    • Re: [PATCH 6/9] fstools: add zfs-auto-snapshot, Chris PeBenito
  • [PATCH 7/9] chromium: allow dbus chat to inhibit power, Jason Zaman
    • Re: [PATCH 7/9] chromium: allow dbus chat to inhibit power, Chris PeBenito
  • [PATCH 8/9] virt: Add unix socket for virtlogd/virtlockd, Jason Zaman
    • Re: [PATCH 8/9] virt: Add unix socket for virtlogd/virtlockd, Chris PeBenito
  • [PATCH 9/9] virt: allow lvm_control access, Jason Zaman
    • Re: [PATCH 9/9] virt: allow lvm_control access, Chris PeBenito
  • Re: [PATCH 1/9] systemd: Add elogind support, Chris PeBenito
    • Re: [PATCH 1/9] systemd: Add elogind support, Jason Zaman
      • Re: [PATCH 1/9] systemd: Add elogind support, Dominick Grift
• [PATCH 1/2] Add interface to read efivarfs_t directory, Sugar, David
  • [PATCH 2/2] Fix indent to match the rest of the file (space -> tab), Sugar, David
    • Re: [PATCH 2/2] Fix indent to match the rest of the file (space -> tab), Chris PeBenito
  • Re: [PATCH 1/2] Add interface to read efivarfs_t directory, Chris PeBenito
• Add support for apt-cacher-ng, Laurent Bigonville
  • [RFC 1/3] Add an interface to allow the specified domain to mmap the general network configuration files, Laurent Bigonville
  • [RFC 3/3] Add policy for acngtool, Laurent Bigonville
  • [RFC 2/3] Add policy for apt-cacher-ng, Laurent Bigonville
• [PATCH 0/2] Fixes to enable slapd to run, Lawrence, Stephen
  • [PATCH 1/2] ldap: various permissions required by slapd, Lawrence, Stephen
  • [PATCH 2/2] miscfiles: reading certs allows map permission also, Lawrence, Stephen
    • Re: [PATCH 2/2] miscfiles: reading certs allows map permission also, Chris PeBenito
• [PATCH] Allow syslog to write to the runtime socket, Sugar, David
  • [PATCH] Allow systemd to getattr configfile, Sugar, David
    • Re: [PATCH] Allow systemd to getattr configfile, Dominick Grift
      • Re: [PATCH] Allow systemd to getattr configfile, Sugar, David
        • Re: [PATCH] Allow systemd to getattr configfile, Dominick Grift
        • Re: [PATCH] Allow systemd to getattr configfile, Dominick Grift
          • Re: [PATCH] Allow systemd to getattr configfile, Dominick Grift
            • Re: [PATCH] Allow systemd to getattr configfile, Sugar, David
              • Re: [PATCH] Allow systemd to getattr configfile, Chris PeBenito
• [PATCH] resolve syslog imuxsock denial, Sugar, David
  • Re: [PATCH] resolve syslog imuxsock denial, Chris PeBenito
• Intent to add support for cryfs, Nicolas Iooss
  • Re: Intent to add support for cryfs, Dominick Grift
• [PATCH] Add missing gen_require for init_t in init_script_domain, Sugar, David
• [PATCH 01/10] Allow the systemd dbus-daemon to talk to systemd, Laurent Bigonville
  • [PATCH 07/10] Allow alsa_t to set scheduling priority and send signal to itself, Laurent Bigonville
  • [PATCH 03/10] Allow colord_t to exec colord_exec_t type, Laurent Bigonville
  • [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Laurent Bigonville
    • Re: [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Dominick Grift
      • Re: [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Dominick Grift
        • Re: [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Chris PeBenito
          • Re: [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Dominick Grift
            • Re: [PATCH 05/10] Allow colord_t to read the color profile stored in ~/.local/share/icc/, Laurent Bigonville
  • [PATCH 04/10] Allow realmd_t to read localization files, Laurent Bigonville
  • [PATCH 09/10] Allow systemd_locale_t to talk to systemd notify socket, Laurent Bigonville
  • [PATCH 08/10] Allow colord_t to read snmpd_var_lib_t files, Laurent Bigonville
  • [PATCH 02/10] Allow geoclue to log in syslog, Laurent Bigonville
  • [PATCH 10/10] Allow vpnc to create and write its pid file in /run/NetworkManager, Laurent Bigonville
  • [PATCH 06/10] Allow alsa_t to create alsa_runtime_t file as well, Laurent Bigonville
    • Re: [PATCH 06/10] Allow alsa_t to create alsa_runtime_t file as well, Chris PeBenito
      • Re: [PATCH 06/10] Allow alsa_t to create alsa_runtime_t file as well, Laurent Bigonville
• systemd --user for GDM started as unconfined_t instead of xdm_t, Laurent Bigonville
  • Re: systemd --user for GDM started as unconfined_t instead of xdm_t, Dominick Grift
    • Re: systemd --user for GDM started as unconfined_t instead of xdm_t, Dominick Grift
      • Re: systemd --user for GDM started as unconfined_t instead of xdm_t, Dominick Grift
• [RFC] Rename *_var_run_t to *_runtime_t, Chris PeBenito
  • Re: [RFC] Rename *_var_run_t to *_runtime_t, Nicolas Iooss
    • Re: [RFC] Rename *_var_run_t to *_runtime_t, Chris PeBenito
• [PATCH 1/2] Allow udevadm to read files in /run/udev/data, Laurent Bigonville
  • [PATCH 2/2] Allow udevadm_t to use dac_read_search capability, Laurent Bigonville
• Re: Permissions in the udevadm_t domain, Nicolas Iooss
  • Re: Permissions in the udevadm_t domain, Laurent Bigonville
• Processes to target, Dominick Grift
• [PATCH] domain: unconfined access to bpf, Dominick Grift
  • Re: [PATCH] domain: unconfined access to bpf, Chris PeBenito
• [PATCH] Remove shell automatic domain transitions to unconfined_t from various pam login programs, Dominick Grift
  • Re: [PATCH] Remove shell automatic domain transitions to unconfined_t from various pam login programs, Dominick Grift
  • Re: [PATCH] Remove shell automatic domain transitions to unconfined_t from various pam login programs, Chris PeBenito
• [RFC] ssh: remove unconfined_shell_domtrans(sshd_t), Dominick Grift
  • Re: [RFC] ssh: remove unconfined_shell_domtrans(sshd_t), Chris PeBenito
    • Re: [RFC] ssh: remove unconfined_shell_domtrans(sshd_t), Nicolas Iooss
      • Re: [RFC] ssh: remove unconfined_shell_domtrans(sshd_t), Dominick Grift
• Why is /usr/include matched with /usr/inclu.e?, Nicolas Iooss
  • Re: Why is /usr/include matched with /usr/inclu.e?, Dominick Grift
    • Re: Why is /usr/include matched with /usr/inclu.e?, Nicolas Iooss
      • Re: Why is /usr/include matched with /usr/inclu.e?, Chris PeBenito
• Adding a typo-checker for the .fc files of refpolicy, Nicolas Iooss
  • Re: Adding a typo-checker for the .fc files of refpolicy, Chris PeBenito
    • Re: Adding a typo-checker for the .fc files of refpolicy, Nicolas Iooss
• [PATCH v2] Module for tpm2, Sugar, David
  • Re: [PATCH v2] Module for tpm2, Chris PeBenito
• [PATCH] Module for tpm2-abrmd, Sugar, David
  • Re: [PATCH] Module for tpm2-abrmd, Chris PeBenito
    • Re: [PATCH] Module for tpm2-abrmd, Sugar, David
      • Re: [PATCH] Module for tpm2-abrmd, Chris PeBenito
• systemd reboot, Russell Coker
  • Re: systemd reboot, Dominick Grift
  • Re: systemd reboot, Dominick Grift
    • Re: systemd reboot, Russell Coker
• [PATCH 1/1 v2] grant rpm_t permission to map security_t, Sugar, David
  • Re: [PATCH 1/1 v2] grant rpm_t permission to map security_t, Chris PeBenito
• [PATCH 2/5 - v2] grant permission for rpm to write to audit log, Sugar, David
  • Re: [PATCH 2/5 - v2] grant permission for rpm to write to audit log, Chris PeBenito
• [PATCH 1/1] grant permission to map security_t, Sugar, David
  • Re: [PATCH 1/1] grant permission to map security_t, Chris PeBenito
• [PATCH 0/5] Updates for RPM module, Sugar, David
  • [PATCH 1/5] grant rpm permission to map rpm_var_lib_t, Sugar, David
    • Re: [PATCH 1/5] grant rpm permission to map rpm_var_lib_t, Chris PeBenito
  • [PATCH 2/5] grant permission for rpm to write to audit log, Sugar, David
    • Re: [PATCH 2/5] grant permission for rpm to write to audit log, Dominick Grift
      • Re: [PATCH 2/5] grant permission for rpm to write to audit log, Sugar, David
  • [PATCH 3/5] grant rpm permissions to map locale_t, Sugar, David
    • Re: [PATCH 3/5] grant rpm permissions to map locale_t, Chris PeBenito
  • [PATCH 4/5] Allow rpm to map file contexts, Sugar, David
    • Re: [PATCH 4/5] Allow rpm to map file contexts, Chris PeBenito
  • [PATCH 5/5] Allow rpm scripts to alter systemd services, Sugar, David
    • Re: [PATCH 5/5] Allow rpm scripts to alter systemd services, Chris PeBenito
• [PATCH] Add knot module, Alexander Miroshnichenko
  • Re: [PATCH] Add knot module, Dominick Grift
    • [PATCH v2] Add knot module, Alexander Miroshnichenko
      • Re: [PATCH v2] Add knot module, Chris PeBenito
        • [PATCH v3] Add knot module, Alexander Miroshnichenko
          • Re: [PATCH v3] Add knot module, Dominick Grift
            • [PATCH v4] Add knot module, Alexander Miroshnichenko
              • Re: [PATCH v4] Add knot module, Chris PeBenito
• [PATCH] Add support for openrc-init, Alexander Miroshnichenko
  • Re: [PATCH] Add support for openrc-init, Dominick Grift
    • Re: [PATCH] Add support for openrc-init, Alexander Miroshnichenko
• [PATCH v2 0/2] ssh policy new interfaces, Alexander Miroshnichenko
  • [PATCH v2 1/2] ssh: Add ssh_exec_keygen interface, Alexander Miroshnichenko
    • Re: [PATCH v2 1/2] ssh: Add ssh_exec_keygen interface, Dominick Grift
  • [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Alexander Miroshnichenko
    • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Dominick Grift
      • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Alexander Miroshnichenko
        • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Dominick Grift
          • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Alexander Miroshnichenko
            • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Dominick Grift
          • Re: [PATCH v2 2/2] ssh: Add interface ssh_search_dir, Dominick Grift
• [PATCH] Add interface ssh_search_dir, Alexander Miroshnichenko
  • Re: [PATCH] Add interface ssh_search_dir, Alexander Miroshnichenko
• ANN: SETools 4.2.2, Chris PeBenito
• fs_use_xattr question, Dan Noland
  • Re: fs_use_xattr question, Dominick Grift
• [PATCH] add lldpd policy, Alexander Miroshnichenko
  • Re: [PATCH] add lldpd policy, Chris PeBenito
    • Re: [PATCH] add lldpd policy, Dominick Grift
      • Re: [PATCH] add lldpd policy, Chris PeBenito
        • Re: [PATCH] add lldpd policy, Dominick Grift
    • [PATCH v2] Add lldpd policy, Alexander Miroshnichenko
      • Re: [PATCH v2] Add lldpd policy, Chris PeBenito
    • Re: [PATCH] add lldpd policy, Alexander Miroshnichenko
• ANN: Reference Policy 2.20190609, Chris PeBenito
• [PATCH] Add nginx policy taken from Gentoo hardened-refpolicy, Alexander Miroshnichenko
  • Re: [PATCH] Add nginx policy taken from Gentoo hardened-refpolicy, Dominick Grift
  • Re: [PATCH] Add nginx policy taken from Gentoo hardened-refpolicy, Chris PeBenito
• [PATCH] Introduce allow_bluetooth boolean, Lukas Vrabec
  • Re: [PATCH] Introduce allow_bluetooth boolean, Dominick Grift
    • Re: [PATCH] Introduce allow_bluetooth boolean, Dominick Grift
  • <Possible follow-ups>
  • [PATCH] Introduce allow_bluetooth boolean, Lukas Vrabec
    • Re: [PATCH] Introduce allow_bluetooth boolean, Chris PeBenito
      • Re: [PATCH] Introduce allow_bluetooth boolean, Lukas Vrabec
        • Re: [PATCH] Introduce allow_bluetooth boolean, Chris PeBenito
• New boolean for using bluetooth, Lukas Vrabec
  • Re: New boolean for using bluetooth, Russell Coker
  • Re: New boolean for using bluetooth, Jason Zaman
    • Re: New boolean for using bluetooth, Lukas Vrabec
• [PATCH v3] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
  • Re: [PATCH v3] Add kernel_dgram_send() into logging_send_syslog_msg(), Chris PeBenito
• [PATCH v2] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
  • Re: [PATCH v2] Add kernel_dgram_send() into logging_send_syslog_msg(), Russell Coker
  • Re: [PATCH v2] Add kernel_dgram_send() into logging_send_syslog_msg(), Chris PeBenito
    • Re: [PATCH v2] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
• [PATCH 0/3] Resolve issues with plymouth in enforcing, Sugar, David
  • [PATCH 1/3] Allow xdm (lightdm) execute plymouth, Sugar, David
    • Re: [PATCH 1/3] Allow xdm (lightdm) execute plymouth, Sugar, David
    • Re: [PATCH 1/3] Allow xdm (lightdm) execute plymouth, Chris PeBenito
  • [PATCH 2/3] Changes to support plymouth working in enforcing, Sugar, David
    • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Russell Coker
      • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Sugar, David
        • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Russell Coker
          • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Dominick Grift
            • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Sugar, David
    • Re: [PATCH 2/3] Changes to support plymouth working in enforcing, Chris PeBenito
  • [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Sugar, David
    • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Russell Coker
      • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Sugar, David
        • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Russell Coker
          • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Dominick Grift
            • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Sugar, David
      • Re: [PATCH 3/3] Some items that seem they can be dontaudited for plymouthd, Chris PeBenito
• [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
  • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Russell Coker
    • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
      • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Russell Coker
        • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
        • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Chris PeBenito
          • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Russell Coker
            • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Sugar, David
              • Re: [PATCH] Add kernel_dgram_send() into logging_send_syslog_msg(), Russell Coker
• Re: Testing changes to "refpolicy", Chris PeBenito
  • Re: Testing changes to "refpolicy", Jag Raman
    • Re: Testing changes to "refpolicy", Russell Coker
• [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Lukas Vrabec
  • Re: [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Chris PeBenito
    • Re: [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Lukas Vrabec
  • <Possible follow-ups>
  • [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Lukas Vrabec
    • Re: [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Lukas Vrabec
    • Re: [PATCH] Label /sys/kernel/ns_last_pid as sysctl_kernel_ns_last_pid_t, Chris PeBenito
• [PATCH] Add interface xdm_run_domain, Sugar, David
  • [PATCH] Resolve some denials related to sending journal messages, Sugar, David
    • Re: [PATCH] Resolve some denials related to sending journal messages, Chris PeBenito
      • Re: [PATCH] Resolve some denials related to sending journal messages, Sugar, David
        • Re: [PATCH] Resolve some denials related to sending journal messages, Dominick Grift
          • Re: [PATCH] Resolve some denials related to sending journal messages, Sugar, David
  • Re: [PATCH] Add interface xdm_run_domain, Chris PeBenito
• [PATCH] Denial of cryptsetup reading cracklib database, Sugar, David
  • Re: [PATCH] Denial of cryptsetup reading cracklib database, Chris PeBenito
• [PATCH 4/4-v2] Allow ntpd to read unit files, Sugar, David
  • Re: [PATCH 4/4-v2] Allow ntpd to read unit files, Chris PeBenito
• [PATCH 1/1] Resolve denial about logging to journal from chkpwd, Sugar, David
  • [PATCH 1/1] Resolve denial about logging to journal from dbus, Sugar, David
    • Re: [PATCH 1/1] Resolve denial about logging to journal from dbus, Chris PeBenito
  • Re: [PATCH 1/1] Resolve denial about logging to journal from chkpwd, Chris PeBenito
• [PATCH 0/4] Resolve issues using /usr/bin/timedatectl, Sugar, David
  • [PATCH 1/4] Add interface ntp_dbus_chat, Sugar, David
    • Re: [PATCH 1/4] Add interface ntp_dbus_chat, Chris PeBenito
  • [PATCH 2/4] Allow ntpd to update chronyd service, Sugar, David
    • Re: [PATCH 2/4] Allow ntpd to update chronyd service, Chris PeBenito
  • [PATCH 3/4] Allow ntpd to update timezone symlink, Sugar, David
    • Re: [PATCH 3/4] Allow ntpd to update timezone symlink, Chris PeBenito
  • [PATCH 4/4] Allow ntpd to read unit files, Sugar, David
    • Re: [PATCH 4/4] Allow ntpd to read unit files, Chris PeBenito
• [PATCH v3] Separate out udevadm into a new domain, Sugar, David
  • [PATCH v2] Setup attribute for fixed_disk_device and removable_device, Sugar, David
    • Re: [PATCH v2] Setup attribute for fixed_disk_device and removable_device, Chris PeBenito
      • Re: [PATCH v2] Setup attribute for fixed_disk_device and removable_device, Sugar, David
        • Re: [PATCH v2] Setup attribute for fixed_disk_device and removable_device, Chris PeBenito
  • Re: [PATCH v3] Separate out udevadm into a new domain, Chris PeBenito
    • [PATCH v4] Separate out udevadm into a new domain, Sugar, David
      • Re: [PATCH v4] Separate out udevadm into a new domain, Chris PeBenito
• [PATCH] Resolve denial while changing password, Sugar, David
  • Re: [PATCH] Resolve denial while changing password, Chris PeBenito
• what's up with mac_admin, Russell Coker
  • Re: what's up with mac_admin, Dominick Grift
    • Re: what's up with mac_admin, Chris PeBenito
• [PATCH v2] Allow additional map permission when reading hwdb, Sugar, David
  • Re: [PATCH v2] Allow additional map permission when reading hwdb, Chris PeBenito
• expiry time of aliases, Russell Coker
  • Re: expiry time of aliases, Chris PeBenito
• /run types, Russell Coker
  • Re: /run types, Chris PeBenito
• [PATCH v2] Add interface udev_run, Sugar, David
  • [PATCH] Allow map permission when reading hwdb, Sugar, David
    • Re: [PATCH] Allow map permission when reading hwdb, Chris PeBenito
  • Re: [PATCH v2] Add interface udev_run, Chris PeBenito
    • Re: [PATCH v2] Add interface udev_run, Sugar, David
      • Re: [PATCH v2] Add interface udev_run, Chris PeBenito
• [PATCH] Update cron use to pam interface, Sugar, David
  • Re: [PATCH] Update cron use to pam interface, Chris PeBenito
• [PATCH] Setup attribute for fixed_disk_device and removable_device, Sugar, David
  • Re: [PATCH] Setup attribute for fixed_disk_device and removable_device, Dominick Grift
• [PATCH] Add interface to allow relabeling of iso 9660 filesystems., Sugar, David
  • Re: [PATCH] Add interface to allow relabeling of iso 9660 filesystems., Dominick Grift
    • Re: [PATCH] Add interface to allow relabeling of iso 9660 filesystems., Sugar, David
  • Re: [PATCH] Add interface to allow relabeling of iso 9660 filesystems., Chris PeBenito
• [PATCH] Add interface udev_run, Sugar, David
  • Re: [PATCH] Add interface udev_run, Dominick Grift
• strange daemon startup issue, Russell Coker
  • Re: strange daemon startup issue, Dominick Grift
  • Re: strange daemon startup issue, Dominick Grift
• [PATCH] Fix incorrect type in clamav_enableddisable_clamd interface, Sugar, David
  • [PATCH] Allow freshclam to read sysctl_crypto_t, Sugar, David
    • Re: [PATCH] Allow freshclam to read sysctl_crypto_t, Chris PeBenito
  • [PATCH] Allow AIDE to sendto kernel datagram socket, Sugar, David
    • Re: [PATCH] Allow AIDE to sendto kernel datagram socket, Dominick Grift
      • Re: [PATCH] Allow AIDE to sendto kernel datagram socket, Sugar, David
        • Re: [PATCH] Allow AIDE to sendto kernel datagram socket, Dominick Grift
    • Re: [PATCH] Allow AIDE to sendto kernel datagram socket, Chris PeBenito
  • [PATCH] Allow AIDE to read kernel sysctl_crypto_t, Sugar, David
    • Re: [PATCH] Allow AIDE to read kernel sysctl_crypto_t, Chris PeBenito
  • [PATCH] Allow AIDE to mmap files, Sugar, David
    • Re: [PATCH] Allow AIDE to mmap files, Chris PeBenito
  • [PATCH] Add interfaces to run freshclam, Sugar, David
    • Re: [PATCH] Add interfaces to run freshclam, Chris PeBenito
  • Re: [PATCH] Fix incorrect type in clamav_enableddisable_clamd interface, Chris PeBenito
• strange execmem, Russell Coker
  • Re: strange execmem, Dominick Grift
  • Re: strange execmem, Russell Coker
• [PATCH v2] Add interface to get status of rsyslog service, Sugar, David
  • [PATCH v2] New interface to dontaudit access to cert_t, Sugar, David
    • Re: [PATCH v2] New interface to dontaudit access to cert_t, Chris PeBenito
  • Re: [PATCH v2] Add interface to get status of rsyslog service, Chris PeBenito
• [PATCH] Add interface to get status of rsyslog service, Sugar, David
  • [PATCH] Add interface to run cdrecord in caller domain, Sugar, David
    • Re: [PATCH] Add interface to run cdrecord in caller domain, Chris PeBenito
  • Re: [PATCH] Add interface to get status of rsyslog service, Chris PeBenito
• [PATCH] Allow init_t to read net_conf_t, Sugar, David
  • [PATCH] Allow systemd-hostnamed to set the hostname, Sugar, David
    • Re: [PATCH] Allow systemd-hostnamed to set the hostname, Chris PeBenito
  • Re: [PATCH] Allow init_t to read net_conf_t, Chris PeBenito
• IB pkey policy problem found via the selinux-testsuite, Paul Moore
  • Re: IB pkey policy problem found via the selinux-testsuite, Paul Moore
    • Re: IB pkey policy problem found via the selinux-testsuite, Paul Moore
      • Re: IB pkey policy problem found via the selinux-testsuite, Daniel Jurgens
        • Re: IB pkey policy problem found via the selinux-testsuite, Stephen Smalley
          • Re: IB pkey policy problem found via the selinux-testsuite, Paul Moore
            • Re: IB pkey policy problem found via the selinux-testsuite, Stephen Smalley
• [PATCH] New interface to dontaudit access to cert_t, Sugar, David
  • Re: [PATCH] New interface to dontaudit access to cert_t, Chris PeBenito
    • Re: [PATCH] New interface to dontaudit access to cert_t, Sugar, David
      • Re: [PATCH] New interface to dontaudit access to cert_t, Chris PeBenito
        • Re: [PATCH] New interface to dontaudit access to cert_t, Sugar, David
          • Re: [PATCH] New interface to dontaudit access to cert_t, Chris PeBenito
• read_file_perms vs mmap_read_file_perms, Russell Coker
  • Re: read_file_perms vs mmap_read_file_perms, Chris PeBenito
    • Re: read_file_perms vs mmap_read_file_perms, Russell Coker
• [PATCH] Allow systemd-networkd to get IP address from dhcp server, Sugar, David
  • [PATCH] Separate domain for systemd-modules-load, Sugar, David
    • Re: [PATCH] Separate domain for systemd-modules-load, Chris PeBenito
  • Re: [PATCH] Allow systemd-networkd to get IP address from dhcp server, Chris PeBenito
• ANN: SETools 4.2.1, Chris PeBenito
• netlink perms, Russell Coker
• ANN: Reference Policy release, Chris PeBenito
• [PATCH] more misc stuff, Russell Coker
• strange system_dbusd_t stuff, Russell Coker
  • Re: strange system_dbusd_t stuff, Chris PeBenito
• strange systemd audit message, Russell Coker
  • Re: strange systemd audit message, Chris PeBenito
    • Re: strange systemd audit message, Dominick Grift
• [PATCH] minor updates redis module to be able to start the app, Alexander Miroshnichenko
  • Re: [PATCH] minor updates redis module to be able to start the app, Chris PeBenito
• [PATCH] yet another little patch, Russell Coker
  • Re: [PATCH] yet another little patch, Chris PeBenito
    • Re: [PATCH] yet another little patch, Russell Coker
• [PATCH] chromium, Russell Coker
  • Re: [PATCH] chromium, Chris PeBenito
    • Re: [PATCH] chromium, Russell Coker
• Last call before next release, Chris PeBenito
• [PATCH] Add hostapd service module, Alexander Miroshnichenko
  • <Possible follow-ups>
  • [PATCH] Add hostapd service module, Alexander Miroshnichenko
    • Re: [PATCH] Add hostapd service module, Chris PeBenito
• __pycache__, Russell Coker
  • Re: __pycache__, Chris PeBenito
• [PATCH] tiny stuff for today, Russell Coker
  • Re: [PATCH] tiny stuff for today, Dominick Grift
    • Re: [PATCH] tiny stuff for today, Russell Coker
  • Re: [PATCH] tiny stuff for today, Chris PeBenito
• [PATCH] yet more tiny stuff, Russell Coker
  • Re: [PATCH] yet more tiny stuff, Chris PeBenito
• nnp_transition, Russell Coker
  • Re: nnp_transition, Dominick Grift
    • Re: nnp_transition, Russell Coker
      • Re: nnp_transition, Dominick Grift
• [PATCH] map systemd private dirs, Russell Coker
  • Re: [PATCH] map systemd private dirs, Dominick Grift
  • Re: [PATCH] map systemd private dirs, Chris PeBenito
• [PATCH] Add interface clamav_run, Sugar, David
  • [PATCH] Add interface to read journal files, Sugar, David
    • Re: [PATCH] Add interface to read journal files, Chris PeBenito
  • Re: [PATCH] Add interface clamav_run, Chris PeBenito
• [PATCH] more tiny stuff, Russell Coker
  • Re: [PATCH] more tiny stuff, Dominick Grift
  • Re: [PATCH] more tiny stuff, Chris PeBenito
• What is this GetDynamicUsers about?, Russell Coker
  • Re: What is this GetDynamicUsers about?, Dominick Grift
    • Re: What is this GetDynamicUsers about?, Russell Coker
      • Re: What is this GetDynamicUsers about?, Dominick Grift
        • Re: What is this GetDynamicUsers about?, Chris PeBenito
    • Re: What is this GetDynamicUsers about?, Russell Coker
      • Re: What is this GetDynamicUsers about?, Dominick Grift
• [PATCH] Interface to read and write the mount_runtime_t directory., Sugar, David
  • [PATCH 1/2] Interface with systemd_hostnamed over dbus to set hostname, Sugar, David
    • Re: [PATCH 1/2] Interface with systemd_hostnamed over dbus to set hostname, Chris PeBenito
  • [PATCH] label journald configuraiton files syslog_conf_t, Sugar, David
    • Re: [PATCH] label journald configuraiton files syslog_conf_t, Chris PeBenito
  • [PATCH 2/2 v2] Modify type for /etc/hostname, Sugar, David
    • Re: [PATCH 2/2 v2] Modify type for /etc/hostname, Chris PeBenito
  • Re: [PATCH] Interface to read and write the mount_runtime_t directory., Chris PeBenito
    • Re: [PATCH] Interface to read and write the mount_runtime_t directory., Sugar, David
• [PATCH] trivial system cronjob, Russell Coker
  • Re: [PATCH] trivial system cronjob, Chris PeBenito
• [PATCH] another trivial, Russell Coker
  • Re: [PATCH] another trivial, Chris PeBenito
• [PATCH 1/5] devices: introduce dev_dontaudit_read_sysfs, Jason Zaman
  • [PATCH 2/5] files: introduce files_dontaudit_read_etc_files, Jason Zaman
  • [PATCH 3/5] kernel: introduce kernel_dontaudit_read_kernel_sysctl, Jason Zaman
  • [PATCH 4/5] userdomain: introduce userdom_user_home_dir_filetrans_user_cert, Jason Zaman
  • [PATCH 5/5] Add chromium policy upstreamed from Gentoo, Jason Zaman
    • Re: [PATCH 5/5] Add chromium policy upstreamed from Gentoo, Russell Coker
    • Re: [PATCH 5/5] Add chromium policy upstreamed from Gentoo, Chris PeBenito
• [PATCH] s/mozilla/webbrowser/g, Russell Coker
  • Re: [PATCH] s/mozilla/webbrowser/g, Jason Zaman
    • Re: [PATCH] s/mozilla/webbrowser/g, Chris PeBenito
      • Re: [PATCH] s/mozilla/webbrowser/g, Nicolas Iooss
      • Re: [PATCH] s/mozilla/webbrowser/g, Russell Coker
• [PATCH] Add interface to create unit files with specified type via filetrans., Sugar, David
  • [PATCH] Alternate ClamAV temp directory, Sugar, David
    • Re: [PATCH] Alternate ClamAV temp directory, Chris PeBenito
      • Re: [PATCH] Alternate ClamAV temp directory, Sugar, David
  • [PATCH 1/2] Interface with systemd_hostnamed over dbus to set hostname, Sugar, David
  • [PATCH] Add interface to start/stop iptables service, Sugar, David
    • Re: [PATCH] Add interface to start/stop iptables service, Chris PeBenito
  • [PATCH 2/2] Setup private type for /etc/hostname., Sugar, David
    • Re: [PATCH 2/2] Setup private type for /etc/hostname., Russell Coker
      • Re: [PATCH 2/2] Setup private type for /etc/hostname., Sugar, David
  • Re: [PATCH] Add interface to create unit files with specified type via filetrans., Chris PeBenito
    • Re: [PATCH] Add interface to create unit files with specified type via filetrans., Sugar, David
• [PATCH] some little stuff, Russell Coker
  • Re: [PATCH] some little stuff, Chris PeBenito
    • Re: [PATCH] some little stuff, Russell Coker
      • Re: [PATCH] some little stuff, Dominick Grift
      • Re: [PATCH] some little stuff, Chris PeBenito
• connected_stream_socket_perms, Russell Coker
  • Re: connected_stream_socket_perms, Chris PeBenito
    • Re: connected_stream_socket_perms, Russell Coker
• fd use, Russell Coker
• [PATCH] /run/systemd/units/ links, Russell Coker
  • Re: [PATCH] /run/systemd/units/ links, Chris PeBenito
    • Re: [PATCH] /run/systemd/units/ links, Nicolas Iooss
      • Re: [PATCH] /run/systemd/units/ links, Russell Coker
        • Re: [PATCH] /run/systemd/units/ links, Chris PeBenito
• [PATCH] logging, Russell Coker
  • Re: [PATCH] logging, Chris PeBenito
• [PATCH] mls stuff, Russell Coker
  • Re: [PATCH] mls stuff, Chris PeBenito
• [PATCH] gpg, Russell Coker
  • Re: [PATCH] gpg, Chris PeBenito
  • Re: [PATCH] gpg, Jason Zaman
• [PATCH] chrome/chromium, Russell Coker
  • Re: [PATCH] chrome/chromium, Chris PeBenito
    • Re: [PATCH] chrome/chromium, Jason Zaman
      • Re: [PATCH] chrome/chromium, Russell Coker
    • Re: [PATCH] chrome/chromium, Russell Coker
      • Re: [PATCH] chrome/chromium, Chris PeBenito
• [PATCH] Add interface to get status of iptables service, Sugar, David
  • Re: [PATCH] Add interface to get status of iptables service, Chris PeBenito
• [PATCH cron 2/2] user_crontab_t etc, Russell Coker
  • Re: [PATCH cron 2/2] user_crontab_t etc, Chris PeBenito
    • Re: [PATCH cron 2/2] user_crontab_t etc, Russell Coker
      • Re: [PATCH cron 2/2] user_crontab_t etc, Chris PeBenito
• [PATCH cron 1/2] stem, Russell Coker
• [PATCH 1/2 v3] Allow greeter to start dbus, Sugar, David
  • [PATCH 2/2 v3] pam_faillock creates files in /run/faillock, Sugar, David
    • Re: [PATCH 2/2 v3] pam_faillock creates files in /run/faillock, Chris PeBenito
  • Re: [PATCH 1/2 v3] Allow greeter to start dbus, Chris PeBenito
• [PATCH 1/2 v2] Allow greeter to start dbus, Sugar, David
  • [PATCH 2/2 v2] pam_faillock creates files in /run/faillock, Sugar, David
    • Re: [PATCH 2/2 v2] pam_faillock creates files in /run/faillock, Dominick Grift
  • Re: [PATCH 1/2 v2] Allow greeter to start dbus, Dominick Grift
    • Re: [PATCH 1/2 v2] Allow greeter to start dbus, Sugar, David
      • Re: [PATCH 1/2 v2] Allow greeter to start dbus, Dominick Grift
• [PATCH] cron trivial, Russell Coker
• [PATCH] missing from previous, Russell Coker
  • Re: [PATCH] missing from previous, Chris PeBenito
• nss-systemd D-Bus call caused by getpwent, Nicolas Iooss
  • Re: nss-systemd D-Bus call caused by getpwent, Dominick Grift
    • Re: nss-systemd D-Bus call caused by getpwent, Chris PeBenito
      • Re: nss-systemd D-Bus call caused by getpwent, Dominick Grift
        • Re: nss-systemd D-Bus call caused by getpwent, Nicolas Iooss
• net_admin, Russell Coker
  • Re: net_admin, Chris PeBenito
• [PATCH] systemd misc, Russell Coker
  • Re: [PATCH] systemd misc, Chris PeBenito
    • Re: [PATCH] systemd misc, Russell Coker
      • Re: [PATCH] systemd misc, Chris PeBenito
• [PATCH] systemd related interfaces, Russell Coker
  • Re: [PATCH] systemd related interfaces, Chris PeBenito
    • Re: [PATCH] systemd related interfaces, Nicolas Iooss
      • Re: [PATCH] systemd related interfaces, Dominick Grift
        • Re: [PATCH] systemd related interfaces, Chris PeBenito
          • Re: [PATCH] systemd related interfaces, Nicolas Iooss
            • Re: [PATCH] systemd related interfaces, Chris PeBenito
              • Re: [PATCH] systemd related interfaces, Nicolas Iooss
• [PATCH] last misc stuff, Russell Coker
  • Re: [PATCH] last misc stuff, Chris PeBenito
    • Re: [PATCH] last misc stuff, Russell Coker
      • Re: [PATCH] last misc stuff, Dominick Grift
        • Re: [PATCH] last misc stuff, Chris PeBenito
• [PATCH] misc services patches, Russell Coker
  • Re: [PATCH] misc services patches, Chris PeBenito
  • <Possible follow-ups>
  • [PATCH] misc services patches, Russell Coker
    • Re: [PATCH] misc services patches, Dominick Grift
      • Re: [PATCH] misc services patches, Russell Coker
        • Re: [PATCH] misc services patches, Dominick Grift
          • Re: [PATCH] misc services patches, Dominick Grift
          • Re: [PATCH] misc services patches, Russell Coker
            • Re: [PATCH] misc services patches, Dominick Grift
  • [PATCH] misc services patches, Russell Coker
    • Re: [PATCH] misc services patches, Dominick Grift
• [PATCH] misc interfaces, Russell Coker
  • Re: [PATCH] misc interfaces, Chris PeBenito
    • Re: [PATCH] misc interfaces, Russell Coker
• [PATCH misc 3/3] networkmanager apt bootloader dpkg raid modutils tor devicekit dicts irqbalance policykit and postfix, Russell Coker
  • Re: [PATCH misc 3/3] networkmanager apt bootloader dpkg raid modutils tor devicekit dicts irqbalance policykit and postfix, Chris PeBenito
    • Re: [PATCH misc 3/3] networkmanager apt bootloader dpkg raid modutils tor devicekit dicts irqbalance policykit and postfix, Russell Coker
      • Re: [PATCH misc 3/3] networkmanager apt bootloader dpkg raid modutils tor devicekit dicts irqbalance policykit and postfix, Nicolas Iooss
• [PATCH misc 2/3] selinuxutil sysnetwork consolekit apt dpkg udev iptables logrotate, and gpm, Russell Coker
  • Re: [PATCH misc 2/3] selinuxutil sysnetwork consolekit apt dpkg udev iptables logrotate, and gpm, Chris PeBenito
    • Re: [PATCH misc 2/3] selinuxutil sysnetwork consolekit apt dpkg udev iptables logrotate, and gpm, Jason Zaman
      • Re: [PATCH misc 2/3] selinuxutil sysnetwork consolekit apt dpkg udev iptables logrotate, and gpm, Russell Coker
• [PATCH misc 1/3] backup boinc fetchmail, gdomap jabber mon syncthing ssh and login, Russell Coker
  • Re: [PATCH misc 1/3] backup boinc fetchmail, gdomap jabber mon syncthing ssh and login, Chris PeBenito
    • Re: [PATCH misc 1/3] backup boinc fetchmail, gdomap jabber mon syncthing ssh and login, Russell Coker
      • Re: [PATCH misc 1/3] backup boinc fetchmail, gdomap jabber mon syncthing ssh and login, Chris PeBenito
• new release?, Russell Coker
  • Re: new release?, Chris PeBenito
    • Re: new release?, Russell Coker
• [PATCH] Add sigrok contrib module, Guido Trentalancia
  • Re: [PATCH] Add sigrok contrib module, Chris PeBenito
    • Re: [PATCH] Add sigrok contrib module, Guido Trentalancia
      • [PATCH v2] Add sigrok contrib module, Guido Trentalancia
        • Re: [PATCH v2] Add sigrok contrib module, Chris PeBenito
          • [PATCH v3] Add sigrok contrib module, Guido Trentalancia
            • Re: [PATCH v3] Add sigrok contrib module, Chris PeBenito
          • Re: [PATCH v2] Add sigrok contrib module, Guido Trentalancia
• [PATCH 1/2] Allow greeter to start dbus and transition, David Sugar
  • [PATCH 2/2] pam_faillock creates files in /run/faillock, David Sugar
    • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Dominick Grift
      • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Sugar, David
        • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Chris PeBenito
        • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Dominick Grift
          • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Dominick Grift
            • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Dominick Grift
              • Re: [PATCH 2/2] pam_faillock creates files in /run/faillock, Dominick Grift
  • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Chris PeBenito
    • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Dominick Grift
      • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Dominick Grift
        • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Dominick Grift
          • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Dominick Grift
            • Re: [PATCH 1/2] Allow greeter to start dbus and transition, Dominick Grift
• [PATCH 0/3] Grant permissions to read fips_enabled, David Sugar
  • [PATCH 1/3] Allow X (xserver_t) to read /proc/sys/crypto/fips_enabled, David Sugar
    • Re: [PATCH 1/3] Allow X (xserver_t) to read /proc/sys/crypto/fips_enabled, Chris PeBenito
  • [PATCH 2/3] Allow kmod to read /proc/sys/crypto/fips_enabled, David Sugar
    • Re: [PATCH 2/3] Allow kmod to read /proc/sys/crypto/fips_enabled, Chris PeBenito
  • [PATCH 3/3] Allow dbus to access /proc/sys/crypto/fips_enabled, David Sugar
    • Re: [PATCH 3/3] Allow dbus to access /proc/sys/crypto/fips_enabled, Chris PeBenito
• [PATCH] Allow auditctl_t to read bin_t symlinks., David Sugar
  • Re: [PATCH] Allow auditctl_t to read bin_t symlinks., Chris PeBenito
• [PATCH] Add missing require for 'daemon' attribute., David Sugar
  • Re: [PATCH] Add missing require for 'daemon' attribute., Chris PeBenito
• [PATCH 1/3] build: add config for libc gnu and musl, Jason Zaman
  • [PATCH 2/3] libraries: ldconfig is a shell script on Gentoo musl libc, Jason Zaman
  • [PATCH 3/3] sysnetwork: musl needs bind generic node for DNS, Jason Zaman
  • Re: [PATCH 1/3] build: add config for libc gnu and musl, Chris PeBenito
• [PATCH] Move 'locallogin_*' interface uses into 'optioal_policy', David Sugar
  • Re: [PATCH] Move 'locallogin_*' interface uses into 'optioal_policy', Chris PeBenito
• [PATCH 1/2] Add interfaces to control ntpd_unit_t systemd services, David Sugar
  • [PATCH 2/2] interface to enable/disable systemd_networkd service, David Sugar
    • Re: [PATCH 2/2] interface to enable/disable systemd_networkd service, Chris PeBenito
  • Re: [PATCH 1/2] Add interfaces to control ntpd_unit_t systemd services, Chris PeBenito
• [PATCH] Interface to read cron_system_spool_t, David Sugar
  • Re: [PATCH] Interface to read cron_system_spool_t, Chris PeBenito
• [PATCH v3 1/2] dnsmasq: Require log files to have .log suffix, Petr Vorel
  • [PATCH v3 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Petr Vorel
    • Re: [PATCH v3 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Chris PeBenito
      • Re: [PATCH v3 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Petr Vorel
  • Re: [PATCH v3 1/2] dnsmasq: Require log files to have .log suffix, Chris PeBenito
• [PATCH v2 1/2] dnsmasq: Require log files to have .log suffix, Petr Vorel
  • [PATCH v2 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Petr Vorel
• ANN: SETools 4.2.0, Chris PeBenito
• init_daemon_domain vs init_spec_daemon_domain, Luis Ressel
  • Re: init_daemon_domain vs init_spec_daemon_domain, Chris PeBenito
• [PATCH 1/2] dnsmasq: Require log files to have .log suffix, Petr Vorel
  • [PATCH 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Petr Vorel
    • Re: [PATCH 2/2] dnsmasq: Add support for lxc-net, lxd-bridge, NetworkManager, Chris PeBenito
  • Re: [PATCH 1/2] dnsmasq: Require log files to have .log suffix, Chris PeBenito
    • Re: [PATCH 1/2] dnsmasq: Require log files to have .log suffix, Petr Vorel
• [PATCH] Allow clamd to use sent file descriptor, David Sugar
  • Re: [PATCH] Allow clamd to use sent file descriptor, Chris PeBenito
• [PATCH 3/3] Add interfaces to control clamav_unit_t systemd services, David Sugar
  • Re: [PATCH 3/3] Add interfaces to control clamav_unit_t systemd services, Chris PeBenito
• [PATCH 2/3] Interface to add domain allowed to be read by ClamAV for scanning., David Sugar
  • Re: [PATCH 2/3] Interface to add domain allowed to be read by ClamAV for scanning., Chris PeBenito
• [PATCH 1/3] Allow clamd_t to read /proc/sys/crypt/fips_enabled, David Sugar
  • Re: [PATCH 1/3] Allow clamd_t to read /proc/sys/crypt/fips_enabled, Chris PeBenito
• [PATCH 1/1 v2] Add interface udev_run_domain, David Sugar
  • Re: [PATCH 1/1 v2] Add interface udev_run_domain, Chris PeBenito