SELinux - Date Index

• Thread Index

• Re: [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
  • From: Jarkko Sakkinen <jarkko.sakkinen@xxxxxx>
• [PATCH v4 11/11] drm: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 10/11] net: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 09/11] tracing: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 08/11] tsacct: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 07/11] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 05/11] mm/util: Fix possible race condition in kstrdup()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 04/11] bpftool: Ensure task comm is always NUL-terminated
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 03/11] security: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 02/11] auditsc: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 01/11] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v4 00/11] Improve the copy of task comm
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• ANN: SELinux userspace 3.7
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH v2] libselinux: deprecate security_disable(3)
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2] libselinux: deprecate security_disable(3)
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH] libsepol: check scope permissions refer to valid class
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: Do not reject all type rules in conditionals when validating
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3 11/11] drm: Replace strcpy() with __get_task_comm()
  • From: Daniel Vetter <daniel@xxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Simon Horman <horms@xxxxxxxxxx>
• Re: [PATCH v3 09/11] tracing: Replace strncpy() with __get_task_comm()
  • From: Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
• [PATCH v3 11/11] drm: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 10/11] net: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 09/11] tracing: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 08/11] tsacct: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 07/11] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 06/11] mm/util: Deduplicate code in {kstrdup,kstrndup,kmemdup_nul}
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 05/11] mm/util: Fix possible race condition in kstrdup()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 04/11] bpftool: Ensure task comm is always NUL-terminated
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 03/11] security: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 02/11] auditsc: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 01/11] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 00/11] Improve the copy of task comm
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v2 0/2] cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• ANN: SELinux userspace 3.7-rc3 release
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH] libsepol: check scope permissions refer to valid class
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: check scope permissions refer to valid class
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/2] libselinux: deprecate security_disable(3)
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: Do not reject all type rules in conditionals when validating
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH] libsepol: check scope permissions refer to valid class
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH 1/2] libselinux: deprecate security_disable(3)
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] libsepol: Do not reject all type rules in conditionals when validating
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] libsepol: check scope permissions refer to valid class
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] libsepol: Do not reject all type rules in conditionals when validating
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/2] libselinux: constify avc_open(3) parameter
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: contify function pointer arrays
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] tree-wide: fix misc typos
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: validate attribute-type maps
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] checkpolicy: reject duplicate nodecon statements
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/2] libsepol: move unchanged data out of loop
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: hashtab: save one comparison on hit
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] fixfiles: drop unnecessary \ line endings
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 06/10] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v2 06/10] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Catalin Marinas <catalin.marinas@xxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 05/10] mm/util: Fix possible race condition in kstrdup()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v2 05/10] mm/util: Fix possible race condition in kstrdup()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v2 05/10] mm/util: Fix possible race condition in kstrdup()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 05/10] mm/util: Fix possible race condition in kstrdup()
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/2] libsepol: rework permission enabled check
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 06/10] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: "Dr. Greg" <greg@xxxxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 06/10] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Catalin Marinas <catalin.marinas@xxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: John Johansen <john.johansen@xxxxxxxxxxxxx>
• [PATCH v2 10/10] drm: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 09/10] net: Replace strcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 08/10] tracing: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 07/10] tsacct: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 06/10] mm/kmemleak: Replace strncpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 05/10] mm/util: Fix possible race condition in kstrdup()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 04/10] bpftool: Ensure task comm is always NUL-terminated
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 03/10] security: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 02/10] auditsc: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 01/10] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v2 00/10] Improve the copy of task comm
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] libselinux: deprecate security_disable(3)
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/2] libselinux: constify avc_open(3) parameter
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: contify function pointer arrays
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] tree-wide: fix misc typos
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [f2fs-dev] [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: patchwork-bot+f2fs@xxxxxxxxxx
• Re: [PATCH] libsepol: validate attribute-type maps
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] checkpolicy: reject duplicate nodecon statements
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] libsepol: move unchanged data out of loop
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/2] libsepol: rework permission enabled check
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: hashtab: save one comparison on hit
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3 1/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: John Johansen <john.johansen@xxxxxxxxxxxxx>
• Re: [PATCH v2 0/4] Introduce user namespace capabilities
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY
  • From: John Johansen <john.johansen@xxxxxxxxxxxxx>
• Re: [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 0/4] Introduce user namespace capabilities
  • From: Josef Bacik <josef@xxxxxxxxxxxxxx>
• Re: [PATCH] fixfiles: drop unnecessary \ line endings
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• Re: [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• Re: [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2 4/4] bpf,lsm: Allow editing capabilities in BPF-LSM hooks
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• [PATCH v2 3/4] capabilities: Add sysctl to mask off userns caps
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• [PATCH v2 2/4] capabilities: Add securebit to restrict userns caps
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• [PATCH v2 1/4] capabilities: Add user namespace capabilities
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• [PATCH v2 0/4] Introduce user namespace capabilities
  • From: Jonathan Calmels <jcalmels@xxxxxxxx>
• [PATCH] libsepol: contify function pointer arrays
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] tree-wide: fix misc typos
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] checkpolicy: reject duplicate nodecon statements
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/2] libsepol: rework permission enabled check
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/2] libsepol: move unchanged data out of loop
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/2] libselinux: constify avc_open(3) parameter
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/2] libselinux: deprecate security_disable(3)
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] libsepol: hashtab: save one comparison on hit
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] libsepol: validate attribute-type maps
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] fixfiles: drop unnecessary \ line endings
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• ANN: SELinux userspace 3.7-rc2 release
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/4] sandbox: do not fail without xmodmap
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH 11/15] checkpolicy: fix use-after-free on invalid sens alias
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: John Johansen <john.johansen@xxxxxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Matus Jokay <matus.jokay@xxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Matus Jokay <matus.jokay@xxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH 4/6] security: Replace memcpy() with __get_task_comm()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH 3/6] auditsc: Replace memcpy() with __get_task_comm()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/4] sandbox: do not fail without xmodmap
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH v3 1/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH 5/6] bpftool: Make task comm always be NUL-terminated
  • From: Quentin Monnet <qmo@xxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Chris Hofstaedtler <zeha@xxxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Alexei Starovoitov <alexei.starovoitov@xxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• Re: [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>
• [PATCH 6/6] selftests/bpf: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 5/6] bpftool: Make task comm always be NUL-terminated
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 4/6] security: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 3/6] auditsc: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 2/6] tracing: Replace memcpy() with __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 1/6] fs/exec: Drop task_lock() inside __get_task_comm()
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH 0/6] kernel: Avoid memcpy of task comm
  • From: Yafang Shao <laoar.shao@xxxxxxxxx>
• [PATCH v3 2/2 testsuite] tests/nfs_filesystem: comment out failing mount
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH v3 1/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2 1/2] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH v2 1/2] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2 1/2] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH v2 2/2] tests/nfs_filesystem: remove failing mount
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH v2 1/2] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: perform contiguous check in host byte order
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/4] libsepol: reject self flag in type rules in old policies
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• ANN: SELinux userspace 3.7-rc1 release
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• [PATCH PR #134] sesearch: CIL output
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Guenter Roeck <linux@xxxxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: "Darrick J. Wong" <djwong@xxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Takashi Iwai <tiwai@xxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: "Rafael J. Wysocki" <rafael@xxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Thomas Hellström <thomas.hellstrom@xxxxxxxxxxxxxxx>
• Re: [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Christian König <ckoenig.leichtzumerken@xxxxxxxxx>
• [PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Intent to release 3.7
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: perform contiguous check in host byte order
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [GIT PULL] selinux/selinux-pr-20240513
  • From: pr-tracker-bot@xxxxxxxxxx
• Re: [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH 3/4] seunshare: Add [ -P pipewiresocket ] [ -W waylandsocket ] options
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 2/4] sandbox: do not run window manager if it's not a session
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 4/4] sandbox: Add support for Wayland
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 1/4] sandbox: do not fail without xmodmap
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [GIT PULL] selinux/selinux-pr-20240513
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 1/4] libsepol: reject self flag in type rules in old policies
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 2/2] checkpolicy: support CIDR notation for nodecon statements
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/2] checkpolicy: perform contiguous check in host byte order
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: "NeilBrown" <neilb@xxxxxxx>
• Re: [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [RFC][PATCH] ima: Use sequence number to wait for policy updates
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC][PATCH] ima: Use sequence number to wait for policy updates
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [RFC][PATCH] ima: Use sequence number to wait for policy updates
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v3] ima: Avoid blocking in RCU read-side critical section
  • From: GUO Zihua <guozihua@xxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 2/2 testsuite] tools/nfs.sh: comment out the fscontext= tests for now
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH 1/2 testsuite] tests/nfs_filesystem: remove failing mount
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH 2/4] libsepol: only exempt gaps checking for kernel policies
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 4/4] libsepol: include prefix for module policy versions
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 3/4] libsepol: validate type-attribute-map for old policies
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/4] libsepol: reject self flag in type rules in old policies
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: NFS context mount failures
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• NFS context mount failures
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling status
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: "NeilBrown" <neilb@xxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Serge Hallyn <serge@xxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Chuck Lever <chuck.lever@xxxxxxxxxx>
• Re: [PATCH v3] nfsd: set security label during create operations
  • From: Jeffrey Layton <jlayton@xxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v3] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling status
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2] nfsd: set security label during create operations
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: selinux-testsuite nfs tests?
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [RFC PATCH] lsm: fixup the inode xattr capability handling
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] nfsd: set security label during create operations
  • From: Jeffrey Layton <jlayton@xxxxxxxxxx>
• Re: [PATCH v2] nfsd: set security label during create operations
  • From: Chuck Lever <chuck.lever@xxxxxxxxxx>
• [PATCH v2] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: selinux-testsuite nfs tests?
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: selinux-testsuite nfs tests?
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: selinux-testsuite nfs tests?
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling status
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: cgroup2 labeling status
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• cgroup2 labeling status
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: [RFC][PATCH] nfsd: set security label during create operations
  • From: Jeffrey Layton <jlayton@xxxxxxxxxx>
• Re: [PATCH] libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/5] libselinux/man: correct file extension of man pages
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] github: bump Python and Ruby versions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] libsepol: validate class permissions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/4] libsepol: improve policy lookup failure message
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC][PATCH] nfsd: set security label during create operations
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2] ima: Avoid blocking in RCU read-side critical section
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• ANN: SETools 4.5.1
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: [PATCH 1/2] selinux: constify source policy in cond_policydb_dup()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: avoid printk_ratelimit()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: pre-allocate the status page
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• ANN: new release of The SELinux Notebook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] libsepol/cil: Fix detected RESOURCE_LEAK (CWE-772)
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: William Roberts <bill.c.roberts@xxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH 1/5] libselinux/man: correct file extension of man pages
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3 2/2] fs/xattr: add *at family syscalls
  • From: Jan Kara <jack@xxxxxxx>
• Re: [PATCH 3/3] mcstrans: free constraint in error branch
  • From: William Roberts <bill.c.roberts@xxxxxxxxx>
• Re: [PATCH 2/3] libselinux: avoid pointer dereference before check
  • From: William Roberts <bill.c.roberts@xxxxxxxxx>
• Re: [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: William Roberts <bill.c.roberts@xxxxxxxxx>
• [PATCH 3/3] mcstrans: free constraint in error branch
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/3] libselinux: avoid pointer dereference before check
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/3] libselinux: free empty scandir(3) result
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 5/5] libselinux: constify selinux_set_mapping(3) parameter
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 3/5] libselinux/man: use void in synopses
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 4/5] libselinux/man: add format attribute for set_matchpathcon_printf(3)
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/5] libselinux/man: sync const qualifiers
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/5] libselinux/man: correct file extension of man pages
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v2] ima: Avoid blocking in RCU read-side critical section
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v2] ima: Avoid blocking in RCU read-side critical section
  • From: GUO Zihua <guozihua@xxxxxxxxxx>
• Re: [PATCH v3 2/2] fs/xattr: add *at family syscalls
  • From: "Arnd Bergmann" <arnd@xxxxxxxx>
• [PATCH v3 2/2] fs/xattr: add *at family syscalls
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH] github: bump Python and Ruby versions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: "Guozihua (Scott)" <guozihua@xxxxxxxxxx>
• Re: [PATCH 1/4] libsepol: improve policy lookup failure message
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: "Guozihua (Scott)" <guozihua@xxxxxxxxxx>
• Re: [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH] ima: Avoid blocking in RCU read-side critical section
  • From: GUO Zihua <guozihua@xxxxxxxxxx>
• Re: [PATCH v2] libsepol: validate class permissions
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2] libsepol: validate class permissions
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH] libsepol: validate class permissions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH 1/3] newrole: constant time password comparison
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH] github: bump Python and Ruby versions
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [RFC PATCH 1/3] newrole: constant time password comparison
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [RFC PATCH 3/3] newrole: use ROWHAMMER resistant values
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [RFC PATCH 2/3] newrole: cleanse shadow data hold by libc
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 4/4] checkpolicy: drop global policyvers variable
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/4] checkpolicy/tests: add test for splitting xperm rule
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 3/4] checkpolicy: declare file local variable static
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/4] libsepol: improve policy lookup failure message
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] libsepol: validate class permissions
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/2] selinux: constify source policy in cond_policydb_dup()
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 2/2] selinux: add support for xperms in conditional policies
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH] netlink: Remove the include of files doesn't exist
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH v2] selinux: pre-allocate the status page
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] selinux: avoid printk_ratelimit()
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] netlink: Remove the include of files doesn't exist
  • From: I Hsin Cheng <richard120310@xxxxxxxxx>
• Re: [PATCH] selinux: clarify return code in filename_trans_read_helper_compat()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] libsepol: constify function pointer arrays
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/6] checkpolicy: include <ctype.h> for isprint(3)
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol/cil: Check common perms when verifiying "all"
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: free identifiers on invalid typebounds
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] selinux: clarify return code in filename_trans_read_helper_compat()
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [bug report] selinux: optimize storage of filename transitions
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH] libsepol: constify function pointer arrays
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/6] checkpolicy: include <ctype.h> for isprint(3)
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [bug report] selinux: optimize storage of filename transitions
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [bug report] selinux: optimize storage of filename transitions
  • From: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
• Re: [GIT PULL] selinux/selinux-pr-20240402
  • From: pr-tracker-bot@xxxxxxxxxx
• [GIT PULL] selinux/selinux-pr-20240402
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] libsepol: constify function pointer arrays
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 2/6] checkpolicy/fuzz: override YY_FATAL_ERROR
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 3/6] libsepol: validate access vector permissions
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 6/6] checkpolicy: free complete role_allow_rule on error
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 5/6] checkpolicy: drop union stack_item_u
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/6] checkpolicy: include <ctype.h> for isprint(3)
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 4/6] checkpolicy: drop never read member
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH] selinux: avoid dereference of garbage after mount failure
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: pre-allocate the status page
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: avoid dereference of garbage after mount failure
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: free identifiers on invalid typebounds
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] libsepol/cil: Check common perms when verifiying "all"
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 2/2] checkpolicy: update error diagnostic
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH 1/2] checkpolicy: free identifiers on invalid typebounds
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: Job Offer
  • From: "Beckie Varnadore"<oddzial.onkologii@xxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: avoid dereference of garbage after mount failure
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH] selinux: pre-allocate the status page
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• [PATCH] selinux: avoid dereference of garbage after mount failure
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH v5] selinux: add prefix/suffix matching to filename type transitions
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: use u32 as bit type in ebitmap code
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] selinux: improve symtab string hashing
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] selinux: dump statistics for more hash tables
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/2] selinux: make more use of current_sid()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v3] selinux: optimize ebitmap_and()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: update numeric format specifiers for ebitmaps
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: update numeric format specifiers for ebitmaps
  • From: Christian Göttsche <cgoettsche@xxxxxxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: use YYerror only when available
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] selinux: fix pr_err() format specifier in ebitmap_read()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: fix pr_err() format specifier in ebitmap_read()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: fix pr_err() format specifier in ebitmap_read()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: linux-next: build failure after merge of the selinux tree
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: improve error checking in sel_write_load()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] selinux: avoid identifier using reserved name
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: cleanup selinux_lsm_getattr()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: reject invalid ebitmaps
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/2] checkpolicy: use YYerror only when available
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/2] checkpolicy: use YYerror only when available
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/2] checkpolicy: handle unprintable token
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• ANN: SETools 4.5.0
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: [PATCH PR#420 v4] audit2allow: CIL output mode
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/5] libselinux/utils/selabel_digest: drop unsupported option -d
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/5] checkpolicy/fuzz: drop redundant notdefined check
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] libsepol: Fix buffer overflow when using sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] sepolgen: adjust parse for refpolicy
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: Where to look for system services modified for SELinux
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: Where to look for system services modified for SELinux
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: Where to look for system services modified for SELinux
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] sepolgen: adjust parse for refpolicy
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: Where to look for system services modified for SELinux
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH PR#420 v4] audit2allow: CIL output mode
  • From: James Carter <jwcart2@xxxxxxxxx>
• Where to look for system services modified for SELinux
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH PR#420 v4] audit2allow: CIL output mode
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH PR#420 v3] audit2allow: CIL output mode
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: nfs client uses different MAC policy or model
  • From: "Daniel Walker (danielwa)" <danielwa@xxxxxxxxx>
• Re: [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY
  • From: Serge Hallyn <serge@xxxxxxxxxx>
• [PATCH v2 1/2] selinux: dump statistics for more hash tables
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 2/2] selinux: improve symtab string hashing
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v3] selinux: optimize ebitmap_and()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 2/2] selinux: wire up new execstack LSM hook
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: use u32 as bit type in ebitmap code
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/2] selinux: make more use of current_sid()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/2] selinux: avoid identifier using reserved name
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2] selinux: reject invalid ebitmaps
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] libselinux: avoid logs in get_ordered_context_list() without policy
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: nfs client uses different MAC policy or model
  • From: Jeff Layton <jlayton@xxxxxxxxxx>
• [PATCH 01/10] capability: introduce new capable flag CAP_OPT_NOAUDIT_ONDENY
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• nfs client uses different MAC policy or model
  • From: "Daniel Walker (danielwa)" <danielwa@xxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Alison Schofield <alison.schofield@xxxxxxxxx>
• Re: [PATCH 1/5] libselinux/utils/selabel_digest: drop unsupported option -d
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  • From: Winfried <winfried_mb2@xxxxxxxxx>
• Re: [PATCH] libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  • From: Jordan Williams <jordan@xxxxxxxxxxxxxx>
• Re: [PATCH 1/5] checkpolicy/fuzz: drop redundant notdefined check
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libselinux/src/Makefile: fix reallocarray strlcpy detection
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepoll/src/Makefile: Fix reallocarray detection when cross-compiling
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] libselinux, libsepol: Add CFLAGS and LDFLAGS to Makefile checks
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 3/5] libselinux/utils/selabel_digest: avoid buffer overflow
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 5/5] libselinux/utils/selabel_digest: pass BASEONLY only for file backend
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/5] libselinux/utils/selabel_digest: drop unsupported option -d
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/5] libselinux: free data on selabel open failure
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/5] libselinux/utils/selabel_digest: cleanup
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [GIT PULL] selinux/selinux-pr-20240312
  • From: pr-tracker-bot@xxxxxxxxxx
• [GIT PULL] selinux/selinux-pr-20240312
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2] libsepol: Fix buffer overflow when using sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libsepol: Fix buffer overflow when using sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [RFC PATCH v2 5/9] libselinux: sidtab updates
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/5] libsepol: reject MLS support in pre-MLS policies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 5/5] checkpolicy/fuzz: scan Xen policies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/5] checkpolicy/fuzz: drop redundant notdefined check
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/5] checkpolicy: return YYerror on invalid character
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/5] checkpolicy: clone level only once
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] libsepol: Fix buffer overflow when using sepol_av_to_string()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] libsepol: Fix buffer overflow when using sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] selinux: improve error checking in sel_write_load()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH v2 5/9] libselinux: sidtab updates
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v2 2/9] libselinux/utils: introduce selabel_compare
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] checkpolicy/fuzz: Update check_level() to use notdefined field
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] checkpolicy/fuzz: Update check_level() to use notdefined field
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] checkpolicy/fuzz: Update check_level() to use notdefined field
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v5] selinux: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Sam Sun <samsun1006219@xxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: improve error checking in sel_write_load()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Sam Sun <samsun1006219@xxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH 15/15] checkpolicy: misc policy_define.c cleanup
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 14/15] checkpolicy: avoid assigning garbage values
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 13/15] checkpolicy: free temporary bounds type
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 12/15] checkpolicy: provide more descriptive error messages
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 09/15] libsepol: use typedef
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 08/15] checkpolicy: bail out on invalid role
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 07/15] checkpolicy: call YYABORT on parse errors
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 06/15] checkpolicy: clean expression on error
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 05/15] checkpolicy: check allocation and free memory on error at type definition
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 04/15] checkpolicy: free ebitmap on error
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 03/15] checkpolicy: cleanup identifiers on error
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 02/15] checkpolicy: cleanup resources on parse error
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 01/15] checkpolicy: add libfuzz based fuzzer
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] python/semanage: Do not sort local fcontext definitions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v3] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] python/semanage: Allow modifying records on "add"
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] libsepol: ensure transitivity in compare functions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [Bug] WARNING: zero-size vmalloc in sel_write_load
  • From: Sam Sun <samsun1006219@xxxxxxxxx>
• Re: [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <vorlon@xxxxxxxxxx>
• [PATCH PR#420 v3] audit2allow: CIL output mode
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH] libselinux/src/Makefile: fix reallocarray strlcpy detection
  • From: Jordan Williams <jordan@xxxxxxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v4] selinux: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH] libsepoll/src/Makefile: Fix reallocarray detection when cross-compiling
  • From: Winfried Dobbe <winfried_mb2@xxxxxxxxx>
• Re: [PATCH] python/semanage: Do not sort local fcontext definitions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] python/semanage: Do not sort local fcontext definitions
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v3] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH PR#420] audit2allow: CIL output mode
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string()
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <vorlon@xxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH v2 20/25] ovl: add fscaps handlers
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 20/25] ovl: add fscaps handlers
  • From: Amir Goldstein <amir73il@xxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <vorlon@xxxxxxxxxx>
• ANN: Reference Policy 2.20240226
  • From: Chris PeBenito <pebenito@xxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH v2] libsepol: Use a dynamic buffer in sepol_av_to_string()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <vorlon@xxxxxxxxxx>
• Re: [PATCH 0/21] selinux: fix style issues in security/selinux/ss
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] SELinux: Fix lsm_get_self_attr()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] SELinux: Fix lsm_get_self_attr()
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• [PATCH] selinux: cleanup selinux_lsm_getattr()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] SELinux: Fix lsm_get_self_attr()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Kent Overstreet <kent.overstreet@xxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Jeff Johnson <quic_jjohnson@xxxxxxxxxxx>
• Re: [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• [FYI][PATCH] tracing/treewide: Remove second parameter of __assign_str()
  • From: Steven Rostedt <rostedt@xxxxxxxxxxx>
• Re: [PATCH v2 20/25] ovl: add fscaps handlers
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 19/25] fs: add vfs_remove_fscaps()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 18/25] fs: add vfs_set_fscaps()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 17/25] fs: add vfs_get_fscaps()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 10/25] xattr: use is_fscaps_xattr()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 09/25] commoncap: use is_fscaps_xattr()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• [PATCH 21/21] selinux: fix style issues in security/selinux/ss/symtab.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 20/21] selinux: fix style issues in security/selinux/ss/symtab.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 19/21] selinux: fix style issues in security/selinux/ss/sidtab.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 18/21] selinux: fix style issues in security/selinux/ss/sidtab.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 15/21] selinux: fix style issues in security/selinux/ss/policydb.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 16/21] selinux: fix style issues in security/selinux/ss/policydb.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 17/21] selinux: fix style issues in security/selinux/ss/services.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 13/21] selinux: fix style issues in security/selinux/ss/mls.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 14/21] selinux: fix style issues in security/selinux/ss/mls_types.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 11/21] selinux: fix style issues in security/selinux/ss/hashtab.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 12/21] selinux: fix style issues in security/selinux/ss/mls.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 09/21] selinux: fix style issues in security/selinux/ss/ebitmap.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 10/21] selinux: fix style issues in security/selinux/ss/hashtab.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 06/21] selinux: fix style issues in security/selinux/ss/context.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 08/21] selinux: fix style issues in security/selinux/ss/ebitmap.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 07/21] selinux: fix style issues in security/selinux/ss/context.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 05/21] selinux: fix style issues in security/selinux/ss/constraint.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 04/21] selinux: fix style issues in security/selinux/ss/conditional.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 02/21] selinux: fix style issues in security/selinux/ss/avtab.c
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 01/21] selinux: fix style issues in security/selinux/ss/avtab.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 03/21] selinux: fix style issues in security/selinux/ss/conditional.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 00/21] selinux: fix style issues in security/selinux/ss
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] sepolgen: adjust parse for refpolicy
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH 1/3] libsepol: ensure transitivity in compare functions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 02/25] mnt_idmapping: include cred.h
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 13/25] smack: add hooks for fscaps operations
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 12/25] selinux: add hooks for fscaps operations
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 13/25] smack: add hooks for fscaps operations
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v2 24/25] commoncap: use vfs fscaps interfaces
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 25/25] vfs: return -EOPNOTSUPP for fscaps from vfs_*xattr()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 23/25] commoncap: remove cap_inode_getsecurity()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 15/25] security: call evm fscaps hooks from generic security hooks
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 18/25] fs: add vfs_set_fscaps()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 19/25] fs: add vfs_remove_fscaps()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 21/25] ovl: use vfs_{get,set}_fscaps() for copy-up
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 20/25] ovl: add fscaps handlers
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 17/25] fs: add vfs_get_fscaps()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 16/25] fs: add inode operations to get/set/remove fscaps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 22/25] fs: use vfs interfaces for capabilities xattrs
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 09/25] commoncap: use is_fscaps_xattr()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 10/25] xattr: use is_fscaps_xattr()
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 08/25] xattr: add is_fscaps_xattr() helper
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 13/25] smack: add hooks for fscaps operations
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 14/25] evm: add support for fscaps security hooks
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 11/25] security: add hooks for set/get/remove of fscaps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 12/25] selinux: add hooks for fscaps operations
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 07/25] capability: provide a helper for converting vfs_caps to xattr for userspace
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 05/25] capability: use vfsuid_t for vfs_caps rootids
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 06/25] capability: provide helpers for converting between xattrs and vfs_caps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 03/25] capability: add static asserts for comapatibility of vfs_cap_data and vfs_ns_cap_data
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 02/25] mnt_idmapping: include cred.h
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 04/25] capability: rename cpu_vfs_cap_data to vfs_caps
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 01/25] mnt_idmapping: split out core vfs[ug]id_t definitions into vfsid.h
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• [PATCH v2 00/25] fs: use type-safe uid representation for filesystem capabilities
  • From: "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx>
• Re: [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 5.4,4.19] lsm: new security_file_ioctl_compat() hook
  • From: Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH testsuite] tests/inet_socket: test CALIPSO also with datagram protocols
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH PR#420 v2] audit2allow: CIL output mode
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• [PATCH PR#420] audit2allow: CIL output mode
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <steve.langasek@xxxxxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• Re: [PATCH v10 00/25] security: Move IMA and EVM to the LSM infrastructure
  • From: Eric Snowberg <eric.snowberg@xxxxxxxxxx>
• Re: [PATCH] python/semanage: Do not sort local fcontext definitions
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 0/25] security: Move IMA and EVM to the LSM infrastructure
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <steve.langasek@xxxxxxxxxxxxx>
• [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <steve.langasek@xxxxxxxxxxxxx>
• Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• [PATCH] Always build for LFS mode on 32-bit archs.
  • From: Steve Langasek <steve.langasek@xxxxxxxxxxxxx>
• Re: [PATCH v7 3/4] mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK
  • From: Suren Baghdasaryan <surenb@xxxxxxxxxx>
• Re: [PATCH] checkpolicy, libsepol: Fix potential double free of mls_level_t
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v7 0/4] per-vma locks in userfaultfd
  • From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
• [PATCH v7 2/4] userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx
  • From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
• [PATCH v7 4/4] userfaultfd: use per-vma locks in userfaultfd operations
  • From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
• [PATCH v7 3/4] mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK
  • From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
• [PATCH v7 1/4] userfaultfd: move userfaultfd_ctx struct to header file
  • From: Lokesh Gidra <lokeshgidra@xxxxxxxxxx>
• Re: [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v9 12/25] security: Introduce file_post_open hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v10 22/25] evm: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 25/25] integrity: Remove LSM
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 24/25] ima: Make it independent from 'integrity' LSM
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 23/25] evm: Make it independent from 'integrity' LSM
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 21/25] ima: Move IMA-Appraisal to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 20/25] ima: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 19/25] integrity: Move integrity_kernel_module_request() to IMA
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 18/25] security: Introduce key_post_create_or_update hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 17/25] security: Introduce inode_post_remove_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 16/25] security: Introduce inode_post_set_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 15/25] security: Introduce inode_post_create_tmpfile hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 14/25] security: Introduce path_post_mknod hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 13/25] security: Introduce file_release hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 12/25] security: Introduce file_post_open hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 11/25] security: Introduce inode_post_removexattr hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 10/25] security: Introduce inode_post_setattr hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 09/25] security: Align inode_setattr hook definition with EVM
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 08/25] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 07/25] evm: Align evm_inode_setxattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 06/25] evm: Align evm_inode_post_setattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>