SELinux - Date Index

• Thread Index

• [PATCH v11 4/4] evm: Support multiple LSMs providing an xattr
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v11 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v11 2/4] smack: Set the SMACK64TRANSMUTE xattr in smack_inode_init_security()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v11 1/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v11 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/4] libsepol: drop message for uncommon error cases
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] selinux: fix Makefile for versions of make < v4.3
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2] semanage, sepolicy: list also ports not attributed with port_type
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/2] secilc: consider DESTDIR in tests
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH] Makefile: expand ~ in DESTDIR
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• [RFC PATCH] selinux: support name based type transitions in conditional policies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: avoid bool as identifier name
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH] checkpolicy, libsepol: support name based type transitions in conditional policies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH 2/5] selinux: move filename transitions to avtab
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/2] libsemanage/tests: consider DESTDIR
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/2] secilc: consider DESTDIR in tests
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 3/4] libsepol: replace sepol_log_err() by ERR()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 1/4] libsepol: drop message for uncommon error cases
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 2/4] libsepol: drop duplicate newline in sepol_log_err() calls
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 4/4] libsepol: replace log_err() by ERR()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] Makefile: expand ~ in DESTDIR
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [GIT PULL] SELinux fixes for v6.4 (#1)
  • From: pr-tracker-bot@xxxxxxxxxx
• Re: [PATCH PR#394] semanage: list all ports even if not attributed with port_type
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH] Makefile: expand ~ in DESTDIR
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Erwan Velu <e.velu@xxxxxxxxxx>
• [GIT PULL] SELinux fixes for v6.4 (#1)
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: fix Makefile for versions of make < v4.3
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: fix Makefile for versions of make < v4.3
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Luiz Capitulino <luizcap@xxxxxxxxxx>
• Re: [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: don't use make's grouped targets feature yet
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH] python/sepolicy: Fix template for confined user policy modules
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH 1/4] libsepol: drop message for uncommon error cases
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2 4/5] checkpolicy: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 3/5] sandbox: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 2/5] python/sepolicy: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 1/5] policycoreutils: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 5/5] libselinux: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH 2/5] selinux: move filename transitions to avtab
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] LSM: Infrastructure management of the sock
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] LSM: Infrastructure management of the sock
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] LSM: Infrastructure management of the sock
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Jay Freyensee <why2jjj.linux@xxxxxxxxx>
• Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH 5/5] libselinux: Add examples to man pages
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH 4/5] checkpolicy: Add examples to man pages
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH 2/5] python/sepolicy: Improve man pages
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT
  • From: "Serge E. Hallyn" <serge@xxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 1/5] policycoreutils: Add examples to man pages
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH] LSM: Infrastructure management of the sock
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christoph Hellwig <hch@xxxxxx>
• [PATCH 8/8] libsepol/cil: add support for prefix/suffix filename transtions to CIL
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 7/8] checkpolicy, libsepol: add prefix/suffix support to module policy
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 6/8] checkpolicy, libsepol: add prefix/suffix support to kernel policy
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 5/8] libsepol: implement new module binary format of avrule
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 2/8] checkpolicy, libsepol: move filename transitions to avtab
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 4/8] libsepol: implement new kernel binary format for avtab
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 3/8] checkpolicy, libsepol: move filename transition rules to avrule
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 1/8] checkpolicy, libsepol: move transition to separate structure in avtab
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 0/8] checkpolicy, libsepol: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 5/5] selinux: add prefix/suffix matching support to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 4/5] selinux: filename transitions move tests
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 3/5] selinux: implement new binary format for filename transitions in avtab
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 2/5] selinux: move filename transitions to avtab
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 1/5] selinux: move transition to separate structure in avtab_datum
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH 0/5] selinux: add prefix/suffix matching to filename type transitions
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• [PATCH] LSM: Infrastructure management of the sock
  • From: "GONG, Ruiqi" <gongruiqi@xxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• [PATCH 4/4] dismod: add --actions option for non-interactive use
  • From: Masatake YAMATO <yamato@xxxxxxxxxx>
• [PATCH 3/4] dismod: handle EOF in user interaction
  • From: Masatake YAMATO <yamato@xxxxxxxxxx>
• [PATCH 2/4] dismod: delete an unnecessary empty line
  • From: Masatake YAMATO <yamato@xxxxxxxxxx>
• [PATCH 1/4] dismod: add --help option
  • From: Masatake YAMATO <yamato@xxxxxxxxxx>
• [PATCH] Makefile: expand ~ in DESTDIR
  • From: Masatake YAMATO <yamato@xxxxxxxxxx>
• Re: [PATCH] security: keys: perform capable check only on privileged operations
  • From: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: cleanup exit_sel_fs() declaration
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH PR#394] semanage: list all ports even if not attributed with port_type
  • From: Topi Miettinen <toiwoton@xxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christoph Hellwig <hch@xxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• [PATCH] python/sepolicy: Add/remove user even when SELinux is disabled
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH] selinux: make labeled NFS work when mounted before policy load
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH] selinux: cleanup exit_sel_fs() declaration
  • From: Xiu Jianfeng <xiujianfeng@xxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: [PATCH] security: keys: perform capable check only on privileged operations
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/5] libsepol: validate some object contexts
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/4] checkpolicy: drop unused token CLONE
  • From: James Carter <jwcart2@xxxxxxxxx>
• ANN: SELinux repository changes
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v3 1/3] libselinux: migrating hashtab from policycoreutils
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 1/5] policycoreutils: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 4/5] checkpolicy: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 5/5] libselinux: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 3/5] sandbox: Add examples to man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 2/5] python/sepolicy: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH] selinux: deprecated fs ocon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] security: keys: perform capable check only on privileged operations
  • From: "Jarkko Sakkinen" <jarkko@xxxxxxxxxx>
• Re: [PATCH] security: keys: perform capable check only on privileged operations
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: deprecated fs ocon
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v4 9/9] net: use new capable_any functionality
  • From: Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• Re: [PATCH] security: keys: perform capable check only on privileged operations
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: deprecated fs ocon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: make header files self-including
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: deprecated fs ocon
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: keep context struct members in sync
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 2/2] selinux: Implement mptcp_add_subflow hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2 1/2] security, lsm: Introduce security_mptcp_add_subflow()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH 4/4] python: update python.pot
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 1/4] python: improve format strings for proper localization
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 2/4] python/semanage: Drop hard formating from localized strings
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• [PATCH 3/4] semanage: Drop unnecessary import from seobject
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH RFC] selinux: TESTING ONLY, PLEASE IGNORE
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [RFC PATCH] selinux: TESTING ONLY, PLEASE IGNORE
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v4 8/9] bpf: use new capable_any functionality
  • From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
• Re: [PATCH v4 3/9] capability: use new capable_any functionality
  • From: Andrii Nakryiko <andrii.nakryiko@xxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• Re: [PATCH v4 5/9] drivers: use new capable_any functionality
  • From: Alexander Gordeev <agordeev@xxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Amir Goldstein <amir73il@xxxxxxxxx>
• Re: [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Amir Goldstein <amir73il@xxxxxxxxx>
• Re: [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v4 6/9] fs: use new capable_any functionality
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH v4 7/9] kernel: use new capable_any functionality
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• [RFC PATCH 4/4] semodule_unpackage: update
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 3/4] semodule_package: update
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 2/4] semodule_link: update
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 1/4] semodule_expand: update
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 9/9] restorecond: drop last matchpathcon call
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 8/9] restorecond: check selinux_restorecon(3) for failure
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 6/9] libselinux: ignore internal use of deprecated interfaces
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 7/9] secon: check selinux_raw_to_trans_context(3) for failure
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 1/9] libselinux: annotate interfaces with compiler attributes
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 5/9] libselinux: explicitly ignore return values
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 4/9] mcstrans: check getcon(3) and context_range_set(3) for failure
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 3/9] libselinux: declare avc_open(3) options parameter const
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [RFC PATCH 2/9] libselinux: deprecate matchpathcon and compute_user interfaces
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/4] libsepol: drop message for uncommon error cases
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/4] libsepol: drop duplicate newline in sepol_log_err() calls
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/4] libsepol: replace sepol_log_err() by ERR()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/4] libsepol: replace log_err() by ERR()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2] checkpolicy/dismod: misc improvements
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2] checkpolicy: add option to skip checking neverallow rules
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 5/5] libsepol: expand: skip invalid cat
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/5] libsepol: validate: reject XEN policy with xperm rules
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/5] libsepol: validate: check low category is not bigger than high
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/5] libsepol: validate old style range trans classes
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/5] libsepol: validate some object contexts
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/4] libsepol: dump non-mls validatetrans rules as such
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/4] checkpolicy: only set declared permission bits for wildcards
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/4] checkpolicy: reject condition with bool and tunable in expression
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/4] checkpolicy: drop unused token CLONE
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2] selinux: make header files self-including
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: make header files self-including
  • From: kernel test robot <lkp@xxxxxxxxx>
• Re: [PATCH v4 4/9] block: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v4 4/9] block: use new capable_any functionality
  • From: Christoph Hellwig <hch@xxxxxxxxxxxxx>
• Re: [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
• [RFC PATCH v2] fs/xattr: add *at family syscalls
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 6/9] fs: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 0/9] Introduce capable_any()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 5/9] drivers: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 7/9] kernel: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 9/9] net: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 8/9] bpf: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 4/9] block: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 2/9] capability: add any wrapper to test for multiple caps with exactly one audit message
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 3/9] capability: use new capable_any functionality
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v4 1/9] capability: introduce new capable flag NODENYAUDIT
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] security: keys: perform capable check only on privileged operations
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: make header files self-including
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: deprecated fs ocon
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] selinux: keep context struct members in sync
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH v2 1/4] python/chcat: Improve man pages
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• [PATCH 2/2] block: use block_admin_capable() for Persistent Reservations
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• [PATCH 0/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• [PATCH 1/2] capability: Introduce CAP_BLOCK_ADMIN
  • From: Tianjia Zhang <tianjia.zhang@xxxxxxxxxxxxxxxxx>
• Re: [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: xiujianfeng <xiujianfeng@xxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Mengchi Cheng <mengcc@xxxxxxxxxx>
• Re: [PATCH 1/6] selinux: do not leave dangling pointer behind
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: small cleanups in selinux_audit_rule_init()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 6/6] selinux: declare read-only data arrays const
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 5/6] selinux: retain const qualifier on string literal in avtab_hash_eval()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 4/6] selinux: drop return at end of void function avc_insert()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 3/6] selinux: avc: drop unused function avc_disable()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 2/6] selinux: adjust typos in comments
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 1/6] selinux: do not leave dangling pointer behind
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: more Makefile tweaks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove avc_disable() as it is no longer used
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: more Makefile tweaks
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH] selinux: remove avc_disable() as it is no longer used
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH] selinux: small cleanups in selinux_audit_rule_init()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: remove avc_disable() as it is no longer used
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: more Makefile tweaks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH -next 1/2] Change notify_change() to take struct path argument
  • From: Chuck Lever III <chuck.lever@xxxxxxxxxx>
• Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH -next 2/2] lsm: Change inode_setattr hook to take struct path argument
  • From: Xiu Jianfeng <xiujianfeng@xxxxxxxxxx>
• [PATCH -next 0/2] lsm: Change inode_setattr() to take struct
  • From: Xiu Jianfeng <xiujianfeng@xxxxxxxxxx>
• [PATCH -next 1/2] fs: Change notify_change() to take struct path argument
  • From: Xiu Jianfeng <xiujianfeng@xxxxxxxxxx>
• Re: [PATCH] selinux: make cleanup on error consistent
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Paolo Abeni <pabeni@xxxxxxxxxx>
• [PATCH] selinux: make cleanup on error consistent
  • From: Juraj Marcin <juraj@xxxxxxxxxxxxxxx>
• Re: [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH v2 1/4] python/chcat: Improve man pages
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH v2 4/4] python/audit2allow: Remove unused "debug" option
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 3/4] python/semanage: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 1/4] python/chcat: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 2/4] python/audit2allow: Add missing options to man page
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v2 0/4] python: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• Re: [PATCH 3/3] python/semanage: Improve man pages
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/3] python/audit2allow: Add missing options to man page
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] python/chcat: Improve man pages
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] libselinux: set CFLAGS for pip installation
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/3] checkpolicy/dispol: add output functions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH RESEND] libsemanage: fix memory leak in semanage_user_roles
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 3/3] python/semanage: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 1/3] python/chcat: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 2/3] python/audit2allow: Add missing options to man page
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH 0/3] python: Improve man pages
  • From: Vit Mojzis <vmojzis@xxxxxxxxxx>
• [PATCH v10 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v10 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH LSM 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] libselinux: set CFLAGS for pip installation
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH] libselinux: set CFLAGS for pip installation
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: [PATCH 3/3] checkpolicy/dismod: misc improvements
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 2/3] checkpolicy/dispol: add output functions
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] checkpolicy: add option to skip checking neverallow rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH 1/3] checkpolicy: add option to skip checking neverallow rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [GIT PULL] SELinux patches for v6.4
  • From: pr-tracker-bot@xxxxxxxxxx
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: James Carter <jwcart2@xxxxxxxxx>
• policy for FFI
  • From: Ted Toth <txtoth@xxxxxxxxx>
• Re: [PATCH v9 10/11] SELinux: Add selfattr hooks
  • From: Kees Cook <keescook@xxxxxxxxxxxx>
• [PATCH v9 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v2 1/6] libsepol: rename struct member
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [TESTSUITE PATCH] README.md: update dependencies
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [GIT PULL] SELinux patches for v6.4
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH RESEND] libsemanage: fix memory leak in semanage_user_roles
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH LSM v2 2/2] selinux: Implement mptcp_add_subflow hook
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH LSM v2 1/2] security, lsm: Introduce security_mptcp_add_subflow()
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH LSM v2 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• Re: [PATCH LSM 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH] libselinux: set CFLAGS for pip installation
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 5/6] libsepol: rename bool identifiers
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 4/6] checkpolicy: rename bool identifiers
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 1/6] libsepol: rename struct member
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 6/6] libsemanage/tests: rename bool identifiers
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 2/6] checkpolicy: update cond_expr_t struct member name
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH v2 3/6] libsepol/tests: rename bool indentifiers
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH RESEND] libsemanage: fix memory leak in semanage_user_roles
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [TESTSUITE PATCH] README.md: update dependencies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 5/6] selinux: retain const qualifier on string literal in avtab_hash_eval()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 6/6] selinux: declare read-only data arrays const
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 4/6] selinux: drop return at end of void function avc_insert()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/6] selinux: avc: drop unused function avc_disable()
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/6] selinux: adjust typos in comments
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/6] selinux: do not leave dangling pointer behind
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: ensure av_permissions.h is built when needed
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [TESTSUITE PATCH] README.md: update dependencies
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] libsemanage: fix memory leak in semanage_user_roles
  • From: James Carter <jwcart2@xxxxxxxxx>
• [TESTSUITE PATCH] README.md: update dependencies
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: ensure av_permissions.h is built when needed
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH] libsepol/cil: Fix class permission verification in CIL
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeed@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeed@xxxxxxxxxx>
• Re: [PATCH LSM 2/2] selinux: Implement mptcp_add_subflow hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH LSM 1/2] security, lsm: Introduce security_mptcp_add_subflow()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH LSM 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Mengchi Cheng <mengcc@xxxxxxxxxx>
• [PATCH LSM 1/2] security, lsm: Introduce security_mptcp_add_subflow()
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH LSM 2/2] selinux: Implement mptcp_add_subflow hook
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• [PATCH LSM 0/2] security: SELinux/LSM label with MPTCP and accept
  • From: Matthieu Baerts <matthieu.baerts@xxxxxxxxxxxx>
• Re: [PATCH] mm/mmap: Map MAP_STACK to VM_STACK
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] mm/mmap: Map MAP_STACK to VM_STACK
  • From: Matthew Wilcox <willy@xxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• [ANNOUNCE] [CFP] Linux Security Summit Europe (LSS-EU)
  • From: "Reshetova, Elena" <elena.reshetova@xxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeedm@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeedm@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Possible bug in policy compilation
  • From: "Jonathan Strauss" <john@xxxxxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeedm@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeedm@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeedm@xxxxxxxxxx>
• Re: [PATCH v2] selinux: ensure av_permissions.h is built when needed
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH 8/9 v3] secilc/test: Add deny rule tests
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 9/9 v3] secilc/docs: Add deny rule to CIL documentation
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 4/9 v3] libsepol/cil: Process deny rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 7/9 v3] secilc/secil2tree: Add option to write CIL AST after post processing
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 6/9 v3] libsepol: Export the cil_write_post_ast function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 5/9 v3] libsepol/cil: Add cil_write_post_ast function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 3/9 v3] libsepol/cil: Add cil_tree_node_remove function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 1/9 v3] libsepol/cil: Parse and add deny rule to AST, but do not process
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 2/9 v3] libsepol/cil: Add cil_list_is_empty macro
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 0/9 v3] Add CIL Deny Rule
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Jakub Kicinski <kuba@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: "Linux regression tracking (Thorsten Leemhuis)" <regressions@xxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v2] selinux: ensure av_permissions.h is built when needed
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: ensure av_permissions.h is built when needed
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: ensure av_permissions.h is built when needed
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH 5/6] secilc/docs: Add notself and other keywords to CIL documentation
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 6/6] secilc/test: Add notself and other tests
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 3/6] libsepol/cil: Add notself and other support to CIL
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 4/6] libsepol: update CIL generation for trivial not-self rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 2/6] libsepol/cil: Do not call ebitmap_init twice for an ebitmap
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 1/6] libsepol: Changes to ebitmap.h to fix compiler warnings
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH 0/6] Add support for notself and other to CIL
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] selinux: ensure av_permissions.h is built when needed
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: fix Makefile dependencies of flask.h
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: portcon tcp 80 change type
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: portcon tcp 80 change type
  • From: Etienne Champetier <champetier.etienne@xxxxxxxxx>
• Re: [PATCH] selinux: fix Makefile dependencies of flask.h
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: portcon tcp 80 change type
  • From: James Carter <jwcart2@xxxxxxxxx>
• [PATCH] selinux: fix Makefile dependencies of flask.h
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• portcon tcp 80 change type
  • From: Etienne Champetier <champetier.etienne@xxxxxxxxx>
• Re: [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH] Smack modifications for: security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH v8 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 4/4] evm: Support multiple LSMs providing an xattr
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v10 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Leon Romanovsky <leon@xxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: "Linux regression tracking (Thorsten Leemhuis)" <regressions@xxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v10 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v10 1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: stop returning node from avc_insert
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: stop returning node from avc_insert
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: sesearch --neverallow
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: sesearch --neverallow
  • From: Chris PeBenito <chpebeni@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v9 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v10 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH] make avc audit line only have one space
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] libsemanage: fix memory leak in semanage_user_roles
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH] make avc audit line only have one space
  • From: Steven Moreland <smoreland@xxxxxxxxxx>
• Re: sesearch --neverallow
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: sesearch --neverallow
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [RFC PATCH 1/6] libsepol: rename struct member
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: [RFC PATCH 1/6] libsepol: rename struct member
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: sesearch --neverallow
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: sesearch --neverallow
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH 1/3] checkpolicy: add option to skip checking neverallow rules
  • From: Daniel Burgener <dburgener@xxxxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH 1/6] libsepol: rename struct member
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 3/3] checkpolicy/dismod: misc improvements
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 2/3] checkpolicy/dispol: add output functions
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• [PATCH 1/3] checkpolicy: add option to skip checking neverallow rules
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: Possible bug in policy compilation
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: Possible bug in policy compilation
  • From: "Jonathan Strauss" <john@xxxxxxxxxxxxxxxxx>
• Re: Possible bug in policy compilation
  • From: James Carter <jwcart2@xxxxxxxxx>
• Possible bug in policy compilation
  • From: "Jonathan Strauss" <john@xxxxxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: "Linux regression tracking #adding (Thorsten Leemhuis)" <regressions@xxxxxxxxxxxxx>
• [PATCH v10 4/4] evm: Support multiple LSMs providing an xattr
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v10 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• sesearch --neverallow
  • From: Petr Lautrbach <lautrbach@xxxxxxxxxx>
• Re: [PATCH v9 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v9 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v9 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v9 1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v7 10/11] SELinux: Add selfattr hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v9 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v9 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v9 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v9 1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v7 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [RFC PATCH v4 6/6] libsepol: update CIL generation for trivial not-self rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v4 5/6] libsepol/tests: add tests for minus self neverallow rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v4 4/6] libsepol/tests: add tests for not self neverallow rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v4 3/6] checkpolicy: add not-self neverallow support
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v4 1/6] libsepol: Add not self support for neverallow rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v7 10/11] SELinux: Add selfattr hooks
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: Potential regression/bug in net/mlx5 driver
  • From: Saeed Mahameed <saeed@xxxxxxxxxx>
• Re: selinux: Adjust implementation of security_get_bools()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v9 4/4] evm: Support multiple LSMs providing an xattr
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v9 3/4] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v9 2/4] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v9 1/4] reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v9 0/4] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Potential regression/bug in net/mlx5 driver
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: selinux: Adjust implementation of security_get_bools()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: Adjust implementation of security_get_bools()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: Adjust implementation of security_get_bools()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: clean up dead code after removing runtime disable
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: clean up dead code after removing runtime disable
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• [PATCH v2] selinux: clean up dead code after removing runtime disable
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 3/6] security: Remove security_old_inode_init_security()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 2/6] ocfs2: Switch to security_inode_init_security()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 1/6] reiserfs: Switch to security_inode_init_security()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] selinux: clean up dead code after removing runtime disable
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Matthew Sheets <masheets@xxxxxxxxxxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Matthew Sheets <masheets@xxxxxxxxxxxxxxxxxxx>
• [PATCH] selinux: clean up dead code after removing runtime disable
  • From: Lukas Bulwahn <lukas.bulwahn@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Matthew Sheets <masheets@xxxxxxxxxxxxxxxxxxx>
• Re: [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix
  • From: Amir Goldstein <amir73il@xxxxxxxxx>
• Re: [PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix
  • From: Johannes Segitz <jsegitz@xxxxxxxx>
• Re: [PATCH 2/3] libselinux: improve performance with pcre matches
  • From: Eric Biggers <ebiggers@xxxxxxxxxx>
• Re: [PATCH] selinux: update the file list in MAINTAINERS
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH] selinux: update the file list in MAINTAINERS
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH v4 2/6] libsepol/cil: Add notself and minusself support to CIL
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [RFC PATCH v4 2/6] libsepol/cil: Add notself and minusself support to CIL
  • From: Petr Lautrbach <plautrba@xxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Christian Göttsche <cgzones@xxxxxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: remove the 'checkreqprot' functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Mickaël Salaün <mic@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: [PATCH userspace] scripts/ci: install rdma-core-devel for selinux-testsuite
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: cgroup2 labeling question
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH userspace] scripts/ci: install rdma-core-devel for selinux-testsuite
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH userspace] libsemanage: include more parameters in the module checksum
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH userspace] scripts/ci: install rdma-core-devel for selinux-testsuite
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• cgroup2 labeling question
  • From: Dominick Grift <dominick.grift@xxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the runtime disable functionality
  • From: Daniel Burgener <dburgener@xxxxxxxxxxxxxxxxxxx>
• [PATCH] selinux: remove the runtime disable functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v8 2/6] ocfs2: Switch to security_inode_init_security()
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: remove the 'checkreqprot' functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH userspace] libsemanage: include more parameters in the module checksum
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH v2] selinux: remove the 'checkreqprot' functionality
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH v2] selinux: remove the 'checkreqprot' functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the 'checkreqprot' functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: remove the 'checkreqprot' functionality
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH] selinux: remove the 'checkreqprot' functionality
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH testsuite] tests/atsecure: avoid running bash under test domains
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH v7 10/11] SELinux: Add selfattr hooks
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] selinux: stop passing selinux_state pointers and their offspring
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH testsuite] tests/atsecure: avoid running bash under test domains
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [RFC PATCH v2] selinux: cache access vector decisions in the inode security blob
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH net-next v2] scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  • From: Aleksandr Mikhalitsyn <aleksandr.mikhalitsyn@xxxxxxxxxxxxx>
• Re: [PATCH v2] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH v8 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 6/6] evm: Support multiple LSMs providing an xattr
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 5/6] evm: Align evm_inode_init_security() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 4/6] security: Allow all LSMs to provide xattrs for inode_init_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 1/6] reiserfs: Switch to security_inode_init_security()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 2/6] ocfs2: Switch to security_inode_init_security()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 3/6] security: Remove security_old_inode_init_security()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH v8 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH net-next v2] scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH v2] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  • From: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
• Re: [PATCH testsuite] defconfig: add FAT and GRE config options
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH v2] kernel/sys.c: fix and improve control flow in __sys_setres[ug]id()
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [RFC PATCH] selinux: cache access vector decisions in the inode security blob
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• [PATCH testsuite] defconfig: add FAT and GRE config options
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH 1/1] Add CONFIG_SECURITY_SELINUX_PERMISSIVE_DONTAUDIT
  • From: Jeff Xu <jeffxu@xxxxxxxxxxxx>
• [RFC PATCH 8/9 v2] secilc/test: Add deny rule tests
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 9/9 v2] secilc/docs: Add deny rule to CIL documentation
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 4/9 v2] libsepol/cil: Process deny rules
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 7/9 v2] secilc/secil2tree: Add option to write CIL AST after post processing
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 6/9 v2] libsepol: Export the cil_write_post_ast function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 5/9 v2] libsepol/cil: Add cil_write_post_ast function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 3/9 v2] libsepol/cil: Add cil_tree_node_remove function
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 1/9 v2] libsepol/cil: Parse and add deny rule to AST, but do not process
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 2/9 v2] libsepol/cil: Add cil_list_is_empty macro
  • From: James Carter <jwcart2@xxxxxxxxx>
• [RFC PATCH 0/9 v2] Add CIL Deny Rule
  • From: James Carter <jwcart2@xxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
• Re: [PATCH] selinux: stop passing selinux_state pointers and their offspring
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [PATCH userspace] libsemanage: include more parameters in the module checksum
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH 15/28] security: Introduce inode_post_removexattr hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v7 0/6] evm: Do HMAC of multiple per LSM xattrs for new inodes
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 22/28] security: Introduce key_post_create_or_update hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 18/28] security: Introduce path_post_mknod hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 15/28] security: Introduce inode_post_removexattr hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 14/28] security: Introduce inode_post_setattr hook
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
• [PATCH v3 3/3] libselinux: performance optimization for duplicate detection
  • From: wanghuizhao <wanghuizhao1@xxxxxxxxxx>
• [PATCH v3 1/3] libselinux: migrating hashtab from policycoreutils
  • From: wanghuizhao <wanghuizhao1@xxxxxxxxxx>
• [PATCH v3 0/3] Improve efficiency of detecting duplicate in libselinux
  • From: wanghuizhao <wanghuizhao1@xxxxxxxxxx>
• [PATCH v3 2/3] libselinux: adapting hashtab to libselinux
  • From: wanghuizhao <wanghuizhao1@xxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit()
  • From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
• Re: [RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• [RFC PATCH] selinux: uninline unlikely parts of avc_has_perm_noaudit()
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 22/28] security: Introduce key_post_create_or_update hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 26/28] evm: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 26/28] evm: Move to LSM infrastructure
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 11/28] evm: Complete description of evm_inode_setattr()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 20/28] security: Introduce inode_post_set_acl hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 19/28] security: Introduce inode_post_create_tmpfile hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 18/28] security: Introduce path_post_mknod hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 17/28] security: Introduce file_pre_free_security hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 16/28] security: Introduce file_post_open hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 15/28] security: Introduce inode_post_removexattr hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 02/28] ima: Align ima_post_path_mknod() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 21/28] security: Introduce inode_post_remove_acl hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 14/28] security: Introduce inode_post_setattr hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 13/28] security: Align inode_setattr hook definition with EVM
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 07/28] ima: Align ima_post_read_file() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 05/28] ima: Align ima_inode_setxattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 04/28] ima: Align ima_file_mprotect() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 21/28] security: Introduce inode_post_remove_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 11/28] evm: Complete description of evm_inode_setattr()
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 10/28] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 08/28] evm: Align evm_inode_post_setattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 09/28] evm: Align evm_inode_setxattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 06/28] ima: Align ima_inode_removexattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 01/28] ima: Align ima_inode_post_setattr() definition with LSM infrastructure
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH 21/28] security: Introduce inode_post_remove_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 21/28] security: Introduce inode_post_remove_acl hook
  • From: Stefan Berger <stefanb@xxxxxxxxxxxxx>
• Re: [PATCH testsuite 1/3] policy: make sure test_ibpkey_access_t can lock enough memory
  • From: Paul Moore <paul@xxxxxxxxxxxxxx>
• Re: [PATCH testsuite 0/3] Infiniband test fixes/improvements
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH 12/28] fs: Fix description of vfs_tmpfile()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 12/28] fs: Fix description of vfs_tmpfile()
  • From: Christian Brauner <brauner@xxxxxxxxxx>
• Re: [PATCH 26/28] evm: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH 13/28] security: Align inode_setattr hook definition with EVM
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH 26/28] evm: Move to LSM infrastructure
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• [PATCH 27/28] integrity: Move integrity functions to the LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 22/28] security: Introduce key_post_create_or_update hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 21/28] security: Introduce inode_post_remove_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 03/28] ima: Align ima_post_create_tmpfile() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 11/28] evm: Complete description of evm_inode_setattr()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 07/28] ima: Align ima_post_read_file() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 09/28] evm: Align evm_inode_setxattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 01/28] ima: Align ima_inode_post_setattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 06/28] ima: Align ima_inode_removexattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 00/28] security: Move IMA and EVM to the LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 08/28] evm: Align evm_inode_post_setattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 02/28] ima: Align ima_post_path_mknod() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 10/28] evm: Align evm_inode_post_setxattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 04/28] ima: Align ima_file_mprotect() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 05/28] ima: Align ima_inode_setxattr() definition with LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 28/28] integrity: Switch from rbtree to LSM-managed blob for integrity_iint_cache
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 24/28] ima: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 25/28] ima: Move IMA-Appraisal to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 26/28] evm: Move to LSM infrastructure
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 23/28] security: Introduce LSM_ORDER_LAST
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 20/28] security: Introduce inode_post_set_acl hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 19/28] security: Introduce inode_post_create_tmpfile hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 18/28] security: Introduce path_post_mknod hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 17/28] security: Introduce file_pre_free_security hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 16/28] security: Introduce file_post_open hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 15/28] security: Introduce inode_post_removexattr hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 14/28] security: Introduce inode_post_setattr hook
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 13/28] security: Align inode_setattr hook definition with EVM
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• [PATCH 12/28] fs: Fix description of vfs_tmpfile()
  • From: Roberto Sassu <roberto.sassu@xxxxxxxxxxxxxxx>
• Re: [PATCH v38 02/39] LSM: Add an LSM identifier for external use
  • From: Georgia Garcia <georgia.garcia@xxxxxxxxxxxxx>
• Re: [PATCH v38 01/39] LSM: Identify modules by more than name
  • From: Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
• Re: [PATCH v38 01/39] LSM: Identify modules by more than name
  • From: Georgia Garcia <georgia.garcia@xxxxxxxxxxxxx>
• Re: [PATCH testsuite 0/3] Infiniband test fixes/improvements
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• Re: [PATCH v2 3/3] libselinux: performance optimization for duplicate detection
  • From: wanghuizhao <wanghuizhao1@xxxxxxxxxx>
• Re: [PATCH testsuite] tests/file: make the SIGIO tests work with CONFIG_LEGACY_TIOCSTI=n
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH testsuite 3/3] tests/infiniband*: simplify test activation
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH testsuite 2/3] policy: allow test_ibpkey_access_t to use RDMA netlink sockets
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH testsuite 1/3] policy: make sure test_ibpkey_access_t can lock enough memory
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
• [PATCH testsuite 0/3] Infiniband test fixes/improvements
  • From: Ondrej Mosnacek <omosnace@xxxxxxxxxx>