Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- [PATCH 2/4] newrole: silence compiler warnings, (continued)
- [PATCH] libsepol: validate expressions by evaluating,
Christian Göttsche
- [PATCH] libsepol: NULL pointer offset fix,
Christian Göttsche
- [PATCH] selinux: fix misuse of mutex_is_locked(),
Ondrej Mosnacek
- [PATCH V2] security/selinux: Always allow FIOCLEX and FIONCLEX,
Richard Haines
- [PATCH testsuite] tests/bpf: use new API if version >= 0.6,
Ondrej Mosnacek
- [RFC PATCH 2/2] capability: use new capable_or functionality,
Christian Göttsche
- [PATCH] selinux: log anon inode class name,
Christian Göttsche
- [PATCH 2/5] selinux: use correct type for context length,
Christian Göttsche
- [PATCH] security: declare member holding string literal const,
Christian Göttsche
- [PATCH] libsemanage: allow spaces in user/group names,
Vit Mojzis
- [PATCH] policycoreutils/fixfiles: Use parallel relabeling,
Petr Lautrbach
- [PATCH v2] libsepol: Populate and use policy name,
Thiébaud Weksteen
- [PATCH] python/sepolgen: accept square brackets in FILENAME token,
Christian Göttsche
- [PATCH testsuite v3] tests/sctp: add client peeloff tests, Ondrej Mosnacek
- [PATCH testsuite v2] tests/sctp: add client peeloff tests, Ondrej Mosnacek
- [PATCH net v3 0/2] security: fixups for the security hooks in sctp,
Ondrej Mosnacek
- Re: [PATCH net v3 0/2] security: fixups for the security hooks in sctp, Ondrej Mosnacek
- Re: [PATCH net v3 0/2] security: fixups for the security hooks in sctp, Xin Long
- Re: [PATCH net v3 0/2] security: fixups for the security hooks in sctp, Richard Haines
- Re: [PATCH net v3 0/2] security: fixups for the security hooks in sctp, Paul Moore
[PATCH 1/2] libsepol/cil: Don't add constraint if there are no permissions,
James Carter
[PATCH 1/3] libsepol: use correct error type to please UBSAN,
Christian Göttsche
[PATCH testsuite] tests/binder: Adjust kernel uapi headers check for building,
GONG, Ruiqi
[ANNOUNCE][CFP] Linux Security Summit North America 2022,
James Morris
Semantics vs. usage of mutex_is_locked(),
Ondrej Mosnacek
[PATCH] checkpolicy: allow wildcard permissions in constraints,
Christian Göttsche
[PATCH 1/2] libsepol: add sepol_av_perm_to_string,
Christian Göttsche
[GIT PULL] SELinux fixes for v5.17 (#1),
Paul Moore
[PATCH userspace v2 0/6] Optionally rebuild policy store only if there were external changes to modules,
Ondrej Mosnacek
[PATCH v32 00/28] LSM: Module stacking for AppArmor,
Casey Schaufler
- [PATCH v32 01/28] integrity: disassociate ima_filter_rule from security_audit_rule, Casey Schaufler
- [PATCH v32 02/28] LSM: Infrastructure management of the sock security, Casey Schaufler
- [PATCH v32 03/28] LSM: Add the lsmblob data structure., Casey Schaufler
- [PATCH v32 04/28] LSM: provide lsm name and id slot mappings, Casey Schaufler
- [PATCH v32 05/28] IMA: avoid label collisions with stacked LSMs, Casey Schaufler
- [PATCH v32 06/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
- [PATCH v32 07/28] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
- [PATCH v32 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH v32 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v32 10/28] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
- [PATCH v32 11/28] LSM: Use lsmblob in security_current_getsecid, Casey Schaufler
- [PATCH v32 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v32 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v32 14/28] LSM: Specify which LSM to display, Casey Schaufler
- [PATCH v32 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v32 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v32 17/28] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
- [PATCH v32 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v32 19/28] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
- [PATCH v32 20/28] binder: Pass LSM identifier for confirmation, Casey Schaufler
- [PATCH v32 21/28] LSM: Extend security_secid_to_secctx to include module selection, Casey Schaufler
- [PATCH v32 22/28] Audit: Keep multiple LSM data in audit_names, Casey Schaufler
- [PATCH v32 23/28] Audit: Create audit_stamp structure, Casey Schaufler
- [PATCH v32 24/28] Audit: Add framework for auxiliary records, Casey Schaufler
- [PATCH v32 25/28] Audit: Add record for multiple task security contexts, Casey Schaufler
- [PATCH v32 26/28] Audit: Add record for multiple object security contexts, Casey Schaufler
- [PATCH v32 27/28] LSM: Add /proc attr entry for full LSM context, Casey Schaufler
- [PATCH v32 28/28] AppArmor: Remove the exclusive flag, Casey Schaufler
[PATCH] selinux: parse contexts for mount options early,
Ondrej Mosnacek
[PATCH v2] selinux: fix double free of cond_list on error paths,
vbendel
kmod and unsigned modules,
Russell Coker
[PATCH v3 0/2] selinux: parse sids earlier to avoid doing memory allocations under spinlock,
Scott Mayhew
[PATCH] libsepol: do not add gaps to string list,
Christian Göttsche
[PATCH] libsepol: Populate and use policy name,
Thiébaud Weksteen
[PATCH 0/3] selinux: Fix and clean policydb->cond_list error paths,
vbendel
[PATCH v2] selinux: various sparse fixes,
Paul Moore
[PATCH v2] selinux: fix a type cast problem in cred_init_security(),
Paul Moore
[PATCH] selinux: various sparse fixes,
Paul Moore
[PATCH] selinux: fix a type cast problem in cred_init_security(),
Paul Moore
[PATCH] libselinux: Prevent cached context giving wrong results,
Johannes Segitz
[PATCH] policycoreutils: handle argument counter of zero,
Christian Göttsche
Re: [PATCH] LSM: general protection fault in legacy_parse_param,
Paul Moore
[PATCH] SELinux: Always allow FIOCLEX and FIONCLEX,
Demi Marie Obenour
[RFC PATCH] selinux: split no transition execve check,
Christian Göttsche
[RFC PATCH] mm: create security context for memfd_secret inodes,
Christian Göttsche
[PATCH 2/9] selinux: declare path parameters of _genfs_sid const,
Christian Göttsche
[PATCH] libsepol: invert only valid range of role bitmap,
Christian Göttsche
[PATCH -next] selinux: access superblock_security_struct in LSM blob way,
GONG, Ruiqi
[PATCH] libselinux: Cached security context not accurate,
Johannes Segitz
[PATCH RFC v2 0/2] selinux: parse sids earlier to avoid doing memory allocations under spinlock,
Scott Mayhew
[libselinux][PATCH] libselinux: make threadsafe for discover_class_cache, Purushottam Choudhary
[PATCH 0/4 v2] libsepol/cil: Limit certain error and warning reports,
James Carter
[PATCH] libsepol: drop trailing newlines in log messages,
Christian Göttsche
[PATCH] libsepol: return failure on saturated class name length,
Christian Göttsche
[PATCH RFC] selinux: Fix selinux_sb_mnt_opts_compat(), Scott Mayhew
[PATCH] libsepol: reject invalid roles before inverting,
Christian Göttsche
[PATCH 1/2] libsepol/cil: Limit the amount of reporting for neverallow violations,
James Carter
[PATCH] libselinux: Strip spaces before values in config,
Vit Mojzis
[PATCH] libsepol/cil: Ensure that the class in a classcommon is a kernel class,
James Carter
[RFC PATCH userspace 0/5] Allow rebuilding policy store only if there were external changes to modules,
Ondrej Mosnacek
[PATCH testsuite] tests/binder: Build only for 4.11 and later kernels,
GONG, Ruiqi
[PATCH 0/2 RFC] libsepol: Adding support for not-self rules,
James Carter
[PATCH 00/16 v2] Refactor and fix assertion checking,
James Carter
- [PATCH 01/16 v2] libsepol: Return an error if check_assertion() returns an error., James Carter
- [PATCH 02/16 v2] libsepol: Change label in check_assertion_avtab_match(), James Carter
- [PATCH 05/16 v2] libsepol: Use consistent return checking style, James Carter
- [PATCH 04/16 v2] libsepol: Check for error from check_assertion_extended_permissions(), James Carter
- [PATCH 03/16 v2] libsepol: Remove uneeded error messages in assertion checking, James Carter
- [PATCH 08/16 v2] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions, James Carter
- [PATCH 07/16 v2] libsepol: Create function check_assertion_self_match() and use it, James Carter
- [PATCH 06/16 v2] libsepol: Move check of target types to before check for self, James Carter
- [PATCH 09/16 v2] libsepol: Remove unnessesary check for matching class, James Carter
- [PATCH 10/16 v2] libsepol: Move assigning outer loop index out of inner loop, James Carter
- [PATCH 11/16 v2] libsepol: Make use of previously created ebitmap when checking self, James Carter
- [PATCH 12/16 v2] libsepol: Refactor match_any_class_permissions() to be clearer, James Carter
- [PATCH 13/16 v2] libsepol: Make return value clearer when reporting neverallowx errors, James Carter
- [PATCH 14/16 v2] libsepol: The src and tgt must be the same if neverallow uses self, James Carter
- [PATCH 15/16 v2] libsepol: Set args avtab pointer when reporting assertion violations, James Carter
- [PATCH 16/16 v2] libsepol: Fix two problems with neverallowxperm reporting, James Carter
- Re: [PATCH 00/16 v2] Refactor and fix assertion checking, James Carter
[GIT PULL] SELinux patches for v5.17,
Paul Moore
[PATCH] policycoreutils: Improve error message when selabel_open fails,
Vit Mojzis
[PATCH] libsepol: check for saturated class name length,
Christian Göttsche
ANN: Reference Policy 2.20220106, Chris PeBenito
[PATCH 1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block,
James Carter
[GIT PULL] SELinux fixes for v5.16 (#4),
Paul Moore
[PATCH] selinux: initialize proto variable in selinux_ip_postroute_compat(),
trix
[PATCH] libsepol: handle type gaps when optimizing,
Christian Göttsche
[PATCH v2] libsepol: check for valid sensitivity before lookup,
Christian Göttsche
[PATCH] libsepol: check for valid sensitivity before lookup, Christian Göttsche
[PATCH] selinux: minor tweaks to selinux_add_opt(),
Paul Moore
Granting myself access on oss-fuzz issue reports,
Christian Göttsche
[PATCH] libsepol/cil: bail out on snprintf failure,
Christian Göttsche
[GIT PULL] SELinux fixes for v5.16 (#3),
Paul Moore
[PATCH 00/16] Refactor and fix assertion checking,
James Carter
- [PATCH 01/16] libsepol: Return an error if check_assertion() returns an error., James Carter
- [PATCH 02/16] libsepol: Change label in check_assertion_avtab_match(), James Carter
- [PATCH 03/16] libsepol: Remove uneeded error messages in assertion checking, James Carter
- [PATCH 04/16] libsepol: Check for error from check_assertion_extended_permissions(), James Carter
- [PATCH 05/16] libsepol: Use consistent return checking style, James Carter
- [PATCH 06/16] libsepol: Move check of target types to before check for self, James Carter
- [PATCH 07/16] libsepol: Create function check_assertion_self_match() and use it, James Carter
- [PATCH 09/16] libsepol: Remove unnessesary check for matching class, James Carter
- [PATCH 10/16] libsepol: Move assigning outer loop index out of inner loop, James Carter
- [PATCH 11/16] libsepol: Make use of previously created ebitmap when checking self, James Carter
- [PATCH 12/16] libsepol: Refactor match_any_class_permissions() to be clearer, James Carter
- [PATCH 13/16] libsepol: Make return value clearer when reporting neverallowx errors, James Carter
- [PATCH 14/16] libsepol: The src and tgt must be the same if neverallow uses self, James Carter
- [PATCH 15/16] libsepol: Set args avtab pointer when reporting assertion violations, James Carter
- [PATCH 16/16] libsepol: Fix two problems with neverallowxperm reporting, James Carter
- [PATCH 08/16] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions, James Carter
- Re: [PATCH 00/16] Refactor and fix assertion checking, James Carter
[PATCH] selinux-notebook: Add epub build,
Richard Haines
[PATCH v2] selinux: Fix sleeping function called from invalid context,
Scott Mayhew
[PATCH] selinux: Fix sleeping function called from invalid context,
Scott Mayhew
[PATCH] selinux: fix a wrong check condition of strcmp(),
xkernel . wang
[PATCH] selinux: check the return value of audit_log_start(),
xkernel . wang
[PATCH v31 00/28] LSM: Module stacking for AppArmor,
Casey Schaufler
- [PATCH v31 01/28] integrity: disassociate ima_filter_rule from security_audit_rule, Casey Schaufler
- [PATCH v31 02/28] LSM: Infrastructure management of the sock security, Casey Schaufler
- [PATCH v31 03/28] LSM: Add the lsmblob data structure., Casey Schaufler
- [PATCH v31 04/28] LSM: provide lsm name and id slot mappings, Casey Schaufler
- [PATCH v31 05/28] IMA: avoid label collisions with stacked LSMs, Casey Schaufler
- [PATCH v31 06/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
- [PATCH v31 07/28] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
- [PATCH v31 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH v31 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v31 10/28] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
- [PATCH v31 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
- [PATCH v31 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v31 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v31 14/28] LSM: Specify which LSM to display, Casey Schaufler
- [PATCH v31 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v31 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v31 17/28] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
- [PATCH v31 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v31 19/28] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
- [PATCH v31 20/28] binder: Pass LSM identifier for confirmation, Casey Schaufler
- [PATCH v31 21/28] LSM: Extend security_secid_to_secctx to include module selection, Casey Schaufler
- [PATCH v31 22/28] Audit: Keep multiple LSM data in audit_names, Casey Schaufler
- [PATCH v31 23/28] Audit: Create audit_stamp structure, Casey Schaufler
- [PATCH v31 24/28] Audit: Add framework for auxiliary records, Casey Schaufler
- [PATCH v31 25/28] Audit: Add record for multiple task security contexts, Casey Schaufler
- [PATCH v31 26/28] Audit: Add record for multiple object security contexts, Casey Schaufler
- [PATCH v31 27/28] LSM: Add /proc attr entry for full LSM context, Casey Schaufler
- [PATCH v31 28/28] AppArmor: Remove the exclusive flag, Casey Schaufler
[PATCH V2 0/4] SELinux Notebook: Add eBook reader build,
Richard Haines
[PATCH v2] secilc: kernel policy language is infix,
Topi Miettinen
[PATCH v4] selinux-notebook: New chapter: Hardening SELinux,
Topi Miettinen
overlay userxattr seems to not adhere to defaultrole, Dominick Grift
[PATCH v3] security/selinux: fix potential memleak in error branch,
Bernard Zhao
[PATCH 0/4] SELinux Notebook: Add eBook reader build,
Richard Haines
[RFC PATCH 1/2] security: Remove security_add_mnt_opt() as it's unused,
David Howells
[PATCH V2 0/7] Various SELinux Notebook updates,
Richard Haines
[PATCH] security,selinux: remove security_add_mnt_opt(),
Ondrej Mosnacek
[PATCH v2] security/selinux: fix potential memleak in error branch,
Bernard Zhao
[PATCH 0/7] Various SELinux Notebook updates,
Richard Haines
[PATCH -next] selinux: Use struct_size() helper in kmalloc(),
Xiu Jianfeng
[PATCH] security/selinux: fix potential memleak,
Bernard Zhao
[PATCH] security/selinux: fix potential memleak in error branch,
Bernard Zhao
[PATCH 1/2] libsepol/cil: support IPv4/IPv6 address embedding,
Christian Göttsche
[PATCH XSERVER 1/2] selinux: remap security classes on policyload,
Christian Göttsche
[PATCH] libsepol: free ebitmap on end of function, Christian Göttsche
[PATCH V2 testsuite] tests/inet_socket: Add socket transition tests, Richard Haines
[PATCH 5.15 222/279] block: Check ADMIN before NICE for IOPRIO_CLASS_RT, Greg Kroah-Hartman
[PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT,
Greg Kroah-Hartman
[PATCH] Modified Russian and English man pages to fix typo; REQUIREUSERS -> REQUIRESEUSERS,
Jacob M Cutright
[PATCH v30 00/28] LSM: Module stacking for AppArmor,
Casey Schaufler
- [PATCH v30 01/28] integrity: disassociate ima_filter_rule from security_audit_rule, Casey Schaufler
- [PATCH v30 02/28] LSM: Infrastructure management of the sock security, Casey Schaufler
- [PATCH v30 03/28] LSM: Add the lsmblob data structure., Casey Schaufler
- [PATCH v30 04/28] LSM: provide lsm name and id slot mappings, Casey Schaufler
- [PATCH v30 05/28] IMA: avoid label collisions with stacked LSMs, Casey Schaufler
- [PATCH v30 06/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
- [PATCH v30 07/28] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
- [PATCH v30 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH v30 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v30 10/28] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
- [PATCH v30 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
- [PATCH v30 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v30 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v30 14/28] LSM: Specify which LSM to display, Casey Schaufler
- [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v30 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v30 17/28] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
- [PATCH v30 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v30 19/28] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
- [PATCH v30 20/28] binder: Pass LSM identifier for confirmation, Casey Schaufler
- [PATCH v30 21/28] LSM: Extend security_secid_to_secctx to include module selection, Casey Schaufler
- [PATCH v30 22/28] Audit: Keep multiple LSM data in audit_names, Casey Schaufler
- [PATCH v30 23/28] Audit: Create audit_stamp structure, Casey Schaufler
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]
