Security Enhanced Linux (SELINUX)
[Prev Page][Next Page]
- Re: [PATCH] libsepol/cil: Ensure that the class in a classcommon is a kernel class, (continued)
- [RFC PATCH userspace 0/5] Allow rebuilding policy store only if there were external changes to modules,
Ondrej Mosnacek
- [PATCH testsuite] tests/binder: Build only for 4.11 and later kernels,
GONG, Ruiqi
- [PATCH 0/2 RFC] libsepol: Adding support for not-self rules,
James Carter
- [PATCH 00/16 v2] Refactor and fix assertion checking,
James Carter
- [PATCH 01/16 v2] libsepol: Return an error if check_assertion() returns an error., James Carter
- [PATCH 02/16 v2] libsepol: Change label in check_assertion_avtab_match(), James Carter
- [PATCH 05/16 v2] libsepol: Use consistent return checking style, James Carter
- [PATCH 04/16 v2] libsepol: Check for error from check_assertion_extended_permissions(), James Carter
- [PATCH 03/16 v2] libsepol: Remove uneeded error messages in assertion checking, James Carter
- [PATCH 08/16 v2] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions, James Carter
- [PATCH 07/16 v2] libsepol: Create function check_assertion_self_match() and use it, James Carter
- [PATCH 06/16 v2] libsepol: Move check of target types to before check for self, James Carter
- [PATCH 09/16 v2] libsepol: Remove unnessesary check for matching class, James Carter
- [PATCH 10/16 v2] libsepol: Move assigning outer loop index out of inner loop, James Carter
- [PATCH 11/16 v2] libsepol: Make use of previously created ebitmap when checking self, James Carter
- [PATCH 12/16 v2] libsepol: Refactor match_any_class_permissions() to be clearer, James Carter
- [PATCH 13/16 v2] libsepol: Make return value clearer when reporting neverallowx errors, James Carter
- [PATCH 14/16 v2] libsepol: The src and tgt must be the same if neverallow uses self, James Carter
- [PATCH 15/16 v2] libsepol: Set args avtab pointer when reporting assertion violations, James Carter
- [PATCH 16/16 v2] libsepol: Fix two problems with neverallowxperm reporting, James Carter
- Re: [PATCH 00/16 v2] Refactor and fix assertion checking, James Carter
- [GIT PULL] SELinux patches for v5.17,
Paul Moore
- [PATCH] policycoreutils: Improve error message when selabel_open fails,
Vit Mojzis
- [PATCH] libsepol: check for saturated class name length,
Christian Göttsche
- ANN: Reference Policy 2.20220106, Chris PeBenito
- [PATCH 1/3] libsepol/cil: Do not copy blockabstracts when inheriting a block,
James Carter
- [GIT PULL] SELinux fixes for v5.16 (#4),
Paul Moore
- [PATCH] selinux: initialize proto variable in selinux_ip_postroute_compat(),
trix
- [PATCH] libsepol: handle type gaps when optimizing,
Christian Göttsche
- [PATCH v2] libsepol: check for valid sensitivity before lookup,
Christian Göttsche
- [PATCH] libsepol: check for valid sensitivity before lookup, Christian Göttsche
- [PATCH] selinux: minor tweaks to selinux_add_opt(),
Paul Moore
- Granting myself access on oss-fuzz issue reports,
Christian Göttsche
- [PATCH] libsepol/cil: bail out on snprintf failure,
Christian Göttsche
- [GIT PULL] SELinux fixes for v5.16 (#3),
Paul Moore
- [PATCH 00/16] Refactor and fix assertion checking,
James Carter
- [PATCH 01/16] libsepol: Return an error if check_assertion() returns an error., James Carter
- [PATCH 02/16] libsepol: Change label in check_assertion_avtab_match(), James Carter
- [PATCH 03/16] libsepol: Remove uneeded error messages in assertion checking, James Carter
- [PATCH 04/16] libsepol: Check for error from check_assertion_extended_permissions(), James Carter
- [PATCH 05/16] libsepol: Use consistent return checking style, James Carter
- [PATCH 06/16] libsepol: Move check of target types to before check for self, James Carter
- [PATCH 07/16] libsepol: Create function check_assertion_self_match() and use it, James Carter
- [PATCH 09/16] libsepol: Remove unnessesary check for matching class, James Carter
- [PATCH 10/16] libsepol: Move assigning outer loop index out of inner loop, James Carter
- [PATCH 11/16] libsepol: Make use of previously created ebitmap when checking self, James Carter
- [PATCH 12/16] libsepol: Refactor match_any_class_permissions() to be clearer, James Carter
- [PATCH 13/16] libsepol: Make return value clearer when reporting neverallowx errors, James Carter
- [PATCH 14/16] libsepol: The src and tgt must be the same if neverallow uses self, James Carter
- [PATCH 15/16] libsepol: Set args avtab pointer when reporting assertion violations, James Carter
- [PATCH 16/16] libsepol: Fix two problems with neverallowxperm reporting, James Carter
- [PATCH 08/16] libsepol: Use (rc < 0) instead of (rc) when calling ebitmap functions, James Carter
- Re: [PATCH 00/16] Refactor and fix assertion checking, James Carter
- [PATCH] selinux-notebook: Add epub build,
Richard Haines
- [PATCH v2] selinux: Fix sleeping function called from invalid context,
Scott Mayhew
- [PATCH] selinux: Fix sleeping function called from invalid context,
Scott Mayhew
- [PATCH] selinux: fix a wrong check condition of strcmp(),
xkernel . wang
- [PATCH] selinux: check the return value of audit_log_start(),
xkernel . wang
- [PATCH v31 00/28] LSM: Module stacking for AppArmor,
Casey Schaufler
- [PATCH v31 01/28] integrity: disassociate ima_filter_rule from security_audit_rule, Casey Schaufler
- [PATCH v31 02/28] LSM: Infrastructure management of the sock security, Casey Schaufler
- [PATCH v31 03/28] LSM: Add the lsmblob data structure., Casey Schaufler
- [PATCH v31 04/28] LSM: provide lsm name and id slot mappings, Casey Schaufler
- [PATCH v31 05/28] IMA: avoid label collisions with stacked LSMs, Casey Schaufler
- [PATCH v31 06/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
- [PATCH v31 07/28] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
- [PATCH v31 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH v31 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v31 10/28] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
- [PATCH v31 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
- [PATCH v31 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v31 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v31 14/28] LSM: Specify which LSM to display, Casey Schaufler
- [PATCH v31 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v31 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v31 17/28] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
- [PATCH v31 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v31 19/28] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
- [PATCH v31 20/28] binder: Pass LSM identifier for confirmation, Casey Schaufler
- [PATCH v31 21/28] LSM: Extend security_secid_to_secctx to include module selection, Casey Schaufler
- [PATCH v31 22/28] Audit: Keep multiple LSM data in audit_names, Casey Schaufler
- [PATCH v31 23/28] Audit: Create audit_stamp structure, Casey Schaufler
- [PATCH v31 24/28] Audit: Add framework for auxiliary records, Casey Schaufler
- [PATCH v31 25/28] Audit: Add record for multiple task security contexts, Casey Schaufler
- [PATCH v31 26/28] Audit: Add record for multiple object security contexts, Casey Schaufler
- [PATCH v31 27/28] LSM: Add /proc attr entry for full LSM context, Casey Schaufler
- [PATCH v31 28/28] AppArmor: Remove the exclusive flag, Casey Schaufler
- [PATCH V2 0/4] SELinux Notebook: Add eBook reader build,
Richard Haines
- [PATCH v2] secilc: kernel policy language is infix,
Topi Miettinen
- [PATCH v4] selinux-notebook: New chapter: Hardening SELinux,
Topi Miettinen
- overlay userxattr seems to not adhere to defaultrole, Dominick Grift
- [PATCH v3] security/selinux: fix potential memleak in error branch,
Bernard Zhao
- [PATCH 0/4] SELinux Notebook: Add eBook reader build,
Richard Haines
- [RFC PATCH 1/2] security: Remove security_add_mnt_opt() as it's unused,
David Howells
- [PATCH V2 0/7] Various SELinux Notebook updates,
Richard Haines
- [PATCH] security,selinux: remove security_add_mnt_opt(),
Ondrej Mosnacek
- [PATCH v2] security/selinux: fix potential memleak in error branch,
Bernard Zhao
[PATCH 0/7] Various SELinux Notebook updates,
Richard Haines
[PATCH -next] selinux: Use struct_size() helper in kmalloc(),
Xiu Jianfeng
[PATCH] security/selinux: fix potential memleak,
Bernard Zhao
[PATCH] security/selinux: fix potential memleak in error branch,
Bernard Zhao
[PATCH 1/2] libsepol/cil: support IPv4/IPv6 address embedding,
Christian Göttsche
[PATCH XSERVER 1/2] selinux: remap security classes on policyload,
Christian Göttsche
[PATCH] libsepol: free ebitmap on end of function, Christian Göttsche
[PATCH V2 testsuite] tests/inet_socket: Add socket transition tests, Richard Haines
[PATCH 5.15 222/279] block: Check ADMIN before NICE for IOPRIO_CLASS_RT, Greg Kroah-Hartman
[PATCH 5.10 130/154] block: Check ADMIN before NICE for IOPRIO_CLASS_RT,
Greg Kroah-Hartman
[PATCH] Modified Russian and English man pages to fix typo; REQUIREUSERS -> REQUIRESEUSERS,
Jacob M Cutright
[PATCH v30 00/28] LSM: Module stacking for AppArmor,
Casey Schaufler
- [PATCH v30 01/28] integrity: disassociate ima_filter_rule from security_audit_rule, Casey Schaufler
- [PATCH v30 02/28] LSM: Infrastructure management of the sock security, Casey Schaufler
- [PATCH v30 03/28] LSM: Add the lsmblob data structure., Casey Schaufler
- [PATCH v30 04/28] LSM: provide lsm name and id slot mappings, Casey Schaufler
- [PATCH v30 05/28] IMA: avoid label collisions with stacked LSMs, Casey Schaufler
- [PATCH v30 06/28] LSM: Use lsmblob in security_audit_rule_match, Casey Schaufler
- [PATCH v30 07/28] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
- [PATCH v30 08/28] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
- [PATCH v30 09/28] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
- [PATCH v30 10/28] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
- [PATCH v30 11/28] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
- [PATCH v30 12/28] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
- [PATCH v30 13/28] LSM: Use lsmblob in security_cred_getsecid, Casey Schaufler
- [PATCH v30 14/28] LSM: Specify which LSM to display, Casey Schaufler
- [PATCH v30 15/28] LSM: Ensure the correct LSM context releaser, Casey Schaufler
- [PATCH v30 16/28] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
- [PATCH v30 17/28] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
- [PATCH v30 18/28] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
- [PATCH v30 19/28] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
- [PATCH v30 20/28] binder: Pass LSM identifier for confirmation, Casey Schaufler
- [PATCH v30 21/28] LSM: Extend security_secid_to_secctx to include module selection, Casey Schaufler
- [PATCH v30 22/28] Audit: Keep multiple LSM data in audit_names, Casey Schaufler
- [PATCH v30 23/28] Audit: Create audit_stamp structure, Casey Schaufler
- [PATCH v30 24/28] Audit: Add framework for auxiliary records, Casey Schaufler
- [PATCH v30 25/28] Audit: Add record for multiple task security contexts, Casey Schaufler
- [PATCH v30 26/28] Audit: Add record for multiple object security contexts, Casey Schaufler
- [PATCH v30 27/28] LSM: Add /proc attr entry for full LSM context, Casey Schaufler
- [PATCH v30 28/28] AppArmor: Remove the exclusive flag, Casey Schaufler
[GIT PULL] SELinux fixes for v5.16 (#2),
Paul Moore
[RFC PATCH 1/3] libsepol: introduce ebitmap_subtract(),
Christian Göttsche
[PATCH 1/3] mcstrans: port to new PCRE2 from end-of-life PCRE,
Christian Göttsche
[PATCH] semodule: Don't forget to munmap() data,
Petr Lautrbach
[PATCH] libselinux: Fix selinux_restorecon_parallel symbol version,
Petr Lautrbach
[PATCH 1/2] selinux: Add map perms,
Jason Zaman
[PATCH] Kernel policy language is infix,
Topi Miettinen
[PATCH] selinux: fix NULL-pointer dereference when hashtab allocation fails,
Ondrej Mosnacek
[PATCH testsuite] tests/inet_socket: Add socket transition tests, Richard Haines
[PATCH v19 0/4] overlayfs override_creds=off & nested get xattr fix,
David Anderson
[PATCH V2] netlabel: Update man page to clarify SELinux labeling,
Richard Haines
[PATCH] netlabel: Update man page to clarify SELinux labeling, Richard Haines
[PATCH] semodule: Fix lang_ext column index,
Petr Lautrbach
[PATCH] semodule: add -m | --checksum option,
Petr Lautrbach
[PATCH] ci: run the tests under ASan/UBsan on GHActions,
Evgeny Vereshchagin
[RFC PATCH] capability: add capable_or to test for multiple caps with exactly one audit message, Christian Göttsche
[PATCH v3] selinux-notebook: New chapter: Hardening SELinux,
Topi Miettinen
[PATCH v2] block: Check ADMIN before NICE for IOPRIO_CLASS_RT,
Alistair Delva
[PATCH] block: Check ADMIN before NICE for IOPRIO_CLASS_RT,
Alistair Delva
[PATCH v2] Support static-only builds, Alyssa Ross
[PATCH v2] selinux-notebook: New chapter: Hardening SELinux,
Topi Miettinen
[GIT PULL] SELinux fix / revert for v5.16 (#1),
Paul Moore
[PATCH] net,lsm,selinux: revert the security_sctp_assoc_established() hook,
Paul Moore
[PATCH] binder: fix test regression due to sender_euid change,
Todd Kjos
[PATCH 01/12] checkpolicy: use correct unsigned format specifiers,
Christian Göttsche
- [PATCH 02/12] libsepol: use string literals as format strings, Christian Göttsche
- [PATCH 03/12] policycoreutils: use string literal as format strings, Christian Göttsche
- [PATCH 04/12] Enable extra global compiler warnings, Christian Göttsche
- [PATCH 05/12] checkpolicy: ignore possible string truncation, Christian Göttsche
- [PATCH 06/12] policycoreutils: mark local functions static, Christian Göttsche
- [PATCH 07/12] sandbox: mark local functions static, Christian Göttsche
- [PATCH 08/12] python: mark local functions static, Christian Göttsche
- [PATCH 09/12] mcstrans: avoid missing prototypes, Christian Göttsche
- [PATCH 10/12] libsemanage: mark local functions static, Christian Göttsche
- [PATCH 11/12] libsemanage: include paired header for prototypes, Christian Göttsche
- [PATCH 12/12] libsemanage: add extern prototype for legacy function, Christian Göttsche
- Re: [PATCH 01/12] checkpolicy: use correct unsigned format specifiers, James Carter
[PATCH] selinux-notebook: New chapter: Hardening SELinux,
Topi Miettinen
[PATCH] Support static-only builds,
Alyssa Ross
[PATCH 5.10 1/3] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH 5.4 1/3] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH 4.19 1/2] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH 4.14 1/2] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH 4.9 1/2] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH 4.4 1/2] binder: use euid from cred instead of using task,
Todd Kjos
[PATCH v3 0/1] fuse: Send file/inode security context during creation,
Vivek Goyal
[PATCH 0/5 v2] Fix/add optional file type handling for genfscon rules,
James Carter
[PATCH 2/5 v2] libsepol/cil: Refactor filecon file type handling, James Carter
[PATCH 3/5 v2] libsepol/cil: Allow optional file type in genfscon rules, James Carter
[PATCH 4/5 v2] secilc/docs: Document the optional file type for genfscon rules, James Carter
[PATCH 5/5] libsepol: Write out genfscon file type when writing out CIL policy, James Carter
[RFC PATCH] selinux: Add netlink xperm support,
Bram Bonne
[RFC PATCH] libsepol,checkpolicy: Add netlink xperm support,
Bram Bonne
[PATCH] Use IANA-managed domain example.com in examples,
markus . linnala
[RFC PATCH 0/1] selinux-testsuite: Add tests for sctp_socket transition rules,
Richard Haines
Re: [RFC PATCH v2 00/36] libsepol: add fuzzer for reading binary policies, Christian Göttsche
[PATCH net] selinux: fix SCTP client peeloff socket labeling,
Ondrej Mosnacek
[RFC] Cascade: a high level SELinux policy language,
Daniel Burgener
[PATCHv2 net 0/4] security: fixups for the security hooks in sctp,
Xin Long
[GIT PULL] SELinux patches for v5.16,
Paul Moore
[PATCH 0/4] Fix/add optional file type handling for genfscon rules,
James Carter
[PATCH userspace v4 0/8] Parallel setfiles/restorecon,
Ondrej Mosnacek
[PATCH testsuite v2] tests: make kernel iptables support optional,
Ondrej Mosnacek
[PATCH testsuite] tests/inet_socket: make kernel iptables support optional,
Ondrej Mosnacek
ANN: SELinux userspace 3.3 release, Petr Lautrbach
[PATCH net 0/4] security: fixups for the security hooks in sctp,
Xin Long
Re: [PATCH net 0/4] security: fixups for the security hooks in sctp, Richard Haines
[PATCH] sctp: initialize endpoint LSM labels also on the client side,
Ondrej Mosnacek
[PATCH testsuite] tests/sctp: add client peeloff tests,
Ondrej Mosnacek
[PATCH] libsepol: avoid passing NULL pointer to memcpy,
Christian Göttsche
Release 3.3 or not?,
Petr Lautrbach
kernel NULL pointer dereference on selinux_ip_postroute, Corentin Labbe
[PATCH] selinux: fix a sock regression in selinux_ip_postroute_compat(),
Paul Moore
[PATCH userspace v3 0/7] Parallel setfiles/restorecon,
Ondrej Mosnacek
[next] BUG: kernel NULL pointer dereference, address:: selinux_ip_postroute_compat,
Naresh Kamboju
[PATCH] libselinux: use dummy variable to silence glibc 2.34 warnings,
Christian Göttsche
[PATCH userspace v2 0/6] Parallel setfiles/restorecon,
Ondrej Mosnacek
[PATCH] selinux: fix all of the W=1 build warnings,
Paul Moore
[PATCH 1/3] libsepol: do not pass NULL to memcpy,
Christian Göttsche
[PATCH v2] selinux: make better use of the nf_hook_state passed to the NF hooks,
Paul Moore
Re: [PATCH] security/landlock: use square brackets around "landlock-ruleset",
Paul Moore
[PATCH v2 0/2] fuse: Send file/inode security context during creation,
Vivek Goyal
[PATCH v5 0/3] binder: use cred instead of task for security context,
Todd Kjos
[PATCH v2] security: Return xattr name from security_dentry_init_security(),
Vivek Goyal
[Index of Archives]
[Selinux Refpolicy]
[Fedora Users]
[Fedora Desktop]
[Kernel]
[KDE Users]
[Gnome Users]
