Security Enhanced Linux (SELINUX)

• Date Index

• [PATCH v24 14/25] LSM: Specify which LSM to display, (continued)
  • [PATCH v24 14/25] LSM: Specify which LSM to display, Casey Schaufler
  • [PATCH v24 07/25] LSM: Use lsmblob in security_secctx_to_secid, Casey Schaufler
  • [PATCH v24 08/25] LSM: Use lsmblob in security_secid_to_secctx, Casey Schaufler
  • [PATCH v24 17/25] LSM: Use lsmcontext in security_inode_getsecctx, Casey Schaufler
  • [PATCH v24 18/25] LSM: security_secid_to_secctx in netlink netfilter, Casey Schaufler
  • [PATCH v24 01/25] LSM: Infrastructure management of the sock security, Casey Schaufler
  • [PATCH v24 19/25] NET: Store LSM netlabel data in a lsmblob, Casey Schaufler
  • [PATCH v24 02/25] LSM: Add the lsmblob data structure., Casey Schaufler
  • [PATCH v24 20/25] LSM: Verify LSM display sanity in binder, Casey Schaufler
  • [PATCH v24 24/25] LSM: Add /proc attr entry for full LSM context, Casey Schaufler
  • [PATCH v24 25/25] AppArmor: Remove the exclusive flag, Casey Schaufler
  • [PATCH v24 23/25] Audit: Add a new record for multiple object LSM attributes, Casey Schaufler
  • [PATCH v24 22/25] Audit: Add new record for multiple process LSM attributes, Casey Schaufler
  • [PATCH v24 21/25] audit: add support for non-syscall auxiliary records, Casey Schaufler
    • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
      • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records, Casey Schaufler
        • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records, Paul Moore
        • Re: [PATCH v24 21/25] audit: add support for non-syscall auxiliary records, Richard Guy Briggs
  • [PATCH v24 15/25] LSM: Ensure the correct LSM context releaser, Casey Schaufler
  • [PATCH v24 16/25] LSM: Use lsmcontext in security_secid_to_secctx, Casey Schaufler
  • [PATCH v24 11/25] LSM: Use lsmblob in security_inode_getsecid, Casey Schaufler
  • [PATCH v24 10/25] LSM: Use lsmblob in security_task_getsecid, Casey Schaufler
  • [PATCH v24 09/25] LSM: Use lsmblob in security_ipc_getsecid, Casey Schaufler
  • [PATCH v24 06/25] LSM: Use lsmblob in security_kernel_act_as, Casey Schaufler
  • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor, Topi Miettinen
    • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor, Casey Schaufler
      • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor, Topi Miettinen
        • Re: [PATCH v24 00/25] LSM: Module stacking for AppArmor, Casey Schaufler
• [PATCH] selinux-notebook: Fix document links, Richard Haines
  • Re: [PATCH] selinux-notebook: Fix document links, Paul Moore
• [PATCH testsuite] ci: run testsuite also against the secnext kernel, Ondrej Mosnacek
  • Re: [PATCH testsuite] ci: run testsuite also against the secnext kernel, Ondrej Mosnacek
• [PATCH testsuite] test_userfaultfd.te: grant test_uffd_domain CAP_SYS_PTRACE, Ondrej Mosnacek
  • Re: [PATCH testsuite] test_userfaultfd.te: grant test_uffd_domain CAP_SYS_PTRACE, Lokesh Gidra
    • Re: [PATCH testsuite] test_userfaultfd.te: grant test_uffd_domain CAP_SYS_PTRACE, Ondrej Mosnacek
• [PATCH v5] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
• [PATCH testsuite 0/2] Migrate CI to GH Actions, Ondrej Mosnacek
  • [PATCH testsuite 2/2] Migrate CI to GH Actions, Ondrej Mosnacek
  • [PATCH testsuite 1/2] check-syntax: use 'command -v' instead of 'which', Ondrej Mosnacek
    • Re: [PATCH testsuite 1/2] check-syntax: use 'command -v' instead of 'which', Paul Moore
  • Re: [PATCH testsuite 0/2] Migrate CI to GH Actions, Ondrej Mosnacek
• [PATCH] selinux: measure state and policy capabilities, Lakshmi Ramasubramanian
  • Re: [PATCH] selinux: measure state and policy capabilities, Paul Moore
    • Re: [PATCH] selinux: measure state and policy capabilities, Lakshmi Ramasubramanian
      • Re: [PATCH] selinux: measure state and policy capabilities, Paul Moore
• [PATCH v6 00/40] idmapped mounts, Christian Brauner
  • [PATCH v6 10/40] commoncap: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 10/40] commoncap: handle idmapped mounts, James Morris
  • [PATCH v6 08/40] acl: handle idmapped mounts, Christian Brauner
  • [PATCH v6 04/40] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 04/40] capability: handle idmapped mounts, James Morris
  • [PATCH v6 03/40] fs: add file and path permissions helpers, Christian Brauner
    • Re: [PATCH v6 03/40] fs: add file and path permissions helpers, James Morris
  • [PATCH v6 11/40] stat: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 11/40] stat: handle idmapped mounts, James Morris
  • [PATCH v6 17/40] af_unix: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 17/40] af_unix: handle idmapped mounts, James Morris
  • [PATCH v6 12/40] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
    • Re: [PATCH v6 12/40] namei: handle idmapped mounts in may_*() helpers, James Morris
  • [PATCH v6 14/40] namei: prepare for idmapped mounts, Christian Brauner
  • [PATCH v6 19/40] fcntl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 19/40] fcntl: handle idmapped mounts, James Morris
  • [PATCH v6 18/40] utimes: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 18/40] utimes: handle idmapped mounts, James Morris
  • [PATCH v6 13/40] namei: introduce struct renamedata, Christian Brauner
  • [PATCH v6 27/40] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
    • Re: [PATCH v6 27/40] ecryptfs: do not mount on top of idmapped mounts, James Morris
  • [PATCH v6 37/40] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v6 36/40] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v6 22/40] would_dump: handle idmapped mounts, Christian Brauner
  • [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 23/40] exec: handle idmapped mounts, James Morris
    • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Eric W. Biederman
      • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
        • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Serge E. Hallyn
          • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Christian Brauner
        • Re: [PATCH v6 23/40] exec: handle idmapped mounts, Serge E. Hallyn
  • [PATCH v6 34/40] fs: add mount_setattr(), Christian Brauner
  • [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
    • Re: [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
      • Re: [PATCH v6 35/40] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
  • [PATCH v6 29/40] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v6 39/40] xfs: support idmapped mounts, Christian Brauner
    • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Darrick J. Wong
      • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Christian Brauner
      • Re: [PATCH v6 39/40] xfs: support idmapped mounts, Christoph Hellwig
  • [PATCH v6 21/40] ioctl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 21/40] ioctl: handle idmapped mounts, James Morris
  • [PATCH v6 25/40] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v6 33/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v6 28/40] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
    • Re: [PATCH v6 28/40] overlayfs: do not mount on top of idmapped mounts, James Morris
  • [PATCH v6 32/40] fs: split out functions to hold writers, Christian Brauner
  • [PATCH v6 26/39] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v6 31/40] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v6 38/40] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v6 20/40] init: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 20/40] init: handle idmapped mounts, Christoph Hellwig
  • [PATCH v6 30/40] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v6 15/40] open: handle idmapped mounts in do_truncate(), Christian Brauner
    • Re: [PATCH v6 15/40] open: handle idmapped mounts in do_truncate(), Christoph Hellwig
  • [PATCH v6 16/40] open: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 16/40] open: handle idmapped mounts, James Morris
    • Re: [PATCH v6 16/40] open: handle idmapped mounts, Christoph Hellwig
  • [PATCH v6 07/40] attr: handle idmapped mounts, Christian Brauner
  • [PATCH v6 06/40] inode: make init and permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v6 06/40] inode: make init and permission helpers idmapped mount aware, James Morris
  • [PATCH v6 09/40] xattr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v6 09/40] xattr: handle idmapped mounts, James Morris
  • [PATCH v6 01/40] mount: attach mappings to mounts, Christian Brauner
  • [PATCH v6 02/40] fs: add id translation helpers, Christian Brauner
    • Re: [PATCH v6 02/40] fs: add id translation helpers, Vivek Goyal
  • [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, James Morris
    • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, J. Bruce Fields
      • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
        • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, J. Bruce Fields
          • Re: [PATCH v6 05/39] namei: make permission helpers idmapped mount aware, Christian Brauner
  • Re: [PATCH v6 00/40] idmapped mounts, Serge E. Hallyn
• [PATCH 1/1] process_madvise.2: Add process_madvise man page, Suren Baghdasaryan
  • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Michal Hocko
    • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Suren Baghdasaryan
  • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Michael Kerrisk (man-pages)
    • Message not available
      • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Michael Kerrisk (man-pages)
        • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Suren Baghdasaryan
        • Re: [PATCH 1/1] process_madvise.2: Add process_madvise man page, Suren Baghdasaryan
• [PATCH v2 1/1] libsepol: do not decode out-of-bound rolebounds, Nicolas Iooss
  • Re: [PATCH v2 1/1] libsepol: do not decode out-of-bound rolebounds, James Carter
• ANN: SELinux userspace 3.2-rc1 release candidate, Petr Lautrbach
• [RFC PATCH 0/1] selinux-notebook: Add new section for Embedded Systems, Richard Haines
  • [RFC PATCH 1/1] selinux-notebook: Add new section for Embedded Systems, Richard Haines
    • Re: [RFC PATCH 1/1] selinux-notebook: Add new section for Embedded Systems, Dominick Grift
      • Re: [RFC PATCH 1/1] selinux-notebook: Add new section for Embedded Systems, Richard Haines
        • Re: [RFC PATCH 1/1] selinux-notebook: Add new section for Embedded Systems, Paul Moore
          • Re: [RFC PATCH 1/1] selinux-notebook: Add new section for Embedded Systems, Richard Haines
• [PATCH testsuite] Makefile: unload policy when testsuite fails, Ondrej Mosnacek
  • Re: [PATCH testsuite] Makefile: unload policy when testsuite fails, Paul Moore
    • Re: [PATCH testsuite] Makefile: unload policy when testsuite fails, Ondrej Mosnacek
      • Re: [PATCH testsuite] Makefile: unload policy when testsuite fails, Paul Moore
  • Re: [PATCH testsuite] Makefile: unload policy when testsuite fails, Stephen Smalley
    • Re: [PATCH testsuite] Makefile: unload policy when testsuite fails, Ondrej Mosnacek
• VSOCK & getpeercon(), Marc-André Lureau
  • Re: VSOCK & getpeercon(), Paul Moore
    • Re: VSOCK & getpeercon(), Casey Schaufler
      • Re: VSOCK & getpeercon(), Paul Moore
• [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label(), Ondrej Mosnacek
  • Re: [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label(), James Morris
  • Re: [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label(), Paul Moore
  • Re: [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label(), Ondrej Mosnacek
    • Re: [PATCH] NFSv4.2: fix return value of _nfs4_get_security_label(), Anna Schumaker
• [PATCH] fs: anon_inodes: rephrase to appropriate kernel-doc, Lukas Bulwahn
  • Re: [PATCH] fs: anon_inodes: rephrase to appropriate kernel-doc, Paul Moore
• [PATCH] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
  • Re: [PATCH] selinux: include a consumer of the new IMA critical data hook, Paul Moore
    • Re: [PATCH] selinux: include a consumer of the new IMA critical data hook, Tyler Hicks
      • Re: [PATCH] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
  • Re: [PATCH] selinux: include a consumer of the new IMA critical data hook, Paul Moore
    • Re: [PATCH] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
• [PATCH v2] libselinux: Always close status page fd, Petr Lautrbach
  • Re: [PATCH v2] libselinux: Always close status page fd, William Roberts
    • Re: [PATCH v2] libselinux: Always close status page fd, William Roberts
• [PATCH] libselinux: Always close status page fd, Petr Lautrbach
  • Re: [PATCH] libselinux: Always close status page fd, William Roberts
    • Re: [PATCH] libselinux: Always close status page fd, William Roberts
      • Re: [PATCH] libselinux: Always close status page fd, William Roberts
    • Re: [PATCH] libselinux: Always close status page fd, Petr Lautrbach
      • Re: [PATCH] libselinux: Always close status page fd, William Roberts
• can't unmount /sys/fs/selinux, Petr Lautrbach
  • Re: can't unmount /sys/fs/selinux, Stephen Smalley
    • Re: can't unmount /sys/fs/selinux, Petr Lautrbach
      • Re: can't unmount /sys/fs/selinux, Petr Lautrbach
        • Re: can't unmount /sys/fs/selinux, Stephen Smalley
• [PATCH v2 1/2] setfiles: Do not abort on labeling error, Petr Lautrbach
  • [PATCH v2 2/2] setfiles: drop ABORT_ON_ERRORS and related code, Petr Lautrbach
    • Re: [PATCH v2 2/2] setfiles: drop ABORT_ON_ERRORS and related code, Petr Lautrbach
      • Message not available
        • Re: [PATCH v2 2/2] setfiles: drop ABORT_ON_ERRORS and related code, Petr Lautrbach
• [PATCH v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support, Ondrej Mosnacek
  • Re: [PATCH v2] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support, Paul Moore
• [PATCH testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe, Ondrej Mosnacek
  • Re: [PATCH testsuite] tests/sysctl: use vm.swappiness instead of kernel.modprobe, Ondrej Mosnacek
• [PATCH] setfiles: Do not abort on labeling error, Petr Lautrbach
  • Re: [PATCH] setfiles: Do not abort on labeling error, Stephen Smalley
    • Re: [PATCH] setfiles: Do not abort on labeling error, Petr Lautrbach
• [PATCH testsuite v2] perf_event: update perf_event test for the new CAP_PERFMON capability, Ondrej Mosnacek
  • Re: [PATCH testsuite v2] perf_event: update perf_event test for the new CAP_PERFMON capability, Ondrej Mosnacek
• Why every file context is "system_u:object_r", Ashish Mishra
  • Re: Why every file context is "system_u:object_r", James Carter
• [PATCH v5 00/42] idmapped mounts, Christian Brauner
  • [PATCH v5 02/42] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v5 03/42] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v5 04/42] fs: split out functions to hold writers, Christian Brauner
  • [PATCH v5 05/42] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v5 06/42] fs: add mount_setattr(), Christian Brauner
  • [PATCH v5 09/42] mount: attach mappings to mounts, Christian Brauner
    • Re: [PATCH v5 09/42] mount: attach mappings to mounts, Christoph Hellwig
  • [PATCH v5 10/42] capability: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 10/42] capability: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 07/42] tests: add mount_setattr() selftests, Christian Brauner
  • [PATCH v5 12/42] inode: make init and permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v5 12/42] inode: make init and permission helpers idmapped mount aware, Christoph Hellwig
  • [PATCH v5 11/42] namei: make permission helpers idmapped mount aware, Christian Brauner
    • Re: [PATCH v5 11/42] namei: make permission helpers idmapped mount aware, Christoph Hellwig
  • [PATCH v5 08/42] fs: add id translation helpers, Christian Brauner
  • [PATCH v5 14/42] acl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 14/42] acl: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 17/42] commoncap: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 17/42] commoncap: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 19/42] namei: handle idmapped mounts in may_*() helpers, Christian Brauner
    • Re: [PATCH v5 19/42] namei: handle idmapped mounts in may_*() helpers, Christoph Hellwig
  • [PATCH v5 28/42] init: handle idmapped mounts, Christian Brauner
  • [PATCH v5 25/42] utimes: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 25/42] utimes: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 18/42] stat: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 18/42] stat: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 16/42] xattr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 16/42] xattr: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 31/42] exec: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 31/42] exec: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 37/42] xfs: support idmapped mounts, Christian Brauner
    • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Dave Chinner
      • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Christian Brauner
        • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Dave Chinner
      • Re: [PATCH v5 37/42] xfs: support idmapped mounts, Christoph Hellwig
  • [PATCH v5 36/42] ext4: support idmapped mounts, Christian Brauner
  • [PATCH v5 01/42] namespace: take lock_mount_hash() directly when changing flags, Christian Brauner
  • [PATCH v5 15/42] fs: add file_user_ns() helper, Christian Brauner
    • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Christoph Hellwig
    • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Jann Horn
      • Re: [PATCH v5 15/42] fs: add file_user_ns() helper, Christian Brauner
  • [PATCH v5 13/42] attr: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 13/42] attr: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
    • Re: [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christoph Hellwig
      • Re: [PATCH v5 40/42] fs: introduce MOUNT_ATTR_IDMAP, Christian Brauner
  • [PATCH v5 20/42] namei: introduce struct renamedata, Christian Brauner
    • Re: [PATCH v5 20/42] namei: introduce struct renamedata, Christoph Hellwig
  • [PATCH v5 24/42] af_unix: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 24/42] af_unix: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 27/42] notify: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 27/42] notify: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 39/42] overlayfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v5 41/42] tests: extend mount_setattr tests, Christian Brauner
    • Re: [PATCH v5 41/42] tests: extend mount_setattr tests, Randy Dunlap
  • [PATCH v5 21/42] namei: prepare for idmapped mounts, Christian Brauner
    • Re: [PATCH v5 21/42] namei: prepare for idmapped mounts, Christoph Hellwig
  • [PATCH v5 34/42] ima: handle idmapped mounts, Christian Brauner
  • [PATCH v5 30/42] would_dump: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 30/42] would_dump: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 35/42] fat: handle idmapped mounts, Christian Brauner
  • [PATCH v5 22/42] open: handle idmapped mounts in do_truncate(), Christian Brauner
    • Re: [PATCH v5 22/42] open: handle idmapped mounts in do_truncate(), Christoph Hellwig
  • [PATCH v5 38/42] ecryptfs: do not mount on top of idmapped mounts, Christian Brauner
  • [PATCH v5 23/42] open: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 23/42] open: handle idmapped mounts, Christoph Hellwig
      • Re: [PATCH v5 23/42] open: handle idmapped mounts, Christian Brauner
  • [PATCH v5 26/42] fcntl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 26/42] fcntl: handle idmapped mounts, Christoph Hellwig
  • [PATCH v5 33/42] apparmor: handle idmapped mounts, Christian Brauner
  • [PATCH v5 29/42] ioctl: handle idmapped mounts, Christian Brauner
    • Re: [PATCH v5 29/42] ioctl: handle idmapped mounts, Christoph Hellwig
  • Re: [PATCH v5 00/42] idmapped mounts, Darrick J. Wong
    • Re: [PATCH v5 00/42] idmapped mounts, Christian Brauner
    • Re: [PATCH v5 00/42] idmapped mounts, Dave Chinner
      • Re: [PATCH v5 00/42] idmapped mounts, Christoph Hellwig
        • Re: [PATCH v5 00/42] idmapped mounts, Theodore Ts'o
          • Re: [PATCH v5 00/42] idmapped mounts, Christian Brauner
  • Message not available
    • Re: [PATCH v5 32/42] fs: make helpers idmap mount aware, Christoph Hellwig
• [PATCH testsuite] perf_event: update perf_event test for the new CAP_PERFMON capability, Ondrej Mosnacek
• [PATCH] python/sepolgen: allow any policy statement in ifndef, Vit Mojzis
  • Re: [PATCH] python/sepolgen: allow any policy statement in ifndef, Ondrej Mosnacek
    • [PATCH v2] python/sepolgen: allow any policy statement in if(n)def, Vit Mojzis
      • Re: [PATCH v2] python/sepolgen: allow any policy statement in if(n)def, Ondrej Mosnacek
        • Re: [PATCH v2] python/sepolgen: allow any policy statement in if(n)def, Ondrej Mosnacek
• [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
  • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Kees Cook
  • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Andrew Morton
    • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
  • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Michal Hocko
    • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Oleg Nesterov
      • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
        • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Michal Hocko
          • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
          • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Jann Horn
            • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
              • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
            • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Michal Hocko
              • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
                • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
                  • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
                    • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
                      • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Andrew Morton
                        • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
                          • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
    • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
      • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Michal Hocko
  • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, James Morris
    • Re: [PATCH v2 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
• [PATCH v15 0/4] SELinux support for anonymous inodes and UFFD, Lokesh Gidra
  • [PATCH v15 1/4] security: add inode_init_security_anon() LSM hook, Lokesh Gidra
  • [PATCH v15 2/4] fs: add LSM-supporting anon-inode interface, Lokesh Gidra
  • [PATCH v15 3/4] selinux: teach SELinux about anonymous inodes, Lokesh Gidra
  • [PATCH v15 4/4] userfaultfd: use secure anon inodes for userfaultfd, Lokesh Gidra
  • Re: [PATCH v15 0/4] SELinux support for anonymous inodes and UFFD, Paul Moore
    • Re: [PATCH v15 0/4] SELinux support for anonymous inodes and UFFD, Paul Moore
      • Re: [PATCH v15 0/4] SELinux support for anonymous inodes and UFFD, Lokesh Gidra
• [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
  • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Minchan Kim
    • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
      • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, David Rientjes
        • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
  • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Florian Weimer
    • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
      • Re: [PATCH 1/1] mm/madvise: replace ptrace attach requirement for process_madvise, Suren Baghdasaryan
• [PATCH 1/2] libselinux: accept const fromcon in get_context API, Christian Göttsche
  • [PATCH 2/2] libselinux: update getseuser, Christian Göttsche
    • Re: [PATCH 2/2] libselinux: update getseuser, Nicolas Iooss
      • Re: [PATCH 2/2] libselinux: update getseuser, Nicolas Iooss
• [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Preeti Nagar
  • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Miguel Ojeda
    • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, pnagar
  • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Miguel Ojeda
  • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Casey Schaufler
    • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, pnagar
      • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Casey Schaufler
      • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, David Howells
        • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, pnagar
  • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, Nick Desaulniers
    • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, pnagar
  • <Possible follow-ups>
  • Re: [RFC PATCH v2] selinux: security: Move selinux_state to a separate page, pnagar
• [RFC PATCH] selinux: ARM64: Move selinux_state to a separate page, Preeti Nagar
• [PATCH v14 0/4] SELinux support for anonymous inodes and UFFD, Lokesh Gidra
  • [PATCH v14 1/4] security: add inode_init_security_anon() LSM hook, Lokesh Gidra
  • [PATCH v14 3/4] selinux: teach SELinux about anonymous inodes, Lokesh Gidra
    • Re: [PATCH v14 3/4] selinux: teach SELinux about anonymous inodes, Stephen Smalley
  • [PATCH v14 2/4] fs: add LSM-supporting anon-inode interface, Lokesh Gidra
  • [PATCH v14 4/4] userfaultfd: use secure anon inodes for userfaultfd, Lokesh Gidra
• [PATCH v10 0/8] IMA: support for measuring kernel integrity critical data, Tushar Sugandhi
  • [PATCH v10 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
  • [PATCH v10 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
  • [PATCH v10 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
  • [PATCH v10 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
  • [PATCH v10 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
    • Re: [PATCH v10 5/8] IMA: limit critical data measurement based on a label, Mimi Zohar
      • Re: [PATCH v10 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
  • [PATCH v10 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tushar Sugandhi
  • [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Tushar Sugandhi
    • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
      • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
      • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
        • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
          • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
            • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
              • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
                • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
                  • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
                    • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
                      • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
                        • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Mimi Zohar
                          • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
                            • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
                        • Re: [PATCH v10 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
  • [PATCH v10 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
  • Re: [PATCH v10 0/8] IMA: support for measuring kernel integrity critical data, Mimi Zohar
    • Re: [PATCH v10 0/8] IMA: support for measuring kernel integrity critical data, Tushar Sugandhi
• [PATCH v3 1/1] selinux-testsuite: Add userfaultfd test, Lokesh Gidra
  • Re: [PATCH v3 1/1] selinux-testsuite: Add userfaultfd test, Ondrej Mosnacek
    • Re: [PATCH v3 1/1] selinux-testsuite: Add userfaultfd test, Lokesh Gidra
      • Re: [PATCH v3 1/1] selinux-testsuite: Add userfaultfd test, Ondrej Mosnacek
• [PATCH 1/2] libsepol/cil: Update symtab nprim field when adding or removing datums, James Carter
  • [PATCH 2/2] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), James Carter
    • Re: [PATCH 2/2] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), Nicolas Iooss
      • Re: [PATCH 2/2] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), Nicolas Iooss
• Git link to get semanage , sesearch source code, Ashish Mishra
  • Re: Git link to get semanage , sesearch source code, Petr Lautrbach
• [PATCH] newrole: preserve environment variable XDG_RUNTIME_DIR, Christian Göttsche
  • Re: [PATCH] newrole: preserve environment variable XDG_RUNTIME_DIR, Nicolas Iooss
    • Re: [PATCH] newrole: preserve environment variable XDG_RUNTIME_DIR, Petr Lautrbach
      • Re: [PATCH] newrole: preserve environment variable XDG_RUNTIME_DIR, Christian Göttsche
    • Re: [PATCH] newrole: preserve environment variable XDG_RUNTIME_DIR, Petr Lautrbach
• [PATCH 0/5] Clean up SELinux global variables, Ondrej Mosnacek
  • [PATCH 2/5] selinux: drop the unnecessary aurule_callback variable, Ondrej Mosnacek
    • Re: [PATCH 2/5] selinux: drop the unnecessary aurule_callback variable, Paul Moore
  • [PATCH 3/5] selinux: make selinuxfs_mount static, Ondrej Mosnacek
    • Re: [PATCH 3/5] selinux: make selinuxfs_mount static, Paul Moore
  • [PATCH 1/5] selinux: remove unused global variables, Ondrej Mosnacek
    • Re: [PATCH 1/5] selinux: remove unused global variables, Paul Moore
  • [PATCH 4/5] selinux: mark some global variables __ro_after_init, Ondrej Mosnacek
    • Re: [PATCH 4/5] selinux: mark some global variables __ro_after_init, Paul Moore
  • [PATCH 5/5] selinux: mark selinux_xfrm_refcount as __read_mostly, Ondrej Mosnacek
    • Re: [PATCH 5/5] selinux: mark selinux_xfrm_refcount as __read_mostly, Paul Moore
• [PATCH] libsepol: destroy filename_trans list properly, Nicolas Iooss
  • Re: [PATCH] libsepol: destroy filename_trans list properly, Ondrej Mosnacek
    • Re: [PATCH] libsepol: destroy filename_trans list properly, Nicolas Iooss
    • Re: [PATCH] libsepol: destroy filename_trans list properly, Petr Lautrbach
• [PATCH v2] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, Nicolas Iooss
  • Re: [PATCH v2] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, James Carter
    • Re: [PATCH v2] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, Petr Lautrbach
• [PATCH v2] libsepol: ensure that decls hold consistent symbols when loading a binary policy, Nicolas Iooss
  • Re: [PATCH v2] libsepol: ensure that decls hold consistent symbols when loading a binary policy, James Carter
• [PATCH] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), James Carter
  • Re: [PATCH] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), Nicolas Iooss
    • Re: [PATCH] libsepol/cil: Fix heap-use-after-free in __class_reset_perm_values(), James Carter
• [PATCH] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support, Ondrej Mosnacek
  • Re: [PATCH] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support, Paul Moore
    • Re: [PATCH] selinux: fall back to SECURITY_FS_USE_GENFS if no xattr support, Ondrej Mosnacek
• [PATCH] python/semanage: empty stdout before exiting on BrokenPipeError, Vit Mojzis
  • Re: [PATCH] python/semanage: empty stdout before exiting on BrokenPipeError, Nicolas Iooss
    • [PATCH 2/2] python/semanage: Sort imports in alphabetical order, Vit Mojzis
      • Re: [PATCH 2/2] python/semanage: Sort imports in alphabetical order, Petr Lautrbach
• Intent to release 3.2-rc1, Petr Lautrbach
  • Re: Intent to release 3.2-rc1, Petr Lautrbach
    • Re: Intent to release 3.2-rc1, Petr Lautrbach
• [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
  • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
    • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
      • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
      • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
        • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Linus Torvalds
          • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
        • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
          • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Paul Moore
            • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Al Viro
              • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Paul Moore
              • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
    • Re: [PATCH v4] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
• Selinux context type is same for root & normal user both, Ashish Mishra
  • Re: Selinux context type is same for root & normal user both, Dominick Grift
    • Re: Selinux context type is same for root & normal user both, Ashish Mishra
      • Re: Selinux context type is same for root & normal user both, Dominick Grift
        • Re: Selinux context type is same for root & normal user both, Ashish Mishra
          • Re: Selinux context type is same for root & normal user both, Dominick Grift
            • Message not available
              • Re: Selinux context type is same for root & normal user both, Dominick Grift
                • Re: Selinux context type is same for root & normal user both, Ashish Mishra
                  • Re: Selinux context type is same for root & normal user both, Dominick Grift
                    • Re: Selinux context type is same for root & normal user both, Ashish Mishra
                      • Re: Selinux context type is same for root & normal user both, Dominick Grift
                        • Re: Selinux context type is same for root & normal user both, Ondrej Mosnacek
                          • Re: Selinux context type is same for root & normal user both, Ashish Mishra
                            • Re: Selinux context type is same for root & normal user both, Dominick Grift
                              • Re: Selinux context type is same for root & normal user both, Ashish Mishra
        • Re: Selinux context type is same for root & normal user both, Ashish Mishra
        • Re: Selinux context type is same for root & normal user both, Ashish Mishra
          • Re: Selinux context type is same for root & normal user both, Dominick Grift
            • Re: Selinux context type is same for root & normal user both, Dominick Grift
• [PATCH 1/4] libsepol/cil: remove useless print statement, Nicolas Iooss
  • [PATCH 2/4] libsepol/cil: fix NULL pointer dereference when using an unused alias, Nicolas Iooss
  • [PATCH 3/4] libsepol/cil: do not add a stack variable to a list, Nicolas Iooss
  • [PATCH 4/4] libsepol/cil: propagate failure of cil_fill_list(), Nicolas Iooss
    • Re: [PATCH 4/4] libsepol/cil: propagate failure of cil_fill_list(), William Roberts
      • Re: [PATCH 4/4] libsepol/cil: propagate failure of cil_fill_list(), James Carter
• [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Nicolas Iooss
  • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Nicolas Iooss
  • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, William Roberts
    • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Nicolas Iooss
      • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Nicolas Iooss
        • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Ondrej Mosnacek
          • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Nicolas Iooss
            • Re: [PATCH 1/1] GitHub Actions: run SELinux testsuite in Fedora virtual machine, Ondrej Mosnacek
• libsepol/cil: infinite loop using invalid block/blockabstract, Nicolas Iooss
  • Re: libsepol/cil: infinite loop using invalid block/blockabstract, William Roberts
    • Re: libsepol/cil: infinite loop using invalid block/blockabstract, Nicolas Iooss
• [PATCH 1/6] libsepol: do not decode out-of-bound rolebounds, Nicolas Iooss
  • [PATCH 2/6] libsepol: ensure that hashtab_search is not called with a NULL key, Nicolas Iooss
    • Re: [PATCH 2/6] libsepol: ensure that hashtab_search is not called with a NULL key, James Carter
      • Re: [PATCH 2/6] libsepol: ensure that hashtab_search is not called with a NULL key, Nicolas Iooss
  • [PATCH 5/6] libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit, Nicolas Iooss
    • Re: [PATCH 5/6] libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit, James Carter
      • Re: [PATCH 5/6] libsepol/cil: fix out-of-bound read in cil_print_recursive_blockinherit, James Carter
  • [PATCH 3/6] libsepol/cil: constify some strings, Nicolas Iooss
    • Re: [PATCH 3/6] libsepol/cil: constify some strings, James Carter
      • Re: [PATCH 3/6] libsepol/cil: constify some strings, James Carter
  • [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, Nicolas Iooss
    • Re: [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, William Roberts
      • Re: [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, Nicolas Iooss
        • Re: [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, William Roberts
    • Re: [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, James Carter
      • Re: [PATCH 4/6] libsepol/cil: fix NULL pointer dereference when parsing an improper integer, William Roberts
  • [PATCH 6/6] libsepol/cil: destroy perm_datums when __cil_resolve_perms fails, Nicolas Iooss
    • Re: [PATCH 6/6] libsepol/cil: destroy perm_datums when __cil_resolve_perms fails, William Roberts
    • Re: [PATCH 6/6] libsepol/cil: destroy perm_datums when __cil_resolve_perms fails, James Carter
      • Re: [PATCH 6/6] libsepol/cil: destroy perm_datums when __cil_resolve_perms fails, James Carter
  • Re: [PATCH 1/6] libsepol: do not decode out-of-bound rolebounds, James Carter
    • Re: [PATCH 1/6] libsepol: do not decode out-of-bound rolebounds, James Carter
      • Re: [PATCH 1/6] libsepol: do not decode out-of-bound rolebounds, Nicolas Iooss
• [RFC DBUS PATCH] selinux: add option to control checking of reply messages, Christian Göttsche
  • Re: [RFC DBUS PATCH] selinux: add option to control checking of reply messages, Chris PeBenito
    • Re: [RFC DBUS PATCH] selinux: add option to control checking of reply messages, Dominick Grift
      • Re: [RFC DBUS PATCH] selinux: add option to control checking of reply messages, Dominick Grift
• libsepol/cil: heap-use-after-free in __class_reset_perm_values, Nicolas Iooss
• Inputs w.r.t understanding of selinux notification and systemcall, Ashish Mishra
  • Re: Inputs w.r.t understanding of selinux notification and systemcall, Ashish Mishra
    • Re: Inputs w.r.t understanding of selinux notification and systemcall, Richard Haines
• useless debug output by secilc when using expandtypeattribute in containers, bauen1
• Re: [kernel-secnext] Automated Testing Results Linux 5.11.0-0.rc0.20201217gite994cc240a3b.102.1.secnext.fc34.x86_64 [12/17/2020 16:38], Ondrej Mosnacek
  • Re: [kernel-secnext] Automated Testing Results Linux 5.11.0-0.rc0.20201217gite994cc240a3b.102.1.secnext.fc34.x86_64 [12/17/2020 16:38], Paul Moore
    • Re: [kernel-secnext] Automated Testing Results Linux 5.11.0-0.rc0.20201217gite994cc240a3b.102.1.secnext.fc34.x86_64 [12/17/2020 16:38], Paul Moore
• [PATCH] selinux: fix inconsistency between inode_getxattr and inode_listsecurity, Amir Goldstein
  • Re: [PATCH] selinux: fix inconsistency between inode_getxattr and inode_listsecurity, Ondrej Mosnacek
    • Re: [PATCH] selinux: fix inconsistency between inode_getxattr and inode_listsecurity, Paul Moore
• [PATCH v3 1/2] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
  • [PATCH v3 2/2] proc: ensure security hook is called after exec, Stephen Brennan
    • Re: [PATCH v3 2/2] proc: ensure security hook is called after exec, Stephen Smalley
      • Re: [PATCH v3 2/2] proc: ensure security hook is called after exec, Stephen Smalley
      • Re: [PATCH v3 2/2] proc: ensure security hook is called after exec, Stephen Brennan
• [PATCH] Revert "libsemanage/genhomedircon: check usepasswd", Petr Lautrbach
  • Re: [PATCH] Revert "libsemanage/genhomedircon: check usepasswd", Nicolas Iooss
• [PATCH] libsemanage: Free contents of modkey in semanage_direct_remove, Jakub Hrozek
  • Re: [PATCH] libsemanage: Free contents of modkey in semanage_direct_remove, Nicolas Iooss
• [PATCH] linux: handle MPTCP consistently with TCP, Paolo Abeni
  • Re: [PATCH] linux: handle MPTCP consistently with TCP, Casey Schaufler
    • Re: [PATCH] linux: handle MPTCP consistently with TCP, Paolo Abeni
  • Re: [PATCH] linux: handle MPTCP consistently with TCP, Paul Moore
    • Re: [PATCH] linux: handle MPTCP consistently with TCP, Paolo Abeni
      • Re: [PATCH] linux: handle MPTCP consistently with TCP, Paul Moore
    • Re: [PATCH] linux: handle MPTCP consistently with TCP, Paul Moore
• [GIT PULL] SELinux patches for v5.11, Paul Moore
  • Re: [GIT PULL] SELinux patches for v5.11, pr-tracker-bot
• [PATCH v9 0/8] IMA: support for measuring kernel integrity critical data, Tushar Sugandhi
  • [PATCH v9 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
    • Re: [PATCH v9 3/8] IMA: define a hook to measure kernel integrity critical data, Mimi Zohar
      • Re: [PATCH v9 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
        • Re: [PATCH v9 3/8] IMA: define a hook to measure kernel integrity critical data, Mimi Zohar
          • Re: [PATCH v9 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
  • [PATCH v9 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
    • Re: [PATCH v9 5/8] IMA: limit critical data measurement based on a label, Tyler Hicks
      • Re: [PATCH v9 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
    • Re: [PATCH v9 5/8] IMA: limit critical data measurement based on a label, Mimi Zohar
      • Re: [PATCH v9 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
  • [PATCH v9 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
    • Re: [PATCH v9 2/8] IMA: add support to measure buffer data hash, Mimi Zohar
      • Re: [PATCH v9 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
        • Re: [PATCH v9 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
  • [PATCH v9 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tushar Sugandhi
  • [PATCH v9 8/8] selinux: include a consumer of the new IMA critical data hook, Tushar Sugandhi
    • Re: [PATCH v9 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
      • Re: [PATCH v9 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
        • Re: [PATCH v9 8/8] selinux: include a consumer of the new IMA critical data hook, Paul Moore
          • Re: [PATCH v9 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
  • [PATCH v9 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
    • Re: [PATCH v9 7/8] IMA: define a builtin critical data measurement policy, Mimi Zohar
      • Re: [PATCH v9 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
  • [PATCH v9 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
    • Re: [PATCH v9 1/8] IMA: generalize keyring specific measurement constructs, Mimi Zohar
      • Re: [PATCH v9 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
  • [PATCH v9 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
    • Re: [PATCH v9 4/8] IMA: add policy rule to measure critical data, Tyler Hicks
      • Re: [PATCH v9 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
    • Re: [PATCH v9 4/8] IMA: add policy rule to measure critical data, Mimi Zohar
      • Re: [PATCH v9 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
• [PATCH v8 0/8] IMA: support for measuring kernel integrity critical data, Tushar Sugandhi
  • [PATCH v8 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
    • Re: [PATCH v8 2/8] IMA: add support to measure buffer data hash, Tyler Hicks
  • [PATCH v8 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
    • Re: [PATCH v8 3/8] IMA: define a hook to measure kernel integrity critical data, Tyler Hicks
  • [PATCH v8 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
    • Re: [PATCH v8 1/8] IMA: generalize keyring specific measurement constructs, Tyler Hicks
  • [PATCH v8 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
    • Re: [PATCH v8 4/8] IMA: add policy rule to measure critical data, Tyler Hicks
      • Re: [PATCH v8 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
        • Re: [PATCH v8 4/8] IMA: add policy rule to measure critical data, Tyler Hicks
          • Re: [PATCH v8 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
  • [PATCH v8 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
  • [PATCH v8 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
  • [PATCH v8 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tushar Sugandhi
  • [PATCH v8 8/8] selinux: include a consumer of the new IMA critical data hook, Tushar Sugandhi
    • Re: [PATCH v8 8/8] selinux: include a consumer of the new IMA critical data hook, Tyler Hicks
      • Re: [PATCH v8 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
• [PATCH v2 1/1] selinux-testsuite: Add userfaultfd test, Lokesh Gidra
  • Re: [PATCH v2 1/1] selinux-testsuite: Add userfaultfd test, Ondrej Mosnacek
    • Re: [PATCH v2 1/1] selinux-testsuite: Add userfaultfd test, Lokesh Gidra
      • Re: [PATCH v2 1/1] selinux-testsuite: Add userfaultfd test, Ondrej Mosnacek
• New release of The SELinux Notebook (20201209), Paul Moore
• [PATCH v7 0/8] IMA: support for measuring kernel integrity critical data, Tushar Sugandhi
  • [PATCH v7 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
    • Re: [PATCH v7 2/8] IMA: add support to measure buffer data hash, Tyler Hicks
      • Re: [PATCH v7 2/8] IMA: add support to measure buffer data hash, Tushar Sugandhi
        • Re: [PATCH v7 2/8] IMA: add support to measure buffer data hash, Tyler Hicks
  • [PATCH v7 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
    • Re: [PATCH v7 5/8] IMA: limit critical data measurement based on a label, Tyler Hicks
      • Re: [PATCH v7 5/8] IMA: limit critical data measurement based on a label, Tushar Sugandhi
  • [PATCH v7 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
    • Re: [PATCH v7 1/8] IMA: generalize keyring specific measurement constructs, Tyler Hicks
      • Re: [PATCH v7 1/8] IMA: generalize keyring specific measurement constructs, Tushar Sugandhi
  • [PATCH v7 8/8] selinux: include a consumer of the new IMA critical data hook, Tushar Sugandhi
    • Re: [PATCH v7 8/8] selinux: include a consumer of the new IMA critical data hook, Tyler Hicks
      • Re: [PATCH v7 8/8] selinux: include a consumer of the new IMA critical data hook, Tyler Hicks
        • Re: [PATCH v7 8/8] selinux: include a consumer of the new IMA critical data hook, Lakshmi Ramasubramanian
  • [PATCH v7 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
    • Re: [PATCH v7 7/8] IMA: define a builtin critical data measurement policy, Tyler Hicks
      • Re: [PATCH v7 7/8] IMA: define a builtin critical data measurement policy, Tushar Sugandhi
  • [PATCH v7 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tushar Sugandhi
    • Re: [PATCH v7 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tyler Hicks
      • Re: [PATCH v7 6/8] IMA: extend critical data hook to limit the measurement based on a label, Tushar Sugandhi
  • [PATCH v7 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
    • Re: [PATCH v7 3/8] IMA: define a hook to measure kernel integrity critical data, Tyler Hicks
      • Re: [PATCH v7 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
      • Re: [PATCH v7 3/8] IMA: define a hook to measure kernel integrity critical data, Tushar Sugandhi
  • [PATCH v7 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
    • Re: [PATCH v7 4/8] IMA: add policy rule to measure critical data, Tyler Hicks
      • Re: [PATCH v7 4/8] IMA: add policy rule to measure critical data, Tushar Sugandhi
• virtiofs and its optional xattr support vs. fs_use_xattr, Ondrej Mosnacek
  • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Paul Moore
    • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
      • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Dominick Grift
        • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
          • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Dominick Grift
      • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Paul Moore
  • Re: virtiofs and its optional xattr support vs. fs_use_xattr, James Carter
    • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Paul Moore
      • Re: virtiofs and its optional xattr support vs. fs_use_xattr, James Carter
        • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Paul Moore
          • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Ondrej Mosnacek
            • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
              • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Ondrej Mosnacek
                • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
                  • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Ondrej Mosnacek
                    • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
                    • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
                      • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Ondrej Mosnacek
                        • Re: virtiofs and its optional xattr support vs. fs_use_xattr, Vivek Goyal
• [PATCH 1/2] GitHub Actions: upgrade to Python 3.9, Nicolas Iooss
  • [PATCH 2/2] GitHub Actions: drop Ruby 2.4 from matrix, Nicolas Iooss
    • Re: [PATCH 2/2] GitHub Actions: drop Ruby 2.4 from matrix, William Roberts
  • Re: [PATCH 1/2] GitHub Actions: upgrade to Python 3.9, William Roberts
    • Re: [PATCH 1/2] GitHub Actions: upgrade to Python 3.9, Nicolas Iooss
• [PATCH] libsepol/cil: always destroy the lexer state, Nicolas Iooss
  • Re: [PATCH] libsepol/cil: always destroy the lexer state, Nicolas Iooss
    • Re: [PATCH] libsepol/cil: always destroy the lexer state, James Carter
• [PATCH] reference_policy.md: Remove Ref Policy 'contributed modules', Richard Haines
  • Re: [PATCH] reference_policy.md: Remove Ref Policy 'contributed modules', Paul Moore
• How is policy.31 created from modules under /usr/share/selinux, Ashish Mishra
  • Re: How is policy.31 created from modules under /usr/share/selinux, Richard Haines
    • Re: How is policy.31 created from modules under /usr/share/selinux, Ashish Mishra
      • Re: How is policy.31 created from modules under /usr/share/selinux, Richard Haines
        • Re: How is policy.31 created from modules under /usr/share/selinux, Ashish Mishra
          • Re: How is policy.31 created from modules under /usr/share/selinux, Richard Haines
            • Re: How is policy.31 created from modules under /usr/share/selinux, Ashish Mishra
              • Re: How is policy.31 created from modules under /usr/share/selinux, Chris PeBenito
• [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
  • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Matthew Wilcox
    • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Eric W. Biederman
      • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Matthew Wilcox
        • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Paul Moore
          • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Casey Schaufler
            • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Eric W. Biederman
              • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Casey Schaufler
                • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
        • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Casey Schaufler
      • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
  • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Eric W. Biederman
    • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Matthew Wilcox
    • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Stephen Brennan
      • Re: [PATCH v2] proc: Allow pid_revalidate() during LOOKUP_RCU, Eric W. Biederman
• [PATCH v4 00/40] idmapped mounts, Christian Brauner
  • [PATCH v4 04/40] fs: split out functions to hold writers, Christian Brauner
    • Re: [PATCH v4 04/40] fs: split out functions to hold writers, Christoph Hellwig
  • [PATCH v4 03/40] namespace: only take read lock in do_reconfigure_mnt(), Christian Brauner
  • [PATCH v4 02/40] mount: make {lock,unlock}_mount_hash() static, Christian Brauner
  • [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
    • Re: [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christoph Hellwig
      • Re: [PATCH v4 05/40] fs: add attr_flags_to_mnt_flags helper, Christian Brauner
  • [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
    • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christoph Hellwig
      • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner
        • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christoph Hellwig
          • Re: [PATCH v4 06/40] fs: add mount_setattr(), Christian Brauner